Edit tour

Windows Analysis Report
https://blyocelectric.com/4xmaf95qR5m4wJYw4

Overview

General Information

Sample URL:	https://blyocelectric.com/4xmaf95qR5m4wJYw4
Analysis ID:	1416740
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site or detected (based on various text indicators)

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3116 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blyocelectric.com/4xmaf95qR5m4wJYw4" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://blyocelectric.com/4xmaf95qR5m4wJYw4

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.2	OCR Text: Share Create with Canva Adobe You have a new Fax Document Fax ID: 992532534153 Type: PDF Reference: Scanned Document Pages: 2 Date Received: Wednesday, March 27, 2024 Click to Review Document
Source: Chrome DOM: 1.3	OCR Text: Adobe You have a new Fax Document Fax ID: 992532534153 Type: PDF Reference: Scanned Document Pages: 2 Date Received: Wednesday, March 27, 2024 Click to Review Document

Source: Chrome DOM: 1.2	ML Model on OCR Text: Matched 98.7% probability on "Share Create with Canva Adobe You have a new Fax Document Fax ID: 992532534153 Type: PDF Reference: Scanned Document Pages: 2 Date Received: Wednesday, March 27, 2024 Click to Review Document "
Source: Chrome DOM: 1.3	ML Model on OCR Text: Matched 98.8% probability on "Adobe You have a new Fax Document Fax ID: 992532534153 Type: PDF Reference: Scanned Document Pages: 2 Date Received: Wednesday, March 27, 2024 Click to Review Document "

Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49769 version: TLS 1.2

Source:	Binary string: {className:"_2PZmcw",children:[e&&ZX("div",{className:"GuR6ew",children:e.content}),ZX("div",{className:"Z9hHxg",children:ZX(__c.rm,{weight:"bold",tone:__c.Nl,lineClamp:2,children:d})})]}),c&&ZX(__c.lF,{variant:"secondary",className:"vHuD1w",onClick:this.props.mia,children:"custom"===c.type?c.jeb:__c.K("ll55sQ")}),g&&ZX(Uyb,{})]}))})}};FY=xY([bY],FY);var Wyb={[Kyb]:{opacity:0,transform:"translateY(0%)"},[Lyb]:{opacity:1,transform:`translateY(${2*__c.lm}px)`}};var hyb=1,iyb=2,nyb=3,oyb=4,pyb=5,myb=6,jyb=7,kyb=8,lyb=9,qyb=10,ryb=11;__c.Yyb=({children:a,appearance:b="dark"})=>ZX(__c.I8a,{appearance:b,children:ZX(__c.F8a,{children:a})});var syb=class{constructor(a){this.zb=a}getCapabilities(a){return this.zb.exec("HostCapabilitiesService","getCapabilities",__c.FC.serialize(a)).then(__c.UC.deserialize)}};var Zyb=F(()=>({}));var $yb=F(()=>({}));var tyb=class{constructor(a,b){this.zb=a;this.O=b;this.$N=null!=this.O.$N?c=>{const d=w(this.O.$N,"Expected 'getTrackingConsentSupported' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,Zyb.serialize(c)).then(__c.qdb.deserialize)}:void 0;this.dV=null!=this.O.dV?c=>{const d=w(this.O.dV,"Expected 'getTrackingConsentRefreshSupported' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,$yb.serialize(c)).then(__c.pdb.deserialize)}:void 0}};__c.GY=class a extends sY{static F(b){H(b,{hide:zY.ref,$Fa:AY.bound,us:AY.bound,Swa:AY.bound})}constructor(){super(...arguments);a.F(this);this.hide=!1;this.Uga=this.E4=0;this.window=this.props.browserWindow\|\|window;this.Cwa=()=>{this.E4=Date.now()};this.xwa=()=>{this.Uga=Date.now()};this.o3=()=>{if(this.rya)this.$Fa();else{const b=this.props.nwb;this.props.Pnb&&!this.hide?this.ufa():b&&this.us()}};this.ywa=b=>{if(!this.rya){var c=this.props.Qxb;if(null==c)this.us();else{var d=c.Qkb,e=c.Vkb;c=c.ET; source: chromecache_334.2.dr
Source:	Binary string: edb.serialize(a)).then(hdb.deserialize)}};kdb=__webpack_require__(168949);ldb=kdb.LO;mdb=kdb.aD;__c.LQ=F(()=>Object.assign({},{},{type:z("A?",1,"LINK_TOKEN"),Nda:M(1)}));__c.ndb=F(()=>Object.assign({},{},{type:z("A?",2,"ID_TOKEN"),Ffa:M(1)}));var odb=__c.ab(()=>({type:[1,__c.LQ,2,__c.ndb]}),()=>({}));__c.MQ=F(()=>Object.assign({},{},{type:z("A?",1,"SUCCESS"),hna:__c.La(11,odb),Br:__c.Pa(12,__c.Hj),rta:__c.Pa(13,__c.Hj),Qwa:O(14)}));__c.pdb=F(()=>({supported:__c.Q(1)}));__c.qdb=F(()=>({supported:__c.Q(1)}));var rdb=F(()=>({path:M(1)}));var sdb=F(()=>({}));__c.NQ=F(()=>({path:M(1),Ea:O(2),x4a:O(3)}));var tdb=F(()=>({}));var udb=F(()=>({path:M(1)}));var vdb=F(()=>({}));var wdb=F(()=>({path:M(1)}));var xdb=F(()=>({}));__c.OQ=F(()=>({path:M(1)}));var ydb=F(()=>({}));var zdb=F(()=>({path:M(1),Ea:O(2)}));var Adb=F(()=>({}));var Bdb=F(()=>({path:M(1)}));var Cdb=F(()=>({}));var Ddb=F(()=>({path:M(1)}));var Edb=F(()=>({}));var Fdb=F(()=>({path:M(1)}));var Gdb=F(()=>({}));var Hdb=F(()=>({path:M(1)}));var Idb=F(()=>({}));var Jdb=F(()=>({path:M(1)}));var Kdb=F(()=>({}));var Ldb=F(()=>({path:M(1),sU:M(2)}));var Mdb=F(()=>({}));var Ndb=F(()=>({path:M(1)}));var Odb=F(()=>({}));var Pdb=class{constructor(a,b){this.zb=a;this.O=b;this.iB=null!=this.O.iB?c=>{const d=w(this.O.iB,"Expected 'navigateToHome' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,rdb.serialize(c)).then(sdb.deserialize)}:void 0;this.Lr=null!=this.O.Lr?c=>{const d=w(this.O.Lr,"Expected 'navigateToEditor' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,__c.NQ.serialize(c)).then(tdb.deserialize)}:void 0;this.JE=null!=this.O.JE?c=>{const d= source: chromecache_407.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.71.136
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.71.136
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /4xmaf95qR5m4wJYw4 HTTP/1.1Host: blyocelectric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1Host: www.canva.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/de918408abfb519f.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/b4b909f3e50309b8.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/7f2712c7be9143f9.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/549c0d12f1f1d3ca.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/665f7ead97e4a356.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/10e70838bb909c0c.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/1a7346c99afafd79.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/8327c2251c0ec474.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/47dda877a1f6911e.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/c37d32c9d9aa798c.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b157bc1b425e2d2a.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b3ad105788169a6a.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/e211aff63b38189e.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+03c124a95e7ed5c8.ltr.css+00787dffd4c1a100.ltr.css+b718cbbc9087429d.ltr.css+d2208eebbe189dbc.ltr.css+4d059dc08c82efef.ltr.css HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/c927fafc430af699.js+43c2b12a71836a31.js+55d58a0dd0244d82.js+ce3ed327872430ea.js+b7ce392740e42522.js+40fd2b7cf5de646d.js+bc7fa427eba649c0.js+a17e921acc56f1b5.js+cd665fd5d353300f.js+b96aa482cbb3c1e5.js+7ad4fc904aa15e71.vendor.js+8a07c72546b9d56d.js+1540b5eb47c8a553.js+9dd80e8b66c34afe.js+cab16ef33fefb3ac.strings.js+4162489deec53281.js+3c6c516f0ce5f044.js+5ceb8e766e8fb32d.js+d2ee4f89ec442cc8.js+8d89a659626a2d7c.vendor.js+5f6b8f4ae6e318db.vendor.js+242d7abc99de7308.vendor.js+181145ef3fe5aeb3.vendor.js+bb7250827f4c803c.js+96798f4e59647945.js+5d34ae310ea4ada8.js+090dd9ca9f54954c.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/a3d7911ebd1f0a2b.js+17450c9d444078d8.vendor.js+b37b3f4614815390.js+703faf9f1070ed07.js+321d58411689c6aa.js+eb52eb55ba627d30.js+dd4288106d664a45.js+981c688d65077307.js+d6ff7cdeac78319b.js+4bc971d3b683b3b4.js+c1ee67d56c60fbad.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/b7679cc71734357e.js+937696ae4a62b6f0.js+2e5f89b6382f75c7.js+6c0ea36590d49674.strings.js+deb64776b9445b23.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/5b2d464c2f59a733.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2475682c8d5b76fa.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2aa80d3e88fb64ec.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/32d63e885d7fa985.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2289fb2c6b2e265e.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/5bdac62b91201b5d.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /web/7c36a23bcd1e46cc.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/95b3da1a84e71c81.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/b3a01de3e1e9ec62.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/c2aba0ace5513e3b.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/8bbce396e583673b.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/1be900779a582cef.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/d4fc4d85d9537011.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/94b8e45285102a32.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/e647c3f88a50ee5c.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/3bbec4133e6eaff3.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/fa2ef1a44958c025.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/49800cd02344befb.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/8f3a0efc71d77cd0.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/86b21416a8f7576d HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/config/DAGAtXAJufM?documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: getreactionconfigapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGAtXAJufM&documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: findreactionsummaryapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /chunk-batch/1b96dc175117e75c.vendor.js+23fef8879c4d4673.js+9bbc6dba1ea0ccf2.js+58bd38f2ab220570.js+f284488f3c1f6334.js+dac4e6a1405545af.strings.js+0fb70ff258841869.js+c916589d0dc37af2.js+00cf5240164d2307.js+bb043949f5162023.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.canva.com/web/7c36a23bcd1e46cc.ltr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_fb/s/31ed695fc889d00593852e4078080fe8.css HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YAFdJjTk5UU/0/CanvaSans-Bold13644182954117137290.33696.33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chunk-batch/118052af16110a6a.ltr.css+18238f6b00219f40.ltr.css+1f9608d8908b0f89.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+88a6aeb385f8aca0.ltr.css+b2f00581c1b688f5.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /chunk-batch/c5e1e064613196fb.strings.js+0867dd2626184c9d.js+2d87c6898e0cddf2.js+3672a18722732ffc.js+2fe1d10eddd1b988.strings.js+5a24f06d6350a5b3.js+d914c2e8572651bd.js+4b31d673aa6aae8e.js+6c00a05543cc7753.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /YAFdJjTk5UU/0/CanvaSans-Regular15263162195051178836.f4.f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1Host: font-public.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/750_328_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAAT5krkQ8QTCmoz0tGrxy0n5zeqofv1vvtwxfksfVIVs&exp=1711586125&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAJMKrIMmsAYmnQMAqshxs6Ap2WV6GkR6g25xpRmD1Y3o HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_87_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAEVHaa9t_0kzI0s6V5Iw6cN25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI HTTP/1.1Host: media.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/config/DAGAtXAJufM?documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804
Source: global traffic	HTTP traffic detected: GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGAtXAJufM&documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804
Source: global traffic	HTTP traffic detected: GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordanalyticseventbatchsec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/40f0ce866d9a0621.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /chunk-batch/6f50888fcddc9770.strings.js+087c6892f61a9e28.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/200_87_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAEVHaa9t_0kzI0s6V5Iw6cN25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /1/image-resize/1/750_328_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAAT5krkQ8QTCmoz0tGrxy0n5zeqofv1vvtwxfksfVIVs&exp=1711586125&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAJMKrIMmsAYmnQMAqshxs6Ap2WV6GkR6g25xpRmD1Y3o HTTP/1.1Host: media.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/designinsight HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: design_viewersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordheartbeatsec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570805634&gtmcb=1732387887 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/designinsight HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570805634&gtmcb=1732387887 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1Host: www.canva.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editorUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2044672759 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=926803116 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7DIf-None-Match: W/"ba9c619e1ba6a9272c44084a93375283"If-Modified-Since: Wed, 01 Nov 2023 23:04:36 GMT
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /web/d60c358ab90474a9.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2044672759 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /web/3ca27320fba118d7.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/hjfept.9b84b5d5947e6d42.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /web/a42419d3d437dc30.js HTTP/1.1Host: static.canva.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /_ajax/designinsight/heartbeats HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /web/45ec376bed9a19fc.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/12487a1e0770d29351bd4ce4f87ec8fe.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/9cf118fb-ed55-479b-ba72-7463abf6c920/docs_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/ca5de8c1-746f-4ed5-9581-5830c5b1d3f0/whiteboards_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/ee1b3a27ac4a0b1a.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/75d73709-81d8-4be7-baaa-ea27097f6212/presentations_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/743f47b2b32230e6.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/f308c024-a5e9-4e05-ab78-c5f4954b62ad/social_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/d0e11c60-5f8b-4652-bcd0-33ee2be22093/videos_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/55e76e6c71b8c4fb.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/40468dbe50c37871.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /web/images/12487a1e0770d29351bd4ce4f87ec8fe.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/8a1451cf-3ba0-4e8a-b469-f5010862b5cf/prints_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/4d134638-a29e-44d6-af9a-c70eb4c0dd43/websites_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/75ef27a5584bfafa.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/122beb6f-66f6-41d6-b594-03ce5147989e/ig_post_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/410ceb80675623d1.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: anon_homesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: searchdesignspecsapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /web/7147f278e62f8beb.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/74fe30c142f4f8d5.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/e6d555235c8c61ec.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/390caf0cb1de6bef.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/82cbbba8c3f54a3f.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/1027e9acc64d126e.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/9cf118fb-ed55-479b-ba72-7463abf6c920/docs_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/ca5de8c1-746f-4ed5-9581-5830c5b1d3f0/whiteboards_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/75d73709-81d8-4be7-baaa-ea27097f6212/presentations_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/d0e11c60-5f8b-4652-bcd0-33ee2be22093/videos_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/2a4d2075fc08cd96.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/f308c024-a5e9-4e05-ab78-c5f4954b62ad/social_en_au_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/0ee21888ed45a29e.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/efed49dec8868a5f.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/8c35b77c9580b755.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/39270ec1591145ae.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/8a1451cf-3ba0-4e8a-b469-f5010862b5cf/prints_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/1b96dc175117e75c.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/4d134638-a29e-44d6-af9a-c70eb4c0dd43/websites_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/image/format=auto,w=264/122beb6f-66f6-41d6-b594-03ce5147989e/ig_post_en_desktop.jpg HTTP/1.1Host: content-management-files.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/f164963776d698c2.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/9f94f4b468b3b76d.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/a022fff96ad93c0b.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /web/c9e61293500ca151.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
Source: global traffic	HTTP traffic detected: GET /signals/config/844585682227065?v=2.9.151&r=stable&domain=www.canva.com&hme=8ce74e881727851b4427183947937854816d72704925561b9de6420cd43214ee&ex_m=66%2C111%2C98%2C102%2C57%2C3%2C92%2C65%2C15%2C90%2C83%2C48%2C50%2C157%2C160%2C171%2C167%2C168%2C170%2C28%2C93%2C49%2C72%2C169%2C152%2C155%2C164%2C165%2C172%2C120%2C14%2C47%2C176%2C175%2C122%2C17%2C32%2C36%2C1%2C40%2C61%2C62%2C63%2C67%2C87%2C16%2C13%2C89%2C86%2C85%2C99%2C101%2C35%2C100%2C29%2C25%2C153%2C156%2C129%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C53%2C58%2C60%2C70%2C94%2C26%2C71%2C8%2C7%2C75%2C45%2C20%2C96%2C95%2C9%2C19%2C18%2C77%2C82%2C44%2C43%2C81%2C37%2C39%2C80%2C52%2C78%2C31%2C41%2C34%2C69%2C0%2C88%2C4%2C84%2C76%2C79%2C2%2C33%2C59%2C38%2C97%2C42%2C74%2C64%2C103%2C56%2C55%2C30%2C91%2C54%2C51%2C46%2C73%2C68%2C23%2C104 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086144&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=7012&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780; _ga=GA1.1.1352771599.1711570825
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=9&tfd=7026&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086182&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=4&tfd=7036&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source, not-event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711570990861100&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=3&tfd=7549&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=9&tfd=7026&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=rF%2B0veVjg3vUBH2VDflEfFBD2Hxr1aIZZxnbbIewwwHj8WYnwETBxUIbQWqfwiERITNnKHSFB6DbkzixXeIjcqxYGVzy51YVTnNwl%2BYDnGGPMkoaTeVwHg4UXzyKyw%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086182&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=4&tfd=7036&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=Q98doK%2ByrhcuPXpv1dtQ0SYbV%2BBMLtn14ANA7hUiesOypGdJtWtoACX%2F1DX1sKZjp0vRW4R%2BFi9a4xCqzN0U%2BwYfievIZo%2FQ046thTT9L9NoN51Jq2kwfqWPs%2BlbGw%3D%3D
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086144&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=7012&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=Q98doK%2ByrhcuPXpv1dtQ0SYbV%2BBMLtn14ANA7hUiesOypGdJtWtoACX%2F1DX1sKZjp0vRW4R%2BFi9a4xCqzN0U%2BwYfievIZo%2FQ046thTT9L9NoN51Jq2kwfqWPs%2BlbGw%3D%3D
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711570990861100&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=3&tfd=7549&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPLC=stwaICg9tQ5ULTGuya%2BecWPHhSkLikwqvm%2BMAljKOijAgYlYpKpyVuDXukdQJKNsJuu8vTjbt%2FHzCP7Ds6nXDhoFgbUqwpFLrHwHV%2F6bF30e%2FFpzXh3ftiQuqDvIhA%3D%3D; FPAU=1.2.1649447272.1711570827
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_00p8afkXpP46RAKltXZ4hiAXCgR3ReYwQ&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2FI8xmuJD3kZSFaHIHk9o3VBItZM9x3Cc&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnwEfCT2piLU_kFN2ElHcHoWEZWq3ifXWoC2bikTR9ezG30tyJPZwiRVqvQ
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnwEfCT2piLU_kFN2ElHcHoWEZWq3ifXWoC2bikTR9ezG30tyJPZwiRVqvQ
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUluJXulik7Rhg81yME91Bw3YWk9s5oWhCKY1o7duEHp8fDEpq6ntGQoVntz6Yg
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtq6IR1iFPBDaY8WN0JGDE9CSWty8jwPFFSE28sAYho4kU6maro&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_091mBLyYvn7OhNxedcHp4YT-zF-ajjU8Q&random=1169061180 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqHSDc512rv7of-jfhG4CrEb7i5efVtlwSTOzJQXT7Ilf-1Jgb&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2Be_Eeq9TvwAo3szNqlbn0c8duVy2QsAM&random=3186697809 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1039784279&fst=1711570826632&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtq6IR1iFPBDaY8WN0JGDE9CSWty8jwPFFSE28sAYho4kU6maro&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_091mBLyYvn7OhNxedcHp4YT-zF-ajjU8Q&random=1169061180 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqHSDc512rv7of-jfhG4CrEb7i5efVtlwSTOzJQXT7Ilf-1Jgb&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2Be_Eeq9TvwAo3szNqlbn0c8duVy2QsAM&random=3186697809 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=693465576 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1380918839 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570828774&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1380918839 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570828774&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /web/e52281db47fdc3ea.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/32c7909a0316c8d5.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/527f411d8cbc0878.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/499b6c2ee03238ef.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/40e534873816858c.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document HTTP/1.1Host: akkadaindevelopment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirector/link-does-not-exist.png HTTP/1.1Host: d2te5kruq0pvbl.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://akkadaindevelopment.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /redirector/link-does-not-exist.png HTTP/1.1Host: d2te5kruq0pvbl.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1Host: www.canva.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSERUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_online?1711570834515 HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_online?1711570834515 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: anon_homesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: searchdesignspecsapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570845680&gtmcb=1214763953 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570845945&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558044&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&_et=6&up.custom_country_code=US&tfd=5230&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-event-source=navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558068&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&_et=4&tfd=5231&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570845945&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570845680&gtmcb=1214763953 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=wAHJDqaa%2B8AQiFdn%2Bs%2Box70g5l1F%2BKw3tvmStHl3aDj2snKTKuThkBPLy5LJqupjOmVsFTr4y5qXcuGIKigMOnrOcEcyc0LLyAzgLEHEcSkdz0LtgyxstBAXg2iU%2BYMuEW3lCljO5QsSKzZ35mac16UXgVKYmH%2B9JcopNsHzXttVRPmd2xIfb6efBUCcjw%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=2OMY0ixiaj6Ix6rUHCC7AJfLaBesNSFnaVA8wnKTRGhtiF47w7fkd00adJFpffiaAohoPBLkyvVFbf171YHu%2Fh0FaMVxd6QN954pu54iMAEt32S6UEODCXq7wt5uYoXNUcg69hdnkLm2hCC1Q%2BuqT3PNtbFHXj1lKRwe8CoY%2Fdxr1HtemeE0V1g81efyQg%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558068&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&_et=4&tfd=5231&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558044&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&_et=6&up.custom_country_code=US&tfd=5230&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2VFcGjjrtgqIJIwlTBBcQluB8VF3F2c5o&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqONv_nzwppJTqFIkzajuDUKv5R6vSvzZP1gMWx8eZLLV7_Jx-&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_1zlSLz4o_XNm05DcuMapsn8njN0oFMygs&random=3605106406 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=2138878269 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqONv_nzwppJTqFIkzajuDUKv5R6vSvzZP1gMWx8eZLLV7_Jx-&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_1zlSLz4o_XNm05DcuMapsn8njN0oFMygs&random=3605106406 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570848773&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=163421805 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570848773&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=163421805 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document HTTP/1.1Host: akkadaindevelopment.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1Host: www.canva.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSERUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558086&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&_et=16&tfd=11108&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558086&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&_et=16&tfd=11108&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1531348186&fst=1711570852898&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1531348186&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqtmnsQxryheyAOPfUiZ1GtbXKWkzzIQ5ag9fei3uoV6A41N8N&random=3542408461 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1531348186&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqtmnsQxryheyAOPfUiZ1GtbXKWkzzIQ5ag9fei3uoV6A41N8N&random=3542408461 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: anon_homesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 43d6a67X-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: searchdesignspecsapisec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20240325-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=17
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570862163&gtmcb=917437882 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570862268&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932844&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=1914&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.11762
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932876&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&tfd=1915&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570862181,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570862268&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570862163&gtmcb=917437882 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570862181,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932844&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=1914&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawUj2PeoZcv4DduF0hLAw%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932876&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&tfd=1915&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=hl8epu1s%2FSFn2kIxYQ%2BMLss3ZN3Zc3qT%2Fc6Me8fuvuqOPeeoxnCaPfrchWz9IgqSAHUhBPn%2B80AzFrTAm2jB1Ce0UTDSAJsI%2BOJbV%2Brq0tqDHffKSYiGo4UwDYOqzH6NwlKxJ%2F3Veu%2FNUJbjbR8hyJ2GJ5srj%2FU%2FpKVjtOiRb1FFuIFAE6Tdu7Z4NZrDEQ%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2BATBoFnuRXhMD8dcDv547foOSCwLEXrA&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawUj2PeoZcv4DduF0hLAw%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqroynL8k7_OgKgfYwD75bHb5O0mhhOWM4Cyf8403CJAZF208d&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3Dw5dlkwTrR6Aa4u7n1Py2EkzHWHiAFl8&random=69166483 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqroynL8k7_OgKgfYwD75bHb5O0mhhOWM4Cyf8403CJAZF208d&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3Dw5dlkwTrR6Aa4u7n1Py2EkzHWHiAFl8&random=69166483 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=645617859 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=446255025 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570864360&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932894&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&tfd=4059&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=qualified_session&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571279328122&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=qualified&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=session&ep.custom_product_variant=web-2&ep.custom_qs_audience=Desktop%20web%20session%20with%203%20page%20views&tfd=4060&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2613301643430&event=checkout&noscript=1&gtmcb=1689516742 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?txn_id=o85fi&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0&gtmcb=2049824514 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=645617859 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1711570864360&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /.well-known/attribution-reporting/trigger-attribution/redirect?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1Host: www.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /i/adsct?txn_id=o85fi&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0&gtmcb=2049824514 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_MtrNrVS5CHMlwILoQoCsOg=="
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=qualified_session&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571279328122&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=qualified&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=session&ep.custom_product_variant=web-2&ep.custom_qs_audience=Desktop%20web%20session%20with%203%20page%20views&tfd=4060&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /.well-known/attribution-reporting/trigger-attribution?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1Host: www.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1249181144&fst=1711570865423&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P2AyQLQh03FBpexox17ttsJjA%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932894&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&tfd=4059&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXehQ1mfS7CpE24V%2Bj10Wm6vsVQ4f1w%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /.well-known/attribution-reporting/trigger-attribution?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1Host: www.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1249181144&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqAGORUVJ3ICp6z6t4OLQoqPMT2WmHu-0mRmM5gp4zgI7AbMrZ&random=639097606 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_27zcaARx6kzk_UjQ3RS7Y0CzlvDFjWWQs&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXehQ1mfS7CpE24V%2Bj10Wm6vsVQ4f1w%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /visual-suite/ HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P2AyQLQh03FBpexox17ttsJjA%3D%3D HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/804757079/?random=1249181144&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqAGORUVJ3ICp6z6t4OLQoqPMT2WmHu-0mRmM5gp4zgI7AbMrZ&random=639097606 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqOC3RZLfuirL74pFBCceqHS-ZBKP76g48bfGracKnv9wOy_3j&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3zFjSeXQvO-Lc77TCb_P2HuWMgTLhvfVU&random=141426074 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app.54198e75.css HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.css HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqOC3RZLfuirL74pFBCceqHS-ZBKP76g48bfGracKnv9wOy_3j&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3zFjSeXQvO-Lc77TCb_P2HuWMgTLhvfVU&random=141426074 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /_next/static/media/canva-sans-latin.cb8040b8.woff2 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static-cse.canva.com/_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-feafa46848d16e44.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-3341eddb41618187.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-b6b8bc6bcb073f4f.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_buildManifest.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/product/visual_suite/home-77221781a3080c3f.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_ssgManifest.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1374692/Wowwithvisuals.7a445a34.avif HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1373917/SuperchargewithAI.7fceec79.avif HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1374692/Wowwithvisuals.7a445a34.avif HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/20986.6ba441b61ca29079.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/8643.b8f14875e0e505be.js HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1373917/SuperchargewithAI.7fceec79.avif HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232025/Features_Editor.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232024/Features_LibraryAssets.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232027/Features_Apps.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232031/Features_AssetManager.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-920442.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_pricing_embed/?locale=en&layoutType=ALL&billingFrequency=MONTHLY&origin=https%3A%2F%2Fwww.canva.com HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.canva.com/visual-suite/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEM
Source: global traffic	HTTP traffic detected: GET /blob/1232028/Features_Insights.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232029/Features_Imports.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/visual-suite/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232030/Features_Collab.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232032/Fordesigners-16x9.f02b27fe.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /blob/1232037/integrationsDownloadCardGraphicMobile.png HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /blob/1232031/Features_AssetManager.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /blob/1232024/Features_LibraryAssets.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /blob/1232027/Features_Apps.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /blob/1232025/Features_Editor.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /web/1c6dfi.ac74f1501d78f5cf.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.ad6500eebe72fe1c39dd.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570869643&gtmcb=831980953 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /blob/1232028/Features_Insights.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /web/f57bad7efd13d8bb.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blob/1232029/Features_Imports.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /web/970c2c838f4208fc.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/7834839043518078.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/visual-suite/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
Source: global traffic	HTTP traffic detected: GET /web/d0da04d3ab9ebc3a.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /web/babef07b306f9058.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1316641/c_howto_socialmedia_1284x721.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /blob/1232030/Features_Collab.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /video/1316640/c_howto_print_1284x721.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /video/1375446/c_howto_website_1284x721.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /blob/1232037/integrationsDownloadCardGraphicMobile.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /blob/1232032/Fordesigners-16x9.f02b27fe.png HTTP/1.1Host: static-cse.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /web/1c6dfi.6455dfe21cb752c0.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570869643&gtmcb=831980953 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=2883584-2908619If-Range: "9e03c33ee7e7dc5c5363f6a62722a351"
Source: global traffic	HTTP traffic detected: GET /video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=3538944-3561620If-Range: "ae9cd90a083f0bed2557c06483392760"
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/create HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /api/5715036/envelope/?sentry_key=31b80c12758c45b59038e73ab88ff644&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1Host: static-cse.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.canva.com/Accept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780Range: bytes=229376-3996867If-Range: "24d94274c1c4cb653ed9d888952a6386"
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570869576&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570869576&sst.ude=0&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Introducing%20the%20Visual%20Suite%20%7C%20Canva&_s=1&tfd=3890&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_online?1711570870595 HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/create HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_online?1711570870595 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/create HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780

Source: chromecache_211.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_207.2.dr	String found in binary or memory: Ja(a){return re({action:a.action})}};var yp=ol(({xc:a,className:b,children:c,kd:d,onClick:e,disabled:f,role:g,ariaChecked:k,In:l})=>F(d,{xc:a,className:b,onClick:e,disabled:f,role:g,ariaChecked:k,In:l,children:c}));var pca=dk(()=>__webpack_require__.me(641692).then(()=>__c.oca).then(({xT:a})=>({default:a})));var rca=dk(()=>__webpack_require__.me(292429).then(()=>__c.qca).then(({UT:a})=>({default:a})));var tca=dk(()=>__webpack_require__.me(693792).then(()=>__c.sca).then(({VT:a})=>({default:a})));var vca=dk(()=>__webpack_require__.me(46897).then(()=>__c.uca).then(({WT:a})=>({default:a})));var xca=dk(()=>__webpack_require__.me(725548).then(()=>__c.wca).then(({XT:a})=>({default:a})));var yca=dk(()=>__webpack_require__.me(69953).then(()=>__c.ZR).then(({YT:a})=>({default:a})));var Aca=dk(()=>__webpack_require__.me(280980).then(()=>__c.zca).then(({ZT:a})=>({default:a})));var Bca=dk(()=>__webpack_require__.me(643434).then(()=>__c.$R).then(({$T:a})=>({default:a})));var vw=class{constructor(){this.listeners=new Map;this.j5=a=>{for(const b of a)(a=this.listeners.get(b.target))&&a(b.isIntersecting)}}observe(a,b){this.listeners.set(a,b);this.observer&&this.observer.observe(a);return()=>{this.listeners.delete(a);this.observer&&this.observer.unobserve(a)}}};var aS=__webpack_require__.p+"images/aa6d02a5a4eadd82616b29e0a63785e5.png";var bS=__webpack_require__.p+"images/6946a347461082213a4523602b590457.png";var Dca=({className:a,Te:b,aa:c=new vw})=>{const d=rc(null),[e,f]=$b(!1);ac(()=>{if(d.current){var g=Dp(c,`0px 0px ${8*fj}px 0px`),k=c.observe(d.current,l=>{l&&(f(!0),k())});return()=>{k();g()}}},[c]);return F("div",{className:a,ref:d,children:b.map(g=>F(Cca[g],{Qf:e},g))})},Cca={[1]:({Qf:a})=>N(bk,{className:"_5ZD_KA",target:"_blank",href:"https://www.facebook.com/canva",children:[F(MR,{Ze:rca,uj:a,jg:{size:"medium"}}),F(vj,{children:I("n/HmsA")})]}),[2]:({Qf:a})=>N(bk,{className:"_5ZD_KA",target:"_blank", equals www.facebook.com (Facebook)
Source: chromecache_331.2.dr	String found in binary or memory: L(Kf,{className:"_5ZD_KA",target:"_blank",href:"https://twitter.com/canva",children:[F(ky,{Wq:Iua,bt:a,Dm:{size:"medium"}}),F(Ne,{children:I("JTInSg")})]}),[3]:({ct:a})=>L(Kf,{className:"_5ZD_KA",target:"_blank",href:"https://www.pinterest.com/canva/",children:[F(ky,{Wq:Dua,bt:a,Dm:{size:"medium"}}),F(Ne,{children:I("0K8/6w")})]}),[4]:({ct:a})=>L(Kf,{className:"_5ZD_KA",target:"_blank",href:"https://instagram.com/canva/",children:[F(ky,{Wq:Gua,bt:a,Dm:{size:"medium"}}),F(Ne,{children:I("xZ7gtQ")})]}), equals www.twitter.com (Twitter)
Source: chromecache_467.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Rz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Rz("fsl","nv.ids",[]):Rz("fsl","ids",[]);if(!p.length)return!0;var q=Nz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;L(121);if("https://www.facebook.com/tr/"===r)return L(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vA(q, equals www.facebook.com (Facebook)
Source: chromecache_332.2.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={jh:d,hh:e,ih:f,Vh:g,Wh:h,Ae:m,Ab:b},p=l.YT,q=function(){VD(n)};if(p)return p.ready&&p.ready(q),b;var r=l.onYouTubeIframeAPIReady;l.onYouTubeIframeAPIReady=function(){r&&r();q()};D(function(){for(var t=z.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(YD(w,"iframe_api")\|\|YD(w,"player_api"))return b}for(var x=z.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!PD&&WD(x[B],n.Ae))return Rc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr	String found in binary or memory: href:"https://twitter.com/canva",children:[F(MR,{Ze:vca,uj:a,jg:{size:"medium"}}),F(vj,{children:I("JTInSg")})]}),[3]:({Qf:a})=>N(bk,{className:"_5ZD_KA",target:"_blank",href:"https://www.pinterest.com/canva/",children:[F(MR,{Ze:pca,uj:a,jg:{size:"medium"}}),F(vj,{children:I("0K8/6w")})]}),[4]:({Qf:a})=>N(bk,{className:"_5ZD_KA",target:"_blank",href:"https://instagram.com/canva/",children:[F(MR,{Ze:tca,uj:a,jg:{size:"medium"}}),F(vj,{children:I("xZ7gtQ")})]}),[5]:({Qf:a})=>N(bk,{className:L("_5ZD_KA", equals www.twitter.com (Twitter)
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: return b}MD.D="internal.enableAutoEventOnTimer";var Ec=ka(["data-gtm-yt-inspected-"]),ND=["www.youtube.com","www.youtube-nocookie.com"],OD,PD=!1; equals www.youtube.com (Youtube)
Source: chromecache_377.2.dr	String found in binary or memory: ua:500,Fa:500,Bg:!1,icon:aq},{name:"Gfycat",qg:["https?://.gfycat.com/","https?://gfycat.com/"].map(yG),ua:960,Fa:540,Bg:!1,icon:aq},{name:"Twitter",qg:["https?://twitter.com/","https?://www.twitter.com/"].map(yG),ua:270,Fa:440,Bg:!1,icon:aq},{name:"Facebook",qg:["https?://facebook.com/","https?://www.facebook.com/"].map(yG),ua:500,Fa:500,Bg:!1,icon:aq},{name:"Tumblr",qg:["https?://.tumblr.com/"].map(yG),ua:510,Fa:450,Bg:!1,icon:aq},{name:"Pinterest",qg:["https?://pinterest.com","https?://www.pinterest.com*"].map(yG), equals www.facebook.com (Facebook)
Source: chromecache_377.2.dr	String found in binary or memory: ua:500,Fa:500,Bg:!1,icon:aq},{name:"Gfycat",qg:["https?://.gfycat.com/","https?://gfycat.com/"].map(yG),ua:960,Fa:540,Bg:!1,icon:aq},{name:"Twitter",qg:["https?://twitter.com/","https?://www.twitter.com/"].map(yG),ua:270,Fa:440,Bg:!1,icon:aq},{name:"Facebook",qg:["https?://facebook.com/","https?://www.facebook.com/"].map(yG),ua:500,Fa:500,Bg:!1,icon:aq},{name:"Tumblr",qg:["https?://.tumblr.com/"].map(yG),ua:510,Fa:450,Bg:!1,icon:aq},{name:"Pinterest",qg:["https?://pinterest.com","https?://www.pinterest.com*"].map(yG), equals www.twitter.com (Twitter)

Source: unknown

DNS traffic detected: queries for: blyocelectric.com

Source: unknown

HTTP traffic detected: POST /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveContent-Length: 465sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:06 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21442e85e07bc-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21442e85e07bcX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNruVW0btMOG1YnO1vSNzrPF2SlSG7yNAPiH0igocRJv%2Bj9%2By9jzn5njrOjwyKB4E6QKjcBqmAHlDuqRlcUvN1XLynVfMZQ%2Bjob2xcgHUS6no8Sbq%2ByarkC0TGjxHpk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:07 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2144b9d6b7fee-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2144b9d6b7feeX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hiJ1Wfkty95OxQi6FBsGFnlL7Fu7aNs6%2F8KSIUDFucjDcGQ3rRDrEr7A9wJ1rvafBf1TWlbgRe8m4gsTYdYIt7MREN87IFBNYFY5%2FmNKqVokfOnWWwfYsxLufJRccB4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:10 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2145a89e92045-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2145a89e92045X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=74n140xhoO3DCedH515gu4N4IfAO8tVKHTux94OuBkO%2FBjuvFANhCtLpdWzXFcRk6OgRnob5XpD%2FFHYMiToScXIVZfq3pUJVtroCZ9wjvP9EfYfVJx4gIb%2BysEarIYE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:10 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2145a8e1b8021-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2145a8e1b8021X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeQkqiUHT5WckYJirYgfqTaL9WWBL%2FluQIjspCG%2BwbWRmaNlMy%2BrGD%2Brs0K9O8OaWGAKrzuiQT5v5WSqNMDfG1Iinb3iscX%2FAa0%2F6sMY23MfqOVKR1%2B6qhbxYAaqKqI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:11 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21462da247fa2-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21462da247fa2X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H5m4MuCS7z1gNrU%2FCxX7ztVmtxbWGvrmrQO0PiNaIJX%2F6T4rx3RCDnn5doDfwdSYLvQ5mz9GlXU5q4uS%2BqjYqxlN6L0%2BcPHhPGV0dNIPcnN5uG%2BmwBoTOzoz1Mh%2B1PY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:12 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2146c5b8d0610-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2146c5b8d0610X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fNdWhr8Y1RC22aNM2qARYddbW0JA5LFSZvOhW5OnjZ1x4dcXlHI134SFhfYxDudppNSiQrmVBcCviWI%2BDszU0iY7ZQjTNx8iAsA1omGP6dyZW1d4R%2FGOHwQK5nYiVIU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:15 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2147bfdd18018-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2147bfdd18018X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9R6gV%2F3JsTWUA%2BOoNZTxYQPWr2VHlRAuRKHa5azoW%2FeofASaEBw0Kv6bor5ibj1R6mHPWXxQ%2FHlacprlV3QBjLyuGgYOZSeF6rZRT4%2BM7Yf%2BfLRaMmyvQFKIqK7g45I%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:19 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21496fc68059f-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21496fc68059fX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qB6pS9dVnPlRTlWtU7xZBoxzls38Vb8fv2P0ALiKB4suubgcBji4WRbf5WMzsqNcKcV0Fvb1LNy6Vlq2LTmPMdctWyqE2CCFmSQMxE5%2BsKlOI5bUXSsUX4sq%2F0FY4L4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:20 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21499da513898-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21499da513898X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTuj67Jez%2Bf7T86hyf82vpyPCOfSIWbrpBTTJArlxGX9iys5NpFXHQyVRgg8rEtkTnRyD6Gv%2FNuixEUwNdNM%2F9vs9Gnzbr7Q2s3mHJXnusRTkQRMg7Wu%2FjIbJ8Th4d4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:26 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b214c1798b1fd9-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b214c1798b1fd9X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m9mAdNidvkQ%2Bq7FlwPFVb0eyrZi9luXZ1k%2Bmt0ISyIGFwhtBYy5FkO0TNDyEByAfcc44aBUA6E2ngyCRzZuirYzybZSkpM9IWiGPhwrDzdzIHBbEknH7Va4PApgXrNw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Content-Type-Options: nosniffX-Powered-By: Short.io/EdgeDate: Wed, 27 Mar 2024 20:20:31 GMTContent-Type: text/html; charset=utf-8Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:32 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b214e7183f2058-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b214e7183f2058X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jIfcgkfFW2e%2BZMmGmwVCi6LHlJ7Fd%2Feo09Jh7v4SMhdu937djHiXSnzJRC8GsDPSOxYbqS8PbCfz5mtcYVW4c7JmPXlCP0eIB17q%2FnQV25mAF%2FIfevWRtkQIAvXYdk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:38 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2150b2dfb827b-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2150b2dfb827bX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1W33aeowj2%2Fr9PqplVvBWfxiT%2FPLTtoHhBBRCIVYmKD4ZXasPV4EFuYGtuDom757WzUah00vXJqCOyFJjkXYFo%2BTPoYpa8TtZ3R9eBilOg8BBPiSTlMTVnu%2FIPet4Bs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:48 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21548fdec0575-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21548fdec0575X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8B7rE5O7BM%2FVP6FPaxVtMK48L1QWsuru2irAJNRNLn78CLoBNmD6vhXZQW5Ks3LKYLOtG6CQPWIRGKPYKGJB6Ec9Dsu77gqLg8FAfAbQtP3J6nGd7na2ue%2BnuuIn6QE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Content-Type-Options: nosniffDate: Wed, 27 Mar 2024 20:20:50 GMTContent-Type: text/html; charset=utf-8Connection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:51 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2155c6aca879a-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2155c6aca879aX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OJkHaahioeL8D%2BEWpM8uDLvg9HTrCbwQ2LEmhJzCJxDf7spb34QezEFrYOyyhR%2B3HjyIKWaGHDQrUYLBh%2BFo5Gt9mQP%2B7UQ%2FuWQHDAOMYE4TD9LXcsw8skVAgI8GEzk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:20:54 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2156f8d173908-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2156f8d173908X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aRl0NbqRIoUbXdSmr0ai%2FOTHBfOKUw7O4izLxSNoINms9%2BiZECMiz6t0Z4fy%2BxIOPvYl%2Fz9liJi%2FoXq5uZZxck5ocgkbEJ%2B4Hyvkg7beW9MLae%2BBVCuJdFYeCSKayzs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:03 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215a8cd9c2d0b-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215a8cd9c2d0bX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIy0VKdLRTsj%2ByUNw5RuTZM%2FCKdQ00bKQ%2FxPupP%2FRxyZA%2FwXYT%2B%2FGBM%2Bmhog%2BkZ7YyrJ%2FFok%2BAR1JQ2SUdTfl5uDby0ruBg68llAjtQy4IMrlkcoXNVR5FNmwhyjFdg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:06 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215bb0dcf057a-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215bb0dcf057aX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LwDIJ5Jc2bIYIIPppn9o7TLItORZoiIiSOvKPgYFI%2Bwv7Ojj8xcy2oW0%2F3wcnT3r0j4s1OwOAaNIItKXRXHrppvlVzTpH13sHOLdzje8XRIhjvLCwbzRr9I1C%2Fn69RI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:09 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215d05e1c084d-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215d05e1c084dX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OW8n34fyDtiohyMbZwtmLsQJOBNgQ9JV3FGqzj1VTcc10x0y5bS3drhNfSuAsFzoA7y%2BHdDuTstxoFDOUDM2DnxVlqtaeAc%2BetVa4fNXLaJkfjmrbX4b9zL9fYAPa90%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:11 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215d9a9d39c2a-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215d9a9d39c2aX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OkCoxsmXdrwnTSovqfMNATYE7IXZFmKIhFEwnlCX7jbI7gzKrs2RzTE70UiSmNMWHKScry%2F9uNRl0qWqduOFJtZOQE5VGoj1AdCbZ5INZlzu8u3iv54YiXq9DW25TWw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:11 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215dc5cc481ca-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215dc5cc481caX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KwyEBnwxDnp56U6qHE4%2BG8oVa1AgMCpS5HHvjTDYbFxXH2HpKtXBpAPjouYO5V5Tb68tVm5y9jUcTK7MNMdZkxSctOGyHju53HLDcLliCyA4iCM%2FpUEBPewAiP6vlT8%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:12 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215def9062d26-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215def9062d26X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y6YrHsHz5buMAuxf1n2piTOgkIK9TJtdC%2BlSIl32sSXhIJ5isImVJVK4WXJFeglR1di%2BBCN%2BPLVWIA0qPdMbnKsz3bdYib%2FjkzCYgELd1enp85eLSpoCEDda%2Bn1MYRc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:12 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215e3298707c8-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215e3298707c8X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XCQNncwnHFHVnFhBz%2Bw%2FuZYPPjl2Dka4B1cyBbvi3osE4ArNiigUtmtX0DjBslme9z319b5QLFu0ozzvW5EwciiGUlsXj%2Bx81vK4o%2FnwmZQZtsFz3Ber9oJ4X5LCd%2B4%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:13 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215e62ba9801b-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215e62ba9801bX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWl7WvqBThGi08FadtJyOE9%2BlkWAXepVtVZfNidZSzOPJNQ8i5bEdnLTFokpx8juZ4W%2BzPdyuq%2FhHvE9PizFYNiVGzCJxwJNiZbWOvcohI17wwXwGiRxxeKk4%2FTI92M%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:14 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215ef1bae2899-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215ef1bae2899X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvlEA6r79vwJYa0VUmxhAIAU264%2BOJ%2BUBwt%2Bxhfd99Bzbr%2BiF8APPhTV4yqiphOu9RHeCNdydf4IUJ3SDYnK2CkRl0i7gjDQE4AH7xLY6VcJpUd%2BcEYyMOpy402lyNA%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:15 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b215f28c816fb5-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b215f28c816fb5X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nnjwJYhubW1lunPqvYE99tnqBsaeImMZXyB6kiRNr%2FdLd5i5%2FjPVbzOGzAeWjVfqY5rgetmQCysAosqsnrI2WFgFCeb9gD3VV037sS4NXpX6lZuCLdb7JWaiRx76iaw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:17 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216005f023913-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216005f023913X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4kCfOVksICVgwGKnwUuThZnP6ejo4gRCNVMUWB3RKYkJY4GRnPgxzie%2F5K63mURgc5UM3dZhlBcB4WfQcE0JmJKp1uEBYDfqemm2sc546ez2Yqozhg4BLugYiszcGkY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:17 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b21600f8a0081b-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b21600f8a0081bX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bu3nLY2ZCayU1bXbnFmDIcBZWegq3x8%2BFn1ql7kG4BfNuuRRcLl5iFF8Tk99WbDVaTY2qYS7vxtNUxTt59uHubWB3hu93q87jIhwnxjhvU1WYB65GLLjXL7fZn02AO0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:18 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216052dcc590e-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216052dcc590eX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2BczJFGDJWcTFkU20uag5PMk9qA1P%2FK%2FY4vNeGeUM3CVaay0xDGg7S14EoJfeDFGHfE7eMsLJQbpTGNyj2eFYUMtqfjEOmX3LvDQdb5gB%2FAy1x8fRpajMOoUEUxzRto%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:18 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216080caf395c-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216080caf395cX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zcm5py69CwtqUn5CRMUAEzrRMPp9ZhfFUAYt35LxV0nMkMPEcymBaPoZ2Xn6NwYt3bIUWx9uDUJHZSUJQ1nH11dzcLVmX9PVLZymawH9Tsh%2BRDYyK8McgBYA7hE%2BcGs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:19 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2160ac80d289a-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2160ac80d289aX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tL74BboQeJzD62XWFQRMd8EAZCKcKy%2BArWaQKwTrDnHn88k98v0j9ypI%2BMXieCEgI9oa8IFGzdRlilRUnbrpsckd1gzvwPoz0fYZ29pZKdjk9NHQvLPhDsWao5nudrQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:19 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b2160dad047faa-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b2160dad047faaX-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uXkhgnTSwjmLcO1YRCUYuiC2FcMIM3BT2apuJm1MS7Mhlw5D3Ewi97h8AUaxigc5Dk3hrHQvISWk3vt4bU9lxC1rbsbCxbSBId%2F5FhPwEWf4EwjvORMs4UaVbouRXnU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:20 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216106b7c05f1-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216106b7c05f1X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSF3bp6dTJz7c31GiDbMLTGqw2tCr6UmpsUPyN2rEPhuB6dbIxEBpIDBRml6sLKe6ExNJ9dRwOJrocfCB6s8ua%2F0XTjox2pwJWFn24rZ3vZPE4%2BQsM6wB8KsXo8ZhPY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:20 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216135ae907e3-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216135ae907e3X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1846liidVsFIXVd%2BttzOwpqOqmiJs1P3L0z5eKEy47OfFq7ilNtsYhEHqBg6%2BmgUCJDwhKbZAeEUKgC6sLOfCxPsTqszOttq4ROni2BIJBK%2BeJ5klQ5SWAJ2%2F2ylaY%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 27 Mar 2024 20:21:21 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 86b216162eb113b1-IADCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginAccept-CH: Sec-CH-UA-Platform-VersionPragma: No-cacheReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Request-ID: 86b216162eb113b1X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mR%2B7jmNBqLDNGeiPb7TuTudohFJu6UDoxN7t8ekGBs3j4YTVsq9RQCvJ5RQdUScFKJs%2BuyYNeG4v2K5z9AUPhs0UFb9EEN2VwYnBLPr93ySmJHXS8rkt7k%2Fe%2BlfQlfQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Source: chromecache_377.2.dr	String found in binary or memory: http://codepen.io/
Source: chromecache_377.2.dr	String found in binary or memory: http://codesandbox.io/
Source: chromecache_502.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_344.2.dr	String found in binary or memory: http://short.io/?utm_source=link_not_found
Source: chromecache_377.2.dr	String found in binary or memory: http://tally.so/
Source: chromecache_288.2.dr, chromecache_322.2.dr, chromecache_266.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_377.2.dr	String found in binary or memory: http://youtu.be/
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_207.2.dr, chromecache_331.2.dr, chromecache_407.2.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_261.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_370.2.dr, chromecache_348.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1
Source: chromecache_271.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=13
Source: chromecache_336.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=17
Source: chromecache_336.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=139
Source: chromecache_271.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=801
Source: chromecache_355.2.dr, chromecache_269.2.dr, chromecache_409.2.dr, chromecache_464.2.dr, chromecache_447.2.dr, chromecache_519.2.dr, chromecache_475.2.dr, chromecache_204.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;
Source: chromecache_519.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=108
Source: chromecache_269.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=115
Source: chromecache_447.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=170
Source: chromecache_475.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=179
Source: chromecache_409.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=192
Source: chromecache_204.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662
Source: chromecache_355.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=760
Source: chromecache_464.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=825
Source: chromecache_392.2.dr, chromecache_276.2.dr, chromecache_509.2.dr, chromecache_254.2.dr, chromecache_411.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=
Source: chromecache_392.2.dr, chromecache_484.2.dr, chromecache_434.2.dr, chromecache_254.2.dr, chromecache_449.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1
Source: chromecache_445.2.dr, chromecache_312.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=2
Source: chromecache_276.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=3
Source: chromecache_231.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=4
Source: chromecache_382.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=6
Source: chromecache_509.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=7
Source: chromecache_411.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=8
Source: chromecache_348.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43
Source: chromecache_370.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1943125636;gtm=45j91e43
Source: chromecache_271.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=1312029752;gtm=45j91e43q
Source: chromecache_336.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q
Source: chromecache_336.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0
Source: chromecache_271.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=801871314;gtm=45j91e43q0v
Source: chromecache_355.2.dr, chromecache_269.2.dr, chromecache_409.2.dr, chromecache_447.2.dr, chromecache_519.2.dr, chromecache_475.2.dr, chromecache_204.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v8723994
Source: chromecache_464.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v87239
Source: chromecache_519.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1084364917;gtm=45j91e43q0
Source: chromecache_269.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0
Source: chromecache_447.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1704557105;gtm=45j91e43q0
Source: chromecache_475.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1795515039;gtm=45j91e43q0
Source: chromecache_409.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0
Source: chromecache_204.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v
Source: chromecache_355.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=76073253;gtm=45j91e43q0v8
Source: chromecache_464.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2
Source: chromecache_509.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1253884597;gtm=45j91e4
Source: chromecache_276.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1255164850;gtm=45j91e4
Source: chromecache_392.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e4
Source: chromecache_254.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e4
Source: chromecache_231.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=802025;gtm=45j91e43q0v
Source: chromecache_411.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43
Source: chromecache_434.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43
Source: chromecache_449.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=117116656;gtm=45j91e43q
Source: chromecache_392.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43
Source: chromecache_484.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1592682549;gtm=45j91e43
Source: chromecache_254.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43
Source: chromecache_445.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q
Source: chromecache_312.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=298474064;gtm=45j91e43q
Source: chromecache_276.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=315048040;gtm=45j91e43q
Source: chromecache_231.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=447029718;gtm=45j91e43q
Source: chromecache_382.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0
Source: chromecache_509.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=771034725;gtm=45j91e43q
Source: chromecache_411.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0
Source: chromecache_332.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_332.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_495.2.dr	String found in binary or memory: https://api-gw.metadata.io
Source: chromecache_331.2.dr, chromecache_289.2.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/js/swan-2.0.21.js
Source: chromecache_539.2.dr	String found in binary or memory: https://canva.com/design/play?type=TAEwJH6TtA8
Source: chromecache_207.2.dr	String found in binary or memory: https://canva.me/homepage-app-choice
Source: chromecache_207.2.dr	String found in binary or memory: https://canva.me/homepage-app-store-badge
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_377.2.dr	String found in binary or memory: https://cdn.iframe.ly
Source: chromecache_377.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/1311_sourcemaps/a3d7911ebd1f0a2b.js.map
Source: chromecache_407.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/19_sourcemaps/c927fafc430af699.js.map
Source: chromecache_334.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/27_sourcemaps/b7679cc71734357e.js.map
Source: chromecache_454.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/118052af16110a6a.ltr.css.map
Source: chromecache_299.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/1b96dc175117e75c.vendor.js.map
Source: chromecache_492.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/2_sourcemaps/8b0efce4dcfa662a.ltr.css.map
Source: chromecache_289.2.dr, chromecache_343.2.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/9
Source: chromecache_377.2.dr	String found in binary or memory: https://codepen.io/
Source: chromecache_377.2.dr	String found in binary or memory: https://codesandbox.io/
Source: chromecache_467.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_539.2.dr	String found in binary or memory: https://content-management-files.canva.com/517de5f6-6512-47d1-aed5-eb749fb80fea/og_VisualSuite.png
Source: chromecache_344.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net
Source: chromecache_344.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist-2x.png
Source: chromecache_344.2.dr	String found in binary or memory: https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png
Source: chromecache_261.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_261.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_261.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_261.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/02.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/03.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/04.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/05.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/09.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0A.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0B.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/0C.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/11.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/12.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16-quadratic.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.otf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/16.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17-quadratic.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.otf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/17.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/23.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/24.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/26.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/27.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/28.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/29.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2C.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2D.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2E.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/2F.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/31.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/32.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/38.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/39.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3C.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3D.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3E.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/3F.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/46.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/47.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4B.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/4C.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/55.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/56.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/60.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/61.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/6F.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/70.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/71.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/72.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/75.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.ttf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/76.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D-quadratic.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.otf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7D.woff2)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E-quadratic.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.otf)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.woff)
Source: chromecache_265.2.dr	String found in binary or memory: https://font-public.canva.com/_fb/0/7E.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Hind:wght
Source: chromecache_344.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbER2SjQpf.woff2)
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERKSjQpf.woff2)
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2)
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGd4BCOz.woff2)
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGh4BCOz.woff2)
Source: chromecache_391.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2)
Source: chromecache_260.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_204.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1039784279&fst=17
Source: chromecache_519.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=116336599&fst=171
Source: chromecache_464.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1249181144&fst=17
Source: chromecache_475.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1378435317&fst=17
Source: chromecache_409.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1531348186&fst=17
Source: chromecache_355.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=529112769&fst=171
Source: chromecache_269.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=635174424&fst=171
Source: chromecache_447.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=971996666&fst=171
Source: chromecache_299.2.dr, chromecache_401.2.dr, chromecache_532.2.dr	String found in binary or memory: https://hm.baidu.com
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://instagram.com/canva/
Source: chromecache_331.2.dr	String found in binary or memory: https://jinshuju.net/f/by8fCr
Source: chromecache_299.2.dr, chromecache_401.2.dr, chromecache_532.2.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: chromecache_261.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_402.2.dr	String found in binary or memory: https://pixabay.com/
Source: chromecache_299.2.dr	String found in binary or memory: https://player.vimeo.com
Source: chromecache_377.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_467.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=
Source: chromecache_331.2.dr	String found in binary or memory: https://qqq.gtimg.cn/miniprogram/webview_jssdk/qqjssdk-1.0.0.js
Source: chromecache_331.2.dr, chromecache_289.2.dr	String found in binary or memory: https://res.wx.qq.com/open/js/jweixin-1.4.0.js
Source: chromecache_331.2.dr	String found in binary or memory: https://s3.pstatp.com/toutiao/tmajssdk/jssdk.js
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/_next/static/chunks/pages/_app.54198e75.css
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.css
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI.0efc5e60.png
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI.22783349.png
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI.63cdf881.avif
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI.7fceec79.avif
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/blob/1373917/SuperchargewithAI.png
Source: chromecache_539.2.dr	String found in binary or memory: https://static-cse.canva.com/video/1231848/Section5-Collab.mp4
Source: chromecache_539.2.dr	String found in binary or memory: https://static.canva.com
Source: chromecache_539.2.dr	String found in binary or memory: https://static.canva.com/static/images/favicon-1.ico
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_332.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_332.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_377.2.dr	String found in binary or memory: https://tally.so/
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://twitter.com/canva
Source: chromecache_377.2.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_377.2.dr	String found in binary or memory: https://vimeo.com/album/
Source: chromecache_377.2.dr	String found in binary or memory: https://vimeo.com/channels/
Source: chromecache_377.2.dr	String found in binary or memory: https://vimeo.com/groups/
Source: chromecache_377.2.dr	String found in binary or memory: https://vimeo.com/ondemand/
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://weibo.com/canvadesign
Source: chromecache_207.2.dr, chromecache_402.2.dr	String found in binary or memory: https://www.canva.com/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/_pricing_embed/?layoutType=$
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ar_eg/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ar_eg/education/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/ar_eg/visual-suite/
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/contact-sales/$
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/da_dk/non-profit/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/da_dk/uddannelse/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/de_de/bildung/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/de_de/canva-fuer-non-profit-organisation/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/de_de/visual-suite/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/design/play?type=TADUvCyAV_U
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/design/play?type=TAEXfxtKgiU
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/education/
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/education/contact-sales
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/education/eligibility-guidelines/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/en_in/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/en_in/education/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/es_419/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_ar/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_ar/educacion/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_co/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_co/educacion/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_es/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_es/educacion/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_es/educacion/contact-sales/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/es_es/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_mx/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_mx/educacion/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_us/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/es_us/educacion/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/for-campus/
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/for-teams/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/fr_fr/canva-pour-organisations-but-non-lucratif/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/fr_fr/education/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/fr_fr/visual-suite/
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/free/
Source: chromecache_252.2.dr, chromecache_309.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.canva.com/help/get-in-touch/contact-support
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/id_id/canva-untuk-organisasi-nirlaba/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/id_id/pendidikan/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/id_id/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/it_it/canva-per-organizzazioni-no-profit/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/it_it/educazione/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/it_it/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ja_jp/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ja_jp/education/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/ja_jp/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/education/
Source: chromecache_331.2.dr, chromecache_289.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/mandatory-collection-notice
Source: chromecache_331.2.dr, chromecache_289.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/terms-of-use
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/ko_kr/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ms_my/canva-untuk-bukan-keuntungan/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ms_my/pendidikan/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/nb_no/non-profit/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/nb_no/utdannelse/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/nl_nl/non-profit/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/nl_nl/onderwijs/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/nl_nl/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pl_pl/canva-dla-organzacji-non-profit/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pl_pl/edukacja/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/pl_pl/visual-suite/
Source: chromecache_207.2.dr	String found in binary or memory: https://www.canva.com/policies/
Source: chromecache_207.2.dr	String found in binary or memory: https://www.canva.com/policies/privacy-policy/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pricing/
Source: chromecache_331.2.dr, chromecache_323.2.dr	String found in binary or memory: https://www.canva.com/pro/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pt_br/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pt_br/educacao/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pt_br/educacao/contact-sales/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/pt_br/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pt_pt/canva-para-ongs/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/pt_pt/educacao/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ru_ru/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/ru_ru/canva-dlya-nko/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/sv_se/ideella-foreningar/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/sv_se/utbildning/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/th_th/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/th_th/education/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/th_th/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/tr_tr/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/tr_tr/egitim/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/tr_tr/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/uk_ua/canva-dlia-nko/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/uk_ua/osvita/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/vi_vn/giao-duc/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/vi_vn/phi-loi-nhuan/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/vi_vn/visual-suite/
Source: chromecache_539.2.dr	String found in binary or memory: https://www.canva.com/visual-suite/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_cn/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_cn/education/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_hk/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_hk/education/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_tw/canva-for-nonprofits/
Source: chromecache_331.2.dr	String found in binary or memory: https://www.canva.com/zh_tw/education/
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_207.2.dr, chromecache_331.2.dr, chromecache_289.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=$
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1013461691&fst=1711570826954&cv
Source: chromecache_509.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1038169164&fst=1711570848230&cv
Source: chromecache_336.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1044417300&fst=1711570826261&cv
Source: chromecache_411.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1148414878&fst=1711570826283&cv
Source: chromecache_276.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=17126600&fst=1711570864736&cv=1
Source: chromecache_231.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1848490936&fst=1711570826944&cv
Source: chromecache_392.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1963578676&fst=1711570863139&cv
Source: chromecache_370.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=238725573&fst=1711570866107&cv=
Source: chromecache_254.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=433384205&fst=1711570847045&cv=
Source: chromecache_348.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=961603076&fst=1711570865394&cv=
Source: chromecache_332.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_467.2.dr, chromecache_332.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_535.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_299.2.dr, chromecache_401.2.dr, chromecache_532.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_332.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.pinterest.com/canva/
Source: chromecache_270.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_467.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_402.2.dr	String found in binary or memory: https://www.slidescarnival.com/
Source: chromecache_402.2.dr	String found in binary or memory: https://www.slidescarnival.com/alonso-free-presentation-template/17785
Source: chromecache_402.2.dr	String found in binary or memory: https://www.slidescarnival.com/tag/business-plan
Source: chromecache_332.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_207.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.zhihu.com/org/canva-2
Source: chromecache_377.2.dr	String found in binary or memory: https://youtu.be/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443

Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@25/591@184/51

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blyocelectric.com/4xmaf95qR5m4wJYw4"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3116 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3116 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: {className:"_2PZmcw",children:[e&&ZX("div",{className:"GuR6ew",children:e.content}),ZX("div",{className:"Z9hHxg",children:ZX(__c.rm,{weight:"bold",tone:__c.Nl,lineClamp:2,children:d})})]}),c&&ZX(__c.lF,{variant:"secondary",className:"vHuD1w",onClick:this.props.mia,children:"custom"===c.type?c.jeb:__c.K("ll55sQ")}),g&&ZX(Uyb,{})]}))})}};FY=xY([bY],FY);var Wyb={[Kyb]:{opacity:0,transform:"translateY(0%)"},[Lyb]:{opacity:1,transform:`translateY(${2*__c.lm}px)`}};var hyb=1,iyb=2,nyb=3,oyb=4,pyb=5,myb=6,jyb=7,kyb=8,lyb=9,qyb=10,ryb=11;__c.Yyb=({children:a,appearance:b="dark"})=>ZX(__c.I8a,{appearance:b,children:ZX(__c.F8a,{children:a})});var syb=class{constructor(a){this.zb=a}getCapabilities(a){return this.zb.exec("HostCapabilitiesService","getCapabilities",__c.FC.serialize(a)).then(__c.UC.deserialize)}};var Zyb=F(()=>({}));var $yb=F(()=>({}));var tyb=class{constructor(a,b){this.zb=a;this.O=b;this.$N=null!=this.O.$N?c=>{const d=w(this.O.$N,"Expected 'getTrackingConsentSupported' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,Zyb.serialize(c)).then(__c.qdb.deserialize)}:void 0;this.dV=null!=this.O.dV?c=>{const d=w(this.O.dV,"Expected 'getTrackingConsentRefreshSupported' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,$yb.serialize(c)).then(__c.pdb.deserialize)}:void 0}};__c.GY=class a extends sY{static F(b){H(b,{hide:zY.ref,$Fa:AY.bound,us:AY.bound,Swa:AY.bound})}constructor(){super(...arguments);a.F(this);this.hide=!1;this.Uga=this.E4=0;this.window=this.props.browserWindow\|\|window;this.Cwa=()=>{this.E4=Date.now()};this.xwa=()=>{this.Uga=Date.now()};this.o3=()=>{if(this.rya)this.$Fa();else{const b=this.props.nwb;this.props.Pnb&&!this.hide?this.ufa():b&&this.us()}};this.ywa=b=>{if(!this.rya){var c=this.props.Qxb;if(null==c)this.us();else{var d=c.Qkb,e=c.Vkb;c=c.ET; source: chromecache_334.2.dr
Source:	Binary string: edb.serialize(a)).then(hdb.deserialize)}};kdb=__webpack_require__(168949);ldb=kdb.LO;mdb=kdb.aD;__c.LQ=F(()=>Object.assign({},{},{type:z("A?",1,"LINK_TOKEN"),Nda:M(1)}));__c.ndb=F(()=>Object.assign({},{},{type:z("A?",2,"ID_TOKEN"),Ffa:M(1)}));var odb=__c.ab(()=>({type:[1,__c.LQ,2,__c.ndb]}),()=>({}));__c.MQ=F(()=>Object.assign({},{},{type:z("A?",1,"SUCCESS"),hna:__c.La(11,odb),Br:__c.Pa(12,__c.Hj),rta:__c.Pa(13,__c.Hj),Qwa:O(14)}));__c.pdb=F(()=>({supported:__c.Q(1)}));__c.qdb=F(()=>({supported:__c.Q(1)}));var rdb=F(()=>({path:M(1)}));var sdb=F(()=>({}));__c.NQ=F(()=>({path:M(1),Ea:O(2),x4a:O(3)}));var tdb=F(()=>({}));var udb=F(()=>({path:M(1)}));var vdb=F(()=>({}));var wdb=F(()=>({path:M(1)}));var xdb=F(()=>({}));__c.OQ=F(()=>({path:M(1)}));var ydb=F(()=>({}));var zdb=F(()=>({path:M(1),Ea:O(2)}));var Adb=F(()=>({}));var Bdb=F(()=>({path:M(1)}));var Cdb=F(()=>({}));var Ddb=F(()=>({path:M(1)}));var Edb=F(()=>({}));var Fdb=F(()=>({path:M(1)}));var Gdb=F(()=>({}));var Hdb=F(()=>({path:M(1)}));var Idb=F(()=>({}));var Jdb=F(()=>({path:M(1)}));var Kdb=F(()=>({}));var Ldb=F(()=>({path:M(1),sU:M(2)}));var Mdb=F(()=>({}));var Ndb=F(()=>({path:M(1)}));var Odb=F(()=>({}));var Pdb=class{constructor(a,b){this.zb=a;this.O=b;this.iB=null!=this.O.iB?c=>{const d=w(this.O.iB,"Expected 'navigateToHome' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,rdb.serialize(c)).then(sdb.deserialize)}:void 0;this.Lr=null!=this.O.Lr?c=>{const d=w(this.O.Lr,"Expected 'navigateToEditor' to have been specified in capabilities");return this.zb.exec(this.O.serviceName,d,__c.NQ.serialize(c)).then(tdb.deserialize)}:void 0;this.JE=null!=this.O.JE?c=>{const d= source: chromecache_407.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://blyocelectric.com/4xmaf95qR5m4wJYw4	0%	Avira URL Cloud	safe
https://blyocelectric.com/4xmaf95qR5m4wJYw4	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
about:blank	0%	Avira URL Cloud	safe
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189	0%	Avira URL Cloud	safe
https://cdn.iframe.ly	0%	Avira URL Cloud	safe
https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928	0%	Avira URL Cloud	safe
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211	0%	Avira URL Cloud	safe
https://canva.me/homepage-app-choice	0%	Avira URL Cloud	safe
https://api-gw.metadata.io	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static-cse.canva.com	104.16.224.149	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	unknown
p.tvpixel.com	75.2.57.54	true	false	unknown
www.canva.com	104.17.239.159	true	false	high
adservice.google.com	172.253.115.155	true	false	high
collectoru.us.tvsquared.com	18.190.43.29	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.88.71.74	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
blyocelectric.com	52.21.33.16	true	false	unknown
scontent.xx.fbcdn.net	31.13.66.19	true	false	high
d1w725hft9421a.cloudfront.net	99.86.229.18	true	false	high
ct.canva.com	216.239.34.21	true	false	high
akkadaindevelopment.com	52.21.33.16	true	false	unknown
script.hotjar.com	99.84.191.43	true	false	high
static.canva.com	104.17.239.159	true	false	high
media.canva.com	104.17.239.159	true	false	high
tag.tapad.com	35.186.225.155	true	false	high
font-public.canva.com	104.16.224.149	true	false	high
www.google.com	142.251.16.105	true	false	high
windowsupdatebg.s.llnwi.net	69.164.0.0	true	false	unknown
d2te5kruq0pvbl.cloudfront.net	3.162.125.95	true	false	high
static-cdn.hotjar.com	18.160.41.49	true	false	high
star-mini.c10r.facebook.com	31.13.66.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
content-management-files.canva.com	104.17.239.159	true	false	high
o13855.ingest.sentry.io	34.120.195.249	true	false	high
s.twitter.com	104.244.42.195	true	false	high
ad.doubleclick.net	172.253.62.148	true	false	high
chunk-composing.canva.com	104.17.239.159	true	false	high
dualstack.reddit.map.fastly.net	151.101.129.140	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.192.84	true	false	unknown
telemetry.canva.com	104.17.239.159	true	false	high
reddit.map.fastly.net	151.101.1.140	true	false	unknown
googleads.g.doubleclick.net	142.251.111.154	true	false	high
sb.scorecardresearch.com	108.139.47.50	true	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	high
alb.reddit.com	unknown	unknown	false	high
collector-22324.us.tvsquared.com	unknown	unknown	false	unknown
sdk.iad-01.braze.com	unknown	unknown	false	high
w3-reporting-nel.reddit.com	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
cdn.metadata.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
www.pinterest.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_27zcaARx6kzk_UjQ3RS7Y0CzlvDFjWWQs&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v	false		high
https://ct.canva.com/_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D	false		high
https://static.canva.com/web/7f2712c7be9143f9.en.js	false		high
https://static.canva.com/web/390caf0cb1de6bef.js	false		high
https://static.canva.com/web/47dda877a1f6911e.ltr.css	false		high
https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png	false		high
https://static.canva.com/web/40f0ce866d9a0621.ltr.css	false		high
https://static.canva.com/web/549c0d12f1f1d3ca.runtime.js	false		high
https://static.canva.com/web/2289fb2c6b2e265e.ltr.css	false		high
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=FGET	false		high
https://w3-reporting-nel.reddit.com/reports	false		high
https://static-cse.canva.com/blob/1232030/Features_Collab.png	false		high
about:blank	false	Avira URL Cloud: safe	low
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F	false		high
https://static.canva.com/web/527f411d8cbc0878.vendor.js	false		high
https://static.canva.com/static/images/favicon-1.ico	false		high
https://static-cse.canva.com/video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4	false		high
https://static.canva.com/web/c2aba0ace5513e3b.js	false		high
https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211	false	Avira URL Cloud: safe	unknown
https://static-cse.canva.com/blob/1374692/Wowwithvisuals.7a445a34.avif	false		high
https://static.canva.com/web/743f47b2b32230e6.en.js	false		high
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526	false	Avira URL Cloud: safe	unknown
https://chunk-composing.canva.com/chunk-batch/b7679cc71734357e.js+937696ae4a62b6f0.js+2e5f89b6382f75c7.js+6c0ea36590d49674.strings.js+deb64776b9445b23.js	false		high
https://static-cse.canva.com/blob/1232024/Features_LibraryAssets.png	false		high
https://static.canva.com/web/a9d8b9a64cd39a92.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F?	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=FGET	false		high
https://www.canva.com/visual-suite/	false		high
https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928	false	Avira URL Cloud: safe	unknown
https://alb.reddit.com/rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://www.canva.com/#mainId	false		high
https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1249181144&fst=1711570865423&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi	false		high
https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg	false		high
https://www.canva.com/_ajax/ae/createBatch	false		high
https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER	false		high
https://static.canva.com/web/images/b46630e470f4040eba7033cf2435edce.woff	false		high
https://static.canva.com/web/39270ec1591145ae.js	false		high
https://static-cse.canva.com/blob/1373917/SuperchargewithAI.7fceec79.avif	false		high
https://www.google.com/pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710	false		high
https://static.canva.com/web/8c35b77c9580b755.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://static.canva.com/web/94b8e45285102a32.js	false		high
https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://static-cse.canva.com/video/1316641/c_howto_socialmedia_1284x721.mp4	false		high
https://www.canva.com/_online?1711570834515	false		high
https://static.canva.com/web/2aa80d3e88fb64ec.ltr.css	false		high
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.pinterest.com/canva/	chromecache_207.2.dr, chromecache_331.2.dr	false		high
https://font-public.canva.com/_fb/0/17.woff2)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/31.woff)	chromecache_265.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=971996666&fst=171	chromecache_447.2.dr	false		high
https://www.canva.com/th_th/canva-for-nonprofits/	chromecache_331.2.dr	false		high
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1255164850;gtm=45j91e4	chromecache_276.2.dr	false		high
https://font-public.canva.com/_fb/0/04.woff)	chromecache_265.2.dr	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1	chromecache_370.2.dr, chromecache_348.2.dr	false		high
https://font-public.canva.com/_fb/0/71.woff)	chromecache_265.2.dr	false		high
https://www.canva.com/pl_pl/canva-dla-organzacji-non-profit/	chromecache_331.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1249181144&fst=17	chromecache_464.2.dr	false		high
https://www.canva.com/fr_fr/visual-suite/	chromecache_539.2.dr	false		high
https://canva.me/homepage-app-choice	chromecache_207.2.dr	false	Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/02.ttf)	chromecache_265.2.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_270.2.dr, chromecache_433.2.dr	false		high
https://font-public.canva.com/_fb/0/2E.ttf)	chromecache_265.2.dr	false		high
https://cdn.iframe.ly	chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/76.ttf)	chromecache_265.2.dr	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=	chromecache_392.2.dr, chromecache_276.2.dr, chromecache_509.2.dr, chromecache_254.2.dr, chromecache_411.2.dr, chromecache_231.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=116336599&fst=171	chromecache_519.2.dr	false		high
https://www.canva.com/pl_pl/edukacja/	chromecache_331.2.dr	false		high
https://font-public.canva.com/_fb/0/0B.woff2)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/61.woff2)	chromecache_265.2.dr	false		high
https://www.canva.com/policies/privacy-policy/	chromecache_207.2.dr	false		high
https://font-public.canva.com/_fb/0/28.woff2)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/7E-quadratic.woff)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/31.ttf)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/24.woff2)	chromecache_265.2.dr	false		high
https://www.canva.com/pl_pl/visual-suite/	chromecache_539.2.dr	false		high
https://font-public.canva.com/_fb/0/2D.woff2)	chromecache_265.2.dr	false		high
https://px.ads.linkedin.com/collect/?pid=	chromecache_467.2.dr	false		high
https://font-public.canva.com/_fb/0/4C.woff2)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/47.woff2)	chromecache_265.2.dr	false		high
https://www.slidescarnival.com/alonso-free-presentation-template/17785	chromecache_402.2.dr	false		high
https://font-public.canva.com/_fb/0/6F.woff)	chromecache_265.2.dr	false		high
https://www.canva.com/canva-for-nonprofits/	chromecache_331.2.dr, chromecache_323.2.dr	false		high
https://api-gw.metadata.io	chromecache_495.2.dr	false	Avira URL Cloud: safe	unknown
https://font-public.canva.com/_fb/0/3D.ttf)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/02.woff2)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/17.woff)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/60.ttf)	chromecache_265.2.dr	false		high
https://font-public.canva.com/_fb/0/47.ttf)	chromecache_265.2.dr	false		high
https://www.canva.com/design/play?type=TADUvCyAV_U	chromecache_539.2.dr	false		high
https://www.canva.com/es_us/educacion/	chromecache_331.2.dr	false		high
https://www.canva.com/uk_ua/canva-dlia-nko/	chromecache_331.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.62.154	unknown	United States	15169	GOOGLEUS	false
151.101.0.84	unknown	United States	54113	FASTLYUS	false
18.160.10.96	unknown	United States	3	MIT-GATEWAYSUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
108.139.47.50	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
172.253.115.148	unknown	United States	15169	GOOGLEUS	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
216.239.36.21	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.253.62.149	unknown	United States	15169	GOOGLEUS	false
172.253.62.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.253.122.148	unknown	United States	15169	GOOGLEUS	false
172.253.122.149	unknown	United States	15169	GOOGLEUS	false
172.253.122.105	unknown	United States	15169	GOOGLEUS	false
31.13.66.19	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
172.253.63.148	unknown	United States	15169	GOOGLEUS	false
142.251.16.148	unknown	United States	15169	GOOGLEUS	false
172.253.63.149	unknown	United States	15169	GOOGLEUS	false
157.240.229.35	unknown	United States	32934	FACEBOOKUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
142.251.16.105	www.google.com	United States	15169	GOOGLEUS	false
104.16.224.149	static-cse.canva.com	United States	13335	CLOUDFLARENETUS	false
104.17.239.159	www.canva.com	United States	13335	CLOUDFLARENETUS	false
18.154.227.51	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.253.115.155	adservice.google.com	United States	15169	GOOGLEUS	false
54.88.71.74	spdc-global.pbp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
3.162.125.100	unknown	United States	16509	AMAZON-02US	false
18.190.43.29	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
151.101.192.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
18.223.63.188	unknown	United States	16509	AMAZON-02US	false
3.162.112.2	unknown	United States	16509	AMAZON-02US	false
142.250.31.148	unknown	United States	15169	GOOGLEUS	false
142.251.167.149	unknown	United States	15169	GOOGLEUS	false
35.186.225.155	tag.tapad.com	United States	15169	GOOGLEUS	false
216.239.34.21	ct.canva.com	United States	15169	GOOGLEUS	false
172.253.62.99	unknown	United States	15169	GOOGLEUS	false
3.162.125.95	d2te5kruq0pvbl.cloudfront.net	United States	16509	AMAZON-02US	false
52.21.33.16	blyocelectric.com	United States	14618	AMAZON-AESUS	false
142.251.111.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
31.13.66.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
99.86.229.18	d1w725hft9421a.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.129.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
75.2.57.54	p.tvpixel.com	United States	16509	AMAZON-02US	false
18.160.41.49	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
34.120.195.249	o13855.ingest.sentry.io	United States	15169	GOOGLEUS	false
99.84.191.43	script.hotjar.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1416740
Start date and time:	2024-03-27 21:19:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://blyocelectric.com/4xmaf95qR5m4wJYw4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@25/591@184/51
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.canva.com/ Browse: https://akkadaindevelopment.com/6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document Browse: https://www.canva.com/ Browse: https://akkadaindevelopment.com/6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document Browse: https://www.canva.com/#mainId Browse: https://www.canva.com/visual-suite/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.115.94, 142.251.167.84, 172.253.62.113, 172.253.62.101, 172.253.62.139, 172.253.62.138, 172.253.62.100, 172.253.62.102, 34.104.35.123, 104.18.41.231, 172.64.146.25, 172.253.62.97, 142.251.111.84, 52.165.165.26, 69.164.0.0, 192.229.211.108, 13.85.23.206, 172.253.63.95, 172.253.115.95, 142.251.111.95, 142.250.31.95, 142.251.16.95, 172.253.122.95, 142.251.167.95, 172.253.62.95, 142.251.163.95, 172.253.122.155, 172.253.122.156, 13.95.31.18, 204.79.197.200, 13.107.21.200, 142.251.167.94, 13.107.42.14, 172.253.122.84
Excluded domains from analysis (whitelisted): www.googleadservices.com, slscr.update.microsoft.com, clientservices.googleapis.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.pinterest.com.edgekey.net, fe3.delivery.mp.microsoft.com, bat-bing-com.a-0001.a-msedge.net, edgedl.me.gvt1.com, clients.l.google.com, sdk.iad-01.braze.com.cdn.cloudflare.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://blyocelectric.com/4xmaf95qR5m4wJYw4

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	5.439570128721847
Encrypted:	false
SSDEEP:	6:1WR69mWE2cMAU1NEd4QHCN7SgoSNJRYQDPC33w9DMTUUW:1WRqE/gt7SmNlDPC3g9YTUb
MD5:	03D8C29CF035E3BCBD16FBDC13D58FCD
SHA1:	A8E8FD71C2DFC1802D7060C2B90329A99BD9D3DF
SHA-256:	AD3EFBCE7F39E04BBEE8AF0A56A0626D4828E556FDE04E37AE3331840A287986
SHA-512:	24A33CC22C3CAA9DE943C7E044FBE35140F3694906431B25F92200DF06BC7C74877DF650063A64D3244D42816FF1C11C15AEAF170168B161DFEDB23D0A60C8B9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/47dda877a1f6911e.ltr.css
Preview:	.ygGKTQ{box-sizing:border-box;display:inline-block;vertical-align:text-bottom}.ygGKTQ._61VRqQ{height:12px;width:12px}.ygGKTQ.abulbg{height:16px;width:16px}.ygGKTQ.dR8M7g{height:24px;width:24px}.ygGKTQ._1aCkfA{height:32px;width:32px}.ygGKTQ>svg{display:block;height:100%;width:100%}./# sourceMappingURL=sourcemaps/47dda877a1f6911e.ltr.css.map/

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=645617859
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	5.4642953658971285
Encrypted:	false
SSDEEP:	48:ja8b42YiG9zCa742YiG9kLa8b0BYfG9zCa70BYfG9kLAEEBsG9/UVdR5:+8b42YH742YP8b0BYU70BY8EEBDg5
MD5:	0504734B8C9C90E8D664778457F64F72
SHA1:	204E824A2228A776E26151A7B5098E4BA3591610
SHA-256:	4779AA1DFAF37A46E69403334D416B4FC97481F73C0DF40DF3F069D4F76C41D1
SHA-512:	3066287AE0158324B34AC62C2E92CABA0CE13BE15765B9DCEA512763388B3D54ACC6779C7DA9AD2E7BD8FB5B3BFD13C13EC9D4D24A34AA639CC928D8CE601FF2
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711570990861100&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=3&tfd=7549&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.doubl

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570805634&gtmcb=1732387887
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Secret Key
Category:	downloaded
Size (bytes):	929625
Entropy (8bit):	7.998429533128469
Encrypted:	true
SSDEEP:	24576:FdJX/Ioa4FqcO+KLuwez7jeWrsww/ii+0F6Tnsv:XJXQm0Ci6sww/ioOsv
MD5:	9F0A194F50E450BE07EB660FE170D586
SHA1:	EA5A08420E64C5329C435814FA7CC44999D2F274
SHA-256:	CC3E76BA2EF20F967CB5EB40C73988BA2B51DD6076BF62BC81F3B2053E1AD39C
SHA-512:	C0350D8F3EEA5126C805394211FB470A5A965E00CA958611E92F92A554D16C362B2982A00EAD51CC3F906F4C685B3931238A512A9E39D1871D3742D49C956061
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4:2f73406e468869:4
Preview:	.2..o<7L.V...D\|...D..........I.....S...S.;.........%tl...........-...C1..m..GO.vgP......{...s=..G......b.).<.u...\|.Yu.a..Hw.."......V.#.y...0.6.u.....i>'L........G3......<.a...f...8(W.,$..S..+...'....A...Y. .t?6..6.?.....q..y..p.6...0..F..[H.....?.m$..)..fB.H/h.M.....++(e..u.dYH.BB\.<.Z....G5.........q'-\._XE).....b...m..j1..r%.KN#..1..G..q.i5.Im.\~.....q.....e\|...d..,.6.c..b.Z-G.H.......d...Z..V.-HZ.....[...Ir.R........Mw~.=....f..../)S...o......Rn.0.......<.S.T8.-<..H..........AZ......)..#..3sQ..!1.r.+>.B.}..Jt0_....?P..n..T..`.G.E... .P....o...St..=Ed ac..j..b.x%6....dU7.F..p8.,F...-DD.!....'k..%..J.[.....S..>.y{cq..h_.......D.....?.V=..(.@.!..9vU...Sz^..........R.p......y.%....dW.c..Ov..C....g.0.Ex%..!.u.w>...N..........E.i....@.pi....r....$.......jR,.'R^.....,I.Ts..1......#w&.SK.HZ'E.g..vaD..F..Q..+.....2....:."WV.I4=..R....}.e.a.Y... %2....Y,o...[)...1..g....s......)....U.p:a.....}..Pe...h.:.t.?...+x6...Z3`...'.".O..e.t.x8..mg

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (588)
Category:	downloaded
Size (bytes):	622155
Entropy (8bit):	5.676569317862827
Encrypted:	false
SSDEEP:	12288:vDdAY3BmG28KLMDa8yZNvgse/G87cmh05RUck0btz/OWd2xSXtdcS3TDJUNtxgAK:vDdAY3Bml8KLMDa8yZJgse/G87cmMRU+
MD5:	1BCF91280548A4B7A8E55DF2BCB4709C
SHA1:	BDA082E5420DF07DAA589596C74CC54AFEAACD8A
SHA-256:	BCDB4A15FDC471B710ED6359E106B473CE4CD6223A9E1642CFCCB1579CF6C84E
SHA-512:	CAE33E3DA1FCEC6D125D955380BF96C7B174C73244438540E288C5351E208CC8E176EF6BA7A3F69E833CA6F773214F967CBBA118A012FB08BF9F3412139B9B8A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/410ceb80675623d1.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var kS;var fh;var pR;var rQ;var GM;var GI;var hL;var GK;var cL;var KK;var RK;var QG;var NH;var ib;var ca;var Zg;var gA;var $g;var ue;var Jx;var Ox;var Qx;var Kx;var u;var Fx;var W;var p;var tb;var v;var R;var Dx;var Gx;var T;var n;var Xw;var H;var Lx;var hb;var gb;var X;var y;var E;var fu;var Pk;var kh;var ls;var Fq;var Bq;var xq;var wq;var tq;var jp;var Xj;var Nh;var to;var qo;var po;var Qn;var Pn;var Vj;var Cn;var Sm;var Fb;var kl;var Qk;var Sk;var Rk;var Nk;var Jk;var uk;var bk;var Bh;var Gj;var xj;.var vj;var N;var pj;var fj;var Xi;var L;var Li;var yi;var gi;var ci;var oh;var

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	415893
Entropy (8bit):	7.9888172225326155
Encrypted:	false
SSDEEP:	6144:n9O5aSbOnRU/dpyZ7d5i/Flr+SHkVfyXWPY1ofoN5MeWdwyPfw2nKfTPvKNBI/8F:9OEJKwZ7uriSHkhyVzYfw16NBI01Y+
MD5:	4433537EB3104D45662E58B45554F113
SHA1:	26BEBE95C19F21C41B6A347A380D86504A40C50B
SHA-256:	781FC284C637CDDCF2BF1DC115F1D8A8D2F738845F34B958F221BFEE685D49ED
SHA-512:	5FDF1EEE33ACFA7EFD4042268E92B5EE4B2ED3B71B030F2D0781D89A7A9283ACDC5E8B64A885CF535FF4878CB1890D725C470932ECD99808EC48430BA20FC0AB
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4:2f73406e443cfa:3
Preview:	9..Q.+....\..........P..T...z..A.~.[.\|/(....z\z.Y..>7B._.A.........JK..]....'o..r'..C...9Y...X.%y..9...{...N...LY1R.F.....C...>i...(.r>.(...D..D....bEm..O..lW}...6...kM....".6.3....9..l..Tv_...9O...H.0y.D ..k}.Q.....5......;'TI..../..h.}S.4f....4I)v.R3....r...v.....ui.oF..0P7.....L......&B...r:..o......B...%...)t......`.ndM.1...e...2.n#m.....s+..J$...srE.A...W....."\|BcW...m)..z.....r.!...t...H[D..C....@\[....}3..........&M....d+'5......{..A....e....\s...._J....c.7........wWVv....].[......@$`/.}...,i.c.j.f2..e._.\\...x.<..'I.D\..Sr.9...>.p..R...Yd7........l1..CU/.FV..../.jm.....e..LGk.I{...t.t..eZ..........x<lU...x..r.%d....j.t!..`e`.R....9,.JB(vB...A.UB.Q....Gu..{...`.>k.........:...x.Jg.}.!......B.....b..n..+v...m'.......j......a.2.......L.863.....cN:]......dt+z.L........h.r..(s:..X..B..'h9.[.p0..i...mdf&PS..5#....~....D...............Sx;GQ.,`.%b...O.\H....J7N....\..R{.".Yk...!m].;i~vA.e..$=.jYd.;.H.........]Ot......~.r}eC..7

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7296)
Category:	downloaded
Size (bytes):	7359
Entropy (8bit):	5.6066895264281476
Encrypted:	false
SSDEEP:	96:+iwKRQZ2WWBK7351QcpzOpoNf9CU6K09e7xJzBbWK09e7xJDk3/p2p:nCWAD96XU6K0o7xLbWK0o7xVk3s
MD5:	3C0F2193830453BA8E90A81DBBB30915
SHA1:	5FB6D98AA70A8D1EAC2C82B515493BE760BDC1B5
SHA-256:	F2B88C7DA696AC177EF9165CB65F1C172BE3D65AB1DC462EBF4DF165EB076173
SHA-512:	7D631A4DE84342F464B0DA49A6E35242339EE16D7F2ECFC3F8C026A7ECC441861B141A0B520529DED5C0C01D15D0FF6D0469AAE507CDB73A3E9566E50E320738
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b3a01de3e1e9ec62.ltr.css
Preview:	.vix9iA{box-sizing:border-box;cursor:pointer;height:28px;position:relative}.light{--Usv7DA:rgba(57,76,96,.15);--eTLUaw:#0d1216;--Xaxk4Q:rgba(28,39,48,.5)}.dark{--Usv7DA:hsla(0,0%,100%,.4);--eTLUaw:#fff;--Xaxk4Q:hsla(0,0%,100%,.7)}.u6jFfQ{align-items:center;display:flex;height:6px;justify-content:center;width:100%}.V0Ppog{background-clip:content-box;height:4px;overflow:hidden;position:relative;width:100%}.V0Ppog._8b8dVg{border-end-start-radius:2px;border-start-start-radius:2px}.V0Ppog.nMKb2A{border-end-end-radius:2px;border-start-end-radius:2px}.V0Ppog.QBbv0w:not(._8b8dVg):not(.nMKb2A){transform:scaleY(1.5)}.V0Ppog.CIzZAA{transition-property:transform}.V0Ppog.CIzZAA:not(._8b8dVg):not(.nMKb2A){transition-duration:.2s}.ejMelA{background-color:var(--Usv7DA)}._gaU1Q{background-color:var(--eTLUaw)}.r2ugFQ{background-color:var(--Xaxk4Q)}.FsepDA,.MgUg1g,.nh_lvw{box-sizing:border-box;height:100%;position:absolute;transform-origin:left top;transition-duration:0ms;transition-property:transform;wi

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223599
Entropy (8bit):	5.455884833256567
Encrypted:	false
SSDEEP:	3072:ct8WCZZiFxncVuP0bteuvQ+AMPpgArl0xYu5GKnJ7H:ctlKZUSO0bvQQGArHu5GKnJT
MD5:	E41DBDC8D66F744A1D78A812ACB5DAEE
SHA1:	2DECD4278C8970DEAC099613E28A3D8CC4227A9C
SHA-256:	047E3259B6F0B42D781532FA122B2D8DE9AED187D766FD45EFCF119450EEB4C4
SHA-512:	3112E268877BA20DE5204A14D6E617EB0FEC94572F81139D4CC262ADED9EF8E9E601A939B1B2F43F1E25E1D09A725CE148107EB722B32AE8F946268C1F91082E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2122
Entropy (8bit):	7.869989571692659
Encrypted:	false
SSDEEP:	48:hhuqPHySGeC9xYrnVWBQs0KuzUDF9rMM7qnMm/nTu/sXZtt:SqPHySJUYZWBQoMwDsL/nTDpD
MD5:	2A83732C1BFEA0587D1B6557AD5C4A24
SHA1:	0EF4FB88A56BE04AC276231F5582A3471471AF41
SHA-256:	264008B1447FFA7F3832890023C1EF68300BD5221E5FE866DE0FCF03B610BF6F
SHA-512:	2D1FE3DEDB1AE31D88F1660BEE0E849C3F9CA306621750592DAE130C8537A4DD106EDFF9DD9261B26BC237BBF90CC6E6ECFDDD544F3C430CB9AD2260C037A3F3
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/200_87_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAEVHaa9t_0kzI0s6V5Iw6cN25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI
Preview:	RIFFB...WEBPVP8L6.../...&:.....4==.ffffffffffffffff.33..{N.=b...vJ[8v.rda..+w..Tu..F.l.)g..l.sg..G.Pig.....n....n8[0.O.tRs.%8e.T,.......E..m......J.$..^..o.m.m.m...l..s...`A...E.. ..&&.e..G..&..z..$..7.3@KF.QiRDh.[0l8...d..M..-".b.Q.Y....=._h...y..\|.9.......$.s....9..Z....{..x....TdQ....&yd.Z.u<....P`....9.Sdd.Z.u>Kd..FQ..... ...q).U..L#.NcR[.?;....)eI"..'.^p70.....Z..5...b{...{-f.."G=..Y[Q...zz.D..6r..9r>..z.s{+.@.6dpG...4.9.$...Jh.aFd.c.R.SE[....C..b.....T..nJ=h..4.m..A....Ek67]H.y....-.5z.....<hruq.....F.../.irt....L0=....H.......z."#.3..m..d4=..o.(.IR...sT......E.-Z8.-.3..u.I...e.p......7..<$.O..2.g...}$J.$^"..h.Q..x&K}GM.-]I"G}......e.....\.8.3L....eyL.z.JF..1E....o...'z...$.L..aR........AS..M.*.6.U2.3.(.4.PzK.g.U.-\.b..0`.s.y...4U.e....4.P<..H...g.,..&..p..l.V.Q...j.E..H.V......QK....,r.t.0.....F.l.&I4EJ......Xv..$.i!D..2..Q.@c.rIP...z..O....].h+$...G.l.z....K.`.:J..GKg.(...).,....3C.w../..R+5.9[.O.z ....~K?....Z:c.....p..B..-;rK..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3266)
Category:	downloaded
Size (bytes):	3582
Entropy (8bit):	5.178157150460224
Encrypted:	false
SSDEEP:	96:a4xqvMAfLJiDqt/wVKK/KKj/gWKfjFmPy6HZxkSChbhG6kuPP15Il9jcHw:GgD+wUKCKj/g7fjFk08bew
MD5:	5065E4CFB23C364E859BD09B8009D53D
SHA1:	F76F80459E26328BFD27F7B175A91CE96F3B52E3
SHA-256:	E9ACA1DCBCD6821EF322936330751944D2538764489C405B713A3854CF48C423
SHA-512:	6BD1D39805C53441A121A00B5134B125B286266394DE954E47398340F94AD1C9FB9A54777D4FEDE16BA414ECA24D11D1798613DFC4A04B3211A0A50F519616D7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/82cbbba8c3f54a3f.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"eq4PgA\":\"Didn.t get the code? Resend code\",\"PFOUew\":\"Continue\",\"Ys3NqQ\":\"Last time you used Apple to log in.\",\"1pB8bQ\":\"A new window has opened with the login and signup forms\",\"j4DlCQ\":\"Continue with WeChat\",\"W3rnDg\":\"Continue with Microsoft\",\"yE0DMw\":\"Last time you used QQ to log in.\",\"MJsM5g\":\"You.re creating a Canva account with {0}\",\"ucchJQ\":\"Last time you used Keycloak to log in.\",\"4TvUdA\":\"Continue with Clever\",\"fEowpw\":\"Last time you used WeChat to log in.\",\"hzBARA\":\"Finish logging in\",\"aZDPZA\":\"Use your email or another service to continue with Canva (it.s free)!\",\"lkTH3g\":\"(optional)\",\"dr236A\":\"Continue with Weibo\",\"sL5cjw\":\"Please enter your verification code.\",\"TxrGbw\":\"Hide\",\"oTom8g\":\"By continuing, you agree to Canva.s <a href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Terms of Use</a>. Read our <a href=\\\"{1}\\\" target=\\\"_blank\\\"

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7000
Entropy (8bit):	7.945098382016294
Encrypted:	false
SSDEEP:	192:2A5o78Y7hjXYpxIA2hCw3VvFJMX86iBFw/V8YuksIR7D:KhbpA2Ew3xFJoHYFK830P
MD5:	5F955D7379727E18D3BF648587731385
SHA1:	23AC08EB12C27106E2D4AC0D965A89FD11FEF158
SHA-256:	933FC8D542B142D0D96B6FF6964EFE50B00C16A79BF929AC027885F71D29C3E3
SHA-512:	8C6AF8F9F30472EA64BCB66A7E2E3143F059B76C596651A50BE8DEC476D53B93F453A726DF49F362075632B833E9ED07ECE812179378C49611758DFD6CC53958
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/8a1451cf-3ba0-4e8a-b469-f5010862b5cf/prints_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D................f...#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma.................nmdat....?. .r...m2.4f.V7G-....?................q...P.....d.E...M..;.....d=.Id....7..g..)l9...e..s....L.W\;.5\|Ls0..SQ..@C.6.!Zw....C.........S....34]wV...v..:.k...j....i..[...,....v.S.10..K....!....I.7V#.4.:...,h...@......g..}..b.q!..F.t...v...KU@R.1..H.....II..r.....m.b..Zl.o.o.....sG.+.;.i..............AR.%.Q..].tv.2.o..[..P_0L."..<.z.....M.N............Fo.m%dc`..n.r.......q3...{h.w......`.(..o#..^.....u.t@.#.!\|fN...t....y\|.a~G$.`=.`-.^........6.'.1.~.!...k.#c...s>n..h..\|.n..d. .).gp.vl....K.dt....\N.3.l......yEk...`^.1....~K.....v.....:egw($...=..&".I.-.t.~...H...N.......8....!/ J....7........C....v.8...y0.tb..p#...).....*..E...O.K.Z..-....GA>.g.;.c.......>.n..F..=.u.s..]..^........cK..w..Y1.....;.G..V..@......IO...B..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3364)
Category:	downloaded
Size (bytes):	3427
Entropy (8bit):	5.438507617889488
Encrypted:	false
SSDEEP:	48:Jndc803UWPW9yyX3yTuF3C+sSTPAnzrYIBz9Uq7yrE:rcv3zP2yTuF3C+sSLixBzqAJ
MD5:	A08DF7973AFBDA6D0D521F3D61BBBE50
SHA1:	803497FB7EF76A9B638D7AD1A28CE4BA3FCAFB80
SHA-256:	63BF2B54134BEBCCAA8F2CB1DF236B664AAB2C2242AECCB1D8874EAED77C6892
SHA-512:	90303DEAB046E212B95D34C87EAE009F81E85817E440DFEBCCDA126BA0749BA2CF2412AFF6A57804A35928996FD4EF582E8DA8A20993ADD9522E80DD45B54870
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7147f278e62f8beb.ltr.css
Preview:	.eJ5bfQ{color:#1877f2}.XvuZxg,._vXveQ{word-break:break-word}.nk6qOQ{align-items:stretch;display:flex}.J7cYGg{align-items:center;display:flex;flex:0 0 auto;height:-webkit-fit-content;height:-moz-fit-content;height:fit-content;margin-top:-1px;min-height:24px}.SpgRRg{flex:1;margin-left:8px}.u6sYBQ>.SpgRRg{display:list-item;list-style:disc outside;margin-left:16px}.u6sYBQ>.SpgRRg::marker{font-size:1.4rem}.J7cYGg,.u6sYBQ>.SpgRRg::marker{color:var(--pUV7hA)}.iUzIHg{display:block;height:auto;position:relative;width:auto}.iUzIHg:before{background-color:var(--S_zKBQ);border:2px solid var(--avatar-border-color);border-radius:9999px;box-sizing:border-box;content:"";height:100%;left:0;position:absolute;top:0;transition:background-color .2s ease-in-out;width:100%}.iUzIHg.zbr9nQ:before{border-radius:calc(var(--avatar-size)*.1)}.n0EjXg{align-items:center;color:var(--QErhlg);display:flex;height:100%;justify-content:center;left:0;position:absolute;top:0;transition:.15s ease-in-out;width:100%}.mtqR6g{bo

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	431
Entropy (8bit):	5.186700516362306
Encrypted:	false
SSDEEP:	12:kjhskjmDmIQEgnwf0Hz0oW0+NNx1kOldlJVrK22:kjhskjmdgwsHAoW0gb1kOhJlK22
MD5:	E07F7C13489AABD41541658BA84BB8F5
SHA1:	BA7886BBA004AA3A6F6B21E0857CA3E343F0190B
SHA-256:	DB781850D9AE8E17394D57E0A554E1CCF7E37D8EFBE27ABBE55B777223817EE5
SHA-512:	7CE323928B1BB290137DF914FBD122108E61FD99E8F0371613EF7DDE60D6464B6A0C88C32DC75492F30CDE678675BDEE4B5CBA9558094C87B79CC38E466BD0F7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/efed49dec8868a5f.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2515],{../***/ 642643:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}])

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	5.350111658254143
Encrypted:	false
SSDEEP:	3:P4rs9WKQBnkWYB2qr9NMBnedCJOQuHRwIIk2g0SKuHRwIXWS+0/Ypf7WL1cALSLy:EcWKQBnkWbW9NMBn/VudLtvWX5M5
MD5:	24A6C7B02A77D83656E7C5B5AC1D2A9A
SHA1:	857DD519D5BDD2420AEC89C5F3CE36880EC1B73D
SHA-256:	5977F4758C61B93F2F3C73D019A5E7FB6C52C0D7BC523FEF27E6BEC5385D0279
SHA-512:	122BAE5FF4B42DD823A4B6F4BCD72D7C77E0719A816877F841BC9A94C4CFC2E50B172532CDC2068433FB4F9864E084B62E81A965043DEAEDD42EA08AFF76E5D8
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2289fb2c6b2e265e.ltr.css
Preview:	.E3Eshw{transform:scaleX(-1) rotate(45deg)}[dir=rtl] .E3Eshw{transform:rotate(45deg)}.XvuZxg,._vXveQ{word-break:break-word}.vSEELQ{word-break:break-all}./# sourceMappingURL=sourcemaps/2289fb2c6b2e265e.ltr.css.map/

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38848, version 1.655
Category:	downloaded
Size (bytes):	38848
Entropy (8bit):	7.993669247804477
Encrypted:	true
SSDEEP:	768:SGQkx5jYojomEnKWP2gtvC7smgmSNW82sdRzCGZMc0wbsNm4NY8vikf:3L5LHNY2gU7ZS2gdCCMcQG8KE
MD5:	CFF149EE1E9D2BE50AC77BCD86769D05
SHA1:	A1B8A95DDFE811A098D0298E83DD711E90943732
SHA-256:	C84DE7E52D68BD3B651219E7085236BABC85A0C7C79F21A14F0CDDDBD0FB4B4C
SHA-512:	D27E713343F51A75E909B4A01D3F2FFB95EE82E13A1B21A9D3034D3858579E4C3FEBAE76E1AF706B820E51583254281E256B825F1742167E1E072DC59CDF1AE4
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/media/canva-sans-latin.cb8040b8.woff2
Preview:	wOF2..............%(...L..............................j...?HVAR.^?MVARZ.`?STAT$'(..N/....D.\|0....6.$..\|..... ..>. [..q..W.....sgtY.....C.m..X=e...`...~9...?-....h[U.t.-.\..Q.zkm..,..k..RP4...%Z#_1q...H...A.P.T.s#..Q...;......[...H\|..C....i....AW....V....r..'.....`...$r.C$C$..8&.....]:v\x&N..q..........}..+.Q.$OJ............./.Wdb.a..........}.<....}//..B...BHB.!.K.+.).kT#.J).".Xa,e.JqQDtW..o...R..v.W...........;]..w...........7C0.N.^Q.m.......bAn..c8b...VD..(...Q"Z..y..1...o..O_......L.._.f.&........LC.Z................N....=.Y..]...h.).\|....&.1B.....6..].R..3.t)....i........#...`.B.8..D.E\V.(5*...O2..7..93.:.l6.$.B....>._...9..FE.........V.........1...0Al.5g=.....:/...L..3.b......7....... ......j...u...F)......e.g.Xf"C..e...3=..#...y...w...I.@.O.>.J.$........{S.V...e8B.. ."J9..DD."27k"VD..(...}...LHT...a.6-...r..m~.........~.?...NI...!..'F(b.....xb...(."~u...Q..&:.....9#Gm.D....D.&....R\|.D..N...:...".......II'.w_#..X...&:..WQ...\|...oj...RzP....T\|

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2344
Entropy (8bit):	7.888096611560991
Encrypted:	false
SSDEEP:	48:8x+hZ8JpDXSGnD6nLrCld5ykrVC24DO9n27sXnWXN:8x4ZM5XD+XKyIVCHORjncN
MD5:	28F9F8699A2A5803626325B037E733F7
SHA1:	44780DA5EACB4810CA455DCC8051227830F83B78
SHA-256:	7333279399C9CCB3D5493878F552A8EE591B759AE366E62ABD9BBF6473EC6FFF
SHA-512:	6D6ED96ECE7CEF65AA44B91BE8A038065108DC7EB654671D8F510BB60E44BAA5C9884353DA7D797FEB0D98D6F16D9CD46D467C9F7F2897AA7705A7A6E5BAFB49
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232037/integrationsDownloadCardGraphicMobile.png
Preview:	RIFF ...WEBPVP8L..../..%...F.."...I{.....v....nk.V...K..^.U...dn3L..@....$^....Xv....D..."...D$'..\|........0....:.......$.'...8....G.?..?\|....a...\|...bt..X....NA8&B1......^.'...j.A.L^cX....q....g.....8......Z....B.?....G6..d.t..?CDL.;.hK...V..<.}..s.O.p....olWe..A...K.$;n.}.<..0I;.t.......M.s0....._....A..Y..E.......kp)n......e?.\|7..U..\.k..W6..Cr..{`.W.%..~....?._......Rpo....]....&.7E.)8....d.].D..b........JKX.]...\n.R..7wP8O..../.....)..,dn..b.~>.]`>.u..D....s..(..B./."A...BC.`T...[..$0...\.$..jTS+.Y..6.(......r......)J.h...V....B:_.....N.T.....t~.....ES..3.......[.pM.....3.....Q...C.W.....2}.;J....Gg...)z...K..s..C.......>...e.]d...Ky{b.... ....[.?...1.(..K...q?n..'bp...W}.#.....0%.t.6..^..~.Q.^.6A.^.....[..P.y=.i..HS:?9...p...1.....>..@&.....>JA3...)WJt#\|.".6....=....`/q...jD.z'...S..../.2....^..4..<....v8.y5.1S.m^..........Q.9n.Sr..~;^#}.....w...+...:..E.PM....0.!..8..F}>...p....%S...#...]lv.GL..../L.@Q.K... B.4..jB.~.....5.N<...HQ

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1404
Entropy (8bit):	4.114328576097192
Encrypted:	false
SSDEEP:	24:t414ffo3Q0QIvvdznG0UezpigqybgrKrPO20hLMXlr9NkOf/qd0mdz9w/zAI:CH3Q0dvRG0zvBMOr10mx9m8vUAb
MD5:	ABA10B640F15BB01B8E5F0B804EEFC7F
SHA1:	65D1EDB21B0F31D4CCB9703EB05132A0E42D093D
SHA-256:	6A21FCEDE3E9D5593CF90C894BC059A94BBAE8D5D22ED0AC5511A1327F276881
SHA-512:	FDC916824C065944D02B7956BE310F01B9A56562BBB1510C345EDC925EA6CE478D235B5348AD140028CFA4F483BF1E947533CB83176A9F44DC13353A938329DF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12.322-2.125 4.688-6.875 2.062-6.875 6.771v10.719c0 1.833.18 3.595 2.758 3.885C8.195 34.219 7.633 36 11.238 36h18.044a3.337 3.337 0 0 0 3.333-3.334c0-.762-.267-1.456-.698-2.018 1.02-.571 1.72-1.649 1.72-2.899 0-.76-.266-1.454-.696-2.015 1.023-.57 1.725-1.649 1.725-2.901 0-.909-.368-1.733-.961-2.336a3.311 3.311 0 0 0 1.251-2.581z"/><path fill="#EE9547" d="M23.02 21.249h8.604c1.17 0 2.268-.626 2.866-1.633a.876.876 0 0 0-1.506-.892 1.588 1.588 0 0 1-1.361.775h-8.81c-.873 0-1.583-.71-1.583-1.583s.71-1.583 1.583-1.583H28.7a.875.875 0 0 0 0-1.75h-5.888a3.337 3.337 0 0 0-3.333 3.333c0 1.025.475 1.932 1.205 2.544a3.32 3.32 0 0 0-.998 2.373c0 1.028.478 1.938 1.212 2.549a3.318 3.318 0 0 0 .419 5.08 3.305 3.305 0 0 0-.852 2.204 3.337 3.337 0 0 0 3.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	1711
Entropy (8bit):	5.4815876628151
Encrypted:	false
SSDEEP:	48:AOAh0AyD7yaVGbsCT+ZPFTRdxWuwcHjxVcGpXmIVyO8:/J2+7LxJdjpR0
MD5:	182627D1D72635EF04C78D6CE52BD3B4
SHA1:	4385ACB3AD104CA062BC9F538E0D39423B4DC0AE
SHA-256:	14AD12BBC98CAB8CE10AEB2CC30828333E6BCB0469DD9F639E124CCB670F0FBA
SHA-512:	FD21FDCE11041453536636B9D4AA2CEC3AE2307831B5655B5C51703C1DE26F3F114E67FFFE2DF8C7B55DCF7E2EAA0C147B7D9AF585282AC96894E23D5E485601
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/94b8e45285102a32.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[8771],{../***/ 521481:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var t=__c.t;__c.Dl=function(a,b){if(!b)return a;if(b instanceof Map)for(const [c,d]of b)__c.Cl(a,c,d);else for(const c in b)__c.Cl(a,c,b[c]);return a};__c.Fl=function(a){t(0<a.length);t(a.every(b=>0>b.indexOf("?")));return __c.Dl(new __c.El(["",...a.map(encodeURIComponent)].join("/")))};.__c.Cl=function(a,b,c){t(0<b.length);t(!a.params.has(b));if(null!=c)if(Array.isArray(c)){c=c.filter(__c.ib);if(0===c.length)return a;t(c.every(d=>"number"===typeof d\|\|"string"===typeof d));a.params.set(b,c)}else if("boolean"===typeof c)a.params.set(b,c\|\|String(c));else if("number"===typeof c\|\|"string"===typeof c)a.params.set(b,String(c));else throw Error(`inv

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4237
Entropy (8bit):	4.846879757794447
Encrypted:	false
SSDEEP:	96:hd5ln2/5P5OJ+qKQgSEzbiJU4P7RFHailLvSePrt:h7l2BxO+qmSEyJU4ll1lL6w
MD5:	12487A1E0770D29351BD4CE4F87EC8FE
SHA1:	129A54E917357ADAF95CDD2F4B36BB47F49FEAF6
SHA-256:	E97D7562158117DCD1E1BA6E52145602026CDF120D5A535E3D7390FD5EB2AE9E
SHA-512:	2A920B9405301FD2726BD6C84CB7351C9F917A2A5EC56AA3EB123BC0EE41F0A7BA60739231417113A06E67CC5D5CEEDE1C753B6BA3C0A269A2A7EB65809E481F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="80" height="30" viewBox="0 0 80 30"><defs><radialGradient id="_2002046508__a" cx="0" cy="0" r="1" gradientTransform="matrix(16.80002 -17.28 11.48403 11.16504 40.96 29)" gradientUnits="userSpaceOnUse"><stop stop-color="#6420FF"/><stop offset="1" stop-color="#6420FF" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__b" cx="0" cy="0" r="1" gradientTransform="matrix(46.71996 4.16 -3.31561 37.23688 1.92 17.64)" gradientUnits="userSpaceOnUse"><stop offset=".25" stop-color="#00C4CC"/><stop offset="1" stop-color="#00C4CC" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__c" cx="0" cy="0" r="1" gradientTransform="rotate(-38.85 54.22 -35.3) scale(30.226 20.6676)" gradientUnits="userSpaceOnUse"><stop stop-color="#6420FF"/><stop offset="1" stop-color="#6420FF" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__d" cx="0" cy="0" r="1" gradientTransform="matrix(31.32001 -15.36 10.50269 21.41566 2.28 26

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	395587
Entropy (8bit):	5.344278657273438
Encrypted:	false
SSDEEP:	6144:Z+clG29gnUnv5M++1oKzBD2yncUq+nP2cqMWY730PHVhul:Ac/3IoKzBzncu+cHoPHVhul
MD5:	5B7FBCA916E6990D420E22368AA02E61
SHA1:	2B0A982470F2FB62CD3C44D6B3A9E648FADE5BDE
SHA-256:	46C636D7A810FCE2538CFE73C8B66797E0AEF3CA8F8B431A8E9C04F6CE344054
SHA-512:	DA903028DDED3DEB716EC53D9843755EA8BFFF3860AA8191BF0B8656DFD90269ED11965B1A7DD877A3B4BA56AEBB490E615851394E41EF1EDC2C782BE95AC7F2
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/40468dbe50c37871.vendor.js
Preview:	/! For license information please see 40468dbe50c37871.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{95957:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:s;return(t&&t.strategy?t.strategy:l)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"==typeof o\|\|"boolean"==typeof o?r:n(r),a=t.get(i);return void 0===a&&(a=e.call(this,r),t.set(i,a)),a}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return void 0===i&&(i=e.apply(this,r),t.set(o,i)),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function l(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{memoize:()=>r,strategies:()=>f});var s=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	108588
Entropy (8bit):	5.715621288033003
Encrypted:	false
SSDEEP:	768:GU8HA8lXSLvMrCkeBvqdkappqBE8ZP0/F4nd/lcN2AJWfHB6PpL/TzVWg0ZfMD4O:S4zkoqdkaun0yd/l7/HMztS1D6g17a9
MD5:	39414CB608B501694C882E2F670146C8
SHA1:	04DF411643E4B4687D388C8C0A4255B06197FFF4
SHA-256:	8DD5ED2262A342F180D59A1F976FE40350C366021269706D86D59AEFFF9ED794
SHA-512:	1F0BEFC62D432F22B0804F5942B7C16BB3F8F62F3CDE0D5B8B1E9CC4E79A8578FBBC23D8332C63C93E37879E0DCDF45A428413E089EDF4CCEAAB7CA70AF25172
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/45ec376bed9a19fc.ltr.css
Preview:	.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:rgba(53,71,90,.2);--on21aw:rgba(57,76,96,.15);--FNUQ4g:rgba(53,71,90,.2);--6Rd7UQ:rgba(13,18,22,0);--nfu_og:#0d1216;--ux3doQ:rgba(36,49,61,.4);--sz5W9A:rgba(13,18,22,0);--8ZR-UA:rgba(64,87,109,.07);--H8nEqw:rgba(57,76,96,.15);--zuehrg:rgba(13,18,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7);--voBvjA:rgba(13,18,22,.86);--VGxehA:rgba(17,23,29,.6);--QErhlg:#fff;--6kDNlA:hsla(0,0%,100%,.7);--pyoCYg:rgba(57,76,96,.15);--sXgitQ:r

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	12533
Entropy (8bit):	7.948545799562144
Encrypted:	false
SSDEEP:	384:/OOOOOOOOOOOgJ1A9Wk7y2TQYDtBdnF/GGcyU1yd1y2:IjzJL5P
MD5:	C12597BC65B3B12D1C5016E618F78D8A
SHA1:	0E35149BB6767636124067A14A4D0F54C689A19D
SHA-256:	229C8F39460BAFA2B1034A15F41C80CE7F905A07283A96A70CB7EDE7911CFEDD
SHA-512:	CF2A4DC0AF5B5492A816E708391F0B695D007C71EBE156D00989843DB6BA3E83A7D2CAB2D73192B3706738989344E957AE0DD9720CAAC4D07709E84508636E1E
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........6...................................................................Qw.2I.$D..DI.$D..DI.$D..DI.$D..DQE+U.T.P...PUAU.T.PUAU.T.P.DK."H."$.."H."$.."H."$.."H."".........T.....Q.....P."H..&...&.......h...P."H..n+.Y..d.dcL.cL.cL.cL.cL.cL.cL.cL.cL.cL.cL.cL.cL.cL.c2..]..7..3....-Un.;....U.....}G.K....).1....kfX.a~<.F.Y...Ly...K3.........w...z.......F1...c..[[.....eZ..w.....8......Q....F.s...../F\;t.Iq-.....F.~E......}..c.B6...p...%n...[..9...\....j1..[..e.n.c&%.....r3a[..L.n.)24.H..;.(.=.....z.ik...{~.+toFr>..ry...../.:..zkW...'.9.s..w...z..G...._....7?.\........f..@.i.36..~h...:%.....I....".}....z.j.x..^.....n...;.<\|....wOs.O......Wm....m..)..}R#....q<.k..&B.b..b..g..g.d`....._E..L.....w.9.z..z....r..ww#.<..-#6..]--......U}.,.G.;+........;.d..+.X-.3c....m....g..K^o..Z.9.k...)FX.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1113)
Category:	dropped
Size (bytes):	3197
Entropy (8bit):	5.491893575688531
Encrypted:	false
SSDEEP:	48:jukTQp8QLRvaNj93eSVAG9/CCa8bE5YU8G9UCa7E5YU8G9ZLa8buV4YU8G9UCa7n:ykTQp8ipgRuEg8bYYJ7YY18bjYJ7jYg5
MD5:	11F6CB3EEC707F2C421BC16F369F63A6
SHA1:	02CEDE18FE9A73573CCE8A7F9C8C9FA28D410342
SHA-256:	169FAE9CE6C2DC48F8CFE3574CD600C0C0A98AFB40BCAD7131026966A91B0A1D
SHA-512:	5C9CAD642F0D7182391C36CF691722409CCE822B9E1CA0C187A50DC0F678F7ECE37BCE044FB23468C11129BB2C4CF6141451E136F7FC33EA9C7A092B1FAF213C
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1848490936&fst=1711570826944&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CC

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 684, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	236198
Entropy (8bit):	7.992506458973602
Encrypted:	true
SSDEEP:	3072:6cFVtIV7/UbJAwSGuXjga2Pvu6QFlT4wEPjAWkljNj4Gd1Zw2K779vdU/rp18qUc:6cFVt1JZSGQjxchQRWjAdJVPZkhsPU+p
MD5:	BF335FB11417EFEC74606BEFD718A6D2
SHA1:	7C73F1799870FE8987F8D26C042DA81F665B4B46
SHA-256:	62DA973101A9B664A82B254A428A2A7E49FDE8BAB4D84B8A38F6A48DD23481B0
SHA-512:	C823E891ED00D4533833E648B71BF9BD084875F1E8B3599A3C74208510291FAE69ED2DA81CDA68DE2B7736BFDF893208F756DC67B5043D5FAEBD57ED55CE50B8
Malicious:	false
Reputation:	low
URL:	https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png
Preview:	.PNG........IHDR...............RF....pHYs...%...%.IR$.....sRGB.........gAMA......a....;IDATx...`.....]1.d[..b.....4i.....1m..S../7m.m..I9..C..I..2H..V.0.33+.e.Q.}.......hw.}.9..@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570848773&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	5.131678397178603
Encrypted:	false
SSDEEP:	3:8XtGKEUuLAFGtGSv7O/Ypf7W3v93DOLy:8XtG5U0LTbM3vRDV
MD5:	42AC4039A15B1EFFACAAEA617FFF2632
SHA1:	D361A01680351285550CC2F77A353E8C369788A1
SHA-256:	DFA27A89B8B54C284AF7EF90B85E65331A79D4D1FDCB543D0F68C8340125E49F
SHA-512:	54A84756EAC00C7F10D07D4333BADE3EB8405B282CBAF68C56ECE8CBFB4FB12FFC877FE814D5D0E284791C7F0291FBF4003713068DCF746E1854C4ECFFACAAEB
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e6d555235c8c61ec.ltr.css
Preview:	._6X8ASw{color:#bd081c}.eB1ycw{color:#1da1f2}./# sourceMappingURL=sourcemaps/e6d555235c8c61ec.ltr.css.map/

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (637)
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	4.902771703371101
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4zIy4bMx4TntV4gRm4oKwQKV4Xr4rU4vKRXo4GTV4h:yrdmcXd6NOH4My4bMx4RV4gRm4oHV4XJ
MD5:	8DBB550524F91BE15167F52B0654BD47
SHA1:	1DB4C55E81CC5C0A85657BEB5AEB678CB7F00708
SHA-256:	B19A985101FF097D00F828B80A08B77F150CDFD53A291A4F90C058EF135AD339
SHA-512:	45E566B68276B078C7F490D71120BB9DBD24AEE365FC8B3959EFA278133008C78CB22968B9159D15AC83026A0FDEFBF064BF12DE3A9280903EB95CE2EF5D914F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/970c2c838f4208fc.en.js
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1210":{"js":["de63272cc4871b8e.strings.js"],"css":[]},"3172":{"js":["4f5ff3e587f89639.strings.js"],"css":[]},"3201":{"js":["d60e5e68c6b0a03b.strings.js"],"css":[]},"4054":{"js":["530d63ef4b14a6ad.strings.js"],"css":[]},"6395":{"js":["c558427d7fcf451b.strings.js"],"css":[]},"6764":{"js":["688b591acbc2d2de.strings.js"],"css":[]},"7897":{"js":["98c7c8a2913b3249.strings.js"],"css":[]},"9124":{"js":["f74cdcbcf8fd19ea.strings.js"],"css":[]},"9747":{"js":["6c3806048627416b.strings.js"],"css":[]}});

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=163421805
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.99543628597762
Encrypted:	true
SSDEEP:	24576:bkzuX3puyGCFv0/lySXWa9oYUHWx3EZ5yiAXDnqM1GzBmyqc4:IzIHy59dU0EZY5hT
MD5:	98172D34EF66B4A52D094D0B920B6CC6
SHA1:	72E9B8386ED82834F22412382E90B8F3090C85D5
SHA-256:	38993550C2DF721B0B3DA31D8FB7B533A933B01B304F215149EC1297ACF9F1DF
SHA-512:	F6BA5C52B605076FABE886006052057EA002EE940C6C37D6803748BF37D7108E04E1163D85F371846CAB9DF6FB7A56977E10DE5DFD5DE641A340E9F4DE9F623C
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4:2f73406e468869:3
Preview:	g.{.(B.Q.,..6..B..N...(.m.T.1%....B....>....+n{...`Z..=.iEM$*.!'.i..N!...{.8-M.7....S.g^.8gb..1.p"....O......L6.._..e.^h.....@.....,4U..}..~~t..xN..K.)/.b.Hv$...:...2...2.r..X$....X.\..9b&....)@d.7..:.G,D...;..}.YcV...H...W.dI.-......s.n}...+...:^F.B...........=.nQ.....B.tmFH..%....-7..U.i8.5...[CAe..C'.-.5..+2...>>s..}..RiD.eL&N\=W.a..............t.....+.<O.`:.........G...I.l/;....q.k...).....6....q...p.....z C.y.dZ{.a..}..d.@M.Y...bF.......h.\|;oZ...mb.I../B.......fhkL;.....{....6s...... =...).......7...:T.i.8.yo./d..P.6..'.....Q.bC..U.<.8.B........P.tB..E. f....qb.DIG.M..s..t...3...).cp&....`...lD..H...G]...].T.(U..<.L.5Q...\|..."R.Tb. .c.{.of..@`.l...t...6...j..8.#.%.......W......Tx.Ln....XY..Z..._.~.@.)..3...~..b....[........h....\|...+3..$...+F..'.?....9..L.A....-.7..Rq...8.p..l......v-.#.....FT...<~g.".....Sr.....`?.nS.....\.G7Z.@@....3vh.7.9......I......r[.8.LvT.I..D1z?q.j..GO..k^........s..{Sf.9...........i.p.bk...k4...........G'x...O..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65311)
Category:	downloaded
Size (bytes):	419791
Entropy (8bit):	5.414239522842997
Encrypted:	false
SSDEEP:	12288:7kmwnouJA7UMCK3imf9Wdp5ZFyTvcGrYzqZh+TscGLruDmg2/ho12:7snouJAr73FVWdp5ZFyTvcGrYzqZh+TA
MD5:	0CAEFF77FB92538B035E89B918E04C62
SHA1:	0E2D924B878216F75BF1BF627E4AA7DEA78BD4F4
SHA-256:	72B1477C5CAC25AFD6215F79A9033D51FC3A9FAC741C48772253779B383BFB0C
SHA-512:	40F2E8D7365F956131E869673640CC34133F8B505A18A4A148A285182793ABA3F6BCC4D40ECFCAF74B88A03CFAE5A6EDCBA1F0259B9AC6CB040162A1D89C38E2
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/665f7ead97e4a356.vendor.js
Preview:	/! For license information please see 665f7ead97e4a356.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{710665:(e,t,n)=>{!function(){var e="undefined"!=typeof window?window:n.g,r={};for(var i in function(e,t,n){var r;function a(e){var t=0;return function(){return t<e.length?{done:!1,value:e[t++]}:{done:!0}}}var o="function"==typeof Object.defineProperties?Object.defineProperty:function(e,t,n){return e==Array.prototype\|\|e==Object.prototype\|\|(e[t]=n.value),e};var s=function(n){n=["object"==typeof globalThis&&globalThis,n,"object"==typeof e&&e,"object"==typeof self&&self,"object"==typeof t&&t];for(var r=0;r<n.length;++r){var i=n[r];if(i&&i.Math==Math)return i}throw Error("Cannot find global object")}(this);function u(e,t){if(t)e:{var n=s;e=e.split(".");for(var r=0;r<e.length-1;r++){var i=e[r];if(!(i in n))break e;n=n[i]}(t=t(r=n[e=e[e.length-1]]))!=r&&null!=t&&o(n,e,{configurable:!0,writable:!0,value:t})}}function c(e){return(e={next:e}

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1925)
Category:	downloaded
Size (bytes):	4179
Entropy (8bit):	5.259561207256841
Encrypted:	false
SSDEEP:	96:6ovlrrjha5ZhKPlCnPg7grMny1DB/mbD5hav/77oBMzyAdyEqcP:PvlfQBSyDBkIn77yMzhdrq2
MD5:	3EA8EFFFCF90628D9452DE978377A91F
SHA1:	A90A39A030D372DC27EAF2DA09F26E8F0F0802C9
SHA-256:	2668E4CFE3927D96AE52746A6FF328CCDF15A038DBFC0239324A8AB1E960DC7E
SHA-512:	3CF929C12148F47FD739C08575A113DD89D82670A10A0AFFC37426477806CAD51747C0316F1284E7FF6ACE69F7590EE01192C29F8C9354159470AE059749C4F9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/fa2ef1a44958c025.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6456],{../***/ 716038:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);__web_req__(237221);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var bdc=async function(a){for(const b of $cc)try{const c=await caches.open(b),d=await c.keys();await Promise.all(d.map(e=>c.delete(e)))}catch(c){null===a\|\|void 0===a?void 0:a.Oa(c)}for(const b of adc)try{await (await __c.ht.open(b,()=>{throw Error("Serializer not implemented");},()=>{throw Error("Deserializer not implemented");})).clear()}catch(c){null===a\|\|void 0===a?void 0:a.Oa(c)}},cdc=function(a){return`${a.userId}-${a.Ie}-${a.q4}`},ddc=async function(a,b){const c=b.userId,d=b.Ie;b=b.Il;await (await Q8(a)).put(b,.new R8({userId:c,Ie:d}))},edc=async function(a,b){const c=b.userId,d=b.Ie,e=b.serialize

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	71238
Entropy (8bit):	7.994867149946472
Encrypted:	true
SSDEEP:	1536:qHS2D2d1dk9tRPBvcjGFV52Kd3v399FvDdFpy:q1D2HdkeiDEKd3vFpTy
MD5:	3BA665D1385FADEB829E4B6C75D36447
SHA1:	088B64A5D0443A2610360CDECBCEEFEB650C77FB
SHA-256:	D37D349B30B38E714C5F4F03DA940C3505DB27E1CD5E693211336F620A04ADB4
SHA-512:	94AE5BCBE670FE8409BB3BF75ECC14E4CCA2293B1174C5150BA2013413D5B31DCC86413CAF7472F1B9EEAA4819EBD12608F40CE6E66A6D2AE80B098EE5D03F70
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232032/Fordesigners-16x9.f02b27fe.png
Preview:	RIFF>...WEBPVP8L1.../W.T.....M.af..2.2. ..&==Y......!....=k./.t.@....7H...ap.uw.#.Et.uM.N...I~.....I.....8x......h.8......,.y . (..."....,.sz"...I.....]\..Z.by..KF..G..BO..KtV.. ..6.mj.......8`............C....0.,.......%.T..@..m.tRpr\.t..."...G...BZ....&....J..=.GF.k.....0X....4 ..@i&.d...$.hM.Hq.UJ.l. .;7.........)f...e.!H..9.+K.Q..o..1.Z../...$..81DA.LPD......T..Q@c%.0...2.....@9.Yd...?..i..P0.?@h..p.1..H-Z:U...V6........\|.L...{.,........_.v.6....@;.....]......:.<a...37..R......$...t.:....`L..5.....x..y...5./m..5.._...).x.z......3..o..0..d..y.4<..u..$._..B.\|....H..'\|.......K....s0@}.zC..j..../k...dZ.......;.o...._"....nv]o...w.a.6.....O..P...h.0PTU.-d[...._'k{f.).:...i.\k...+..'x.6.....7OZ... .....-.P....?...I.(b.h<.o..,d........=s..BBB.....R2-.P....,.5y,.....Q..}.B.a...z.>........m+l#..............\|i....l[..o..Jy.iS....`1..K......U....S....%..r......F.@.:...Ae."....X...m..B..F.....K..m..V.z....`-..9.,...g.d[T. YH

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	10421
Entropy (8bit):	7.950721751694806
Encrypted:	false
SSDEEP:	192:68NNqT4zW9pJYlkLo7ErtO8Wu839qZRw1h3NY4DRKqB3Uh9/DjXkAxHz:6imLWy08fQ3vJ6DXXk6T
MD5:	27A3D43135CD287D8DC37C318872CCF7
SHA1:	32D96720866777B09D2B332187EDDFFE85605402
SHA-256:	560DA91239DAF814DEB2B304AAD1B2AEE0022324C60564C165A0B4883F1FD397
SHA-512:	18B337C3F905D8590E807B472C2BB7C9E4453B1F229D4123819290A419E591DE17BDE709FAF9ECC6C3EC0BFA9CABD1C34851C8B1E28C73BB58A9E6596B1B5D79
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........5....................................................................M."$.."H."$.."H."$.."H."$.."H...rVH..h..RH."$...&..4&...$...&........DI.$D..DI.$D..DI.$D..DI.$E...TjUAU.k..@IATD..U.T.%(IATjUAU.T.[d\[....ql\[....ql\[....ql\[....qlE....&.)I.J......V..T../,.....U..R....-.[.u.&...,.F..y.z...F.=.'G.zw..w[f..{NV........7W'p..>....6..-.....Dmx..+......\|.......5).i,$,...Y.[...M\|..@.....&...ss.......w.h.t^..{7'..l..Zy..`.......m.F..<......l]9Z.....?Xj>cg..\|..f.]Oe.4........X...K..~.......6%.s........-..\......h.........n.>.y.......Dn...H,.....f2.~...r=....\......W...........^..}.i.....=^..c../....,..%.<....cc.y.-.g.=>.........1o...zC....+....?....F.~.q.y.v.._*+....9.n......i......@........s4.;?#...!..?.9..Af(.......l...MlGw...-..^...p.0....\.t..]Ie<S..>x...y..s.1.............

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15403)
Category:	downloaded
Size (bytes):	15828
Entropy (8bit):	5.20534367870018
Encrypted:	false
SSDEEP:	384:ijBuYSu/VGHK4OKKXEoLIPaC4vPLDMF6EhLqujhCr1621NtPts:icu/VGHXoL02BhHPq
MD5:	25CEE2CEAFE17B285670EF10477C6DB4
SHA1:	CD33650D6F68CD3506B348C3E9750FF4E8B0F90B
SHA-256:	8EEFFF2A516C1125652FFEE018A7871DB2BAD3AD878DD3AFC9F00C965CDB10BE
SHA-512:	BF426D3492203276A7B5B3BD3F8D3E5EC643974974A949F4E890278BB5AB266DBDB7AC564F3E43ECA0622DBCDCF50F3034E64A31611F2802668E82F95630819F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b4b909f3e50309b8.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"eq4PgA\":\"Didn.t get the code? Resend code\",\"iGADsg\":\"Skip to search\",\"PFOUew\":\"Continue\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"08inLQ\":\"Page {0}\",\"nGBlYg\":\"Change email\",\"m0Q+yA\":\"You.re invited to edit a design created by {0}, start designing now\",\"iTruLw\":\"Strong\",\"Gm1Hxg\":\"Too weak\",\"f3MnZw\":\"Sign up with single sign-on (SSO)\",\"tkkB/A\":\"Names and surnames are easily guessed.\",\"XS/GBQ\":\"Untitled\",\"LE4MeQ\":\"Esc\",\"q4OW6A\":\"Your birthday can.t be in the future\",\"eKXiSQ\":\"Password\",\"/fLNHg\":\"When you set up two factor authentication we gave you some backup codes. You can use one of them here to regain access to your account.\",\"yAXvfg\":\"Create your own design with Canva\",\"BXjIaA\":\"Perform .. reaction\",\"YNDlnw\":\"Edit presentation\",\"TAvGgg\":\"Skip to main content\",\"pEsbdA\":\"Create your account\",\"M50kBA\":\"Previous\",\"wcabYw\":\"You can

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37648)
Category:	downloaded
Size (bytes):	37792
Entropy (8bit):	5.262644059007985
Encrypted:	false
SSDEEP:	768:sw6BArT28tQN/LRnc8tHN7fo7e175UAoa2E9Vt:rrT28tQN/LRnc8tHN5EZ8V
MD5:	0DFB0358AF567A734A865A948EE2F3E3
SHA1:	39D131FC413E411936951E4F17330F623E1DC814
SHA-256:	58113B81E340E160DE5FD887687764873F396D7BCB52277D04B670A2ECB54D84
SHA-512:	72EA8924787DF22C56992675D16F4FF213496A1EDF7DE25AF64EB6215AC8FC35A06CF36E6CFE23630996D6913A4923F7CFB2C26854F6958D6B224F47708B3F5C
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/75ef27a5584bfafa.vendor.js
Preview:	/! For license information please see 75ef27a5584bfafa.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{966337:()=>{!function(e,t){"use strict";if("IntersectionObserver"in e&&"IntersectionObserverEntry"in e&&"intersectionRatio"in e.IntersectionObserverEntry.prototype)"isIntersecting"in e.IntersectionObserverEntry.prototype\|\|Object.defineProperty(e.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var n=[];r.prototype.THROTTLE_TIMEOUT=100,r.prototype.POLL_INTERVAL=null,r.prototype.USE_MUTATION_OBSERVER=!0,r.prototype.observe=function(e){if(!this._observationTargets.some((function(t){return t.element==e}))){if(!e\|\|1!=e.nodeType)throw new Error("target must be an Element");this._registerInstance(),this._observationTargets.push({element:e,entry:null}),this._monitorIntersections(),this._checkForIntersections()}},r.prototype.unobserve=function(e){this._observationTargets=this._obse

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	121056
Entropy (8bit):	5.757868481298998
Encrypted:	false
SSDEEP:	768:zIdnfOoJO3ZnJo62wbnA2CkEAnUNTfa73fUBDElMl6W05KPBNFtGFl7Wl9GR2UPt:Wid7IkEAET2UBDESl6b5KPPFt6tWiRl1
MD5:	4A7BB9E17C3BB0BFA008EAB208BCA6F3
SHA1:	07BEB13732AC16CBDC74D79996C9C1CE19C4B94E
SHA-256:	FC43AE77775986234CE7F14685D2CB5185FFE5AEB522F9D7631B86EA96EEAF4C
SHA-512:	F94CE8C01B4AD2D2DC6DE46CF45E35399590AC3A524DD5ADFD8633213B2E862C64E1CD3370F8C20D82F1DE9B621024129FF299EBFFD206CE55371AB236FB142C
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/pages/_app.54198e75.css
Preview:	.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--6899sQ:rgba(64,87,109,.07);--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--sz5W9A:rgba(13,18,22,0);--8ZR-UA:rgba(64,87,109,.07);--H8nEqw:rgba(57,76,96,.15);--zuehrg:rgba(13,18,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--6kDNlA:hsla(0,0%,100%,.7);--pyoCYg:rgba(57,76,96,.15);--sXgitQ:rgba(43,59,74,.3);--XGNWMw:rgba(57,76,96,.15);--mgNb9w:rgba(57,76,96,.15);--COXgsg:rgba(64,87,109,.07);--Do4LcA:#0d1216;--BbP6vg:hsla(0,0%,100%,.5);--ykfPVA:rgba(64,87,109,.07);--1GR_Og:#c1e7c2;--7Jsj3A:#0d1216;--Rd25lA:rgba(36,49,61,.4);--YOy1kQ:rgba(64,87,109,.07);--axckVg:#c2deff;--ypAvbQ:#0d1216;--yuDW1w:rgba(36,49,61,.4);--zbbe8w:rgba(64,87,109,.07);--wpHozg:#ffd7a8;--a01w0A:#0d1216;--vmcmsg:rgba(36,49,61,.4);--rxOvlQ:rgba(64,87,109,.07);--k8LaaQ:#ffd1d3;--XRo-NQ:#0d1216;--pEA5jw:rgba(36,49,61,.4);--gUe

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (50708)
Category:	downloaded
Size (bytes):	51311
Entropy (8bit):	5.183179807053114
Encrypted:	false
SSDEEP:	1536:/xKe3i0kmTWeCHfxNQU2HnCw6DQX3yqA7eD9v4xrd:/xH3DTWeIJNoHCw6DQX3yqA709QxZ
MD5:	B325A99D878484A9568010A960225980
SHA1:	305889DD9DA794F68B4BB39A7F6E030A780E615B
SHA-256:	A53C306A4F641902FCC84E49C00F58405E17999BC8AFCE8E7ECB0FC0673B009E
SHA-512:	1090F8496AD0B0426022D4C61415DC4D05DA06C50A33B82E05DA2D3B1E4527916EFCCF1E7F50AAD7B658C0F6519FD819EDD0829C24FC413FBE6096387586E9CB
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/f57bad7efd13d8bb.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"EXQ6nA\":\"Export designs as PDF, JPG, PNG\",\"huCiTw\":\"Create template\",\"DLugxA\":\"Monthly pricing for the first {0} people\",\"JT6SAA\":\"Link Sharing\",\"JFpJ1A\":\"Calculate for your team\",\"nGBlYg\":\"Change email\",\"wIf7Uw\":\"Continue with other number or email\",\"yi+ahA\":\"Main menu\",\"i2a0XA\":\"I consent to retargeted advertising on third-party sites and apps\",\"nKOdvg\":\"Is {0} safe to use?\",\"kBWbcA\":\"Real-time Collaboration (incl. external & selective team sharing)\",\"UWeoyQ\":\"Continue to Canva\",\"o6m66w\":\"100,000+\",\"vCA1+w\":\"Get in touch to learn more\",\"wI4pZQ\":\"Easy drag-and-drop editor\",\"BTFZOw\":\"Contact sales\",\"iXw1Wg\":\"Create\",\"Kwk+OQ\":\"A stylised picture of a school crest with a pencil surrounded by laurel leaves\",\"PTuazw\":\"Canva for Business\",\"UN6oGQ\":\"Dulwich College\",\"Ys3NqQ\":\"Last time you used Apple to log in.\",\"LE4MeQ\":\"Esc\",\"y5WbVA\":\"Unlimited\",\"BmtE9A

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15390)
Category:	downloaded
Size (bytes):	34069
Entropy (8bit):	5.729341713060375
Encrypted:	false
SSDEEP:	768:pFxO4bm/WNGCO+KxStrxrCRUZ0yiFn/ixejfbPkzDjWBPgloZ:zBCWN0ILDi51LbmyZ
MD5:	6679C59DADBFF7F98957AF2D5562A8A1
SHA1:	A8D46AEC0D2AED1E999A305C2E31DF57ECAD6890
SHA-256:	8F552CF11C0F7990C236AC0D72C03B97052E9CD589B47BC5E9563718CB03571C
SHA-512:	A360ADC4C7145841571FFA39C0C1856C90D09A2E0EEE669E333B426B243674F875AB3C6FB5BD38DBD8141141B8BD1941D9624D55B246F0A1641CA78766E6EEA4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1027e9acc64d126e.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9538],{../***/ 206405:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(94958);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var xj=__c.xj;var kV;var QG=__c.QG;var SU;var h=__c.h;var I=__c.I;var KU;var GU;var EU,Mfa,Pfa,Qfa,TU,Jfa,vfa,Nfa,XU,YU;__c.DU=function(a,b,c,d,e=!1){return a.Pw({store:b,ih:c,email:d,kx:e,Wa:{name:"oauth_authentication",type:__c.gA[c]}})};EU=function(a){const b={};for(const c of Object.keys(a)){const d=a[c];b[c]=d instanceof Object?JSON.stringify(d):d}console.table(b);console.log("View non-truncated properties:");console.dir(a)};.__c.NU=function({bb:a,D:b,dj:c,uO:d,tO:e,vO:f,sO:g,xO:k,PF:l,QF:m,Ve:q,qJ:r,Pa:t,ZG:w}){const x=ufa(a);a=({mode:z,Bd:A,onClick:B,$a:C})=>{const D=x.get(z);return(0,__c.FU)(({index:G,location:J,iL:

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1087)
Category:	downloaded
Size (bytes):	3865
Entropy (8bit):	5.6743956683667705
Encrypted:	false
SSDEEP:	96:ycO/ppiipgnFg8bSEYYQ7SEYYC8bDYYQ7DYY/BK8sf5:yp+ipgC8bSEfQ7SEfC8bDfQ7Df/BPsf5
MD5:	2B5018E9B450105CB16D776FBD5B20B6
SHA1:	9DB919ECA70A9AD3921B01BD518E6F62DC90AFAD
SHA-256:	FC67DF7DDD1CBEAB10AF9BCF61E4996959297123F4CDB9FE022523EDE195C737
SHA-512:	B26630E5B0D8F0EC69E0F1B3B4C3351C2AC89C341EA6AA22E0322C0E63A7D4A6A1F7BF4B5EAA49FDFF9D7BF389F394375EAB47044D7182463A7288A423FF6380
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558068&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&_et=4&tfd=5231&richsstsse
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=433384205&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&u

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105531
Entropy (8bit):	5.706625119414706
Encrypted:	false
SSDEEP:	768:GU8HA8lXSLvgB6qdkappqBE8iPpIrCkK/FEJVpHzN2GD6X/lCb7e6Zf4DdGulePe:S49qdkau8Fk2qJLsGD6X/lOdx7KjJ1Fl
MD5:	51A2C4B467124F2BE0316BE2890B1CEE
SHA1:	2CC3CE22E7024324EC70862F1C36DE6E836EF473
SHA-256:	0FA71E9FE70D3E5301D3B097A98E1D5629D8B99C064443D6B348ECBB3F1A3855
SHA-512:	630B2DAB362C99E33A4398C56F3C6900A9D9D957A23F012A91E57F177A86708D689E87ABF6A1B451A81265A80456FF717151F40AE43D47F27195A0C6A3BCBFCE
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1c6dfi.ac74f1501d78f5cf.ltr.css
Preview:	.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:rgba(53,71,90,.2);--on21aw:rgba(57,76,96,.15);--FNUQ4g:rgba(53,71,90,.2);--6Rd7UQ:rgba(13,18,22,0);--nfu_og:#0d1216;--ux3doQ:rgba(36,49,61,.4);--sz5W9A:rgba(13,18,22,0);--8ZR-UA:rgba(64,87,109,.07);--H8nEqw:rgba(57,76,96,.15);--zuehrg:rgba(13,18,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7);--voBvjA:rgba(13,18,22,.86);--VGxehA:rgba(17,23,29,.6);--QErhlg:#fff;--6kDNlA:hsla(0,0%,100%,.7);--pyoCYg:rgba(57,76,96,.15);--sXgitQ:r

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	270114
Entropy (8bit):	4.894869562246522
Encrypted:	false
SSDEEP:	3072:BtWz6pc8Nyi2sdTAaAHMJ5yPJc1UcgSp8qkLh8Cid9TiMsW1KG0aySY:bWmp9y/sdVcRY17kLh8CQ92W1KKySY
MD5:	A09F34063AE381FA73A4E8AFC6100DA0
SHA1:	11EE603536A7DE06F62EC2A534A67F8245FA25C9
SHA-256:	8FF2089F27FED3AEA872FBA47128C2F10B5CE58E511C94384B0F2804679BCDD5
SHA-512:	8BE86A5ACF59351DF31F0311DF18EDA4FCAA445B3209B2E7DD9BC87BA2F4F70C1E18E2AB467AC371BBCAB701A82F56A33D6D6753185F5B4BD8FB421C1A390AD4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e52281db47fdc3ea.runtime.js
Preview:	(()=>{"use strict";var r,e,f,t,s,c={},n={};function i(r){var e=n[r];if(void 0!==e)return e.exports;var f=n[r]={id:r,loaded:!1,exports:{}};return c[r].call(f.exports,f,f.exports,i),f.loaded=!0,f.exports}i.m=c,i.amdD=function(){throw new Error("define cannot be used indirect")},i.amdO={},r=[],i.O=(e,f,t,s)=>{if(!f){var c=1/0;for(u=0;u<r.length;u++){for(var[f,t,s]=r[u],n=!0,d=0;d<f.length;d++)if((!1&s\|\|c>=s)&&Object.keys(i.O).every((r=>i.O[r](f[d]))))f.splice(d--,1);else if(n=!1,s<c)c=s;if(n){r.splice(u--,1);var a=t();if(void 0!==a)e=a}}return e}else{s=s\|\|0;for(var u=r.length;u>0&&r[u-1][2]>s;u--)r[u]=r[u-1];r[u]=[f,t,s]}},i.n=r=>{var e=r&&r.__esModule?()=>r.default:()=>r;return i.d(e,{a:e}),e},f=Object.getPrototypeOf?r=>Object.getPrototypeOf(r):r=>r.__proto__,i.t=function(r,t){if(1&t)r=this(r);if(8&t)return r;if("object"==typeof r&&r){if(4&t&&r.__esModule)return r;if(16&t&&"function"==typeof r.then)return r}var s=Object.create(null);i.r(s);var c={};e=e\|\|[null,f({}),f([]),f(f)];for(var n=

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7013
Entropy (8bit):	7.941788773755658
Encrypted:	false
SSDEEP:	96:2nrVw8gJdmSxsCavL5CPlbi1WxBcqdICFpAf1FXYnOX7WDuPtCgE5jVPLGn:2pUJFszvNulbi1wcqdICnbONPtCgENkn
MD5:	FE4FCB2260AC933DA223F4CCDCAC839D
SHA1:	59FBBC8F32C72C899475EF8549F557811B6BACFD
SHA-256:	F7F363CA567A6790515C69A80EB5CA4F6EC6F5BC5B70D78BF8DD647274166646
SHA-512:	BAF562DD4C24BA1CF87E6D4DB1DB243F7C4AC7913334E923BB59F98915DB12C83217A12FF214222CE3271D050F36F35EB1F85528CD4AD07F1170281B77D2BF00
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/122beb6f-66f6-41d6-b594-03ce5147989e/ig_post_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D................s...#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma.................{mdat....?. .r...m2.4f../A'....?....,.$.....8<. ...m...r....}.W.d).zJj.'...h..v..5ML...X..Vr.3.+.e.{K+.....Kd.CD4.......h...<....k.....?Q..o?$.....?.....P...(..=...$8.d..k.n..PZ.%x..9..R...Hg.F.Mru&.1....iX.,~......,.m.{{W..d.b..=...#...H.......i.....6.D.H.........j..:..h.nfHQO..1..uG.z) ..~...........v(...Q$.c..Ax..j.MB.....<.....fB~.e 4.i.;.Y..K..xH..4...;.~/Z.F...)...F..P....w....q..G..H..../.I.Uw...Ov.p$)....9#F....0...G`.^..."...M....(..Q.......h(.r.0.8..0. 0..w...uO~9/...I.T).L.~V5..O.p....Tm.h..,...3.Y..X.N}..$xLV.._....m..p.F....I;6....++=..b0.Kp:...x.x..,...-.......>&R.0V....i}'.....F......".N..vUA.-.V.Xiz..r..Ol1...6>.+..;<3.\|0...?.W..0Z...i4...^.~.hz..).b.......j...y....'..j.~..!K)..*Gw.\"....b4....Y

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570862268&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3243)
Category:	downloaded
Size (bytes):	3306
Entropy (8bit):	5.643961001877736
Encrypted:	false
SSDEEP:	48:hWHE+zBuWZlIVCilBUsHk/m4mfrjB6KmNA+8LN4KFmAN7BnmU2TTI:0HT/IYLsE/lmjF6KJLaaDBm4
MD5:	0331847384E3F07B222B8684C65558DA
SHA1:	EB6EA362A27CE34B1DD21D168636A8DA0C3D6C22
SHA-256:	0B2D8052F36FDD5A82B3DB26DAC5C0A2560D64E74C40A9A463644CDAAF5C6809
SHA-512:	119AAE90EF3255C61EDCA2575777C9D1B1979E88345D8181B5EC1DC4794A99A99CEF3D604E04FCA27C994222A3944E79F2FAE414F903C794E8EA5F3EAA6F87F9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/8327c2251c0ec474.ltr.css
Preview:	.light{--4ClGCw:0px 0px 0px 1px rgba(64,87,109,.04),0px 6px 20px -4px rgba(64,87,109,.3);--SGjjzA:0px 0px 0px 1px rgba(64,87,109,.04),0px 12px 40px -8px rgba(64,87,109,.3);--7FRQGw:0px 0px 0px 1px rgba(64,87,109,.04),0px 2px 4px -1px rgba(64,87,109,.3);--1IVhPQ:0 0 0 1px rgba(64,87,109,.07),0 2px 8px rgba(57,76,96,.15);--v_jISQ:0 0 0 1px rgba(64,87,109,.07),0 2px 12px rgba(53,71,90,.2);--MPmRHA:0 0 0 1px rgba(64,87,109,.07),0 2px 18px rgba(43,59,74,.3)}.dark{--4ClGCw:0px 0px 0px 1px #3b3c3d,0px 6px 20px -4px rgba(0,0,0,.45);--SGjjzA:0px 0px 0px 1px #3b3c3d,0px 12px 40px -8px rgba(0,0,0,.45);--7FRQGw:0px 0px 0px 1px #3b3c3d,0px 2px 4px -1px rgba(0,0,0,.45);--1IVhPQ:0 0 0 1px #464747,0 2px 8px rgba(13,18,22,.15);--v_jISQ:0 0 0 1px #464747,0 2px 12px rgba(13,18,22,.2);--MPmRHA:0 0 0 1px #464747,0 2px 18px rgba(13,18,22,.25)}.cc24 .dark,.cc24 .light,.cc24.dark,.cc24.light{--1IVhPQ:var(--4ClGCw);--v_jISQ:var(--4ClGCw);--MPmRHA:var(--SGjjzA)}.Ut_ecQ{box-shadow:var(--1IVhPQ)}.TfRV3Q{box-shado

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/lib/sentry/7.16.0.min.js
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3022)
Category:	downloaded
Size (bytes):	223535
Entropy (8bit):	5.553666183201684
Encrypted:	false
SSDEEP:	6144:RTJzxw5BjmywB30TciOaax2iXua/b8aD1fNx:eaywBUpPagiXua/bTHx
MD5:	6B89B375FED5329B932CA3B3338F2245
SHA1:	338567816D4333D6BC74D149347CA9DA8CDCC2CF
SHA-256:	72888ED7F44DF6939F56EE6F41550BE981A4459B749882E16410495F3DD99D71
SHA-512:	87A723C81F9F97E5268F1EDCF043A1E0EE0D69A0BEC6C1063CE501AA880982D536F2F83DA5E77BD05151AD08F7961497862DC5C7D896477FF352930F8779DA27
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x8142400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Public Key
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.387102702409983
Encrypted:	false
SSDEEP:	24576:KSjUIKq102qVpUbQgH4MNUuFhpSbz+Pd1GEm:KSjUcZqn+PUuFiP+Fcn
MD5:	4524C9E9A883E4DAB226314BBD7B8EED
SHA1:	C9950D55090C2DD0E40FFCDBD295C812F16E033C
SHA-256:	612FAC36EB3E921D37497FC5DA1F97B684D04D7C606489DE1CD615845DFADA25
SHA-512:	20204ED1FDC668ABD84B15CABEB00A85D47756747B84D440808617DAC3B1FEEFA7AFF27A282EAB04262AFEE9C69B7504E6EE60419283D367012BA6D2781E9376
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4:2f73406e44406c:2
Preview:	.'....g.7.R..U..dZ.x..l..'.......'n..u........%.gN9N.;.{".......U..[.H.....w..wZ.p>.U....;5p..?W.......$c.v......QIN....9]..}u0...8;..u.m`...h^........$..8..qbJ.,....v..a.4M....{j..&..4_..!......5.9E...}......72...C.JU ..c.m..z..-.7&.>.......T...$."Z.....eV... ....v2........X..tu..&..@.e.hn..U...4}.+k..... j:..v.'\|xq=.)..U.y.~.Zd.9Y.k...U..8[..'..J.V=......C.5...f..~......}...@\|..&A..?.V:....A..Q./;.7Ax'9.uqr.{f%.:.(.C.4...,....HL..l.....G.Y......ai~[..p.^.9.-3..T..Yg..d..N.r%.Y.7.y..,...I0b....l........Y..$..Q.S...T._j2..2.Q...\|k..Ho..s.#..$.~...\|..z4.p.d...}.. ........K..@X..g.t...+.e.XczQ.....\|....../....kO.{a~..L.........;..{.\...9...{G...A4.U......?..@V..Y.....E..aG.^CJ........r.2.....I..2m9........H.=44..C.l.2.).....l..!......ZrF\|...;..WmZ..PS.r=..).\|...4..*t...>g....=.e....Tw....!H....#).I...[(cY..]D..M..yY`.5z.....z...b.gM.fi..E.o..^.#KW..v....Sr..F..c!....-..9......r...4Dr.lo..g..sM...$.xW9..r.........7...NTz...N.......

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (965)
Category:	downloaded
Size (bytes):	1028
Entropy (8bit):	5.206080140600607
Encrypted:	false
SSDEEP:	12:+dBpDTzivRG5C+hLeT9r7XSMnCmCR63nmKQYIflHzfJj0XXl+q8Bvh1PikMW/:iBpfzkGk+hLep6Mnb3RIfliXk72O
MD5:	1DF7C839454A392B8633005F7BD39A0A
SHA1:	D6A2C15D00F415C57158AE206EFBE009444986DB
SHA-256:	FF0D4CE6DD8CC64AC76A6BDE6BDB44CA74397C2235E6D7444CB3FF450193234F
SHA-512:	6C93E74DF823F96D2911F3F2627D7C05C9C48F243958122266C64DB727BE1821AC039599F4A30941D4839CD89D097B2821E9667E2F7A223A0136883300785315
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/8f3a0efc71d77cd0.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[1230],{699601:(t,e)=>{e.Z=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];return 2===t.length?r(t[0],t[1])\|\|null:t.slice(1).reduce((function(t,e){return r(t,e)}),t[0])\|\|null};var n=new WeakMap;function r(t,e){if(t&&e){var r=n.get(t)\|\|new WeakMap;n.set(t,r);var o=r.get(e)\|\|function(n){u(t,n),u(e,n)};return r.set(e,o),o}return t\|\|e}function u(t,e){"function"==typeof t?t(e):t.current=e}},894578:(t,e,n)=>{n.d(e,{Z:()=>u});var r=n(589611);function u(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,(0,r.Z)(t,e)}},263366:(t,e,n)=>{function r(t,e){if(null==t)return{};var n,r,u={},o=Object.keys(t);for(r=0;r<o.length;r++)n=o[r],e.indexOf(n)>=0\|\|(u[n]=t[n]);return u}n.d(e,{Z:()=>r})},589611:(t,e,n)=>{function r(t,e){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(t,e){return t.__proto__=e,t},r(t,e)}n.d(e,{Z:()=>r})}}]);.//# sourceMappingURL=sourcemaps/8f

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=so7%2F6NqDA0F3qHKvhWhgn4JMnF3Z47Y1exImYzHm1t9NO4HXt23pe6cN%2FVZmYy8gOW4NPmRv9ybS8UhNgdqVaUn%2FqXqlIGmAQyHHq0RkdSLfJ0r4200Yk9Po7mmJ2TLktwrrqOXpLzMBcwgZk0vePklUoTkKgLCEfSpsJPcXIH9xaI6HkPjChY1lb3P%2FWA%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	35018
Entropy (8bit):	5.107570047039756
Encrypted:	false
SSDEEP:	768:WgA8M9JWanzZFRFvbW+1+0p/8Oq/lU+I47M0an2B8eQLb80+S9tUg7M5NOJ1/iV6:m
MD5:	46D87B5A7661E0529B44ACA65FBDEF86
SHA1:	C1F040A022004E69949382AA79DEFE45AC4BCA01
SHA-256:	587E53033E66207407F9108A4F3AEE7827CC50A0DE5A64EC769C75FD47F90A90
SHA-512:	CF7F3C41C903E332FB58FE9354D229FD42A1CF5F63E18B740B578E80344433ECA53C5681FEA714CAD88983586246B732D5432C33D517878B04C5C7C518CCAE6E
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/_fb/s/31ed695fc889d00593852e4078080fe8.css
Preview:	@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.canva.com/_fb/0/05.ttf) format("truetype")}..@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 700; font-style: normal; src: url(https://font-public.canva.com/_fb/0/02.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/02.woff) format("woff"), url(https://font-public.canva.com/_fb/0/02.ttf) format("truetype")}..@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: italic; src: url(https://font-public.canva.com/_fb/0/04.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/04.woff) format("woff"), url(https://font-public.canva.com/_fb/0/04.ttf) format("truetype")}..@font-face {unicode-range: U+0-fff

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999324935303794
Encrypted:	true
SSDEEP:	24576:F1XqMzKeAaAOUn25eyQvRHZGcKwqLbKq6XDU+Z3:F1apBq5GRscKLbKq6TUc
MD5:	4EC1D5591CC8BE815601B9FF4BD93EF1
SHA1:	000B522B35C71EBE4C403689C77FAFE1BE64C7B8
SHA-256:	FAB333E4FFC2D07CEDBBD24C3E1D2B9E233507A8F817B0083D46511C83736313
SHA-512:	B95B57D80254B6BA8C90608B37D59ED9C68301EE174FACAFBCA734AB7965FE9719AC7601ABA9366EA725C5D3C6520FDC39508A8AF0A2DD8D40A25A7E15332267
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4:2f73406e443cfa:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free.6@.mdat...........E...H..,. .#..x264 - core 164 r3107 a8b68ebf - H.264/MPEG-4 AVC codec - Copyleft 2003-2023 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=18 lookahead_threads=3 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=30 rc=2pass mbtree=1 bitrate=1500 ratetol=1.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 cplxblur=20.0 qblur=0.5 vbv_maxrate=20000 vbv_bufsize=25000 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00....K.e...'...........9...*..i...D....%.{.Q..R..Ega.4w.N...k........@.!.G.D..y._K.E..C}.}..?.ry..r..a8.!......m\..b.eaNm...p...^TS.).:o.O.m.....'......."_..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9996721336717656
Encrypted:	true
SSDEEP:	24576:8dYqzNNJFWp4luxE7Jcp4RPAzMPwCsmPQ+NLqdt6+wm2:rqzNNWp4luAM4WzMPbLYty
MD5:	A57B48949045F43EB824A34CEA427D87
SHA1:	7E04911F12E7B3166F2B9C347ABCB31FAD3A54B9
SHA-256:	D00CAB6A81A1B4227EC29B798E6A856238D42DC98DAF7EFB0903BAB9B4E57E67
SHA-512:	70DEF6081ACE022CF313FE63AE86C19B765F9CAA5CF5E3181F4454F6C549930CE17CEB04C911F6D456D2283F6118DC4960ACFD4CE5EDA81B4F5F211965EBF678
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4:2f73406e443cfa:1
Preview:	...N0%~"!.d......W:"b......=..+..x/...........X....}.^...Bix.-i .Jt....P......m.E...._...F.....4.N..F.f&xp.W...&..>.R...[.bUj..i....p......8.;9.HN..%KQ,...."..$ .z..XF"?l.{r\|....v1....P.:PH......5..Y..+-....}.E..b.+...(K..Y..F.V.5...V......&.K{&....MQ... .R..o>(d...<\....>_. ..U.+].b....waN..B]..t......'1...I._..o.A.i@dO..h..Z.:H.....h...j./.M./....v...\ ._Z...h.\|.,...".....!..n.s.Q]./..z... .>1.Ex2^0.$...14&L-...;T)>V.....S.s$.^O..'Z.<.z...=..II.G`.....g6..!..9.......:...i.c;...3.SM.y.......b9....D.j.^b.4..A."......0.u6xkc......y=.V..{..G.P.RJ.Z..q..F.iG...E.j....$...@....`.......W.HM.2w.p../../..1..z..ou...B`. ...S.U"r.o.i..6.Wc...n..w?..^.R.M..o.aM.y..v._.?.$.ed.x.G...>Ks.....f.......u.3...=..M..~....../.8+.t.%......\...H.Kl....@yQ....ncqV.Y..._v...Y.W..3..nq\........&8.pu....osr...a..=.fj......]0.\B.....S=*..qU$ ..m......Avm....)d.:....\2.F..0>...sQC..G.....hE...u._S R...W.d..<U...t.......WY......VZ@..$o..2D..\|a./..\|f.......U....%..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	11587
Entropy (8bit):	7.952207597966637
Encrypted:	false
SSDEEP:	192:cK6P1iN8BfHmzduKkUX4DyD7S1ipAc6BOclZYlWGrJD5t3bbbbbbFDhCVegSj:KP1FBfHmR7S19Bda7rNbbbbbbFDhCVej
MD5:	9EE521B032ABF2D73C82AEFB1FFDF61C
SHA1:	D729BC502E641B2C4803868ED5F88D5BEF582096
SHA-256:	496EFCA6CA8930A54748F2CFD5BAAC923F82D469B2263C716697C3116E933978
SHA-512:	B025B6E776285D3FCF070338382AD539B9CA3C1B0B6675322C2A5F837EFFAE448565C708C9F45D1DE3ABCEA990AAF101D4281F5DA22A0457DB209F37FF289199
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........6...................................................................U._...............%P(.P..]@..u.......P..]@..u.......T,.YP..eB....T,.YP..eB....T.YP..eB....T,.YP..eB....T,.UP..eB....T,.YP..eB....T,.YP..eRYQ6T...M."l..eH.D.R&.6T...M."l..eH.D.R....t...\|%..0.&.D.D.D.(.."I"P.LJ.2.D.(.....L....o.....iv{"%....~?......dV...........t]....D.&.1.p:{.\|./?7.-....f..ry.......J......o.....i.{ .n.bDt.{.Y..~#..f;....}<.....U.][....._...FG.a>..H~..c.Y~.O......\|.gR~.QW.S..0.....u.......G.US~~.4..N.....2.=G.2..N..to5W}..<...o.~..{....x.._..4t.(.......2.3.....>...+JK....oOGb....w.:O&.....i.~.g."^...gM.z........6O......m.gM....x..^s......."P3...B.....Z.....-........`..y%U7..Q.u.=.(..L$BQ1.......=....uyN..N...."A..0.....\|..d...?\}.<.@..".o..V..j.{ .n.i...kUM...g.w...../.._D..o.....x...N..?^Qj8

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (741)
Category:	downloaded
Size (bytes):	3480
Entropy (8bit):	5.6511837121275645
Encrypted:	false
SSDEEP:	96:+8bK2YfmiQJ7K2Yfmi+8b0BYfmiQJ70BYfmikEEBmiCbyS5A5:+8bgE7g28b0WE70W5EHS5A5
MD5:	B4DE524B63A0971E6138EE3B35742F4E
SHA1:	05C5D43AEAC1BD0B881AD45902F191B1204DE58D
SHA-256:	EE83BB1DAB141739D166E09372CA35FD2C0250549EAD2C8C17BBFC1E9CEEC62F
SHA-512:	73578F3B6C2B6828D2F8CCF440ADB6D6FFF6424C8149DC8C6361B109DC79AE534DBFD413C5A465CDE288B491FF39D74EB48279CB0EF09D94ABF17A21075CCD14
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570874466&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570874466&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&dr=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&sid=1711570825&sct=1&seg=1&dt=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157101509843&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&tfd=5558&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auid

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1138)
Category:	dropped
Size (bytes):	3002
Entropy (8bit):	5.483423551563405
Encrypted:	false
SSDEEP:	48:ja8bqlgXYiG9UCa7qlgXYiG9ZLa8bqlgBKYiG9UCa7qlgBKYiG9ZLujbQp9QLRvH:+8bqlOYw7qlOYi8bql1Yw7ql1YmjbQpU
MD5:	27CD1248C61B8566980CECC026D11714
SHA1:	891957307EDA8E1845B059819FA7E562FEFAFE24
SHA-256:	F432EB6B61A22E0DEEDAC0346D221B6F086222C12C5512ECC4F3EB50BE210415
SHA-512:	3FB6E4D99C335E13A8A3FA930C9AA216A4300524BE617C726E38703F2B730F1095528BEB43C0DB777FFF2FD2CC0AB6AF2646E261BC136C58A6EA9C2742E6FC2F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=801871314;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=801871314;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	353122
Entropy (8bit):	5.3385644158626375
Encrypted:	false
SSDEEP:	3072:wGBQ/J87NU73t52fgCtbRJE+GQJakRVzmEeFAbMnRKIqYUEx9:wGBQO7STt52fgCtbQ+Gbk7KEuwvIqC9
MD5:	2716395156DA73896D9A844CE376DAD7
SHA1:	6889AAC1AA0FD1FAD6F57566891776D28C6AD083
SHA-256:	66AD2CEE87E29B23ED848AE229A4053B1C0882F830070F205B3708C68541CADD
SHA-512:	8AB8B8E4189CA01F9BB758A5A62704F69B5AE59F674C961AB6B6C943F21887A61188337AFEB064F24EF07515903607759DEE1FF7674F826136B5E5BCFD33820C
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/pages/_app-b6b8bc6bcb073f4f.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[92888],{"./node_modules/@canva/analytics/dist/index.js":function(e,t,n){"use strict";function r(e){const t={};for(const n of Object.keys(e)){const o=e[n];if(i(o))if(Array.isArray(o)){let e="object"!==typeof o[0]?o:o.map(r);e=e.filter((()=>!0)),t[n]=e}else t[n]="object"===typeof o?r(o):o}return t}function i(e){return!(null==e\|\|"function"===typeof e\|\|"symbol"===typeof e\|\|Number.isNaN(e)\|\|"number"===typeof e&&!Number.isFinite(e))}n.d(t,{bmk:function(){return O},eip:function(){return f},tQz:function(){return m},T3v:function(){return h},UUI:function(){return g},_Rt:function(){return _},IEN:function(){return $},jen:function(){return F},LdU:function(){return V},Sbv:function(){return l},IJ2:function(){return p},qVw:function(){return d},EOj:function(){return y},uro:function(){return v},XT9:function(){return b},W3y:function(){return w},TXc:function(){return S},BBM:function(){return E},p3T:function(){return T},vPW:function(){return x},V7N:f

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1136, version 1.0
Category:	downloaded
Size (bytes):	1136
Entropy (8bit):	6.9205301634912555
Encrypted:	false
SSDEEP:	24:V6x4rfIXZe5PuRlil3RV+cccUUUiQ8H/WTSKo//vSUw8PtIp/U:VaUIZW2KhAcclNirWml//K+tr
MD5:	B46630E470F4040EBA7033CF2435EDCE
SHA1:	BA26D2E1DC5BBC01A80446AC65BFFB991953764A
SHA-256:	3E32AEA52247A81C38B4735E84A28BA27B0CBC33F007A1D14E81E64BA766EADD
SHA-512:	EFF809CC87517F9048F1C7A16561EF6F956ED0FE50B3382AFAF111B6F159E769DD88AF0DC0D8A03B748D407C5C554789B6148A137AC700F776A260FD153C0AE7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/b46630e470f4040eba7033cf2435edce.woff
Preview:	wOFFOTTO...p.......,........................CFF ..............&.FFTM...(...........GDEF.............'..OS/2.......G...`X.b.cmap.......7...B....head...0...3...6...hhea...d.......$...ohmtx... .........H.Hmaxp..............P.name.............r.post........... ...3vhea...D..."...$...$vmtx...h............x.c`d``.b.D&.x~...../.".7W.I..%..b...z....L Q..J.V.x.c`d``V`8.......z...P...5..!.....P.....x.c`fX.8.......i...C..f\|.`....e`.d..F.$...........p.......q.P....q...x...1n.0.E..'..".U.:..9...1Cv......(..z...B.%W....!..>.....<....'S6(.Q...Zy...+..\|)/..Ey...4y..3.<.f.8.Yy.W4.95..KX\|+.X.&.7x..pD$M.,..;F?...[....c..s..;...N1R.h.PA..\|..s..\.d.~BC.q.vcl.u....Nv.lJ'uso.....i/K..^....!..q."u%".....Ai...x.c```f.`..F.......\|... ... .........J.F6...\|@.....}....x.c`f.....F@......(U....x.E.!O.@.G...\.rl....,$$H._...m2.,. d......s.L".T v.`f..o.[;...S.G...Qt...n.........N.I...(x..\p...U.V;.....%......1...A....[:...{......X.T,...5.."qY(..u.Z.(.kU...c..T.Qn.2F..'&>.U(Ff+7i.O.<<[....g.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1348209366
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1084)
Category:	dropped
Size (bytes):	3866
Entropy (8bit):	5.694001950072429
Encrypted:	false
SSDEEP:	96:yuQpyipgnFg8bg2YQ7g2YC8bTYQ7TY/h5vgaaU5:yOipgC8b+Q7+C8b0Q70/h5vmU5
MD5:	B84C5EE002C9C89E2296ED8B7151B192
SHA1:	3A20C7BC162659350B18844C3C5FAE0139C6BA2B
SHA-256:	48F1A9400B06D1AB370C6BE77E7A7E87F23DCD501B25E3D34A817B40FFFA5D33
SHA-512:	F04C5FD7F7D929563E97AC2D2250BF05BE1109DEF3E02908547846B5F3F5A57DA9C7B53FF60994E3A77AE2ABAFA9C68AF971378DBF5114E9AA09205445D430B2
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=17126600&fst=1711570864736&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlyx_L3rOT2FxIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (582)
Category:	downloaded
Size (bytes):	641
Entropy (8bit):	4.911993082988378
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4sl4o4CRH0M4G1Rx4MtieUQo4xgf4Z0H4VirV4CaV4h:yrdmcXd6NOH4c4VM4G1Rx42ieUQo4xgL
MD5:	9740877B607828F5A27ED9847EBBDFD5
SHA1:	700F93941BFFEE9FA65CA3AC9A52198F5EA03575
SHA-256:	905A2EFF184A871A4767685894D1C9AD2E033A0E451BA566D42D8434348197FB
SHA-512:	E554776C118164DDBFC17A8A21E4CCB77A819656F41D9F9C6C9F268D2226B9D43369033F7AD9BEE53F5F069497D1706913CD617226D4BEC1715C68CBFAD75DFE
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7f2712c7be9143f9.en.js
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"3211":{"js":["cab16ef33fefb3ac.strings.js"],"css":[]},"4799":{"js":["2fe1d10eddd1b988.strings.js"],"css":[]},"5019":{"js":["992f23f6e755d539.strings.js"],"css":[]},"6037":{"js":["6c0ea36590d49674.strings.js"],"css":[]},"7049":{"js":["00eb795c1ebf7a8f.strings.js"],"css":[]},"7904":{"js":["dac4e6a1405545af.strings.js"],"css":[]},"8146":{"js":["6f50888fcddc9770.strings.js"],"css":[]},"8881":{"js":["c5e1e064613196fb.strings.js"],"css":[]}});

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	dropped
Size (bytes):	59980
Entropy (8bit):	7.9961272756843655
Encrypted:	true
SSDEEP:	1536:LCfa2SSFr6/8FFjiAZSZR+RAJsljOzmxc:LwxrFF9AZ5sim6
MD5:	121EAE5461CE474672FA5C8698FC86B8
SHA1:	7A445A34CC7506A4828E26A390C9C26A1B6AE958
SHA-256:	0785F374D24EB6D55C5B90314E50016917D23B528F4F12C5B54244DC4661DD9E
SHA-512:	0D558955FABE5BDE2E934B3642A535A90BC4D18C5E79093A4D21EC806BCB530ECF26DE78141687E005612B5B7BC76698BA2B1DDB27E50D2F31863D8184BCD9E4
Malicious:	false
Reputation:	low
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................>...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C.$......ispe.......X...X....pixi............ipma..................Fmdat....9&ey_.@2......A..@...@J/.}p...JT.g.`............UT.{JOEU.(....M..AI...d...t....?m6.I..T_7u='...5...TTbZ..._.q.a.2.rI.'q..[..1.......or8.1.L...s..DO.\|.O...Y..P.Q.q..R5..QH.h....BI...8....U...T[.T)./.r...C........0....>.4.N...1.....-...........9.;=.?. ...8...V7]".U.i...TnMmX..O[js'...t......(..>>...v..C...!....2.4...8.PW.u...l..$X.XDU..l3AA..L.\..<.LC.0v...P u....]m..../.....GCx.....C.<.....Nn.l...Y.N.....&......RDpK ....W...'@G}7V....).f...%.I...3....jX...Q..a....h.). A....x.5./".`!..9ii7.[......i.CD..3mq.7.5^..N.@F..a.g......R....pB..u...../&33Y.c....3.A.aj..9..1@n..Z......oT..@.[.\|..........0`..`o......I.M.E....X...I.z4.V......y....;.&.pe#.....N...VLj{..iAe.!.b..`>.7......[o..&.b..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5456
Entropy (8bit):	7.866915330879641
Encrypted:	false
SSDEEP:	96:SgEd+XLD/YV4KPwwZhKKxRVLgMFuRR0qRj7GYV6DPy/hE6QcRqPJ0nA+lx9l4EDP:fw+XLjFKPwwZhdGMERtRnguhmcRqR0nB
MD5:	832B4E037C37FBC2946D39FB1FD3A9CB
SHA1:	9F5CF2A88A19824AE7ADAC6584FC718EC6D873D1
SHA-256:	506CCCB031CBE3EC9756BD21225B4F341599211B1E07858DFA556D8763861E46
SHA-512:	2BECD264EAB2947FC8153D229943D709F0A27850E043300D0B27E5EAE7703A23A4E0220E72EB2859E6489CFD624CD006EDEBADF85EF335FCD60CD0AECEC152C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB.........PLTEGpL1<P......&3FZM......!.=..;.....:.........................................rB.:..q<........=..............................V..............-...m...c.I.~;.........tRNS.3....... fb" ..e.C.B...S.)..n......"IDATx....@.F.+5..6.#.V3...[.....F@bk.Nhj..x.Or<\|... ...1BD^J<;!h..L....2..Z..V_.U)......~.4.>....{.l.)S.(B..jo.T.g.K....v.._..Q.B<2;......~.:.(.(B!..';d..<..)y...4 .Iie.....9S.....D.W.K.s.U.p-U.l.p,...R...........!..@VB....@mm......;BL6us.fJ.....)..j.;Q;1.....f..Ws..P..V.U._(...Y....).Z......C5.../..10....0.+....%....v.t..!.!W.K.I)....u.y1.r.zB<F...R.B.M.JuB.@..+...jKac.U^..:..-.r...#....R.;...-.+u~.RO.Rj...Cd..Cj.6....T.....0%..R....Ut....Rj.R..?.55..........)5u)..R.Ra."..H..J.....)5i.....H..J....R...u4b#.B).R..v$)....x....I.J% ..G.u......7)...\.H..Ju-..R.z&E.....b....Rf4...V..R....8.}.-..I...FJ.../.K..?W...Q......N^.%..I.}N.q?.$k......5...9.C......>.....)..3...U.L"...A

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=wAHJDqaa%2B8AQiFdn%2Bs%2Box70g5l1F%2BKw3tvmStHl3aDj2snKTKuThkBPLy5LJqupjOmVsFTr4y5qXcuGIKigMOnrOcEcyc0LLyAzgLEHEcSkdz0LtgyxstBAXg2iU%2BYMuEW3lCljO5QsSKzZ35mac16UXgVKYmH%2B9JcopNsHzXttVRPmd2xIfb6efBUCcjw%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40708, version 1.0
Category:	downloaded
Size (bytes):	40708
Entropy (8bit):	7.994832654854839
Encrypted:	true
SSDEEP:	768:Ai5GA2KblnJ80SVBPE/JDSHwih/OOcWE5DBEjufzqyH1pbYi8FzeMIX3oS7Kwx+:Ai4AHnXSVBPEkwih5cJ5DBaizhHPbYiO
MD5:	FFE7CC3945DCFF0497DF9901158CA5C9
SHA1:	92B86140E39DC5B0EBAAF91AC3147F7ED7379851
SHA-256:	C856336C2C3439EF8A736B40A7B11A7E575979A739C96EDF7BAED2D1A5B131D8
SHA-512:	46C4AB2ACAC2269DCCB459A04DBB5C959331ECAEC9D75F79249909E9C6C1C2CB3EF1FF550CC5AB48C56E445FA84D4358789EFDDC94786CB8349D90BD79CE24D2
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/YAFdJjTk5UU/0/CanvaSans-Regular15263162195051178836.f4.f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2
Preview:	wOF2.............................................D..:....`..n...........4..r..>..6.$..:. ..s..{..K[.....~.!..]U.?....:..I..,7.s.....+..Y...........{......{..ij.5...6...b.\../j..i..e&Z..;..p.cDHCJq.,.S.!.TO1...d0`^.+.Z..-..n..z.q'6p.h....iNArV.H..Y..y.s.......ag"<.Ax......Z..9.@...}.._....ucA.....%L........JJ>...^.....rF.a.....Z.I..v..{..;d-.e?....)...)LR...TI....q./e.G.X.'....b8@.m.Ur..,...G}...^;.E..f.=U...."..L..K\..19...C.Q)..C.jS.W......D.N..^.1#L.........D.....b......p...!rsy...@..km.F3L_...h#$B..B.(...O..dM.."...O.5.h....b@......z...z0..H.!$...$.T...Q...Z..M..<.?........""&..........Mk...w5..v./.....l...a.[......B.m...O..J.......~(.....L`0....U...<...\|......._.@.k`...E........Q...8..(..`n.....k>H...T.<......A.."^..xn.3oV...=.._v.:..;>4..w&D.L.M...\J..@...._.B.P..u.x>........0..x...jK.....6.}..(k....%ZR`I.....C.?F.G.8.......$....K..o.w.B..-..8.z..UU-HU..0.6. ....I..Gv...5......7pb........7c.z.$...B..Fv...RR..Hw..

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.994434990502561
Encrypted:	true
SSDEEP:	24576:jRv/9RZmNo1W0y0sEzbKWv38OhFq75X5yGghkfVnGsN3hIPV:jRtsoHy0/z+U3Zho7tophkZdId
MD5:	AE5E0343EA054408F661EC7C327BCF88
SHA1:	DCF118C97A4B04B4F40D1D6AF1C1096EDDD3874F
SHA-256:	46CF9F2969CED8802B2A76961025B603CF0EED198D1046FAF67234A6DA2DFB3E
SHA-512:	D1D47538AD9E38D6B94538CFF1819A085987F18AA2AA1E4B0E3E8FE659B5B5A339D93DAE2A4A8CC78B957B47F6B29D58B0F309A8D22C89A3F1DC115FEC0B169D
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4:2f73406e3e2ec3:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free.,.mdat!..@h............E...H..,. .#..x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=0 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=30 rc=2pass mbtree=1 bitrate=950 ratetol=1.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 cplxblur=20.0 qblur=0.5 vbv_maxrate=20000 vbv_bufsize=25000 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00......e...O...s\|.`.@eTd.k.....@..g>...J.6'.SU..+P..U...Tr\,)\..t...]..8.l..\|..@yNbf..d....S..v.#../..&."...S...7\|].ab.tmP.....j...\dEEe.&.R..V...c.Np.=.b

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8251)
Category:	downloaded
Size (bytes):	162200
Entropy (8bit):	5.811092181448469
Encrypted:	false
SSDEEP:	3072:qyOdn1WN5Q2zoTpiLRwEY/FBDSfRKNFUUfmSnyLR67QMlQ0G/8:DOkHtwEY/LDiRgJfmSnyL87Q98
MD5:	4BD2A3DF3B46DCEC5DCF04B1B5AC156D
SHA1:	1E935D20FFDA07A31A870C46F0F3B5D824441E6E
SHA-256:	FF8E3090EE68223F9EE52925512BF5D205FBF81C372C1F49DFF2B0904044D434
SHA-512:	32294BFA4437983CB8114ECF8AFFD2037452367A4C45F0C3E10BB61F2E873C8C44C3E2B234C39DAA01964CAD7D5327740B1D40C7D31FADE8C5C435A0DF034299
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/c5e1e064613196fb.strings.js+0867dd2626184c9d.js+2d87c6898e0cddf2.js+3672a18722732ffc.js+2fe1d10eddd1b988.strings.js+5a24f06d6350a5b3.js+d914c2e8572651bd.js+4b31d673aa6aae8e.js+6c00a05543cc7753.js
Preview:	;// __FILE_CONTENT_FOR__:c5e1e064613196fb.strings.js.(function() {. const messages = JSON.parse("{\"jp331g\":\"We.ve run into a technical issue on our end. Try again in a few moments.\",\"6aTUAA\":\"We couldn.t load our required security checks to proceed with your action. Try to connect to a different Wi-Fi network, turn off any VPNs, or use another browser. If you still need help, please contact us.\",\"XS2sIA\":\"We couldn.t log you in via SSO on this page. Please go to <a href=\\\"/login/\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Canva login page</a> and try instead.\",\"peTpcQ\":\"This account.s been deleted. Log in again and follow the prompts to restore it.\",\"5w3tVA\":\"This account already exists. Please Log in.\",\"IilRfA\":\"We couldn.t proceed due to a failed security check.\",\"UQkzsw\":\"We couldn.t log you in via SSO on this page. Please go to the <a href=\\\"/login\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Canva login page</a> and try instead.\",\

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3426
Entropy (8bit):	7.938920299349286
Encrypted:	false
SSDEEP:	96:SIvtlCieDQeS1RxvBj50R9JAyPAMtAC69QjHdrn:SKeDQeIxvBt0PayP4Z965n
MD5:	D0BC1570594238DC77381ED617AE7886
SHA1:	60F84BBD8294727DBE8C477CF636C75D80297CB8
SHA-256:	C60EC4D411DDB83A7D9F04683E0AF04884B2C0C856198D87D2E7A3F3B232F6A7
SHA-512:	16B170B5B1BD05B8AC23C4E87BEA6F6D7ECC60EA560CCD8BC279CEF79BC7A8C0208E584EA90C42F8F43B2D438559C7C8CA7F1E8A789080A78B7E774EB3966954
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232031/Features_AssetManager.png
Preview:	RIFFZ...WEBPVP8LN.../.AH...8.l%.pw..GH...].pH.M..I..\.....u..r.\Um.y....[... .{&.m5YR%.R.j...=.0....+....}.y....]...+K{..~...\d&ho8q..~...j.`..e..I.._dB..[.\.....u.H>.z.E.CQ.Q...j.^.q..m..?.m?..Ht7.S.~.d..-...........i........Y.d.m...A.z.} %../E..Q....(.).4R...$...<.:u.nD.aA.Z.9.....y5.p.?.?..z.........<...I...tO.n"./9...`....8.1.##j..,..#...]Tz........{...{N...):\|..n .......Q..kK./..ngx0C.AJkn18.@Ap....H..5.~..m.g.>>".)..G D>..V.(c..j.!..)..~...'.Xb.......s<e.6Wj.p...3.O..T..V_J.a.#....R.LX..7OJ....Q.m.+.....F.a.#0.,..}..7Va.+..H`>.]..i..,.^.......M.'..Ve.........U^..`.p..(....d..O.j..VX..x..x..=.)..htpW....@.2...k.R..$.=I.^..!]A.i....Un......mK..h.v.n~\|.RM;.v...H.C[+.f.B.0.......Vi..Tq.F...5..fMQ...=....vl.........^?L......WB..\...O...X.....................H....XA.W..H.....E..........w.,..XAP.<.`..0......V@.H..5...C.7....4.Xr.`...[..........N..&A....-..!.$.P40..-....}......\|..=....q.dw.....P.8.e..A.............D..a......PM..U{....V.nQ..D .B.0...

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6435
Entropy (8bit):	7.923493862211496
Encrypted:	false
SSDEEP:	192:cojkLNQ7jUd9iM20qiB7dzol7xZv5E90jTYXiG:6cLSe7xZxrjeiG
MD5:	36E2DE4A922FD771788308EBA1BAAFDF
SHA1:	D815B15E15CFC3367BFCD7E34686EA5812D7D9E6
SHA-256:	CBB2AADD07F3B789AA07A4B01453EB4255492ED9714266A0B0FBCF0A78B64F8B
SHA-512:	D31F53258140DBB8FFA32A53E5797E16547B284E3685E91893827C3FE41B5FE27C5DE862882734C99F665B7D4B21E04C67941287C52FDF74BC5346B2B073A3F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB........WPLTEGpL..(........!......................................y.......F......a...u.H.Cy.2....>....tRNS.....CUp.....Z'.<...QIDATx..r.<....1.......9.t@s.....8...2...s.D.......VA.\..DX......Tz...Rm..cJ.J..Wv.-..F}oL.R....{....F...V...aU...j{\H.@...Z.....F....-..W`Uv...v.jx...U.Gy;..#i<...EQ6.S^...[9...Y..H......6..n1C.J!0...p;......(%...s.....`..U....V.l..T...QLY}Q..Qu./HT...(....L..2..........o:...qszFl...J.t./...l.}6\|+.8.......yj~...6...e.}U.+.3.-+%....r.j$.Y#L.o.b2......jO,SPVG..'.J..O......P...O/c.8&7.+..19.&b_..........m...)u.......g......{.../.>P..=P-.H..wE..'GP.@...6m..[j.7......Bu1....N.I.z..:UD.[.R..j..j.......K..@.yK.SV7b_..J.5.J..e.Q..@......fI....<..\.:.?..P.@No+....T%........./.of.........,E.4U......GPo-..o./XJ...IS.9LU..u..uU...Pu...-......L..g...a..99..3P....>??q_.7U..'.l....V"....%M+.x.T..Tj..m...F.h..^G..&%.j...}...X\..Tm2..'*y.SP.2UT.X+.@.....8.&....)..5............

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17158
Entropy (8bit):	7.986188016651666
Encrypted:	false
SSDEEP:	384:FBpp4xzQmDA6xtK9OEPqVGMRULvT2EKIybZQmYj:hp4zjxwoEPkGMRULbWrqf
MD5:	F805483B645905322D890905F9F343BE
SHA1:	A37CAE8A9426E1FD2B4E02DF71E69BF1C9AA2E2D
SHA-256:	223C2DE62A14DCB5827EB67D9F08C821DDDEF07D02823E2B85BAF299D2B4DE02
SHA-512:	CF4B61D0C1C95A43F946B7B7416A66FB120ECB0851D1EB73695A039E597FF1820D23066E9A6C8380E847C6BC5BA6E0DDDD211906C5D4CD0B41DEFD2BDAC360B5
Malicious:	false
Reputation:	low
URL:	https://media.canva.com/1/image-resize/1/750_328_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAAT5krkQ8QTCmoz0tGrxy0n5zeqofv1vvtwxfksfVIVs&exp=1711586125&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAJMKrIMmsAYmnQMAqshxs6Ap2WV6GkR6g25xpRmD1Y3o
Preview:	RIFF.B..WEBPVP8L.B../..Q.M..,..9..U.......^u..m.!.=..ff...z.......3n...!.....1u.{.......U.f.@+..2K.v`...K..}.p..KK..=..:.t.0..n....p...z....'-.^.9...0.a.>.4...K^,.{.'.ff.eF.X.KI.N..P%.C...G.c0..R.].uy.2t.....+....l./....Zz.......:..N\|..,3y.....-.,...NOxy7L7f....R._z...R.X..ff...S8>.FZ..-...-I.%I.m....}2.]UE.o.n.R.m..k.s..\...n........[y.....].....)....k..f.'.........\|.............j..%..y...@.@4MH..e.$@.$-K2.}....!.&..@..A...i@$......x.l.d..................................b:.....ly@...4......ih.[.1M...U=.PHS...$7l.-..%:....Y>......=..L.3@.t:...E5.r.,.\|....@..........<....`F`.I}...T\k`.1...'.&.d.ph$H..6..^..}.G$...c.c....$K 0.$:.:.\.=>..].B.d5j./..j....N;.....8..f.f[(K=..m..V.<...7....E..)..o...qiAj..G=P...`....B.....n.L\|c..^X .A......2.......4..Pb...t..H.....'/.\..u.....n}qw.g..<.;..........K;9cnO<-.P...omn.gY.s.....6c_~w..m.u.Wn..r.Q....y.~..`..+..D.......dM%15.2.&....vf..E.......M...o,e.#62&...:.(oY....dMjS....7a3^.....ay.;....m..O..@

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2145)
Category:	downloaded
Size (bytes):	2208
Entropy (8bit):	5.3542415904249605
Encrypted:	false
SSDEEP:	24:4eyM/Q6hTErKSgC4UoNd8ZJMOd6V2l1exrYuNQOSJu3SU5YI:4mJuGAoNd8ZJM52l1exUuNA/I
MD5:	22EB93743380B6DA5208EED643F8D337
SHA1:	5D67D002B49C4063C991ECD3C075E9F3B4E9BDD9
SHA-256:	6B0085252BA7443E015CF7D662C2CF0AD811437EB5A8A2BF0F4BC11636F08145
SHA-512:	72E6CB1850CCC7540A9B78EBC4BB14166EBD227E7600BDA1D2EE0E05E4B0675FBA7AF03CC4EF9E8D6B207FBCB7D1286C68A011EAECDF57AB8C694C532008DDB0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/5bdac62b91201b5d.ltr.css
Preview:	._2E9Y8A{color:inherit;font-size:inherit;margin:-4px;max-width:unset;vertical-align:baseline}._8vlbIg ._2E9Y8A{margin:-8px}.WoE5Nw{display:flex}.light{--QjoAaQ:#f6f7f8}.dark{--QjoAaQ:#252627}.Wrk03w{align-items:stretch;background-color:var(--bDblYw);border:1px solid;border-color:var(--7hnsIg);border-radius:var(--fKgqJA,4px);box-sizing:border-box;color:var(--pUV7hA);cursor:text;display:flex;overflow:hidden;position:relative;width:100%}.KbQ1bQ{height:40px;padding:0 12px}._7r5TJw{padding-left:0}.s5hqTw{padding-right:0}.c7zhBg:not(.U8_pEg,.HMkvaQ,.xThZKg,.hz9dow):hover{border-color:var(--hmBz5w)}.U8_pEg{border-color:var(--3j0O2w)}.DHY8xg{outline:2px solid Highlight;outline:2px solid -webkit-focus-ring-color;outline-offset:-2px}.xThZKg{border-color:var(--CgOmqg)}.HMkvaQ{background-color:var(--QjoAaQ);border-color:var(--6qQCNQ);color:var(--fSfh3A);cursor:not-allowed}.hz9dow:not(.xThZKg){background-color:transparent;border-color:transparent}.s_JGcg{-webkit-appearance:none;-moz-appearance:none

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65478)
Category:	downloaded
Size (bytes):	246476
Entropy (8bit):	5.7187421240302925
Encrypted:	false
SSDEEP:	6144:KJ9PBctt7I9LpSQGsIH1g5zNAO1u8Lks3C1z6hoUfoVHGER/zObucoJRtnS9PcO5:g9pVJu8Lks3Gz6hoUfoVHGk/zObucoJo
MD5:	9CB6D097AB31359492D37D027C243BEB
SHA1:	4387FD8E86EEC77CEEC60D7243D61F885FE7F50E
SHA-256:	5810F607BE05F4B442AF0D14DD98CDDB533025067BAB6EC086149D1A32DE2FE1
SHA-512:	54676AD8A5260B43466FACB7596EA796FD5EE464ABDE63DFA680E624AB71D9BDC920891D15E2059A092341A171B1EAAB43C272C613880DF12B191A690B9FDB76
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/1b96dc175117e75c.vendor.js+23fef8879c4d4673.js+9bbc6dba1ea0ccf2.js+58bd38f2ab220570.js+f284488f3c1f6334.js+dac4e6a1405545af.strings.js+0fb70ff258841869.js+c916589d0dc37af2.js+00cf5240164d2307.js+bb043949f5162023.js
Preview:	;// __FILE_CONTENT_FOR__:1b96dc175117e75c.vendor.js."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const h={bn:s.Z,A:n.G,qr:n.r,it:r.Z,qt:o.Z,xt:o.Z.ep,D:a.Z,zo:l.Z}},94368:(t,e,i)=>{i.d(e,{Z:()=>s});const s={pn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.length);for(let n=0;n<i.length;++n)s[n]=i.charCodeAt(n);return s}}},412730:(t,e,i)=>{i.d(e,{G:()=>s,r:()=>n});const s={CustomEvent:"ce",Pr:"p",Sl:"pc",oc:"ca",Ra:"i",qs:"ie",T:"cci",W:"ccic",_:"ccc",L:"ccd",Wh:"ss",bh:"se",Je:"si",Re:"sc",He:"sbc",Pe:"sfe",ro:"iec",vl:"lr",yl:"uae",U:"ci",F:"cc",Al:"lcaa",$l:"lcar",En:"inc",An:"add",Un:"rem",Sn:"set",Cl:"sgu"},n={Fr:"feed_displayed",ac:"content_cards_displayed"}},657070:(t,e,i)=>{i.d(e,{Z:()=>s});const s={nt:()=>{const t=t=>{const e=(Math.random().toString(16)+"0

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5332)
Category:	downloaded
Size (bytes):	68509
Entropy (8bit):	5.481222268445966
Encrypted:	false
SSDEEP:	1536:b2uYyKHV/BipWq4M3adJUgC2gKmBgdb+vtAzCY5JlJgqbsdV/wzz7WDw:bVCHiYLJUgCsmBgdb+v6T5nJgqbN7v
MD5:	97CEC306E6928C9CD0BD1ED9E98F2106
SHA1:	BA89AE54C6E3E0F43836C78E5DA170000B8585B0
SHA-256:	994B507E3F6C13A5C7C929211F7AE72751710212EE637AAEE5988B19A3688644
SHA-512:	5B55B6193F9A98D80722E55E608526074519FCBA12377E879F6F709D497CE99F1C70D3165DE74351F0BE68B87F1542E7D9BC64FCB4B6631C39FC6B0306C4445A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/hjfept.9b84b5d5947e6d42.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 476834:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e4773d6932616a85f2eac86f437df8f7 = self._e4773d6932616a85f2eac86f437df8f7 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var S;var t;var A;var R;var U;var B;var Q;var I;var K;.var aa,da,fa,ea,la,na,ma,pa,sa,ta,wa,xa,ya,Aa,p,z,J,Ca,Ga,Fa,Da,E,Ea,G,H,Ha,l,Ka,La,Ma,Na,Oa,Pa,Ra,Ua,Xa,Ya,$a,ab,db,gb,hb,jb,kb,nb,ob,lb,qb,rb,sb,tb,vb,wb,xb,zb,Ab,Cb,Bb,Db,Fb,Eb,Gb,Ib,Jb,Kb,Lb,Nb,Ob,Pb,Qb,Rb,Ub,Wb,Zb,Yb,Xb,$b,ac,bc,dc,fc,ec,hc,ic,kc,oc,nc,lc,mc,pc,qc,sc,tc,uc,wc,xc,yc,zc,Ac,Bc,Cc,Dc,Sb,M,Fc,Ec,Gc,Ic,Mc,Nc,Oc,Pc,Qc,Rc,Sc,Tc,Uc,Wc,Vc,Xc,$c,Zc,bd,ad,dd,pd,td,rd,sd,od,wd,xd,ud,vd,zd,yd,Cd,Dd,Gd,Jd,Md,Nd,Od,Sd,Ud,Yd,ee,ge,je,Tb,oe,ca,ba;.aa=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeo

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16788, version 1.0
Category:	downloaded
Size (bytes):	16788
Entropy (8bit):	7.989129522879219
Encrypted:	false
SSDEEP:	384:mWyf9Sx0vMIPYIEgIXrW7TJVwgWto1oIB5er+uoZd8y2pfZdAtxGhe:Hyf9Sx0v5APgIuVwgYIWc8ZDAtxGhe
MD5:	FD24AF413CB9CFDC66D2FF712BDFD614
SHA1:	978C3D524CC6A8114D11F78B6292B58C69CB8632
SHA-256:	16AB274F0EDE84BE01A0361263FAEB3FF18D2D95D155D6B9D654EF37F87DB1F5
SHA-512:	7689F9323DED4EC22E850CBDD2631D18B08953E74C1E89FF0C6B66F56CF01A2DFFF68B4BD04D25928DDB792D1D33DE557B6B775E15A3616C7B118180D514678F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hind/v16/5aU19_a8oxmIfJpbERySjQ.woff2
Preview:	wOF2......A...........A1................................`..\.h..m..... ..6..F..6.$.... .. ..@.........0..8.+.....6.`..Q...'$.CLj....m..p..D.....h..Lx......&...3....E...v,....uK.-.XU]..y.......Y....)D...{:../.d....._}wdnn.T=o...pG..s....IN^.....L .,u...R.4u.........Ql...../....g..ph....X.....'.....(...x.cSx.E\|........-..z.."7..b.5..[...l0`D..66.xD.....3>C>\|..>.d.2:..9.&....k.. $.........>p.}O..DA..........@.V...J....V.\....+...........C2l.w...n.-........3....]..?.....8......jYj..L..6..+.m..Se.<.D..j9..e;eS.mg...X+I.[.3D.X....\..>.]...P.Q.}.e...X............Z....../..i.H..Q..L.s.d....j... EP.....sZ... .=.9.:.6.......u. .&%..v)R...DQv.hp..JS.[.`..9/.i)3.q..n...46.(.4.l/.y~Qz.R..bx..H.r~........ ]...........4rw.9.&,.H..V.B..M.../..=...*.1403.n...E..A.~...`.F".P....8.D....C.a.z..C....$.#^...$.G.............bF...Z8.^.....&x-..........:.`.f......a.)..Q...b1..... ..........(...........P.sG....%QrGg...7.....N.,&..5...\|4949j.F}.b...W....No...,<q.[.c.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570869643&gtmcb=831980953
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.185992454641345
Encrypted:	false
SSDEEP:	12288:1AUMY5fcQZDUUDD2tb/utJDc2hJ+UPSaDxli1niD4drqpw/M1BXFvk:ODYnEb/utbXP3qnimeqaBtk
MD5:	D053D55F1DA3CCB4A459DE4797163143
SHA1:	8EFA0EAC7FF0B9B34F337B9F41001F0A6D031809
SHA-256:	A15EA4240D23F4E26E5CB27E8EEA24925F24D723258B21E24621FBC38E3F9430
SHA-512:	671DDF26CFFDC8A2F85269EE416DBBB6DDF6163108F794674D5BBEB1393718FAD25F4224A4DBA438E05F1F08919CE98DC220A3E23238D4941C37C1F6E367A586
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4:2f73406e44406c:1
Preview:	....W.u...8tM..zE.Y......13Q..{.&.e.iYn.oo..G..G.TK...Y../k..8..R....r....Q...G.n'.E..!.\.$>.5..6.}.v.\|m...H........R...s..j.._l{.....C}$.g.9P+.,I.`..'.f...D...H+8`..}..#..}.6.EP<...}..R..J....Bu.<....=:....... .....9M.....!...=\.......,..f.#B.,.t..5.....z...oC."....n.,............?%({.k....\|".Q.4..$....../..0....H....b0...-eJ?...\|.f.P..}.eR<.qtJe....G.........FZ=`'.....f .{..'T..g..E...b..wjf.;[^.@.,]..8g.N1..K..u:1L#.....,d..../.....\......8..].\|^..mn......t7..........FgY.5.!.......H...qr.eV..)c..R....4.:.49.@.HJ\|n.Hcj.e..B....{3[....4\...b....c.H._sEAfim#M..h.&?c..y..k;...~..T.../?Cib....1.=......5.!..}Y...Z...k.rQ.BK..{.>..q..;7@xf......V.m.."..&.e.>qR........h;Eeu.J.DA...^-!\n._.5X....G.[b9.?..".......j..Azx]Z(M..l..B...Qc..!.t..e...4.Lo.K..A..u.....xi.?U.WE..c....G.Z..u]..V8.Ar....(n<3.<..&G].U.tF.q].v........)\|.I.U..T....]w`Sn.....!.....m./=.i....<...TGyW..,4..Ta........k.L...Y&(..q....lm.H9.B,ob.m.....0.,.o.j......+#Rv.XU..e<..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.244202224420395
Encrypted:	false
SSDEEP:	6:0cGV0/KvK7Tx7rQRhq5DEsEHKIT63OVgJTJxqfQEs0STJjsK7TzSnTJxQmvDSMqt:03K/wKBOuIQ3OChbgjKDSXQmFqPV
MD5:	45CC8E9A449B686B4300684398C187B6
SHA1:	3137CB907121BF6E357835EEC1AAB644DD0453B4
SHA-256:	C54AA63B549343F1C4B927600558E0DC0680B161D9CC837D66D45650F319B8DB
SHA-512:	B3C034E8EB0D3ABCDD7B4C177C36F22EFD5374B19A5EC280F81E33928AB0904B35FEAE3C5B06FD299DA1CBE5E222E49DA897D918EB677C09104D864A0D2CBEC7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2475682c8d5b76fa.ltr.css
Preview:	.DF_utQ{cursor:auto;outline:none;position:absolute}.DF_utQ:hover{cursor:unset}.UYkI3g{will-change:transform}.Lj8ZqQ{display:none}._lzXBg{overflow:hidden}.LpqEwQ{position:absolute}._0xkaeQ{pointer-events:auto}.eYn1AQ{overflow:hidden;pointer-events:none;position:absolute}.JpiJcw{pointer-events:auto}._3zDNwA{display:block;height:100%;left:0;position:absolute;top:0;width:100%}./# sourceMappingURL=sourcemaps/2475682c8d5b76fa.ltr.css.map/

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1085)
Category:	downloaded
Size (bytes):	3604
Entropy (8bit):	5.729303615412298
Encrypted:	false
SSDEEP:	48:AOAo70AyD7yih5XmZh2X0v1ZrFJJmS13lB+pblcwRTVzDtiqitBXVE6VVSChDe8s:mZ/XA2X0tZZCqlBKCqsTSCBe8sXeyF
MD5:	FCEED28E1C671D269E82DD7D4B19DA43
SHA1:	F8ED1B319B754F14C5722A658E8377DA760A4F5F
SHA-256:	46E726220A64B1A7055FBAAFA52A89B7EA9D55BE3878AF5F5AE1B42F57DA7626
SHA-512:	EB2D7523CE1811BA437BA28EBE4CD27BA8151C9936EB1693C4DE4A6B0BD6AE62FED50BD4901C4A24124472C8C6C99DD4187324573E8277BA2C85570432A608B0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/d4fc4d85d9537011.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[8634],{../***/ 391214:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {__c.rl=function(a,b){return __c.ba[a]=b};__c.sl=function(a){if(null==a\|\|"object"!==typeof a)throw new TypeError(`expected an object, found: ${a}`);return a};__c.tl=function(){return __c.gb().Qa};__c.ul=function(a){return new Promise(b=>setTimeout(b,a))};__c.vl=function(a,b){const c=null!=b?a:0;return Array(Math.max(0,null!=b?Math.ceil(b-c):Math.floor(a))).fill(0).map((d,e)=>c+e)};__c.wl=function(a){return a.every(b=>"object"!==typeof b)};.__c.xl=function(a){const b={};for(const d of Object.keys(a)){var c=a[d];null==c\|\|"function"===typeof c\|\|"symbol"===typeof c\|\|Number.isNaN(c)\|\|"number"===typeof c&&!Number.isFinite(c)\|\|(Array.isArray(c)?(c=__

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (20178)
Category:	downloaded
Size (bytes):	20614
Entropy (8bit):	5.17595898164881
Encrypted:	false
SSDEEP:	384:t3MrnuOjwUrV/J/TtHDSIBz3JQy7jHnLm8KyRqW14+mqleIqZqRuN2Sh99mvnvMu:qNJ/TtHPLzh0RN2A992vqfZH8v
MD5:	8933F774E3DBCABD5FF57501088E7CE8
SHA1:	5CA86B09518588A0CAACFC9637C6F0BB672B050B
SHA-256:	C11B20022E259109E5EFB462B8A3158D1B97D7E4834440885A000DC21E4AC3BA
SHA-512:	C6CF58CC3DC61C2BF812BA31B14F60B9144845AEDF5E6BDDBC6B28B86EBBBE840E7EA1B37ED3E8750CED5E66CA1CB73AB93464619937DC7B320AF8B0E6163C14
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/ee1b3a27ac4a0b1a.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"maTNiA\":\"Start of list\",\"iGADsg\":\"Skip to search\",\"wMnAiQ\":\"Chrome\",\"H8jBeQ\":\"End of template list\",\"0d5jUg\":\"Start your free Pro trial\",\"nGBlYg\":\"Change email\",\"f3MnZw\":\"Sign up with single sign-on (SSO)\",\"yi+ahA\":\"Main menu\",\"PTuazw\":\"Canva for Business\",\"LE4MeQ\":\"Esc\",\"q4OW6A\":\"Your birthday can.t be in the future\",\"OtY4Bg\":\"Contact us to get Canva for Campus\",\"R+PRow\":\"Turn your memories into photo albums, your designs into T-shirts, and your branding into <a data-anchor-id=\\\"business_cards\\\" href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">business cards</a>, <a data-anchor-id=\\\"flyers\\\" href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">flyers</a> or <a data-anchor-id=\\\"invites\\\" href=\\\"{2}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">invites</a>. Get all your printing done right here with free delivery to your doorstep.\",\"28rSJA\":\"Try {0}, th

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	12707
Entropy (8bit):	7.948022771844786
Encrypted:	false
SSDEEP:	384:qjAMuE7uYo/EHozn8xUfXGaiFW/U52Y+/m7B65Jq:qjAVEVnIAxU/GaFU17BKM
MD5:	D311B6FCD38C8D66E25A8AB6676E4F60
SHA1:	9E499D885F374309F5036178AA0199F4DDF34702
SHA-256:	F051349D74BD6D64B906DB460547CCB359A072EF3B68A436F3A1C8317BD729D5
SHA-512:	948B6D501BBEB6023F585D5DE5807E0E75773CA9DE051436118818D3B0199C59650D7D6C36308D33A0B2B798912EE9A7FEA0E6CF7FEA4B536F16C74BCB7A74B9
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........6...................................................................(................L.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.QC5PUAU.T.PUAU.T.PUAU.T.PUAU.T...AU.T.r.r.r..............P.h..r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r....16.[L...r...L7-0..r...L7-^.@s..QCj.*....f.vWW...._..Z7......n....+..2c.E.?h.L9...,....5.>.../.\|.O..?\|........DN.PZ....r..r.t..X.....O...o....w...>.>.....y3.Yc......F.......a.0...K......>yu.#..%Y..uj....H......Z.f7i.......8F....M..$..~O.uz,..~;.O.O....L....lb.P..=,....EA.....?...9.q.a.Qq...>6.+.....[..,u.q...E.>....>..ct.c.n.>....4S.?}".2F.z.NS.~...~...#.V..'..u...vo....d...".~Y..$o........z'.1%.;.D.K..._M.....z..}z;.?x]..<......?...%.2>....p.... ..%c7.6...1.+.~P.......f. .qbIz.....$.{...TK...w=WW.].w....>...K..:....75.u..w.t]..%..........\|c..o.......3p.x...e.A.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	5.428667334618442
Encrypted:	false
SSDEEP:	24:jaoxxNTmYUn8G9P71Mao2NTmYUn8G9P8LdRdP:ja8bTmYU8G9zCa7TmYU8G9kLdR5
MD5:	1AB740DDEA96AAD67269E63555EA307F
SHA1:	3DF54DA3C74A4A021737B8093A8826BF32D622B7
SHA-256:	7E9F95D52F40A194F3C1C0369D7A609806ECCEB0021C2DDC734389D97F36C16A
SHA-512:	2191472847F165C50C05963F2E5431BEBA8DD183A8B115F0A97DE6F520AAFDECBBB5DE92925760EF421A961EFBE5CEDCAAC4CA96B477BB5E7D65ADFB0CE33B27
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=298474064;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=298474064;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=164944727

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	86568
Entropy (8bit):	5.457219499623563
Encrypted:	false
SSDEEP:	1536:TmFHEAL3rALyA/5P1d9ewUsOC54l0LLrbSPxlPZpCPzlvumW04lCJgz:TmFkkGl13ewUsOI4lGzSPxlPqPZvumDU
MD5:	0D9A1AE7E118ABDF0ED427BB3E933AF1
SHA1:	F3535DBC6E87FDB518E9E5E55539DB340300EF96
SHA-256:	3B922502AF04F785C08A068C9EBA1F7C540282ECA9760737E303C26EC93C8413
SHA-512:	ADA4B6B693D73F8F31D0E137E143B2CD65DA97093F7D0B667F3F4E0E730392A4E2590CA7BECD47BF9CE871C7A61238F2BC6127F19AD20741EA98DD07D317264A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/32c7909a0316c8d5.vendor.js
Preview:	(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[25436],{353610:(t,e,n)=>{"use strict";n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}setupOnce(t,e){const n=t=>{const n=e().getIntegration(i);if(n){try{if(function(t,e){if(!e)return!1;if(function(t,e){const n=t.message,r=e.message;if(!n&&!r)return!1;if(n&&!r\|\|!n&&r)return!1;if(n!==r)return!1;if(!a(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;if(function(t,e){const n=s(e),r=s(t);if(!n\|\|!r)return!1;if(n.type!==r.type\|\|n.value!==r.value)return!1;if(!a(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;return!1}(t,n._previousEvent))return("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&r.kg.warn("Event dropped due to being a duplicate of previously captured event."),null}catch(c){return n._previousEvent=t}return n._previousEvent=t}return t};n.id=this.name,t(n)}}function o(t,e){let n=c(t),r=c(e)

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7572
Entropy (8bit):	7.95109469059555
Encrypted:	false
SSDEEP:	192:2ujWU8csy0G+4etY2ZA1c6VA7wO8jO2JIQpUOXrs4zm+jq1:V/8Vy0GWt0GXT2J5pps4zm++1
MD5:	C9948FD1DBC140EF7366D88A95DCA12A
SHA1:	500C6E43BB84DC66B29C1A06394D28B894841D37
SHA-256:	6A4C3E69530BEE548E147D171B4E4E5452B46EF966E3FBC2D575FCD7BF059AD7
SHA-512:	906A2F66F60038DC7041906738F64B3129D1AE775FE481C3E943B57AB7C4F85A340729F4E51166B6EAA6C204F20B7941788F9C184012476150FB0BBCA2044F78
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/9cf118fb-ed55-479b-ba72-7463abf6c920/docs_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D....................#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma..................mdat....?. .r...m2.9f../A'....?p..............Z....P.6....hg. ....$....<P.t..7...3d.+.h.<v}xZp.....d.Z./yG...=.E....Q5....^g..w..`...4.._..~.G..wF$t...._..4.?..bwS._.[.HE.6.+......_5..Bx.bBw..^2.f..;]..$..=R..h.g?.I.(.@....(.[O.YX8...2....[.._h^.dQ.......[u..A...u.H.k..".~..^..#.."...Qsn...R....>.xZ._...jnMX1..y.5D.8..<.l....I..l..+C.=...k.D....;....M...@o.y.FDTa.~./...t.9...B....z.o.n.^..#.u...N0..%.(.....D....o.&r............Q I.jn.(A..Yj.....X....@..e....0Yw...l.]l...F.V..3(7.r..{.;.VE...X.^t...Y.F.6KZ..85....7h.\.-.Aa.R.}....gO8.G...`.wE..Yf.C..,.L'..R.w.=N."...P..L.CN..V../ `QGQE.....T...y.cp.....$...b...Dc.).h'....n!.}o.wxD.~#.c....g4.....9.....L......D5N...2.c..;V.d.o....z.......+.V...P.P.zNx2.VU..m...0..r(....~

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44830), with no line terminators
Category:	downloaded
Size (bytes):	44830
Entropy (8bit):	4.914258487897346
Encrypted:	false
SSDEEP:	384:HhtNrX0XWEDtaPm9NaQv7YrGL6/Z7vp3VXhBNmzpSZ2Lc2:HhtNlm9Q3VxBNiSy
MD5:	4ED7F59AC0440D4E1E5BF68902BBA227
SHA1:	D7288C6EDDBE0777FE0CC259FAA7D6AE0002F52A
SHA-256:	03E5E3BBEBD97601EA9E32DA945D3FD50DD892138710D698A1AC5C39590F04FA
SHA-512:	A89AC46B03BBB672A6635BDB77E82BAEEEC8CA71086CA47B66BFE146B20C13FC1052EFB5667606EFDD379208DE5D5916F89484C10AC5F6A71AEAC831820DC123
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/404":["static/chunks/pages/404.f4e427e3.css","static/chunks/pages/404-1a1d037998f52dd8.js"],"/500_test":["static/chunks/pages/500_test-afc2c724ba3f3060.js"],"/_error":["static/chunks/pages/_error.775ef23b.css","static/chunks/pages/_error-c3f13fdae0b3d6dc.js"],"/brand/activation/canva_create_23/post_v2":["static/chunks/pages/brand/activation/canva_create_23/post_v2.045d5763.css","static/chunks/pages/brand/activation/canva_create_23/post_v2-cb305bd5fb2a6447.js"],"/brand/activation/canva_create_24":["static/chunks/pages/brand/activation/canva_create_24.4d741bec.css","static/chunks/pages/brand/activation/canva_create_24-f2b5a1901cf11595.js"],"/brand/activation/canva_create_24_bigmarker":["static/chunks/pages/brand/activation/canva_create_24_bigmarker.4d741bec.css","static/chunks/pages/brand/activation/canva_create_24_bigmarker-8c6d1223d497688e.js"],"/brand/activation/community_awards":["static/chunks/pages/brand

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P2AyQLQh03FBpexox17ttsJjA%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8182)
Category:	downloaded
Size (bytes):	8245
Entropy (8bit):	5.710377899326097
Encrypted:	false
SSDEEP:	192:GIJRrvMGclMr9lT/gR4xKumSf5vhIlXMAc/Z+:GIJRrvNclan/A2R5ZS8r/U
MD5:	0EF57AEAD48F2770BAF9C14C80E20556
SHA1:	601F2E4D66B673341D31A83F205D0EF514BF3B16
SHA-256:	B149EAE6CECB8ED25A52DC916AE8631ED9DA8643BB64BE31875E1F2962B96FE8
SHA-512:	9F6072EC48DEFCD1B4781B2853BDAAFB8811076FB145A2271466AAD070C8353A886E7EA2DCAF5A57CED60424D86047C284114D79B55F2F0D74F858906883E2B8
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/32d63e885d7fa985.ltr.css
Preview:	.DcyBDA{display:flex;height:100%;place-items:center;width:100%}.light{---2C5tw:rgba(64,87,109,.07)}.dark{---2C5tw:hsla(0,0%,100%,.15)}.OnooSw{direction:ltr;display:inline-flex}.OnooSw .c_8JMw{margin:0 2px}.OnooSw .c_8JMw:first-child{margin-left:0}.OnooSw .c_8JMw:last-child{margin-right:0}.c_8JMw{border-radius:4px;box-sizing:border-box;display:inline-block}.c_8JMw.pYax_Q{height:16px;line-height:16px;padding:0 4px}.c_8JMw.fO2LDQ{height:24px;line-height:24px;padding:0 8px}.c_8JMw.v3ioMw{padding:0;text-align:center}.c_8JMw.pYax_Q.v3ioMw{width:16px}.c_8JMw.fO2LDQ.v3ioMw{width:24px}.c_8JMw{background-color:var(---2C5tw);color:var(--pUV7hA)}._AUJKQ{left:0;position:fixed;top:0}._1gRP3Q{position:absolute}[x-placement^=top] ._1gRP3Q{top:100%;transform:rotate(180deg)}[x-placement^=right] ._1gRP3Q{right:100%;transform:rotate(-90deg)}[x-placement^=bottom] ._1gRP3Q{bottom:100%}[x-placement^=left] ._1gRP3Q{left:100%;transform:rotate(90deg)}.QeqCOA{height:100vh;left:0;position:fixed;top:0;width:100vw}

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225445
Entropy (8bit):	5.378711341053158
Encrypted:	false
SSDEEP:	3072:yhwvwV82wOdix0bgz6Fk7YLUaLdmBRDYH:yhwvwUOExEQokbasbDYH
MD5:	645FC548E91F44AA4E1226EE86502370
SHA1:	E4075A2E73B3AB050D85F985847E5DB554B3B2C2
SHA-256:	6265CA724F73E24568A94C7EA752B44E491C10231BFC8E80E86CD3F02EAB2E71
SHA-512:	F6E58EFE8E5B084703B995C644C4D530F4955909DDBBB23E21F8939DD6C8D57C82A62E249561D4B1CDCDEFDCB42C1747CC166145A936A928C59CC53B51E23BDE
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.ad6500eebe72fe1c39dd.js
Preview:	/! For license information please see modules.ad6500eebe72fe1c39dd.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	11308
Entropy (8bit):	7.952587527823791
Encrypted:	false
SSDEEP:	192:2LSjP4afwHQ29ISuNq5y1HyJL3ZEWVyK5tODsKZfziG+IERcN7yRaoA:CSDY6Nn1Hyx7eDseOBq7yRaoA
MD5:	D43C0879455104CBD2A3FFD3D84C73AA
SHA1:	4F75BA0E24E3C93630CA18E9611892474FEAE8B9
SHA-256:	66AF41C0CC3FB411B1230DC6503990CC0F861C527B15CED89FED057C4B8137FD
SHA-512:	165D71BDC7B2C925ABFFADA55B4427574CCA5EF753FB1EB8587C084B13B8A045DA657A89EE094D031AF0EF0A4F807FD8FEBA34C9C16B0CC8C6A3326BCAFDAACB
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........7....................................................................B.................P%.P%.P%.P%.P%.P%.P%.P.DM%.))R.R.R.R.R.R.R.R.R.R.R.R.R.R.(+.R..R.(..(..(..(..(..(..(Q(Q.D.R.R.R.R.R.R.R.R.R.R.R.R.R.R.R.A......T....].WK.P......L.R......0.c.n^......z.7D\s~{..{d..1s.}~.?...~\xv.....[OKsy<.0.&......4..(..0....Ii...\|..../G....C.7.X.o.>.O..V..o....IX5....ev.....9.C...J..&......]./...Z.bHrY.+u.~{.w...i.s..X9W..$.^...&9)..:.....N.........).T.JEJEJEZ?ws.m...v~.....n.....u...Et.??Q.tNe...&.w.....\.@q7Q.?..F!..u.)[.."."P...T.T.T.U.=I..Q].w>......`...Wm..F'...mM...f..g?n.......\|.....1........]R.R.(.)T...J.......[j=..y..._...5...,.Nm{..r..E.O......\|.....).x^.J'...@..).J.T.W..\|....z......%._N.>...........6......d..o.Od.......0)...Wc(..AIJ...+(.).o...U...R\|...<=.oc...=pb..p.e..o.....*.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.996648715141466
Encrypted:	true
SSDEEP:	24576:TT9vjz5Bna7YY5PsZn3XBI5+vHR/S+CO1g/QMCqMMAMmYyPkv140jyroEKg:n9/WzlsVBI5+vRqqjjMcYW0pg
MD5:	B349BD2882EDE2B3E91F589E638A0F17
SHA1:	A82E466848244291C52AE19CD92B3A7609ED9DC7
SHA-256:	65316D4639C3C088C479CCD76DD6902763375DEB90F4D550BDC1942899C422DD
SHA-512:	A9AB1A9AB9934DBA016D205A353885DD3367C5E71D3862E433C087A05C243A0D208A010FCAE00A89CD458D7DF20B5F5009234AFF224B2BC550ECEE9F0BBBC7B5
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375446/c_howto_website_1284x721.mp4:2f73406e469265:0
Preview:	... ftypisom....isomiso2avc1mp41....free...fmdat..........E...H..,. .#..x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=28.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e.....2.8...#..^.x.<..h(.F......E....u...kK {.....$.R...BG,...bFS..0mY.8..1...P!.D......... a..vO.J..i..l...4.va.....^.e?UKU.f!n.;,..F..z.\.MbX51#....W..P.}.1=.X......+.Q.<.[.,....F...G... ....}...{ .....~......^p]J)..x......t.$..G/...c.,I1.Nt.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2202)
Category:	downloaded
Size (bytes):	23680
Entropy (8bit):	5.681338787356485
Encrypted:	false
SSDEEP:	384:MnJvJbwMuxedhlPWA4U/0CiOzJZaEsce1tx/+6SJoRgmDF3BcnEb23:MDsMldhlPWTKraEsce1tx/FSJIg+vcnl
MD5:	BDC7524A1C454C8874A61254DC978A01
SHA1:	B947F786DB337D8E8ABE223BB73B271AC096B65D
SHA-256:	36F450AD6165044F93552278A01164B1033487F6AEFE229200641785018130F1
SHA-512:	27BA65355A9A62DE2AD6A6EE32FB154FFC52EF181CDF6EFB64A6938D6CD0CFE9506562F1604F4D36020E4F488B30E813CC416AE866D834778BF936031AC07BA9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/a9d8b9a64cd39a92.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6764],{../***/ 168931:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var bf=__c.bf;var El=__c.El;var zl=__c.zl;var Pe=__c.Pe;var F=__c.F;var Of=__c.Of;var Sl=__c.Sl;var tm=__c.tm;var Fl=__c.Fl;var Dl=__c.Dl;var Th=__c.Th;var Zk=__c.Zk;var vd=__c.vd;var H=__c.H;var I=__c.I;var t0a,u0a,v0a,w0a,S0a,T0a,AX,U0a,W0a,xX,zX,CX,BX,DX,EX,X0a;t0a=function({targetOrigin:a}){return a&&a.length?new r0a(a):new s0a};.u0a=function(){var {Zfa:a}={Zfa:!0};const b=[I("EI982g"),I("M7o0JA"),I("oXwZ+A"),I("93tX3g"),I("zMtkFg"),I("tPRbBg")];a&&b.push(I("BQdI/w"));b.push(I("t1MQ/w"));return{heading:I("fTkEUA"),Ch:b}};v0a=function({VO:a}){return[{heading:I("uZXcjQ"),Ch:[I("8RcrIA"),I("nAABLg"),I("Uonkew"),I("Yu5RNg"),I("V+lDfQ"),I("Zpz

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=574836&conversionId=7801849&fmt=gif&gtmcb=697820667&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	368
Entropy (8bit):	4.546742488437108
Encrypted:	false
SSDEEP:	6:tI9mc4sl3WfR9F37qCdzU4jQT1m9etUNq1RQv7HD6DVJOp0zjyA0mI4YLJ5TDh:t41WffF37vdz3QT49etN127gtvb0mE/x
MD5:	0483F2B648DCC986D01385062052AE1C
SHA1:	61BD815F1497863265A76D92623042835E5E7FE2
SHA-256:	09A743EE0C32CA57C9BE64B13B29C396310D1DD309CB4D7D3BE722E47DB95F27
SHA-512:	359F9BCC2441DC48FFBE69353BB7D4143A2037B0263BD5F0CFB06B14D5F15D9A6E574930E88A84081C61698BF3E2F5333BF9081865183AA7F9202AAC078C10FF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1.751 22.587 11.216 31.568 18 34.034c6.783-2.466 16.249-11.447 17.617-19.959.17-.721.268-1.469.268-2.242z"/></svg>

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=574836&conversionId=7348708&fmt=gif&gtmcb=2012581749&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4844
Entropy (8bit):	7.954812740514147
Encrypted:	false
SSDEEP:	96:taxqbdmlhxN7Dm2jnwfHX5KI16YNMHmqJXSxFhSXvy7gcNwjeMKS0p:YxmdmzDm2jnw/QOMJXOhl7TSiMK9
MD5:	EBA96086C9262C38A45B7492B3F8FEA2
SHA1:	6BEC7C98BC4470BE2AA4A2084F0CA3D323814599
SHA-256:	96DD97FEEC52EC2EF570FB928EBAB3CBBA0F1229CCF24D61A71EE6E559B0A2FA
SHA-512:	DF2D13B3E371322998BFF53BE025F16AD8F426AD0CBFEA7A828C3644D1315F1DB43A7BDA67AD0D09A79249F86627955C0297608C6A98456D941D76EE2A4EDA21
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232025/Features_Editor.png
Preview:	RIFF....WEBPVP8L..../.AH.....m%.+0t...A.F...H......z...?.2p..g[[{./.>..KP.7..d.......D.-..+..'...!&.....-.i`..U.jB..d.Q.C......V.}#>o..s...6.gZ2.............i[h....br....GN......o..G.p]h.}....~........T.\|v...#k.Ku.S.kB.R.'#L1......Y...ej/T...m.$.Yo.@....T.U.N.....h.F..W...(Z..."Y...:n..u...Sr...,.Y$.n...$...IbV.17...rjv..)9...^...kU1.(g,..&P...#.......@.....B}}.[7.m[...$ww.r.......?..@..[.O@ED......y>..B.2..\...O..0134..j.....0..D2<gvB0Cquu"a..b.P..C....8.0..".b}....P".._%..1..$...1w."Q.2.7.(.0.;$......H..D....P"a.\|.CCx%... ".D....m....?..~.=.V?.2@.h...S....../.#..r..!.....D.....L"G...z.t.\|^De.DB.......D..`.C....J$.8...t...$.........`5..<..... .!.o.P..,".!..D.AH...d..."....L..@By.J.<c..9..).a.Z~...E:!H.H...a"A..&.M@.......H..HI#.e...G.......C.....<H......30.......D...a.h....).K.y.U.....>R>@..).......n.....O7.....^..P.o.......T.W...."../.:$...=b./..C."vHT...1...Xq\|.A....@"Mpt...n6./!N..6r.....b..@...}....&.h4...w....G.a...@.W.N...j....Fk.pz...(

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4237
Entropy (8bit):	4.846879757794447
Encrypted:	false
SSDEEP:	96:hd5ln2/5P5OJ+qKQgSEzbiJU4P7RFHailLvSePrt:h7l2BxO+qmSEyJU4ll1lL6w
MD5:	12487A1E0770D29351BD4CE4F87EC8FE
SHA1:	129A54E917357ADAF95CDD2F4B36BB47F49FEAF6
SHA-256:	E97D7562158117DCD1E1BA6E52145602026CDF120D5A535E3D7390FD5EB2AE9E
SHA-512:	2A920B9405301FD2726BD6C84CB7351C9F917A2A5EC56AA3EB123BC0EE41F0A7BA60739231417113A06E67CC5D5CEEDE1C753B6BA3C0A269A2A7EB65809E481F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/12487a1e0770d29351bd4ce4f87ec8fe.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="80" height="30" viewBox="0 0 80 30"><defs><radialGradient id="_2002046508__a" cx="0" cy="0" r="1" gradientTransform="matrix(16.80002 -17.28 11.48403 11.16504 40.96 29)" gradientUnits="userSpaceOnUse"><stop stop-color="#6420FF"/><stop offset="1" stop-color="#6420FF" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__b" cx="0" cy="0" r="1" gradientTransform="matrix(46.71996 4.16 -3.31561 37.23688 1.92 17.64)" gradientUnits="userSpaceOnUse"><stop offset=".25" stop-color="#00C4CC"/><stop offset="1" stop-color="#00C4CC" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__c" cx="0" cy="0" r="1" gradientTransform="rotate(-38.85 54.22 -35.3) scale(30.226 20.6676)" gradientUnits="userSpaceOnUse"><stop stop-color="#6420FF"/><stop offset="1" stop-color="#6420FF" stop-opacity="0"/></radialGradient><radialGradient id="_2002046508__d" cx="0" cy="0" r="1" gradientTransform="matrix(31.32001 -15.36 10.50269 21.41566 2.28 26

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7276
Entropy (8bit):	7.97603203454372
Encrypted:	false
SSDEEP:	192:66p80ABRtou7VkpwlhRW9OFdp9cOdpIukdAiUW+bHQ6:jTABR6olAE33cOxqAZWq7
MD5:	39865E4FCCC4D76C6281BCE3D480B5FF
SHA1:	A241D2D444A686E763E7047140BAADF6EA6B7042
SHA-256:	1A0A5CC419587213D46A2195434617F2332ABA764C11CA5EA965C9609F21D72B
SHA-512:	D7FFF55942122610D8BB41CB23C58F1DA968291F6D0C372B853BC30104074115303FFECEF1ADA83BB7C2980EE81C3EB4AD1F1A20B2CA97C121A5A8B6D5273C0B
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232027/Features_Apps.png
Preview:	RIFFd...WEBPVP8LW.../.AH...6.mU..}w............I..d.6....l.IS]...'..m;....r.}arm.{g?i..m..j....h:..i._..9$..D.s...f...K.............*..c..H......W..`..`K8.....#^.....].}\p...Y}..?......`.T..%....Z..........J.JC.:._...........U......J...J)..A}..z.KYJKN~..c.....M.A..?.y.o...)..Q,....\.......gY.Y...m...._.`.`......C...M..8.d......4z.Nl....Q!...a...^s^}.m....7../..s.....'..PXU.x..%`B.... M'.h..4.J....O[\|...C...8.....(....B.7...O..Y.y.(....4..z.X.8.....?..C!"&.8.....+B..@..x...P..:\S..{([...m.._....Y........q.r.....R3....g"......{`@r.YN.......r.Q..>....'j.M..s...Vy$...J..D.Ep%.............d[j....o..8...H.I.m.m....@'a.........E..B..3....}0......H.$).yWNM!....>@...G.$..6....s`..,!..2...!.,.h".G...d[Ar....mB..j.../....@..........k9...._.....\|^.X... .X.F7.b=....O.N...~.o]'.B.7?..;...M.\|.....-.x..z=W..E.g'.z<.s>...V.oD+...`0.Z..v.g..+..U.+...@..i:..Q].5.].O.v._c.......LW)..7..\|....s.b%~^J+..~...z.@..c}z.z.%..\|H...\|..m....e....s.x..d1.s.....A

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (671)
Category:	downloaded
Size (bytes):	757885
Entropy (8bit):	5.755569129126656
Encrypted:	false
SSDEEP:	12288:186BF6w+3P+x5MkZve4m2SXSl3e3vItt7+bckKrXOIXnj0+VgJw5gX65psHP2Tsf:18qF6w+/+x5MkZve4XSil3KAtt7+bckb
MD5:	697626FB6E72876B644BD5A6509EEBE4
SHA1:	92F138690F5D7FE670D4A8D187EE486E74DCC607
SHA-256:	633D19AD29FE77A8B31BC0DDBF20AEC1F8C0CAA1C05784B63259570F70114368
SHA-512:	B6CBB7EE2F7E80135B7C0DA4E6D384CF9A7D4CFD9EE452AC1475970E82D224D0DA1BB04AF0E9418C9C37B09B7AFD37EF2BFFCCB911AF7FE132F7EBF481CD96CF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1c6dfi.6455dfe21cb752c0.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var gC;var rB;var AA;var pz;var lj;var Ay;var wu;var vu;var ou;var nu;var Gg;var Ra;var ts;var rs;var cs;var sr;var qr;var ur;var Ar;var zr;var da;var dr;var qq;var yq;var Aq;var lq;var sq;var oq;var t;var mq;var S;var n;var bb;var v;var O;var Q;var nq;var R;var m;var qb;var tq;var Pa;var w;var U;var A;var C;var wp;var kp;var ko;var Dl;var tm;var Fl;var ud;var df;var Vl;var Qf;var vd;var Rl;var Hl;var El;var zl;var Zk;var bj;var Kh;var Lk;var vf;var Zj;var Xj;var Vj;var Rj;var Qj;var Pj;var bf;var Fd;.var gg;var Ti;var Ji;var Ei;var $g;var si;var tb;var qh;var Th;var Sh;var Lh;va

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	289443
Entropy (8bit):	5.57723990009558
Encrypted:	false
SSDEEP:	6144:p4JgRt0FVkxYBCHmJ0DpR89tBqIDsHp0fY:iJAQVkiBe
MD5:	8138D340BDDC18B70CABF9D1DCAB28B6
SHA1:	E6879D179AD3EE99613C6A186404131471C5C0B4
SHA-256:	16D2E96E0E56A0F4851966DF6AD2493CF14D0B3BCFB3E32CACE10E2973F2F34D
SHA-512:	0508E404DB06174B86A6E489F531FD96B24AED4A69A1D0AFC5B38EC4DF082306B5DB04047E9E33F2F1FBEAE74186CEB25EB5A1A3FF9684B709ECAF22C853AB42
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EPWEMH6717&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":f

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3779)
Category:	downloaded
Size (bytes):	178930
Entropy (8bit):	5.717852420879672
Encrypted:	false
SSDEEP:	3072:JYZM6E4EaxHECpHjQi4eL1G1rU+RpG11tM8u+7KM6owkAeW7/lJLnuT:JYZM6E4NxH7jieL1G1dGXtM8kM6owkAE
MD5:	60AF436C57BECC35DC836DCB271264B4
SHA1:	00F27BAFE7BDF865305EADB124D1BCE20A0EA373
SHA-256:	FCE2A2C96FFAF2FC6FE7F977A2129D26BC206DDAF9A277CD444B44925EE3C1D0
SHA-512:	45AD593A969C666CBAA5E319E0B2D6F04F6BFF5474A186EC817F2BB785F6600FF98EF2E3EC9F14E9AB93A75402A7287333DBFB342716587E2946B68D2BAEB48D
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/b7679cc71734357e.js+937696ae4a62b6f0.js+2e5f89b6382f75c7.js+6c0ea36590d49674.strings.js+deb64776b9445b23.js
Preview:	;// __FILE_CONTENT_FOR__:b7679cc71734357e.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2940],{../***/ 708854:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(211312);__web_req__(854037);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var keb,bR,cR,dR,$Q,eR,meb;.__c.ieb=function(a,b={}){const {direction:c="vertical",mode:d="default",Cr:e=!1,flb:f=!0,onChange:g,Rr:h,onNext:k,lqb:l,oqb:m,onSelect:n,onExit:p}=b,[q,r]=feb(()=>-1),u=YQ(a),v=YQ(q),x=YQ(g);u.current=a;v.current=q;x.current=g;const A=ZQ((T=-1)=>{var V;v.current!==T&&(r(v.current=T),null===(V=x.current)\|\|void 0===V?void 0:V.call(x,v.current))},[]),B=ZQ(()=>A(0),[A]),D=ZQ(()=>A(u.current-1),[A]);geb(()=>{A(null!=a?Math.min(v.current,a-1):-1)},[a,A]);const E=ZQ(T=>{T.preventDefault();if(!T.isComposing){var V=.v.current,Z=Math.max(0,V

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35526)
Category:	downloaded
Size (bytes):	35590
Entropy (8bit):	5.246700800994189
Encrypted:	false
SSDEEP:	768:Pi2adKSNZUT6z7w5bfV8yqRXSYqBMTvDWC4s0tUO8FS6Btk:Pi2g3Vs5JrYXSY7T6JVSSP
MD5:	8B875B81FE2ACC0B9D0C57F25508D4CC
SHA1:	A38067EA6598D84C2EA82B5DA455D0961B3A4D21
SHA-256:	F55D183552A2EDE7A6A0D4EBF8C17ADB83ECF4E33B9ECB4577C39DBC8C750C5C
SHA-512:	29CF2D2D469A75E62A5B21A072D7D292CC01CACBDC6646CF830A004D0E14AED22BB28E3C7BDB7EFEBECE61F6E6955E6D4C755D44CC830BBCBD5D7FF366606ACD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/549c0d12f1f1d3ca.runtime.js
Preview:	(()=>{"use strict";var e,r,t,f,s,n={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=n,i.amdD=function(){throw new Error("define cannot be used indirect")},i.amdO={},e=[],i.O=(r,t,f,s)=>{if(!t){var n=1/0;for(u=0;u<e.length;u++){for(var[t,f,s]=e[u],c=!0,d=0;d<t.length;d++)if((!1&s\|\|n>=s)&&Object.keys(i.O).every((e=>i.O[e](t[d]))))t.splice(d--,1);else if(c=!1,s<n)n=s;if(c){e.splice(u--,1);var a=f();if(void 0!==a)r=a}}return r}else{s=s\|\|0;for(var u=e.length;u>0&&e[u-1][2]>s;u--)e[u]=e[u-1];e[u]=[t,f,s]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,f){if(1&f)e=this(e);if(8&f)return e;if("object"==typeof e&&e){if(4&f&&e.__esModule)return e;if(16&f&&"function"==typeof e.then)return e}var s=Object.create(null);i.r(s);var n={};r=r\|\|[null,t({}),t([]),t(t)];for(var c=

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1138)
Category:	downloaded
Size (bytes):	3004
Entropy (8bit):	5.483605544996166
Encrypted:	false
SSDEEP:	48:ja8bqlgZkYiG9UCa7qlgZkYiG9ZLa8bqlg3sYiG9UCa7qlg3sYiG9ZLun0Qp9QLV:+8bqlRYw7qlRYi8bqldYw7qldYm0Qp9W
MD5:	7328A300D5E47990C3D786AD011AB8E6
SHA1:	574511A5CF313C0784B7D470B3A665495B06638B
SHA-256:	5E6C0ABEA5468AB90B708F0641974F8D6B75AFCAA53EB071CA31113253FA9D0B
SHA-512:	CE3B414EA5CBBF415AD17C0FDA902C684A1356D9166217FC66363449DF34D3AAD358D3A29AFF94A31954080203721D19F0B2BBED188834AD122DB798C7965B8D
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=9&tfd=7026&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;ty

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	5.204233622301515
Encrypted:	false
SSDEEP:	3:kXCcBGKOXVMMBe9wseBnPkXM+2CEVCOXVMMBYVO/Ypf7WssMB1iqLy:KrGzVTe9wsyvV7VTYVbMsTB+
MD5:	A6F8A04613DEE769174CE0AFE39D1530
SHA1:	DAA9838A82D25B3FFAC0CACC9C275E1CFC861271
SHA-256:	70D4C486541D1C73DB35B62A1B56E1B9F48614FA5B9B52F70BF6E3FB477EDA03
SHA-512:	9F2FFC5DBA9EAEBBB4938BDF322FE7B361F26AE49905311D1E2983D7E7815BFA6EB0298F91A69B99E8FCD77A4CCD485B894D8D130DC6E1ACC616E0DD8E0E8C56
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/40f0ce866d9a0621.ltr.css
Preview:	.NiPPrQ{grid-gap:16px;display:grid;overflow:hidden}.Amj8Dw{grid-row-gap:16px;display:grid}./# sourceMappingURL=sourcemaps/40f0ce866d9a0621.ltr.css.map/

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7199)
Category:	downloaded
Size (bytes):	7262
Entropy (8bit):	5.512421488822817
Encrypted:	false
SSDEEP:	96:Lv5CWoGk5zRzC+Kdn7YZpCePxaap/h+Uu/5324MXCGWodARPa3lfeGLhXSFkgUny:5YZU8HQUu52V+035LhXSFIOTjH3fVzX
MD5:	059D9CB8485F941D2BD36E604587BC4A
SHA1:	5D106C0B02FD162C113C2C175A4EEA57BC5B4AF7
SHA-256:	47A27B79A424A0CCEF8AED0C28926FE1582FB1BFCDD8A27065581807FFC14AA2
SHA-512:	756C030DE2CD0DCB21D3F13472D61E1AD3083C6372F4D128A73C8AB4053D23E438C22D3CFAE295AC9633AEE3F5CD849CD3B8B65F3576D2D06958489468F1F069
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/de918408abfb519f.ltr.css
Preview:	.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:rgba(53,71,90,.2);--on21aw:rgba(57,76,96,.15);--FNUQ4g:rgba(53,71,90,.2);--6Rd7UQ:rgba(13,18,22,0);--nfu_og:#0d1216;--ux3doQ:rgba(36,49,61,.4);--sz5W9A:rgba(13,18,22,0);--8ZR-UA:rgba(64,87,109,.07);--H8nEqw:rgba(57,76,96,.15);--zuehrg:rgba(13,18,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7);--voBvjA:rgba(13,18,22,.86);--VGxehA:rgba(17,23,29,.6);--QErhlg:#fff;--6kDNlA:hsla(0,0%,100%,.7);--pyoCYg:rgba(57,76,96,.15);--sXgitQ:r

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (588)
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	5.336298405228803
Encrypted:	false
SSDEEP:	12:4bVgkmzJR5eDYRgeXhrDthlTUMWU3RBTNOwaWZFcsxjev:4bVgkU51btXTNZ/e
MD5:	B9E07EBF3A495AFDC191D92549C39214
SHA1:	9A537EEA668126C64F974884F98CCB30C8F4CEAE
SHA-256:	01583C641D7B3E7638F8112A8BA3762D4C793226863DBE1C4020DB9232733AFF
SHA-512:	7F49B4CCDE443CEA91861DF628486DEDA78BC0A5CC9A3D3FD66041204B1DA06F99D5F8D322454079D5419F87D7CAD61C380E206C4AE13F62F714798E3C9FF36B
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/f164963776d698c2.ltr.css
Preview:	._4bTl0w{grid-row-gap:16px;background-color:var(--TlUudQ);border-radius:8px;box-shadow:var(--MPmRHA);box-sizing:border-box;display:grid;max-width:368px;padding:24px;-webkit-user-select:text;-moz-user-select:text;user-select:text}.p8l8Tw{display:flex;justify-content:space-between}.CiVLTw{display:flex;justify-content:flex-end}._59BjlA{min-width:1px}._4zrZYg{opacity:0;pointer-events:auto;transition:box-shadow .3s step-end,opacity .3s ease-in-out;visibility:hidden}._4zrZYg.F5E5eA{box-shadow:0 -16px 20px rgba(14,19,24,.04);opacity:1;transition:opacity .3s ease-in-out;visibility:visible}./# sourceMappingURL=sourcemaps/f164963776d698c2.ltr.css.map/

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1807)
Category:	downloaded
Size (bytes):	10074
Entropy (8bit):	5.738081450011638
Encrypted:	false
SSDEEP:	192:EKaLH3uKZsjTX2gP4wHA5rf4dNjuDbP5VUGOkeEhXKN5JFn5TBHVW:E5+fjT73b3juDbP5VUGoEF4DFn5lVW
MD5:	8B40416FD304164E0BF6B59B54CDD377
SHA1:	0AA79CBD3CA75BCE1182F6EDDAC60DE009203499
SHA-256:	935E84686201517970384840F26D327A95242F4A708D18CF4068E672AF64F8AA
SHA-512:	EE6F3D270939FACFDE85C41595685E1665DF8A733067AF75CF72E2E275334C4EED974B8E85C509CFCABDEB5188A3657CC62973D5F3AA639E600BA755FBF06C62
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/6f50888fcddc9770.strings.js+087c6892f61a9e28.js
Preview:	;// __FILE_CONTENT_FOR__:6f50888fcddc9770.strings.js.(function() {. const messages = JSON.parse("{\"XYz3CA\":\"If you don.t know your ZPE email, please ask your school admin.\",\"zCET4w\":\"We.ll check if you already have an account. You can.t sign up with a mobile number in your current location.\",\"5Rgwdg\":\"Continue\",\"KNSJlg\":\"Continue with email or mobile\",\"ZOsgSQ\":\"Continue with your work email\",\"CICi/g\":\"Continue with Akun belajar.id\",\"JSk2MQ\":\"Continue with email\",\"yT2Crw\":\"Using your work email makes it easier to design together with your team.\",\"x2zp1w\":\"We only support signup with mobile numbers from mainland China. Please try to sign up another way.\",\"bT0bMw\":\"Couldn.t find that mobile. Go back and log in another way.\",\"u1NJyQ\":\"If you.re a student or educator, enter your ZPE email address. We.ll check if you have an account, and help create one if you don.t.\",\"OCF9Pw\":\"Continue with mobile\",\"FNzcgw\":\"Sorry, too many at

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (781)
Category:	downloaded
Size (bytes):	4626
Entropy (8bit):	4.650240114785099
Encrypted:	false
SSDEEP:	96:5Jr0YWaIecI7KrUyQzbrcUrWST0derl/BlY3kSw0JnS7kHCIz5OFe:5JwYWabcI7KrUySbgUlTUe1BW3k/0J2y
MD5:	6286F5A1C818D847D18AB7F0DDE3C347
SHA1:	D3C1C0D5060A01102E93FB0F78DE02C5FBD1A4C4
SHA-256:	46F54A2377F1DE724CA0F5C049BE418CF705CEBF142A71CD8F4B581885AFB25C
SHA-512:	2B797B4B1F1FAE04F812E959F508690ACAF212798330C58EE66D3A9E931F77ADBEB7E7DB336615DB7E8051A0B7E3D48A898BD56CC3761CCFF9ED11EC8AB56E56
Malicious:	false
Reputation:	low
URL:	https://akkadaindevelopment.com/6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document
Preview:	<!DOCTYPE html>.<html>..<head>. <title>Link is not found</title>. <link rel="preconnect" href="https://d2te5kruq0pvbl.cloudfront.net">. <meta name="viewport" content="width=device-width, initial-scale=1"/>. . <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"> . . <link rel="preconnect" href="https://fonts.gstatic.com">. <link href="https://fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap" rel="stylesheet">. <style type="text/css">. html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseli

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570845680&gtmcb=1214763953
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/static/images/favicon-1.ico
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	2479
Entropy (8bit):	5.616740245970337
Encrypted:	false
SSDEEP:	48:ja8b11sYiG9zCa711sYiG9kLuxQp5QLRvaritvkAG9/CCi00GjVQuFdR5:+8bYYH7YYVxQp5ipjtkNdjuc5
MD5:	77C0E89164D20A6E4CA6959D89AD4302
SHA1:	BE573050E20B8FDAA8768D6F7EC46085FD492D6F
SHA-256:	C7AA12F9C782ED430ED55A6B6F5165F1E48B581FA3E50091DBB045ACFB5167BC
SHA-512:	300118974ED44ED4709ABFD86DD34205E996EB11F1E94E8E7B76FF692E368D4228C82353B1B4EC9FF565E6B87F9A6B68DB9F082ABC25FECAEF510B88644CA4D1
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=qualified_session&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571279328122&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=qualified&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=session&ep.custom_product_variant=web-2&ep.custom_qs_audience=Desktop%20web%20session%20with%203%20page%20views&tfd=4060&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ww

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2725
Entropy (8bit):	4.001613792451738
Encrypted:	false
SSDEEP:	48:/a93XK82dedc1J2ghyVSuW2oyhTn2oXU/JS1QwppLYA8n9V7KRSpHW3SdjUjuq:onvcH2wyVSutoqnHWSK4tLYVHH8CEuq
MD5:	749002F5A04F784CC1802D77D2FED423
SHA1:	A82F9B14C9946185D475C946B2EA4B1D724732F7
SHA-256:	E26E8402DEA748478ED971DD8F9626BBC25CEC4776D92A0B768D71A109F82C87
SHA-512:	883CD33B1406E297B068E93CA509E38A54197BC426766AEF6F79D66BCDA96C172E144D302AF174D2D1FEB58091F9FA13139D80B65B9068D58D0A47F83999E9EB
Malicious:	false
Reputation:	low
Preview:	<svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0 .55.139 1.172.521 1.629.172-.501.415-1.502.415-2.184 0-.408-.09-.701-.388-.701-.3 0-.548.574-.548 1.255zm4.603 5.011c0 .868.252 1.612.891 1.612 1.12 0 2.19-2.995 2.19-4.692 0-.77-.19-1.387-.717-1.387-1.221 0-2.364 2.853-2.364 4.467z" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M60 30c0 16.569-13.431 30-30 30C13.431 60 0 46.569 0 30 0 13.431 13.431 0 30 0c16.569 0 30 13.431 30 30zm-6.515 1.462c.035-.106.106-.16.186-.16.178 0 .329.217.329.569 0 1.333-1.38 2.956-2.968 2.956-1.016 0-1.567-.726-1.783-1.724-.655 1.108-1.51 1.736-2.568 1.736-.972 0-2.097-.66-2.097-3.024 0-.818.174-1.638.468-2.388-.694.492-1.42.507-1.9.445-1.228 2.547-3.258 4.95-4.4 4.95-.928 0-1.524-1.751-1.799-3.92-.88 2.323-2.198 3.91-3.495 3.91-1.17 0-1.7

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6016
Entropy (8bit):	7.970153034178287
Encrypted:	false
SSDEEP:	96:HtncbG5qtJF6EU1I9fgun6lIhdE92ofumXNJJtJRJEol56d73wv1tfxL:HFW/f36CPEnumbJPEw6djOfxL
MD5:	6F6F21DDE0FF543F25EA980151A99A3B
SHA1:	21DFAF36856F02895F785A726438C5F6449BD9F8
SHA-256:	3C6CED11083FB20F56DB0E548E54DECBC6098C71BEC4482DFC818FA06C1F52F1
SHA-512:	4FDADA6F422B1FB17C3A83B5452AB6FA67A4A0589F975703AEFAAABFFE35C3F33DB8B5691B9CC9DCE8BEEAB90BDDCD125620745FF4C52ED873751E6862325551
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232030/Features_Collab.png
Preview:	RIFFx...WEBPVP8Ll.../.AH...6..DhD..NHC.....m0.m+...."..$...........=..l~..d.Q$[..t. ....@..^7.....c..".......y.A.i5... .....}.:6.)..t.QEBhc........~............+.8..a..... "&.....).e.t.$U..z...mm..b...d.(.... ....v....$;n.}x7..l..!D..%I.$I..t....,..R....j.,....}...,..6../..9....L\.y.W........]c.LdU6..a.....H...]..S?E.#D..i.zs..S.t...8.K.....8.]...R.0._.^.:@..[.....JC...C..of./...........74..Q...[.ft`.4...:...:}L@.g...H...!.G.b......."%..q.ucF.x.....i@.j.V.5.e._T@;....\........u....k..A .b.M.)0.3jR.`.I....Ep... x..b.rB.g.9A.vQk.........}..l...5.....:.&...Q/.....f..R..0..a\.H......"vS.,...8...-B..3.......{c.:T.p_.K........x..D.\|.&..;$.....d&.>...`...ju..9._C&...c.,...*....Q..T..S5d...4 C7...y4.R.;'.."e{`.^.s..i2.....3..M.t..^Ao.E..K....1...n[.....Z<.>...T....@UQ...b.+?...W..3?..@O.....nM..PU;}.~.W....Wz........P.N.&.:.d+d1........>.P5....cOoR...:4.0...e.;....u.\|..U...\|..].&....X..+.gg.c..cIA=....p.W.CoSH...DQcR$4.\|.Bc.iHp. .95......j...S7...

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38848, version 1.655
Category:	downloaded
Size (bytes):	38848
Entropy (8bit):	7.993669247804477
Encrypted:	true
SSDEEP:	768:SGQkx5jYojomEnKWP2gtvC7smgmSNW82sdRzCGZMc0wbsNm4NY8vikf:3L5LHNY2gU7ZS2gdCCMcQG8KE
MD5:	CFF149EE1E9D2BE50AC77BCD86769D05
SHA1:	A1B8A95DDFE811A098D0298E83DD711E90943732
SHA-256:	C84DE7E52D68BD3B651219E7085236BABC85A0C7C79F21A14F0CDDDBD0FB4B4C
SHA-512:	D27E713343F51A75E909B4A01D3F2FFB95EE82E13A1B21A9D3034D3858579E4C3FEBAE76E1AF706B820E51583254281E256B825F1742167E1E072DC59CDF1AE4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2
Preview:	wOF2..............%(...L..............................j...?HVAR.^?MVARZ.`?STAT$'(..N/....D.\|0....6.$..\|..... ..>. [..q..W.....sgtY.....C.m..X=e...`...~9...?-....h[U.t.-.\..Q.zkm..,..k..RP4...%Z#_1q...H...A.P.T.s#..Q...;......[...H\|..C....i....AW....V....r..'.....`...$r.C$C$..8&.....]:v\x&N..q..........}..+.Q.$OJ............./.Wdb.a..........}.<....}//..B...BHB.!.K.+.).kT#.J).".Xa,e.JqQDtW..o...R..v.W...........;]..w...........7C0.N.^Q.m.......bAn..c8b...VD..(...Q"Z..y..1...o..O_......L.._.f.&........LC.Z................N....=.Y..]...h.).\|....&.1B.....6..].R..3.t)....i........#...`.B.8..D.E\V.(5*...O2..7..93.:.l6.$.B....>._...9..FE.........V.........1...0Al.5g=.....:/...L..3.b......7....... ......j...u...F)......e.g.Xf"C..e...3=..#...y...w...I.@.O.>.J.$........{S.V...e8B.. ."J9..DD."27k"VD..(...}...LHT...a.6-...r..m~.........~.?...NI...!..'F(b.....xb...(."~u...Q..&:.....9#Gm.D....D.&....R\|.D..N...:...".......II'.w_#..X...&:..WQ...\|...oj...RzP....T\|

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.998098503232677
Encrypted:	true
SSDEEP:	24576:fr0T5sO6A1vPpFVTtUYIKkwX+TaSJR+Fhm21x8tkN3+x:oT5ZvvP92BKtXwjCJ9J+x
MD5:	EEB5030D6C65AFF523E1336E542EC5B8
SHA1:	5FD9232D5FF200F511E90B3124A8A9FEF4F09BDC
SHA-256:	7568CF35B813DAB746E5F92C98B8F532EEBEC08BE6B39FB24D68CCC86FA4E24D
SHA-512:	BF5B5A1C7686478815CA6D41292F046DEB03B3AC5F79B68D10D34DF732DEE73C310D611E36A65F4E435B3B1142C9979D16C5DD49A2250B9B73BC05ECAA62D2F0
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4:2f73406e468869:2
Preview:	g-........a...r.-^..#..s....$\|.75$..Q....t..U.};.}.%B.[...Bt...j..dG.V..Zj.{....qV......C.47Far2.-<....2.,S...e..%I.N.C...H.....s...f`...aX...i.]....F....).ib.E>/8..i...4D..d!.Mi..g.\.B....)y.O.:.,a.%.2q.z.Ao.G..M.8..V.F...+.Zb:w.KQ....>.Q....e.....;hi...zW.U.....g.I.'..4.....:.I6.V~r$k.!..V......j5S..$..........4..6.P#...].G.9..i.H.FF.......cx].......n..I......9o..@}.....$...].....c.`...9....e.[.......(..g..Qr...Dg.3.SIV........?2.]....W.8.>k.%..Y.=....Lt.....f.....u...2H-z.I0F..B.CB...=..p.^Q(."#:....E.v.<.RL.~.?..bkX(g...K.....Y`....8..g.i...A.]...(...w5......b.[m....#w........,..[....'...s.)....g..s.KhQx[.......e..K..6.0U....pV......q....$._.~..J.0...x..zv9...L.@J...Rz7..7;.?.....\|h......p..=.&......,y.N....P..(.B^j.,U7kd....s...2p.}.I...S_.h....`M^0&gG0t..U..k..}...2...F.....%B.e...o....Ct..`...nZy.*U`0...L.j.../r.~#'.._.E...\|..B...F...B..bR...i.0........44....f\..,6x.?........v...~,..U...R.......Q....z.-@M.=..dx...u.B.$r.p..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	dropped
Size (bytes):	2784
Entropy (8bit):	5.617923339822728
Encrypted:	false
SSDEEP:	48:ja8bDYiG9zCa7DYiG9kLa8b0BYfG9zCa70BYfG9kLAEENsG9/UVi00LFaAj8dR5:+8bDYH7DYP8b0BYU70BY8EENDymF65
MD5:	8BEFB73DAEE64CF34A942B8FF7A48210
SHA1:	E29A6D0CF10E9574534562D28D1FD72DAA749B11
SHA-256:	E0FFC34A635A9BD7A40D961882F4CF63F6AA35CD1D67F2D4564D59C0217DE25B
SHA-512:	FA8DF0672A5180582711451C77766DD215788DA70B6D0433AF44E201B8A43C1863630C6C27A37D1B974AA5E4EDC665A2993D3768377DC6D464206B711427DF43
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=76073253;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=76073253;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.doublec

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.998985350400618
Encrypted:	true
SSDEEP:	24576:vjBDXGcpAukpBtEzDK87j5110MiIH3aI40N/P:7BDXGsj/10MiMaI4q
MD5:	6CD6B53E0BBDA5462FA8503C8362F35E
SHA1:	1C296AE54BFBC644A0D74B13AC227719705259D9
SHA-256:	93BF61830C33090C51F0770B0126D37D209E9B36E77A3C226B82F253DD0E7BC9
SHA-512:	663D72E4071F5B7E45F38D1ECFB864E1D56DD545BC2FEBC7ACDBD11B892D823D6C819D88E7C054BA3C350E53B0C8102687E8077124D6D8AB4BDFBFD47E4A8573
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4:2f73406e443cfa:2
Preview:	.5.H../BOT...7Nc..1.8..]Q....v...a...E~.d....<.P,.@.jD:...ci0...U.......~.{...f.....-..@{b.G[...l..S....3mA.{...I...pkr}......L.w.[..PMEN.3..9....~...{J.d.]M.S...+.]...o.R.).BID?..x>.c..=. .M..a.'.N.d..e..4!..2..R.#g..vt...,.B.z..j..........%:.....[K.`...Kb3....!....@.......~/.-..3Lw..,..eS.......)........B.;..m;......R..i.h.(..x.V.[F......j....M...M.#.....pq(.L.z9W'........h..rf....+.'..[..'~..kg.d...:).c$.-.K........WJ5..r$..%tE.,o))..kU.%. s......8..1k..;GA...\......Z...e...Fl.YB....oR..w...+.s.]l...%U..O.....\|..F.T.$...G..!..91)Gi...Y......e....\|)n.[ .].N......b...rVk..T..dBr....I..a-..Y;g..s.....R.Zx..]._....+7.m3(....\...W..(....(.+.>..^Q"sL...S..=..S.;.u......f$......?.`.R%.r1.../..@.......F....Vv.Ob...........].g?.'....]V. ..$...........z...0...3......i$....dH}.i3A.Gp.&.?....k^.R.P.h...@...:......q.X.......S...Kx..^.dJbp..)...............L.:.T]..)....Vfx.IfqjR..Mb.Ri.?.......TT..Rrt..?.!..s*......t....YF. F.(.P......p.....f

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5656
Entropy (8bit):	7.925674726708961
Encrypted:	false
SSDEEP:	96:2nr9o8rt4t1kaW9k83s5+mRPel+FenNHpNu6oKmoBNxs77UBGy/sHBw/rT5QB3ws:2BXrw1kaAkJRQrNJN7oKmaGOz/YoT5Qv
MD5:	0EB8BF6AED86D2BF41685FC438422BB1
SHA1:	7D3F262C48EEBB7A1A9BD27E28F20008E1FF8368
SHA-256:	E324568AEBAA0EC8EA38F567DCF2C61750AB87ED84B7BD7EA368F7E4F0A38DCE
SHA-512:	2E25957FB7A92DDFDA8B96CC5DA931AC0B6658B90B3E26FE7CE804D76D2FF059AFE461F03AF662E7EC6EF37FBDB578C80AEF3CE0E50BABE7497358367D7B95CF
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/ca5de8c1-746f-4ed5-9581-5830c5b1d3f0/whiteboards_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D................&...#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma..................mdat....?. .r...m2.f.~/A'....?.............(..."......-.DeB,~...A...ZT$@4!Y]4..n..0......f.....{..[.t...........o.g..B.N..\...o~...z.}.B..^...+.....TI..F.p.zw...s<...7A+......!J....bP./....;...k._....aA...........%....}].&M...(.r........{......(.4.N... .....&Z..n..^.X.R.{.....(q.[....4.5...]...=.............r5..0l%m..+.QW..b......+.&w....e.v.R.....m......X...D..&p....B.q....>,.c..".. x..^...=..MI(R*..U.....0.]}K0._..s!3.,..M......%......#....w0q..m..............`.(..9n.<...pH........P...54...q....k\K$....t].\|....-.] ......;IOyB.w.3..Gh..>..D...G.a.Qo.y.i"..I.d?.].:..5J.6..^9.}. .ea3J".mH..y..D...\..\.Wm_.lS."s.H9......c0.D...X.....3..I.........-g 8.<.......R.(.P......9.5...o.........r.....tV..?.I.4P......~..d#/....Xa..%

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	298
Entropy (8bit):	5.40555309359766
Encrypted:	false
SSDEEP:	6:8XtG5U0L1sLKFTvFehInYDgeaqMFHWpUI:8Xt+U0yLEeQBeahF26I
MD5:	2A4352BC2AE94677588246F20A09475A
SHA1:	4D0EC2B25C5B380274F16A913CAA1D70590CBC2A
SHA-256:	47D0A33DA7F0FE115D1C0855F0DDCB9437C196C3418C6E04D23C6DD8FECC33AD
SHA-512:	1EF3E25237124E383A6B85EA62EE394D900D968857A88B4568E93851C52CD03295791826F5F94F93DFAEC68B29E6B4AEA52605B8A09D61C162262D98D8BF50B3
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7f29663652aa2e36.ltr.css
Preview:	._6X8ASw{color:#bd081c}.eB1ycw{color:#1da1f2}.h7eUeg{height:0;position:relative;width:100%}._3FYLtg{display:grid;grid-template:minmax(0,1fr) /minmax(0,1fr);height:100%;left:0;position:absolute;top:0;width:100%}._3FYLtg>{grid-area:1/1}./# sourceMappingURL=sourcemaps/7f29663652aa2e36.ltr.css.map*/

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4647)
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.709950212554366
Encrypted:	false
SSDEEP:	384:wnJuqmNyFxtE3yyGV6Xa++deaU8YyFQ4nTeWzQWEMKPAH/b2MTjePOGOHcGv2B:wAqmNyFSRQOa++deaUbyFQUXzQW1KPAC
MD5:	E820BDFD8A2DD7CBF30004472DFA20A1
SHA1:	2A1B0D887DB752D4FBF7021EA6827B68C9EA623B
SHA-256:	FB54C100611B9EA5A22F9FDA106B2B7385DE8E1C90FFAB59098538CB34EE64E0
SHA-512:	AFE3229B8D30A9E861019AF03E4588C86BA13669BB235A20163C83A059A889980552816ADAA7338383A848CA7242252F7C04AC7166387B201E19281981231FB6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/390caf0cb1de6bef.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2231],{../***/ 94958:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var qa=__c.qa;var xj=__c.xj;var I=__c.I;var Qea,Pea,Rea,XT,YT,afa,cfa,Nea,Oea,cU,dU,eU;__c.MT=async function(a,b,c){({url:b}=a.hM(b));await a.au(b,__c.vv(a,null===c\|\|void 0===c?void 0:c.target));return new Nea};__c.NT=function(a,b){a.I.track(Oea,Object.assign({},b,{source:a.source}))};__c.OT=function(a){return a instanceof __c.Md&&a.requestId?__c.Dc("Nfq/fA",[__c.ch(a.requestId)]):I("7dV8jg")};.Qea=function(a){if(a.match(PT))return QT.Cx(a);if(a.match(RT)){var b=RT.exec(a);if(!b)throw Error(`invalid hexadecimal triplet color: ${a}`);return new ST(parseInt(b[1]+b[1],16),parseInt(b[2]+b[2],16),parseInt(b[3]+b[3],16))}if(a.match(TT))return QT.Dx(

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1643)
Category:	downloaded
Size (bytes):	5519
Entropy (8bit):	5.560072923439153
Encrypted:	false
SSDEEP:	96:UVoJuccG++QhvZ5nrQGIOJlpQQbt/S1jQuwhn9dakR4D0JH72WzO4ozlMzOA2n:GoJubWQhvZ5nUGHxt/WjQuOn9dakeDaw
MD5:	31CC05CD0CCEE6393B072C425BFEA2EF
SHA1:	D8045242014E1C9374346DCF06282380258443D7
SHA-256:	ECA5538969679C5CCF5C90556BCE7BC4D3E8A6E160241F660F8DF3CA162D450F
SHA-512:	DEEB2F4611F6369AD109A6AF7F6E94C2BC7BA89B80D8335F9A43A9067D4A1444B488087F027F97F4BA23876A34FB52D05E6347C2BBF57A4E9BA628ED87BED217
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/39270ec1591145ae.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[3684],{../***/ 143286:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(795663);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var P8=function(a){return[["spans",a.map(__c.Sf)]]},zBa=function(a,b,c){a.Lr.push(b);const d=()=>{const e=a.Lr.indexOf(b);a.Lr.splice(e,1)};b.then(()=>{c({code:0})},e=>{c({code:1,error:e})}).then(d,d)},Q8=function(a,b){ABa(a,b,()=>{const c=a.Aw.get(b.context.spanId)\|\|[];for(const d of c)Q8(a,d)})},ABa=function(a,b,c){var d,e=null!==(d=b.attrs.get("parent_relative_start_ms"))&&void 0!==d?d:b.duration;e="number"===typeof e?` - ${Math.round(e)}ms`:"";d=null!=b.parentSpanId;var f=null!=b.attrs.get("user_operation_id");.e=`${d?`${"event"===b.hh?"[ChildEvent]":"[ChildSpan]"}: `:"[OpenTelemetryClient]: "}${f?"User Operation - ":"

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=ay5hKn0vzCleCvjfq16gdPZJbIr68Szwfw%2FpKjVao83f56tLaQ23q1eC822mgio%2BGZn5HI7TmVWzuS%2Bxhdsi4bkl88irg4%2BurvxLNWnB%2F0qCalU6TZctSN8y%2BkR1%2FGuoMDEWrMB3MvwWW1ONNFtRcpDvh7deC6HoNXu1JEj%2F7KOG0SCpe0VKi%2BH4IJrnxA%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=922820477
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 151 x 151, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2612
Entropy (8bit):	7.8578256006550316
Encrypted:	false
SSDEEP:	48:H5XIlr2otXlE3rY0Xjudtwmjy5yO6T9Iq0Ob:qlSwlE3rYQjudxjyEOWIjOb
MD5:	778C3F09A12F94E5A832F861B23229EC
SHA1:	8578927B4EC8E468C628D83E467A627A9E6A50B0
SHA-256:	B22D48F94E4107EB080FA4388DC17C68D4319206BADEEA74F1CC0FBFB7061CEC
SHA-512:	E61507E92ECFE1FE339D20EA6BB3107782ABD57C17E20EDFF45B99206A81DED3449CF793FF122B569BA0263BF1558955706A3DF4C911EFB18BD5273F1D58DBE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............./A9K....gAMA......a.....sRGB.........PLTEGpL555.......7_.9a.=f.<c.>h........G..........O......WN.......r.}....j.......)..t.:~.yk^Ng.n].$v.bN.s9.fTyCP..n.K;dC+.:).7&f.:c(....P..l.#<.....z..h...._%.....tRNS....Fy...W.B\....IDATx....0...v...&.$D.Q@D.!v....T;P-{=...Rm..H.._/...f2.^............L......M....z..U..5..M(Y"$)..T.n9Op.T..8.d=.T...%.U..8....M..4lCD...T.`Z6....,...."..{..$.c8.1....v.E..v.......~ODT.a.QB+....N...B".ZIBFFi.......L....AA.]...R..5.mb...]>..;4M...Z...k........U.gMuh.....7(...fE$..Q...c..+....;....l ...o4......(...(.........aG.]Y........-.._.........l....2..Tv.....].....*5Z.....".~Yw@dM...!.bV../Pa.,.._.=....X..T..>...!.e.Z..2:...X6.]...2.-....0.0.X..0r%...v.J........Y(%.0.0......>.X._....FQT9..d....w<.bQ.v... ..@..P.(Q.YBX+.. .fg....&..u...&...C..mO./....d..Le..9....0..C;..0.......:+.i~i......U.~A@.i4.X..Q.:...~.......r..7..Fq ....%...U> ....eY....n.2V.....R6....x..{.B,d{......Px..?.+"....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	dropped
Size (bytes):	24358
Entropy (8bit):	7.983474853622397
Encrypted:	false
SSDEEP:	384:rX0gIrIkOJMDX1SWdeFjZDTIM8s6up2YTKwR6uLi9aWpMcLa5zVup+a6d2dp1MOJ:70gJkvXGZEzs6u1+cfLi5TaRMpB603h
MD5:	4E998BF9187F9DE2C02AE9393FF244AC
SHA1:	7FCEEC796E7971E428731A28AB02C6C8499E1ED5
SHA-256:	52B13D7EE3A2D0C09930130532B1045CF2CE0CDB3D7AEB3588A46DB4488C47B0
SHA-512:	4E056BFA24CF868CBDA0B18AA3F306876DF43ED0FF22F61EABA1D5CE3804EAE5F4653F0911966B552A01F36589BB5EDD5F51410452EAD5C7DEE031EC31771573
Malicious:	false
Reputation:	low
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@....................................[....8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C.%......ispe................pixi............ipma..........................iref........auxl........]rmdat.....fx>..@2......P..... q..n.:t.....h.w..~.;.....y..i)...$...._7...=.F2.....}\|..Lb.Q...{F/..o.....)^.I<c..u..b)4Vy0..W._... .._l7...._..Q.ln.-..H..r..[..}...C.U....k....!.4.:..?F,.qV.(..ARN..p.FuN..2F.%.6-..b...X.s....D......./..G6....#e.2..:s..?....<d.Y...<.Fr.J..B.{.\..I5.W..@......4./s.@.f[^.!v.@.l...#_.EE.%R.l.e.ECQY..{.d...1...#..B.Rw..KTo..UZ.hUR......k:<...d..xhR.qk:f..?L.>.c.).p.A.*..:[.6.....c.7..&?.j._..!~.+As..>.......x..E....T.....9fx>..@2...D4.a..P..6#M[...o......h..0./'.w..i.)....{.q5^r....@.u.Gc......n....y.Q

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H4fhRn:YTn
MD5:	F49DD9BCF6C8F8F10FE021426F138E64
SHA1:	CB277E69B599D7AD1B33AB476C6D89D9D107D790
SHA-256:	220731B08972340DF9A7E177406B94A35363D3B7CFA319CD98A6A33A3B345985
SHA-512:	B50786F7DED96FEB4942FE47241051A7CA319D30F9554FBCC5AEFEAF091E0FD68837CD851E6F03DB36199B094D074C0352042BBDFD4834E9A59325ED71969CE6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlKooIkgfVYixIFDb4upXM=?alt=proto
Preview:	CgkKBw2+LqVzGgA=

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	33069
Entropy (8bit):	7.963299541525907
Encrypted:	false
SSDEEP:	768:fWd/fQVmODohT8HuvHhLLLLLLLVCMJpjMecbzJ8wsdne1si1jZ0:+Bf6mOD2Y6VJ1MecPmXdeh1jq
MD5:	CB1E6372A2643FB86B494E696520920F
SHA1:	C5BD6158A964D3FEC0D40EBDBE7FB82F7BAAE3E1
SHA-256:	A6BA4F3D8F2DE0A1F4E1A083854519DDB9E8AE08BF459C32D1DACBE77EDF4077
SHA-512:	BFE11668E59F95D57725F3FB55A1C2A93D8707EFA7769FD97110BEA1F3CDEC9D375CB334C76B39AB18773E58839458F3D478CBDAB3DF57A33FC95C2F4EEC8443
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB........ePLTEGpL......h.....u4.........................................................................................................................................z............................x..............f.x.....~;........y...x6.{..u3u..m...r0.pNc...m..s{dz.X\|..c+Os.W'=o."r.U[+f..h..b.W59/..V.n4....tRNS.;Aa`i........T....MIDATx...k.Y..w....H...<.l..rC.. .Ff.q..a.K..B.$......~..v.w.V.9.o.....9-.oO..?....._.~....ya\|.4.X..4^.5..'......~..=c?.}r..........t:=.....g.S1L}..%...vj7....Y.n.m.....[.....#[...c..........4..5.su1R0.:.(1.Q.F.....m.>\|..?....F........$......d:...8.-q..s...8...sq1...;.8P.,}.y....b1....f.........iVs2.$..z...J...Y9'...L..d)........up.MB....`....\|..E....Z..d.MM..iz.....in........... ..o....'8..Z\|....>.Yu...R...:.kEQ.%..v....Z..._~s..D$h.c.KB=.........0..........*.."..&..X.....@`. <.@.......K.....v.64.&\|5+

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	2475
Entropy (8bit):	5.648859399388701
Encrypted:	false
SSDEEP:	48:ja8b10YiG9zCa710YiG9kLu+Qp5QLRvaritvkAG9/CCi00CdR5:+8b6YH76YV+Qp5ipjtkNH5
MD5:	EF6CC9E077B34428B21521317A920C14
SHA1:	E16BA0357ED1AB6A6039FC7BBFDFB168E6B4F69D
SHA-256:	6722095AC633422973EC794994B509F2FE20A76EE1059135E8152BF566FFFC55
SHA-512:	BA45931FE3EAB0FC65990829D36E61C73DA2D8EFB2C12C8405FB0C9733FC437E4F41F7977844A2E9902E577B90D047A0409D1A4EA3D6AAEE6E9144A2917DF481
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1943125636;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1943125636;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ww

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXehQ1mfS7CpE24V%2Bj10Wm6vsVQ4f1w%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=hl8epu1s%2FSFn2kIxYQ%2BMLss3ZN3Zc3qT%2Fc6Me8fuvuqOPeeoxnCaPfrchWz9IgqSAHUhBPn%2B80AzFrTAm2jB1Ce0UTDSAJsI%2BOJbV%2Brq0tqDHffKSYiGo4UwDYOqzH6NwlKxJ%2F3Veu%2FNUJbjbR8hyJ2GJ5srj%2FU%2FpKVjtOiRb1FFuIFAE6Tdu7Z4NZrDEQ%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	280305
Entropy (8bit):	5.287289654102618
Encrypted:	false
SSDEEP:	3072:5QNa1jKfmihcqGG1SjabwB1iy8J4upJcYOQK:5QcZ0mDqjSj7B1ir+2TK
MD5:	BE32DD7E87B23C5C67D28598BE46017B
SHA1:	CF466CBD3494FED0EEFC05AD91CADD79939AD270
SHA-256:	415C09A54764F140933FBB6F41EA3CCAD7BEF31BEE2461882DF02F5D29EC9868
SHA-512:	C30036E9DB169533EAFFB4AF06F1483B74D720896FCE1AB99C9EDEB9CB8B4557F5D52675CE23C90387486398631E67067902EB5C2824366658374555DE289266
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/main-3341eddb41618187.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[40179],{"./node_modules/@swc/helpers/lib/_array_like_to_array.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}},"./node_modules/@swc/helpers/lib/_array_with_holes.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return e}},"./node_modules/@swc/helpers/lib/_array_without_holes.js":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(Array.isArray(e))return o.default(e)};var r,o=(r=n("./node_modules/@swc/helpers/lib/_array_like_to_array.js"))&&r.__esModule?r:{default:r}},"./node_modules/@swc/helpers/lib/_assert_this_initialized.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){if(void 0===e)throw new ReferenceError("

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5929)
Category:	downloaded
Size (bytes):	5992
Entropy (8bit):	5.455719667768859
Encrypted:	false
SSDEEP:	96:j5+97/AozcI9DQoovMcTpwnYbIF2pFWzyKG3F678JMZIctQ50Jxjc8w:wFAPI90oovtNwn6IFqYZG3FO8aqc62JM
MD5:	2B6407D7B37F8412DDCE9E9130E3B4D0
SHA1:	C55ED47C0117B02AF81C1544ACEAAA8D5EEF7BC6
SHA-256:	B350E25F8F88B3B5CB15A70B6D9A3DA1F74C3E21662B7D7A2CAEDED1EF7126C2
SHA-512:	FEA27306A04FC7505D37CF85B9151AF226C16DD4990205D6DBFF6D86E8DA083757159AE24ACCC8B2D50BBB90E1D8C96335EA482563EA3EC9311184136F9C77A0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b7d502efeba81d79.ltr.css
Preview:	.zIX4Og{overflow:hidden;position:relative}.cRjeIA{align-self:stretch;flex-grow:1}._7rs_qQ{position:absolute}.QuY7GA:not(:first-child){padding-top:24px}.Ttchpw{margin:0;padding:0}.PF2QHw{color:var(--_mHLrA)}@media (max-width:599px){.leuIsA,.leuIsA._7rs_qQ,.xdldUQ,.xdldUQ._7rs_qQ{position:relative}}@media (min-width:600px) and (max-width:899px){.Mr2aQg,.Mr2aQg._7rs_qQ,.xdldUQ,.xdldUQ._7rs_qQ{position:relative}}@media (min-width:900px) and (max-width:1199px){.k4kOMg,.k4kOMg._7rs_qQ,.xdldUQ,.xdldUQ._7rs_qQ{position:relative}}@media (min-width:1200px){.H3jdMw,.H3jdMw._7rs_qQ,.xdldUQ,.xdldUQ._7rs_qQ{position:relative}}.light{--X0SvgQ:linear-gradient(transparent,transparent 0,#fff 0),linear-gradient(90deg,#00c4cc,#7d2ae8)}.dark{--X0SvgQ:linear-gradient(transparent,transparent 0,#252627 0),linear-gradient(90deg,#00c4cc,#7d2ae8)}.XQZUXw{background-clip:padding-box,border-box;background-image:var(--X0SvgQ);background-origin:border-box;border:1.5px solid transparent;border-radius:16px;position:re

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1230)
Category:	downloaded
Size (bytes):	907297
Entropy (8bit):	5.682060527728626
Encrypted:	false
SSDEEP:	24576:TFpfZKUOzjOIuUcMDYsCV13BxiR36JBZr24FKg0Vct9IwclLDezHfhKI2X3vgE7T:JphKUOzjOIuUcMDYsCV13BxiR36JBZrm
MD5:	AA462B63BA2B818B955C7C426CD89055
SHA1:	241748E64D8E1295CE06E7F36914A3CF7C6172C4
SHA-256:	B7CCA9B89C2666D2575F5C508B0572F69441D4C026C3C519A915B086A4D372A2
SHA-512:	7499FD1F68BC27DB0837989E1F83CEDAA41CF70972C1E363B8F0B47930467AE3D9870933FAF88AD52C13C752E50447E623071DFA2003CE9BF759070C4574EB9B
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/a3d7911ebd1f0a2b.js+17450c9d444078d8.vendor.js+b37b3f4614815390.js+703faf9f1070ed07.js+321d58411689c6aa.js+eb52eb55ba627d30.js+dd4288106d664a45.js+981c688d65077307.js+d6ff7cdeac78319b.js+4bc971d3b683b3b4.js+c1ee67d56c60fbad.js
Preview:	;// __FILE_CONTENT_FOR__:a3d7911ebd1f0a2b.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9003],{../***/ 913728:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(391214);__web_req__(206405);__web_req__(506261);__web_req__(46127);__web_req__(835479);__web_req__(211312);__web_req__(670595);__web_req__(237221);__web_req__(4507);__web_req__(323028);__web_req__(600543);__web_req__(809783);__web_req__(799001);__web_req__(839286);__web_req__(598453);__web_req__(122771);__web_req__(374269);__web_req__(501565);__web_req__(651823);__web_req__(854037);__web_req__(283682);__web_req__(834767);__web_req__(79194);__web_req__(521481);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var WC=__c.WC;var $z=__c.$z;var Zz=__c.Zz;var aq=__c.aq;var iC=__c.iC;var gB=__c.gB;var ro=__c.ro;var Zr=__c.Zr;var bp=__c.bp;var

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	2249
Entropy (8bit):	5.648412143984596
Encrypted:	false
SSDEEP:	48:AOA3K0nkOpcEdLqv3pc6V3XGqePtLpLhFl6KPufXNKJgM9BZpN4uA2/10:+nJ2EdLqPpc6V3hePVpLhFl6KPufXNKi
MD5:	6FAFC2DA0891DA962EDC1C3F2B18683D
SHA1:	DD165BCD270EBF3E11DD7234A642398FBA25155D
SHA-256:	262A2282FE5589472826EE0200D202C9FFB2BA32BA99C743FD345F4D54046E1A
SHA-512:	DD84983781EF012A0EF7458FF6A0A633BFF5BDA51DFD764D497CA98E11116E6B8998991AB445496FB9AFEB4CCC007800C9F7FB9D394E12EE64F19012DF878376
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/c9e61293500ca151.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7772],{../***/ 12058:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var p=__c.p;var W=__c.W;var T=__c.T;var R=__c.R;var y=__c.y;var noa;noa=__c.E(()=>[1,"CENTIMETERS",2,"INCHES",3,"MILLIMETERS",4,"PIXELS"]);__c.A1=y(()=>({width:R("width",1),minWidth:__c.Fx("minWidth",4),maxWidth:__c.Fx("maxWidth",5),height:R("height",2),minHeight:__c.Fx("minHeight",6),maxHeight:__c.Fx("maxHeight",7),units:__c.gb("units",3,noa)}));__c.B1=y(()=>Object.assign({},{},{type:__c.n("A?",1,"SUCCESS")}));__c.C1=y(()=>({}));var D1=y(()=>({url:T(1),width:__c.Dx(2),height:__c.Dx(3),va:W(4)}));var E1=y(()=>({top:R(1),left:R(2)}));var ooa=y(()=>({Fb:p(1,E1),Gb:p(2,E1),Cb:p(3,E1),Bb:p(4,E1)}));var poa=y(()=>({horizontal:R(1),vertical:R(2)}));

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (544)
Category:	downloaded
Size (bytes):	1124
Entropy (8bit):	5.429776360135032
Encrypted:	false
SSDEEP:	24:jaoxxNFYUn8G9P71Mao2NFYUn8G9P8LdRdP:ja8bFYU8G9zCa7FYU8G9kLdR5
MD5:	A25335C52A4C77E54D9143D6CC6E40D6
SHA1:	A44ECE36BA718AF4A18FDFCD66AE7889BB9393BA
SHA-256:	0A735DCEAC542B2DFCEFBFA5EEBFD823588730771D329191DF626D48119B6843
SHA-512:	A5B4EEE7F38B303C7B2250F89271FD3EF0252D60948F850AEB62D8069BC12B883F594E5A1EFEFAEAA94973FEF0B97AD3B5A3E4BDA8D53BF4226BA38407B66C31
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558044&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&_et=6&up.custom_country_code=US&tfd=5230&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27476)
Category:	downloaded
Size (bytes):	27539
Entropy (8bit):	5.515820493806034
Encrypted:	false
SSDEEP:	384:DWXym/xRk2Tz1NktumszvQQQn5LQNru35sNnpUCYzIs:kxFzNQn5EY35sNnp9Yh
MD5:	7CED6BC2350B09156DC369B92C363B19
SHA1:	09D29A3B0CE7834E91CB1A3BC85B4AD78D488FDD
SHA-256:	F93E1B430232B8C733F1B826BB2567A28323E837D5937A8C43B7C9436B87B514
SHA-512:	88FDD747298194ED58D7272588627802F6BF179A86C813B9C6B01262FC99E8813DEBF3FE99D181B112FE77866CC20265DD1D44B0ABD2657B70040E9AF8FD5121
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7c36a23bcd1e46cc.ltr.css
Preview:	.QpwWmA{height:100%;left:0;overflow:hidden;position:absolute;top:0;width:100%}.W7fxeA,._1chiqA,.bMISeQ{fill:#0d1216;stroke:hsla(0,0%,100%,.3);stroke-width:2px;paint-order:stroke}.Rt1H_w{background-color:hsla(0,0%,71%,.22);height:100%;left:0;top:0;width:100%}.Rt1H_w,._5sVuA{position:absolute}._5sVuA{left:50%;top:50%;transform:translate(-50%,-50%)}.bktrlw{stroke:#8d39fa}.bFnJ2A{left:0;overflow:hidden;top:0}._7KaXww,.bFnJ2A{position:absolute}._7KaXww{height:0;width:0}.qhHTGg{pointer-events:none;position:relative}._3K_Erw{animation-fill-mode:forwards;animation-name:_2YzG9A;transform:scale(0)}@keyframes _2YzG9A{to{transform:scale(1)}}.e46cQA{animation-fill-mode:forwards;animation-name:ddDrBg;transform:scaleX(0);transform-origin:left}@keyframes ddDrBg{to{transform:scaleX(1)}}.nnwCJw{animation-fill-mode:forwards;animation-name:wrVtig;transform:scaleY(0);transform-origin:bottom}@keyframes wrVtig{to{transform:scaleY(1)}}.FvAs5g{animation-fill-mode:forwards;animation-name:_3WWjUQ;opacity:0}@keyf

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	7.93466956689922
Encrypted:	false
SSDEEP:	48:w5MPdC6UI5RcJDWdePytNRg5SPu5SKHed1hKkOnFPGhXnl6ywHn:uSw6356DW1tQXdghKkOFAXofHn
MD5:	2FA099B82D5207FAEB48440993DD4674
SHA1:	878ABA8BB1596B46E20D91CB758DACD3FDFE1320
SHA-256:	4D37FC6559BC878D751B5B7C601BF95950C585B9B0992E89FB3FF9DDD8B42CF7
SHA-512:	F8F70152DF70B0FC9BD974D36888B49514A2D9D6E7C80A9120FDA5B32A354F7A5D4A3A709573A4CB10C488D52883D5F2D008243DA084C17D3180E10458353090
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232028/Features_Insights.png
Preview:	RIFFN...WEBPVP8LA.../.AQ.....$e....F.eF.J..m8..T.....sW...$e.Sr.....FV.d5Zr.J..D...8@.f..O......_w...._.V98....V........PQ..d.....3...m$.?.m.......bP..7=..HR...G.=-...6Y`Y6.G.`6....Fr$IYi......{R.$..$5.`..'...mVe...<...,H..:7.....k...-...2..nu-#.6.^.<..v....?. ..9...A$@.-REF.........2...C.."........7.v.E..#.s....^.a....W.g....>.U...<.?o..}...3....y8O.p......~....S.q%..(.......&.xdZ.....].]XL)...!:..9...i....'.E<TdQt4..@.H./U..".h1Q.W.z.Xe.i.`.)....].z.I..."`wP.q...$.S.k....M.s<...2.I.}.P.:.)pC6....>..l.M../....j.B......\Mi..+~.X+.._.....?X......N..'..^..#<.L..&.$... ..k....Sj#a...M......I.!....0.@[&.'...Y.:...U...fK.......jZ..Z.HvW.'....%Pi.).h....v/.4.k.c.8.u....s..P!.........~7V....f....Q..C.......1,.Pzs\|Nvc..P.'k..............X"r..D....?..JI...zu.u.us......q......+V.1.Jo.U.3;.....r.L5....L-........'....wm.e.(B"..^@.9...U...R.Gk........?...5.Q.}}...,`.n.W...7,;.5%....9Yh.EA..]?\...#[m[...n.^..=...}....U.;.>......A....&O. ...-..+..u

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	811468
Entropy (8bit):	7.981785341268296
Encrypted:	false
SSDEEP:	12288:3AhiZvU6S/XryK+ENdUM64nUEwBOWyDe09wkXtIG+GwYNZwY3UlnhQGDtFUVQ:QhOvqyK7dBnULO/DeyXWG+GTOnr4VQ
MD5:	CF40C0CB85B8E7BA1066CFB030610BD4
SHA1:	6B6E27DD707A9E8DCD7D3AF343217A64D48B17AC
SHA-256:	F5901880AB3133B3C66CDE0C18C2165D0C05BE86BEA3253CD6581AB4EE8323BB
SHA-512:	883199E6DBA60D4AA6D61EB95DA27123A25729587E70E60290B0B40431BA301762E4906548C12B3D0AF32DF22224C55F90976C34A1CB43BE60EAF82CDC6D7818
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4:2f73406e3e2ec3:2
Preview:	..PH...@+X...p.,Z....Q3...OJ/i.(......y...x......{..J..^.x..X..o,.&`W`-...ASld.Y....b.f.f...UvjiG.\|w..(..'.xC$....rQV....SCZ...I..].3R.o.Q]v.4...=R.....S$.I..9.n.5N..2.-%<......(>;....jG`f......d...I.,....kbr.U.g.7.6.1sb...z.j3...f{...O~......#.(Y."Ec....;X.....j..zf....T..xIb.O.?.s.tu.~.r.. .a;.v....I.q..Y..@("w.Zf....y.EJ.....7.>..f..Lg.@.{..NX..Z..i.O-..a...8.\.%..........2.q.].7.....`.6...y. EG./s.ta~.?.J..~.o.........._....=...C%0=.Lg....}......2.5#<4.=R...L...d......v.y....1.v........`...3.T.....\|...<..`.8.ri.v.....!..@-...E.b..-.:.n...8..E.......C........T-_...).Jb.6.......U...H...m.i.W..n./,/rQ../.._..zW....i....F...9.v.B...~..T...oC.\.OP.G....1.M.<..h..9..XxoDw.....j......x,K..5.PeJ\|.....e..K.....k....[...ftqL....6....}....V&..W.&.^.........:..'...R...x....9v6{c..\.H....&%.M)P......`9...&e...f.7#./.r.;39Z..x[.o"...W......C..B=6...$4.6..7@.....h.R..f.6_..Fi..mh...o,..e...n^..p.K.v..UVf.c.QQI..?z......."$.}aqi.$,.=...Cp..

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	19459
Entropy (8bit):	7.970788931629225
Encrypted:	false
SSDEEP:	384:8fED6Bf7Wqk//0MpcBjG7pPmAogaZutI+DQgKjoNGNcKXBt4ZGVvijE:xD6BfSqURcBjGlP7oLKX7NAT4ZiiY
MD5:	F44A4EB7E336CD27F332B4B4B2629212
SHA1:	70179B9A925F8350ED2A594C230C66490D9A85FC
SHA-256:	AC7440FACC27F97179D21522F94C96C64850B86B51D9816BAA438D1035645B42
SHA-512:	7A7DCFBF2B711C83789A84B613A3A1FEF80B63D0279E1736BDDAF7942B197D35494030F83240A8D632FD1AFB4C3C435C35EAD7CE4BF6DDB0789EC47434922847
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........7....................................................................T..$(...B...$(...B...$(...B...$(...B.......@.. 4....@..#.@.. 4... 4....@.. 4... .(.$(...B...$(...B...$(...B...$(...B.P..B...$(...B...$(...B...$(...B...$(..=....P.$(..<$(...B...$(...B...$(...B.I..B.E.:$(....e......]:.5..]:.5..]:.5..]:.5..l....G./yq..:$(....\|C.9...>..xL.....Y.....U..Y!....Go.a....?...#...$?#.U..`.......},2%n.M.1=.u..!^z(\|:.....U8......:.......v.~+!.r....Lj......9.g...._...].sE...c...].....`x3>}..JD\|.OJr..il.1w4s._....:..<n..=.i.``..........y.g.^G48...wmW.4K..?....].N.A...o$.8..4.....O0..../m1..a..l}.j......[....n..zr.%t...].K...!vWk.!...{..].F..y..E.o4..Fr\e...3.....&..\.W..:qe..0.5.DN:0.y5.}w..O.U...Z.p.>...(u/#.6.+O...s..tm.V.#.F....]..j.}=r...lya]..20..yV4..........k.r..F,8..y..c...:....p

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 199 x 87, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2700
Entropy (8bit):	7.881475701450173
Encrypted:	false
SSDEEP:	48:EF9ce9MCl0nieVtuC3FPD98GD7WmYR+9q5HfLxS8/a:sfl2eGD7Wfo9ks8/a
MD5:	F5DFF355C143E81FF7950E29E4148A38
SHA1:	67C48319F3489F43AD81E4DFDFF6856AA83D62A4
SHA-256:	9A91D58AE944425DA93A74D0FFA6DAA6CF9DA9386549FF85F5E289CDB11BF529
SHA-512:	9E72651D1FABD04B1A35E70A6C67D4E7362336E237F1EA1FFAEC94D7DEE75D909998CA78BDC5EF9D2908A7AAF3CC6DD6964F6EE1898B49439E2B1054F5634D16
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W.....?.......sRGB........FIDATx...{.U.y.......8...Q.JEjT...6%.H.Q....Z3.+3..q.Im...4.46Z...F.BE....WT.\....(...8.}.......=..$.....=g....<.]k..l..U.".#.....GN...Y.#'.[....U....DU!..!..QU..B..BT.......U....iZ..a.$.?A.v..FU.E.0...$.(I.j...R...a.AH.[T.,R........1EA?.r...b...&....jkOs..aC..n..r...W...].).j.fd..9.8F.MYB..).^\|.U+h3..r.Vxo..Xc7N.z../w'%:v. H.X.7..98A.v.u....d..??..,.8..8....S...nZ8.A...y.=.l.?...=...p.3._<....d.Y.^t.t...6...$..n.a-.:Xy6.{.!_.NE.UEU....h...:...9 I-.}...\......A..?.n......./fyG..e....P.t_.ZK...0...nm..n...L.f...J..Y3...%...Ff....d.*..~$Q...9.i...%.2..}egp....2R.q.U...@.7...Bk.:I.....f...f.#..z.Y...Q.4.(..f...~).!.9.n...H'..o..D..u+E...QU........Lx.....n.j..7.B.o%......5{TE........]uN...\k.&N.......J.\|.4.8..U5.PX...-...yS$u....G}....L..:.5.g/......qY0..G..z....A...>F...J.vr.+K..]...c.#........DYzG...L.P....I..3p'%..b......"5L.v....]KJQU..e..p>.....UIT...4@..RJ`7N......$.V..<.~..Q

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawUj2PeoZcv4DduF0hLAw%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 684, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	236198
Entropy (8bit):	7.992506458973602
Encrypted:	true
SSDEEP:	3072:6cFVtIV7/UbJAwSGuXjga2Pvu6QFlT4wEPjAWkljNj4Gd1Zw2K779vdU/rp18qUc:6cFVt1JZSGQjxchQRWjAdJVPZkhsPU+p
MD5:	BF335FB11417EFEC74606BEFD718A6D2
SHA1:	7C73F1799870FE8987F8D26C042DA81F665B4B46
SHA-256:	62DA973101A9B664A82B254A428A2A7E49FDE8BAB4D84B8A38F6A48DD23481B0
SHA-512:	C823E891ED00D4533833E648B71BF9BD084875F1E8B3599A3C74208510291FAE69ED2DA81CDA68DE2B7736BFDF893208F756DC67B5043D5FAEBD57ED55CE50B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............RF....pHYs...%...%.IR$.....sRGB.........gAMA......a....;IDATx...`.....]1.d[..b.....4i.....1m..S../7m.m..I9..C..I..2H..V.0.33+.e.Q.}.......hw.}.9..@..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2216
Entropy (8bit):	5.379962251664108
Encrypted:	false
SSDEEP:	48:MOEaUohOEaUoaRVc+uiOEaUoYN0oBeOXacOXaoTRVc+uiOXabN0oD:MOEazOEaAVc+uiOEaeNMOXacOXaiVc+h
MD5:	FC6CF2DA6DCE65F0ACE52B1A52F1381E
SHA1:	82B17CFA16FBAEF0741B32CA5672DADBF2E471EA
SHA-256:	7BB3A1A797F64F7E2D1A26556BA3FE707CD8724F3C8AB15559FB9A0B971AC702
SHA-512:	6876DBEF4B9787B332B244447C20696F25F168CA2A7EFA83A8D4E476B24FD4C712DD88073147089F7C3DED687C4E85826A021D8C551787A2D28E4BDFCFDEE93D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Hind:wght@400;500&display=swap
Preview:	/* devanagari /.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGh4BCOz.woff2) format('woff2');. unicode-range: U+0900-097F, U+1CD0-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B09;.}./ latin-ext /.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGd4BCOz.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Hind';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1086)
Category:	downloaded
Size (bytes):	3866
Entropy (8bit):	5.678337023446463
Encrypted:	false
SSDEEP:	96:yzQpyipgnFg8bnYQ7nYC8brYQ7rY/42i805:yXipgC8bYQ7YC8bMQ7M/42i805
MD5:	2D31098CD5451CCEE2B655507DB91F6E
SHA1:	D9F0E97BF99A0ACDE8392E48268685160D2CBA3F
SHA-256:	7CBF2C3F6C5E9184A8530DF27970068DDEF94A533AD14E833D80E09E3AAE9D0B
SHA-512:	D825C9189DE6D0592E6744FD2F65A4F0441E26E78393FE5825F03E751945D8FDDB1E61995E1165F6377833FF22D4F23FD12324FA031EE4FE2494BE0DA6C9EB2B
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932876&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&tfd=1915&richsstsse
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1963578676&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&ua

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=zIe6LFzykvrPGGxNyJvG82Mon1crSAY3SitRU0nZ%2BMXDhiatrQAXmp4ylqCNnXrw7ylUnLauSVdb%2F3MziA2n5tDHEkdSsY1PeBc7wjLcsagvt5MaJn5TyZ4aOPn2cV6P99RDMF8p4Fp9UT4LlxObIjyGo98iGVbSuR9y
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4788)
Category:	downloaded
Size (bytes):	139722
Entropy (8bit):	5.720485281803322
Encrypted:	false
SSDEEP:	1536:8Xf1Fgbff8LedAav7CLdGeJ/lxwjU6lZPLuHIM6+Rwfs+kwyP/UTeGwuF+kqG0T5:+f1Fa3tAav7CLd/rGUIM4eDUgwQuh3A
MD5:	5EE061B200D91372054FF0198C10F509
SHA1:	44C6FBEB72C0CE99D9D372074D26D6DCB4C228AA
SHA-256:	BEA9A2FF9C404527CB93530BF018BF5966995E025B11E161FEADE0D4800E7B53
SHA-512:	E820E79F4029B0C96541E87AB0251B0E1DB1807161EE437B1F58B7795B6414A74DFFA404CE47F669F38C3797068916BBC2B8C015699D6F912720821EC101D2F1
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1a7346c99afafd79.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var ql;var il;var qk;var Yj;var Pa;var Gf;var Ff;var yf;var xf;var lc;var Jb;var Ad;var Hd;var Jd;var ud;var Bd;var yd;var C;var vd;var O;var La;var ab;var Ma;var sd;var td;var wd;var M;var z;var K;var Yc;var H;var Cd;var Oa;var Na;var Q;var F;var G;var ca;var kd;var Fc;var Dc;var wc;var oc;var lb;var w;var cb;var Ja;var y;var t;.var aaa,fa,ia,ka,sa,caa,faa,eaa,daa,gaa,haa,iaa,Ga,Ha,Ka,Qa,Ya,Wa,Ra,Sa,Ta,Va,Xa,Za,laa,mb,pb,sb,oaa,Cb,raa,waa,vaa,xaa,saa,Baa,Caa,Daa,Mb,Ob,Eaa,Tb,Faa,Gaa,Haa,Iaa,Jaa,Kaa,Laa,Ub,Maa,Naa,Qaa,Paa,Raa,Wb,Taa,Uaa,Vaa,$aa,aba,gc,hc,Zaa,cba,jc,bba,ic,dba,rc,

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570845945&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29543)
Category:	downloaded
Size (bytes):	29606
Entropy (8bit):	5.723900120586506
Encrypted:	false
SSDEEP:	384:osEVU8HQUu5208lXSFIOPof1fidaRaqOHqdQ7qamEF60ZfuWcO:WVU8HA8lXSLof1qdkappqBEQ0Zfu/O
MD5:	8464D0689F94B457463E301836B2250D
SHA1:	E8C12C384DD25629377A303C3FF09A512D63DA6B
SHA-256:	3ACE8A2D8B975D2A1D0EA59EE56E576FB304FA45A3C7F9E8C52F1270BCC5BD7B
SHA-512:	EC3FD8133F26F51E97B17AEBE583652DD659403FF0B06E64D9EE3F1121C602F2588643E31085D4080C48867CD1AB8900446EE6A67D77AD807F6B974D482AF078
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/499b6c2ee03238ef.ltr.css
Preview:	.cc24{--fKgqJA:8px;--6Iz8jg:12px;--gg2BUg:16px;--ZbPtBA:var(--fKgqJA,4px);--luBooQ:var(--gg2BUg,12px);--bhcBEg:var(--6Iz8jg,4px);--AFMXVg:var(--fKgqJA,4px);--SatqyQ:var(--fKgqJA,4px)}html{--safe-area-inset-top:0px;--safe-area-inset-bottom:0px;--safe-area-inset-left:0px;--safe-area-inset-right:0px}@supports (height:env(safe-area-inset-top)){html{--safe-area-inset-top:env(safe-area-inset-top);--safe-area-inset-bottom:env(safe-area-inset-bottom);--safe-area-inset-left:env(safe-area-inset-left);--safe-area-inset-right:env(safe-area-inset-right)}}.theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:rgba(53,71,90,.2);--on21aw:rgba(57,76,96,.15);--FNUQ4g:rgba(53,71,90,.2);--6Rd7UQ:rgba(13,18

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	8380
Entropy (8bit):	7.9538281781585844
Encrypted:	false
SSDEEP:	192:2vA9gLJVBUvI/xvWYjt/PQvBqOD+gR+TRiwrxhHENnU:pSLgib5EB/DbsMnU
MD5:	DB9A3C4240970E35329A5702EAB863AE
SHA1:	76A3C98499B4A5842297E565BCD61452883B93B9
SHA-256:	18097837A1B2B0D76A2FC1F9A3F7F37064CCDCF8964813DFE842F4971226B1CE
SHA-512:	D02530F64A54D4D76FC5E114D01C2199115650FBE11678614C82E4EC5DA0863F74E3F98793D45EB2E07F9C219B56ED797557DD0A94883AFA57BE3D2DA58CA684
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/4d134638-a29e-44d6-af9a-c70eb4c0dd43/websites_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D....................#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma..................mdat....?. .r...m2.?f../A%....?....,.&......@. .......r.....E....w...Du.p.....#.NiJ...x".g1..V.;-z.......!.9...J1.rc...<....._....(...cM..+.L...A.!.....@lI.^.1S:..CXT.N.xE..@..r1Y..K.#7..(.....N...eX.1.^"}9o.(D)E..C.....S.m-..=]l.U..p\|\.w>...qB..&..q...p....uE....x.$dM.O...e.6.F..q..3...%wI.`......Q..\CB.D.O...@<b%..H.VX .?;....0.o<K.Sx....."....p..\|......QM...Mq...?.N...-.6./Vh...;k.#.1.7..2:>.....f....&..B.m_...4&.&....9T.^.Q.s.2..A...nZ...'k..../T.j.o.c....d..>....pe..%...1...~.j....\|.WH./(......3..Z...Y..6k.?..(..r..vN.,..]..^.._v......9.....r.....s..3%._.Bs..o..........9.1....fXT...DYeN..<S....\|~v.....+....q..fB'.../08.=.......G:......e...r...b.. l...<!...J...;T.2B..`.T.K..{/.$.q.z... ....@.v.2..w.d..[.4.....=D`}....*

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	15398
Entropy (8bit):	5.437681872130781
Encrypted:	false
SSDEEP:	384:3vJTC3OvW/U6vrMxuzhRXH3repuaIyKW7cCJq6RT0ujG6nSnZxWTG5U2k:3Y3OvW/U6vrMx2FXrepudyncCtTNNKZo
MD5:	E58B61ADEECEE3E9FCD6534BED8CF3EE
SHA1:	AD06C206BFDCCDD5AEE3826229428D098242E6B8
SHA-256:	8460C7A68D89BF5A76FF2719DAD5F4CC01D937A403F0C8A6E66A18CCCC2C97F6
SHA-512:	E56C2344249E0C6A7B99F4D8C7983DAE8E8E390DBBD6D9A802E88B14F71AE589A01FCAF6EB988A0330948D138095E190160B0C479CBE2E50325E4E1C5934DF02
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/9f94f4b468b3b76d.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{../***/ 294112:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var y=__c.y;var mT=__c.mT;.var Coa=async function(a,b){const c=__c.Sk(__c.Qk([J1,"createBatch"])),[d,{zT:e}]=await Promise.all([__c.Cu(a.sb,c,K1.Aa(b),{Gc:"recordanalyticseventbatch"}),__webpack_require__.me(206405).then(()=>({zT:Boa}))]);return e.Ca(d)},Eoa=async function(a,b){const c=__c.Sk(__c.Qk([J1,"create"])),[d,{AT:e}]=await Promise.all([__c.Cu(a.sb,c,L1.Aa(b),{Gc:"recordanalyticsevent"}),__webpack_require__.me(206405).then(()=>({AT:Doa}))]);return e.Ca(d)},M1=function(a){if(!a.EH){const b=a.Bu.url,c=a.Bu.H$,d=a.Bu.wA;.a.EH=new Promise(e=>{a.global.sensorsDataAnalytic201505="sa";a.global.sa={para:{name:"sa",server_u

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7779)
Category:	downloaded
Size (bytes):	9514
Entropy (8bit):	5.336615977947712
Encrypted:	false
SSDEEP:	192:PxYnueH54wHePVCo4CkelHJB5ZAfhKwTxgfIGK8yB52TT:PxYnuPseSelvzgbrB52TT
MD5:	6FF64CFA1BD9052F4A93C8B97282E62C
SHA1:	03D15C022635057B2B57C13F2F4D3EE135671ECA
SHA-256:	4793B853F2ED3170B685439F478E0685DE54CD27B03D4763D9C049D94DCC5792
SHA-512:	EA1F32F6878409DD07488E4C230BD0EEDD589448A7F835CBB17EB36B4F152DC99872D908C0B52C074730B741644951E5A15ACAFD208924E07F65B40F2D62BCB0
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-920442.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":920442,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[{"component":"url","match_operation":"starts_with","pattern":"https://www.slidescarnival.com/","negate":false},{"component":"url","match_operation":"simple","pattern":"https://www.slidescarnival.com/alonso-free-presentation-template/17785","negate":false},{"component":"url","match_operation":"simple","pattern":"https://www.slidescarnival.com/tag/business-plan","negate":false},{"component":"url","match_operation":"starts_with","pattern":"https://pixabay.com/","negate":

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28503
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.977891652767339
Encrypted:	false
SSDEEP:	192:3/lrnDwZkhhO12YDBhSGhyOYgEOIxk+VrvZQOJgFKDUs4j:9DDdfO1KYHghVWOGFeUs4j
MD5:	9A680C8C475D8BBA600D4D87B4FA7EE5
SHA1:	032D074B386A4AA2EB03352ABF7F368BBD1470AE
SHA-256:	35DCE7F030321690BDD9E9D021037F9CCF5BC2FA83D11C11E6FEC4AC8CA3A7B2
SHA-512:	00A0685DE36A61C3991A01330E260DB76EE6E5997CDFD5D7F8BCEE0811E920120AFFA5C3CF48ED8D12E80AC6ABF21E9B2B76E6E470BDFA10B80D104705F1A1FF
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8.......).8fcc..g.\,%K.(..G.q\|A....F2N...\|.U.A3.........M.$^.."...%.V..........7eO.>}...ci.U...q..y)...x....C.......d..%...T.2..s.>G..V..J.(.#]..A.&.....U.n\|\..V..?5..,..d.N.bK...N.{...xv~=.t5d....".[[.}.FI..i..pW........ $..#c.%.u.[..E...2R.F..1....p..t....6/1..j.;KL...d...#..b..%...]&$_..8[c..m:E..`..c.....0.Ga....$a..".+Yz......q....,..I.+;Y.M.b.%vy.Q4....h..D....\f.&C..u.`....B.}.<........"c.\...y.2..y.R..._-.P.}.=.T=.8O!.3"....(4..q.W.)]cc.H.;q.:. )..k#.l"<.A.U?H.P..r..q.[.5.8a.om..c.(.{1tR.&^....Qd?.5.4.I.C..%..1..M............B..R..v.}...TN....._.....[....qIlWb.J.fu.#.,....`....v.....RJ.9.D.....K.xsO.....\Ga..).p...B{.Th..}.NS.@...Ig.{.V.$.....c....Jk.........`dU......5..y.........K;.~.n.p...Q..K4.\&.M2....d....P.Q1..x..(..k..J..h.Y..jdj....V\|..DXe...l.....8."..n.4....9E&$.RD.U.).....Z.......^a.YRp....E`sj.;urje.....<Y.I.y.B.DM1..s$G.0...OFA."a`.qi.>..K....lL.X`o.F}.$.`ecK........M....4..,1\|/...C....)..e,q@

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	13904
Entropy (8bit):	7.965862399729352
Encrypted:	false
SSDEEP:	192:OAZmtXB/IJF0KjY2cMbSygFxzGEuu/Pht5+TLQqoCItC7D9dvRGc5t5QPkAi:0psrrbSy+uEt5+TLQfa5dvRGc5PQPkAi
MD5:	314FC59D9D1EE534D16CF2AE1A120B9F
SHA1:	69D3F2D1AEE7ED8499C9116B9277B2DA9B0CEF09
SHA-256:	08A3C5540213BAEC77FA6AA1F36E5F260A02BCB020DC8A9866036AEB6D212570
SHA-512:	461B8991B95F76E8FE66797E38F74108BA8382ED74EA55E8D03CE91826911B8ED630EA6F79E42A50B8631DCC9FD00DDE867EB6134AD6F71DFF8A5F901F1E6EFF
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........6....................................................................}..0.............@............Q.T.PUAU.T.PUAU.T.PUAU.T.PUAU.DUPUAU.T.PUAU.T.PUAU.T.PUAU.T...Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z. ....VQ.VP.e.VP.e.VULFX.d.vMLVW.3....&E.....yV.&.\....[..+....\.^..U...AU.T......J.W..J.ntt..Y..w....j.,...@...K...f....... ..{jw....{?O.m..oZ)..@...yS.ec.'V..=o.N.Jc]......=/.r......i.ou.....-......Y._...`......Z.d.1.,y(.k....[.....?+...O@Q.}.;....?5..+...9\|.cN...\......!..@...Q..'B....\|?&...<......t.....C<."W..q"1.c:P....Z......%J<g..P..?..d~......nE....gX..zl........'}.k.....tM.U.w.YY.yN.....s....{&.\|n.w.>q...O.M..X....w.n..:._......_...5.S....6.Iy...!..i....=.....J..m.\|..zF6.U.swj...\..i....m...z..c.}).9oS.y...o...Gm..[...m..k.6...eP..@..w.:/...4.<.........{f.......{.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	206590
Entropy (8bit):	5.282175916742714
Encrypted:	false
SSDEEP:	3072:AdXsDB+o2DheW0dyzFhhfwWdwS4Rt/ZcAb:mXsDBb2cW4yzFPfwWSlr7b
MD5:	D250AB3110F78A32FC93723478DF0E54
SHA1:	F9B309DABE4E2F80E140DB1854A715C34B2AE787
SHA-256:	085DE73FB25ADCF0A6155B9D5E2033DB4EC5002A4E10A7DCE55ABEDAE08FA099
SHA-512:	A6C78A76C8EBB7A06818BCAF5CD8DE09D57A0B20E133754B0248E932806F21B7A3417017CBEDC77C848C301D79ADF9941DDE2E4C43F0C8F0EDF880802F4AC0E7
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/d0da04d3ab9ebc3a.vendor.js
Preview:	/! For license information please see d0da04d3ab9ebc3a.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.render,a=t\|\|n;return"function"!=typeof a?null:(0,r.S)(a)}a.displayName="Observer"},433581:(e,t,n)=>{n.d(t,{FY:()=>i.F,Pi:()=>o.P,Qj:()=>l.Q,fv:()=>u.f});n(809991);var r=n(321645),a=n(356158),i=(n(38672),n(391367)),o=n(350666),l=n(68743),u=n(764947);n(433579),n(548495),n(887735);(0,a.z0)(r.m)},350666:(e,t,n)=>{n.d(t,{P:()=>s});var r=n(667294),a=n(391367),i=n(38672),o="function"==typeof Symbol&&Symbol.for,l=o?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=o?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((function(e){return null})).$$typeof;function s(e,t){var n;if(u&&e.$$typeof===u)throw new Error("[mobx-react-lite] You are trying to use `observer` on

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1692)
Category:	downloaded
Size (bytes):	3924
Entropy (8bit):	5.313349647323783
Encrypted:	false
SSDEEP:	96:VMvXJQjjzPTSN0nPSm9WA7gf6E/EyrFl3IymCLVf0NA2V:WvXJMALyMjrFbmCLVf0O2V
MD5:	1FE27B79925047FCF2AA4C2EECB5DEAD
SHA1:	4BA9A88BADD33C5F2E5FADE52DC580D74D760F9B
SHA-256:	78DFBB9A2CDE72EBF48FB08141E7FF2A3F8CA51DB40F5A384C6D7D296E8225B5
SHA-512:	C796A41715AA966BF94AD373DF0B3DE347D6B9822ACEB8143B293F404341EEA183874E65A2D43E15E18C494050189FCBF720B600B269C08C5818EABAE0DE5052
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/0857cd2b202ef818.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1984],{../***/ 716038:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);__web_req__(262047);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var Xjb=async function(a){for(const b of Vjb)try{const c=await caches.open(b),d=await c.keys();await Promise.all(d.map(e=>c.delete(e)))}catch(c){null===a\|\|void 0===a?void 0:a.Aa(c)}for(const b of Wjb)try{await (await __c.bE.open(b,()=>{throw Error("Serializer not implemented");},()=>{throw Error("Deserializer not implemented");})).clear()}catch(c){null===a\|\|void 0===a?void 0:a.Aa(c)}},Yjb=function(a){return`${a.userId}-${a.Ra}-${a.pJ}`},Zjb=async function(a,b){const c=b.userId,d=b.Ra;b=b.Ug;await (await l9(a)).put(b,.new m9({userId:c,Ra:d}))},$jb=async function(a,b){const c=b.userId,d=b.Ra,e=b.T,f=b.oa,

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7432)
Category:	downloaded
Size (bytes):	512994
Entropy (8bit):	5.603537337396902
Encrypted:	false
SSDEEP:	12288:TbQNA4kpdTkTNpYsq2V5xqiyFwrORsvbNVcAbf+/DIbyKNkWwywJFkdA2lvR1Ig9:TbkA4kpdTkTNpYsq2jxqiyFwrORsvbNz
MD5:	64019909E85791565E18FCA3EDAA6CDE
SHA1:	384948357C84388A142FD4F2AF29300550F6BA75
SHA-256:	B0F67441B8A65BCBA062DA93F8D06EDAA4925A8B983D5BE0C7D6BFC96101B51A
SHA-512:	E1EE58A7D39ADA5CD3DE236ECE36D96095AE31DB80B6786752F7371B1E743862B35E5CED45AF85F5F3DD759FEACF61409BCC462B434C9574CFD842CBE2D6596E
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/c927fafc430af699.js+43c2b12a71836a31.js+55d58a0dd0244d82.js+ce3ed327872430ea.js+b7ce392740e42522.js+40fd2b7cf5de646d.js+bc7fa427eba649c0.js+a17e921acc56f1b5.js+cd665fd5d353300f.js+b96aa482cbb3c1e5.js+7ad4fc904aa15e71.vendor.js+8a07c72546b9d56d.js+1540b5eb47c8a553.js+9dd80e8b66c34afe.js+cab16ef33fefb3ac.strings.js+4162489deec53281.js+3c6c516f0ce5f044.js+5ceb8e766e8fb32d.js+d2ee4f89ec442cc8.js+8d89a659626a2d7c.vendor.js+5f6b8f4ae6e318db.vendor.js+242d7abc99de7308.vendor.js+181145ef3fe5aeb3.vendor.js+bb7250827f4c803c.js+96798f4e59647945.js+5d34ae310ea4ada8.js+090dd9ca9f54954c.js
Preview:	;// __FILE_CONTENT_FOR__:c927fafc430af699.js.(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9188],{../***/ 600543:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(323028);__web_req__(506261);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var nCa,oCa,qCa,iA,rCa,jA,tCa,hA;nCa=function(a){var {prefersReducedMotion:b=__c.oo,oo:c,Qa:d}=a;a=null!==c&&void 0!==c?c:"ADAPTIVE";return d&&("AUTOPLAY"===a\|\|"ADAPTIVE"===a&&!b())};oCa=function(a,b){var c=a.UQ.find(e=>{[e]=e;return e===b});if(c)return c[1];const d=new Set(a.UQ.map(e=>{[,e]=e;return e}));c=__c.w(a.elements.find(e=>!d.has(e)));a.UQ.push([b,c]);return c};qCa=function(a){const b=gA((c,d)=>hA(pCa,Object.assign({},c,{bE:d,Vja:a})));b.displayName="Video";return b};.iA=function(a,b,c){const d=a[b];null==c&&null!=d?a.removeAttribute(b):null!=c&&d!==

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (528)
Category:	downloaded
Size (bytes):	2769
Entropy (8bit):	5.622944205331533
Encrypted:	false
SSDEEP:	48:ja8bFYiG9zCa7FYiG9kLa8b0BYiG9zCa70BYiG9kLAEE7csG9/UVi00bBKldR5:+8bFYH7FYP8b0BYH70BYlEE7cDywQ5
MD5:	67B7F3F6A0B08C02D897E9CF7D01D833
SHA1:	210096A34ADF836F083E9119ECBB3AE21C4629CB
SHA-256:	34177FB224F0031F8DA32C4D782383969E1284EE54E2A659425B33E3142D4CB4
SHA-512:	5958FD2401919FC52DDCCD8D7CD8FBDF48A635E4C7AD078C55113B171BFC7C91946091E55720527E4A9435E366A24B8BFDE49359E72F357953ECD91A1DC2FAC7
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558086&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&_et=16&tfd=11108&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.dou

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1373)
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	5.170202595027076
Encrypted:	false
SSDEEP:	24:ibjb1mUcuICTsLe0G1rIIJVLtIUPXAlX5X7X5XeDfwLz0GQGMEBsg/PkWZ:ibH1mUcul4LY1rI6VLiYXeX5X7X5X+fW
MD5:	00F8B2D413D5A9ECC09BA70F3C2356F9
SHA1:	69165E6EB69AD68EC6A3B8D132F56F33D4D00764
SHA-256:	30C6B4DEC317F16B1948CDEAFAFBAC3D8F655BD7D52A8CC91DA0EBBE746F0C28
SHA-512:	741889C7714C58BBA845381E10E00042784077587B5AC3E5D6CA157CDD879415D76FB0FB80D2F2A240CAABC9731027F4ABF7BD11962A8329E43D1013BA1012E8
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/20986.6ba441b61ca29079.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[20986],{"./src/services/analytics/plugins/analytics_event_service_plugin.ts":function(e,t,n){n.r(t),n.d(t,{AnalyticsEventServicePlugin:function(){return o}});var s=n("./node_modules/@swc/helpers/src/_class_call_check.mjs"),i=n("./node_modules/@swc/helpers/node_modules/tslib/tslib.es6.mjs"),c=n("./node_modules/tslib/tslib.es6.js"),r=n("./src/base/time/system_clock.ts"),a=n("./src/services/analytics_event/analytics_event_proto.ts"),o=function(){function e(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:r.H;(0,s.Z)(this,e),this.analyticsEventService=t,this.clock=n}var t=e.prototype;return t.track=function(e){var t=Object.assign({},e.properties),n=new a.vN(Object.assign(Object.assign({},e),{eventContext:new a.Af(Object.assign(Object.assign({},e.eventContext),{sentAt:this.getCurrentTimestamp()})),properties:JSON.stringify(t)}));return this.dispatchEvent(n)},t.dispatchEvent=function(e){return(0,c.mG)(this,v

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1113)
Category:	downloaded
Size (bytes):	3201
Entropy (8bit):	5.4929255223913405
Encrypted:	false
SSDEEP:	48:ju5wQp8QLRvaNj93eSVAG9/CCa8bDYU8G9UCa7DYU8G9ZLa8buV5YU8G9UCa7uVx:yaQp8ipgRuEg8bDYJ7DY18bgYJ7gYg5
MD5:	C080155B03F1895E0105FEBC1F0C3773
SHA1:	03997E3F0CF734F8FD06811FF908E0DC2C7DE776
SHA-256:	7909489AA01BEE8ABF8E0A2DF28C676D670BB8502246EC1FD5EDA330B5168915
SHA-512:	501D75308578F34D2BE4059BA22B4C8C1AD08AB3E41FD520809AD85F9DB71A607F48E4368AFAE2F40B8A67817872D1C82CF6913E8290E5886B063AAFCF2B2D98
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086182&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=4&tfd=7036&richsstsse
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1148414878&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CC

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2312
Entropy (8bit):	4.096788340259145
Encrypted:	false
SSDEEP:	48:CQuFoaPLZMYWubqPhmsql6p2z9G7O2QBcgHyB/tWav:2lPlbqPYsql0xgGtWA
MD5:	9ABC2241BF1479263A0A039F3D1E5B5C
SHA1:	A55CBCE3521486D4C9638602552F1DA877FB5411
SHA-256:	0145274162A30A4AA4B234015B7FE608367D10F4A8042D30BA995A5ECF1FDCF7
SHA-512:	0A5B51EEC0171CDDB3B5D9E7F7727D4509F33C63312136CD96A1E29BBC2FA35EFF341AEF41096809D482A16780CC376CAC488C3895E501A10C6FA66F6D8AEBD9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.685.736-3.711-2.078l-10.22-9.506s-1.473-1.368-2.842.104c-1.368 1.471.103 2.84.103 2.84l9.664 8.989c-.021-.02-.731.692-.744.68L5.917 5.938s-1.472-1.369-2.841.103c-1.369 1.472.103 2.84.103 2.84L13.52 18.5c.012.012-.654.764-.634.783l-8.92-8.298s-1.472-1.369-2.841.103c-1.369 1.472.103 2.841.103 2.841l9.484 8.82c.087.081-.5.908-.391 1.009l-6.834-6.356s-1.472-1.369-2.841.104c-1.369 1.472.103 2.841.103 2.841L11.896 30.71c1.861 1.731 3.772 2.607 6.076 2.928.469.065 1.069.065 1.315.096.777.098 1.459.374 2.372.934 1.175.72 2.938 1.02 3.951-.063l3.454-3.695 3.189-3.412c1.012-1.082.831-2.016.049-3.151z"/><path d="M1.956 35.026a.999.999 0 0 1-.707-1.707L4.8 29.77a.999.999 0 1 1 1.414 1.414l-3.551 3.55a.996.996 0 0 1-.707.292zm6.746.922a.999.999 0 0

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21852)
Category:	downloaded
Size (bytes):	21916
Entropy (8bit):	5.374204504055005
Encrypted:	false
SSDEEP:	384:bhtUo63Xo4SBeelxFD4ZwemwcW8CkPwW67XpwVQVUKxltedhlhkG80G6pnDvJLly:FalXo4helxWZwemwpuPwWcwVQVUK4hlo
MD5:	7DA46FE265386BE4A5AB6FEC07BEFB9B
SHA1:	13394246BA85AFD218C0610BCF2F8645E493BCD5
SHA-256:	29CD133D251E62BD52F2D198C56A09A9BCEA14819157A2208E3624DD5EF62032
SHA-512:	FA6DA8633F65CE4C098B9CD712788CB5EF9271E36BE73913FADDBD440AFE42B7A18DC20AD51BAEC9B5B9B18E45992193AA2A0476A8FE65F0CAFB28EA773C76ED
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/7834839043518078.runtime.js
Preview:	(()=>{"use strict";var e,r,t,n,f,s={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=s,i.amdD=function(){throw new Error("define cannot be used indirect")},i.amdO={},e=[],i.O=(r,t,n,f)=>{if(!t){var s=1/0;for(u=0;u<e.length;u++){for(var[t,n,f]=e[u],c=!0,a=0;a<t.length;a++)if((!1&f\|\|s>=f)&&Object.keys(i.O).every((e=>i.O[e](t[a]))))t.splice(a--,1);else if(c=!1,f<s)s=f;if(c){e.splice(u--,1);var d=n();if(void 0!==d)r=d}}return r}else{f=f\|\|0;for(var u=e.length;u>0&&e[u-1][2]>f;u--)e[u]=e[u-1];e[u]=[t,n,f]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var f=Object.create(null);i.r(f);var s={};r=r\|\|[null,t({}),t([]),t(t)];for(var c=

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19986), with no line terminators
Category:	downloaded
Size (bytes):	19986
Entropy (8bit):	5.253227111919225
Encrypted:	false
SSDEEP:	384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G
MD5:	DD1D068FDB5FE90B6C05A5B3940E088C
SHA1:	0D96F9DF8772633A9DF4C81CF323A4EF8998BA59
SHA-256:	6153D13804862B0FC1C016CF1129F34CB7C6185F2CF4BF1A3A862EECDAB50101
SHA-512:	7AEA051A8C2195A2EA5EC3D6438F2A4A4052085B370CF4728B056EDC58D1F7A70C3F1F85AFE82959184869F707C2AC02A964B8D9166122E74EBC423E0A47FA30
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8211
Entropy (8bit):	7.925364618754985
Encrypted:	false
SSDEEP:	192:z2sk5XJRlFsqwgww2DmaL8CWWe8zwrXNYdQrGpDfk:q5XJzF+PqaL8CN8G6rGpbk
MD5:	496CD841A4D9A8C74DDA55A14CE771BB
SHA1:	4CBEAA44A8033A30E7100A815E352C80CCC57C78
SHA-256:	7DC3F61E1C0CE5E2172344984766D1574E5D071693757C714164F5D922997217
SHA-512:	974855E1C0837B56792D3CE2A78A1E3A131A61205BE110D4C2456EEE9CD72BC747E6C059A05D3C21607C9DE16FE3957100FC4643388E48A2E40FE8DA6F308084
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB........_PLTEGpL"""...........%.......a..r...........pPj[j.v.......u.[..8U.<...pd!.j...>L...t..m.....r.....).....3;...X.X9u.)}x.JA..J......0.X................zY>.`...;Y...W.?5>{......=.....Ms....9.....`..=..X..W;.Z(n....U.../...."$.9...mS....r.\\|.....!........u..\|.......il...n...r.T.........7/......S..h...3..............En...f..,\|...;4._.r\-Pk.....<S>.j.G.$....tRNS.LL.LLLLLL.++ I.LB?L.LD.~...........z.j......V......IDATx...n.0......V*G......F..R..B...........S..>..... ..B.!..B.!..B.!..B._aB....Dy...K[......6{..Z....,._.1X.<9.....e=.S...UR..-[xF4.;...1..+..vM.9......6.z...3l(.p......L.9..JMgz.:...i...%.z.r.c.%.j..C./..6..<.......(. .r.......O.l...3i....1].f.0.O..X!.>V- p....`....'.'.......l....i.........>Z.K...5..Z.B....L..S..BY...R..O.}....r$.@k.]@.c..;.y0{...M89.K0.~'.T...@..>.L...{..Xb)...~. P....k..}.1.&,.G.+..=w..X...s......Rr. a...g.Yk...ow....:...'...O...q#..8.V...C..C..!t1..5R`..A:8P......

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	4.001613792451738
Encrypted:	false
SSDEEP:	48:/a93XK82dedc1J2ghyVSuW2oyhTn2oXU/JS1QwppLYA8n9V7KRSpHW3SdjUjuq:onvcH2wyVSutoqnHWSK4tLYVHH8CEuq
MD5:	749002F5A04F784CC1802D77D2FED423
SHA1:	A82F9B14C9946185D475C946B2EA4B1D724732F7
SHA-256:	E26E8402DEA748478ED971DD8F9626BBC25CEC4776D92A0B768D71A109F82C87
SHA-512:	883CD33B1406E297B068E93CA509E38A54197BC426766AEF6F79D66BCDA96C172E144D302AF174D2D1FEB58091F9FA13139D80B65B9068D58D0A47F83999E9EB
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/749002f5a04f784cc1802d77d2fed423.svg
Preview:	<svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0 .55.139 1.172.521 1.629.172-.501.415-1.502.415-2.184 0-.408-.09-.701-.388-.701-.3 0-.548.574-.548 1.255zm4.603 5.011c0 .868.252 1.612.891 1.612 1.12 0 2.19-2.995 2.19-4.692 0-.77-.19-1.387-.717-1.387-1.221 0-2.364 2.853-2.364 4.467z" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M60 30c0 16.569-13.431 30-30 30C13.431 60 0 46.569 0 30 0 13.431 13.431 0 30 0c16.569 0 30 13.431 30 30zm-6.515 1.462c.035-.106.106-.16.186-.16.178 0 .329.217.329.569 0 1.333-1.38 2.956-2.968 2.956-1.016 0-1.567-.726-1.783-1.724-.655 1.108-1.51 1.736-2.568 1.736-.972 0-2.097-.66-2.097-3.024 0-.818.174-1.638.468-2.388-.694.492-1.42.507-1.9.445-1.228 2.547-3.258 4.95-4.4 4.95-.928 0-1.524-1.751-1.799-3.92-.88 2.323-2.198 3.91-3.495 3.91-1.17 0-1.7

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17236
Entropy (8bit):	7.986611805974707
Encrypted:	false
SSDEEP:	384:ABU19BFbfRsP+KPVTvDDz0kO6LCX6i3YaRG6BJdqozXoLfv:jrhfRk9NbDEkVC/hRG00ozXoTv
MD5:	EDB3157B36E1C17293BA2879EEC93C35
SHA1:	AFD3E4976B9D32782BF9FD9CF543F3DECEE18C07
SHA-256:	1C573DCAFF083C293551DE418DBADE8AAA1AA0AAB4A8C806BF788C66E3ABB362
SHA-512:	800D4A5D570B1A03C0F18E9A6FA5CB387F0CFF247987C2B9BC54CD470A99D9912B9D7854AFA63FEC0E46FF9E966056BC8E9075540DF845599D2A7708B98A29D4
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232029/Features_Imports.png
Preview:	RIFFLC..WEBPVP8L?C../.AH...8.m.:.6F/...O.g..4....6..vJ.?..t.).$.m..i.....#/...q.+S.]....D[..2....(1@...3........".......T..2h...(.s..Z..%d...Ra.L#.a...dB..ksj9..Q%RQQ.R=f.>vO.u(q.........=.%....m..CL4..6..M.#..H..&.@u....W.0L.I..2.,b,"..#...h.G,....[LB........9...Z......xh.lS.......C,.a.p?..W.e.R.KW..].......F......b...W...F..$w.e}..xh..fk.t....}....aB..N.\|Ig..Mk{\..r..m#.....=."b. .Z.I@E..v....KN.8..x...u...h......U......!....%@+.W..Y........~...........m7n...@lT.J6.'.~zv@gS.m.$.......h.....?..].w#A.S..S{..3....Y.mUm..}....W.....z.m....OQ.. a.TDA..R.o.I...mn..B'u.c....s.>f.d..G....I.$)3...C..P....}}..6Mm.m.$.......[.u.,....\.JE((..].F.......W.}...`o"./...m...AH.%E.d'.=...................Q...?._.!H.......en...Q...N;I..:..E...U{..t..e./.{.Z..~.......5...V.p8.# t.}.Q...):]...>....}C.6r.....i....k.....J.?.....bb.o..{..0...Z)".5X...6.m..&........[gKd.bi...Z.Rd.!.....}...z9b.=/c...C...A/+...B....gtC;..z....Y..v.L....Y~.)/.....FT..LU.S...SI...K..U

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	59980
Entropy (8bit):	7.9961272756843655
Encrypted:	true
SSDEEP:	1536:LCfa2SSFr6/8FFjiAZSZR+RAJsljOzmxc:LwxrFF9AZ5sim6
MD5:	121EAE5461CE474672FA5C8698FC86B8
SHA1:	7A445A34CC7506A4828E26A390C9C26A1B6AE958
SHA-256:	0785F374D24EB6D55C5B90314E50016917D23B528F4F12C5B54244DC4661DD9E
SHA-512:	0D558955FABE5BDE2E934B3642A535A90BC4D18C5E79093A4D21EC806BCB530ECF26DE78141687E005612B5B7BC76698BA2B1DDB27E50D2F31863D8184BCD9E4
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1374692/Wowwithvisuals.7a445a34.avif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................>...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C.$......ispe.......X...X....pixi............ipma..................Fmdat....9&ey_.@2......A..@...@J/.}p...JT.g.`............UT.{JOEU.(....M..AI...d...t....?m6.I..T_7u='...5...TTbZ..._.q.a.2.rI.'q..[..1.......or8.1.L...s..DO.\|.O...Y..P.Q.q..R5..QH.h....BI...8....U...T[.T)./.r...C........0....>.4.N...1.....-...........9.;=.?. ...8...V7]".U.i...TnMmX..O[js'...t......(..>>...v..C...!....2.4...8.PW.u...l..$X.XDU..l3AA..L.\..<.LC.0v...P u....]m..../.....GCx.....C.<.....Nn.l...Y.N.....&......RDpK ....W...'@G}7V....).f...%.I...3....jX...Q..a....h.). A....x.5./".`!..9ii7.[......i.CD..3mq.7.5^..N.@F..a.g......R....pB..u...../&33Y.c....3.A.aj..9..1@n..Z......oT..@.[.\|..........0`..`o......I.M.E....X...I.z4.V......y....;.&.pe#.....N...VLj{..iAe.!.b..`>.7......[o..&.b..

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5263)
Category:	downloaded
Size (bytes):	131778
Entropy (8bit):	5.725059618232724
Encrypted:	false
SSDEEP:	3072:8iUvb+y5ureJ9+XPdsfTpZsOtXXb98565bt64rnHncP:8iYb+y5urm9+f2pZsYBJxn8P
MD5:	98EFBD307DD0C6DA0DAFE0C4CA4BDC0B
SHA1:	8ADEF30C9A374DE9B9D06A4667462D0EAD4FDA18
SHA-256:	9CC73DB8A69D68C8CEEB8753489C589AF84F161ED0BFCDE9C382CEE5A7D2211E
SHA-512:	46C29DD615EBACF330471424B0EA9A259B8EFAE69894F08BFECC8C06A1827C80B11514730D0824DE320FAD098EB10E2F16A2F06B8FD4D59FD6DF6731A1E09FBD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/40e534873816858c.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[21389,73817],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e7c24fc496575bcfe1475cfd0ea74379 = self._e7c24fc496575bcfe1475cfd0ea74379 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var yc;var wc;var uc;var ac;var Pga;var Ob;var Db;var zb;var ia;var vb;var db;var nb;var ib;var F;var B;var Aa;var eb;var O;var y;var Fa;var E;var bb;var cb;var P;var hb;var pb;var N;var L;var x;var K;var Ya;var kca;var jca;var Ma;var q;var na;.var baa,caa,ja,gaa,la,vaa,uaa,taa,Aaa,Caa,Daa,Eaa,Faa,Gaa,ya,Haa,Maa,Laa,Iaa,Jaa,Kaa,Ca,Ea,Naa,xa,Taa,Vaa,Paa,Xaa,Yaa,Zaa,$aa,aba,dba,eba,fba,hba,mba,nba,oba,pba,qba,rba,sba,tba,uba,wba,vba,xba,Aba,zba,Cba,Bba,Eba,Fba,Gba,Sba,Wba,Uba,Vba,Rba,Yba,Zba,Xba,$ba,bca,dca,eca,gca,fca,ica,oca,mca,lca,qca,rca,uca,vca,yca,zca,sca,Aca,xca,Bca,

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	222178
Entropy (8bit):	5.374846103053346
Encrypted:	false
SSDEEP:	3072:Y+N3NpnQ2oY84a6sLdG943viEouv9In1nVC7yAGAp+p98FHLTt8yKtaNidQutNzu:YGajGQ9In1nVxAG2a9m/QUI+y5crD
MD5:	7B0E1CD8A226FAAB9599629DF41838BA
SHA1:	87E104B1E34973951B4D03443E2042BC01C17DBB
SHA-256:	B2D54EA3DACA31122CC40F571E21C153B7697B368FCAEB76A356B417E89E72C6
SHA-512:	C43072EBE2840EB24949AE53E27A54DD859DBFCE435EA1B81B9A33F0462E5C17A0B5019DFFBB4B24DC7063DAC0035474EF8E5D84BCDF89058AC382E78AF0BC5A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/babef07b306f9058.vendor.js
Preview:	/! For license information please see babef07b306f9058.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{95957:(e,t,r)=>{"use strict";function n(e,t){var r=t&&t.cache?t.cache:c,n=t&&t.serializer?t.serializer:u;return(t&&t.strategy?t.strategy:s)(e,{cache:r,serializer:n})}function o(e,t,r,n){var o,i=null==(o=n)\|\|"number"==typeof o\|\|"boolean"==typeof o?n:r(n),a=t.get(i);return void 0===a&&(a=e.call(this,n),t.set(i,a)),a}function i(e,t,r){var n=Array.prototype.slice.call(arguments,3),o=r(n),i=t.get(o);return void 0===i&&(i=e.apply(this,n),t.set(o,i)),i}function a(e,t,r,n,o){return r.bind(t,e,n,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}r.d(t,{A:()=>h,H:()=>n});var u=function(){return JSON.stringify(arguments)};function l(){this.cache=Object.create(null)}l.prototype.get=function(e){return this.cache[e]},l.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new l}},h={variadic

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19619)
Category:	downloaded
Size (bytes):	19683
Entropy (8bit):	5.393180945527713
Encrypted:	false
SSDEEP:	384:hhVUEccGplkjmlC0DGUtSSkoI5KdylvQaWPfc0Jg1r5IqL/uDZggAU6xnBRJfviD:ri9plkEC5U+oIAd8QaWPfc0JJqL/GZCE
MD5:	B60B46FD63498A98A08B7F18BEDCBBE4
SHA1:	E8A571AD720AAA15C596369234320F6C48DC20EE
SHA-256:	C6B1E48945333D743DA6C35FF925B1A941010BBE96917D6A0CD4133D81E631B8
SHA-512:	C0C7D895687F629BF67A6E7780D02AD1DBAE7D9078944F0F8DD5B6FEC0F2D65F3A92CFBF8CB92B45D56C4E7B343A06807DD780B49C0092D17821BE639A58149D
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/55e76e6c71b8c4fb.runtime.js
Preview:	(()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define cannot be used indirect")},c.amdO={},e=[],c.O=(r,t,n,f)=>{if(!t){var s=1/0;for(d=0;d<e.length;d++){for(var[t,n,f]=e[d],i=!0,a=0;a<t.length;a++)if((!1&f\|\|s>=f)&&Object.keys(c.O).every((e=>c.O[e](t[a]))))t.splice(a--,1);else if(i=!1,f<s)s=f;if(i){e.splice(d--,1);var o=n();if(void 0!==o)r=o}}return r}else{f=f\|\|0;for(var d=e.length;d>0&&e[d-1][2]>f;d--)e[d]=e[d-1];e[d]=[t,n,f]}},c.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return c.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,c.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var f=Object.create(null);c.r(f);var s={};r=r\|\|[null,t({}),t([]),t(t)];for(var i=

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16216, version 1.0
Category:	downloaded
Size (bytes):	16216
Entropy (8bit):	7.987705252722774
Encrypted:	false
SSDEEP:	384:gpQN81t9u4Lsbt95d5Rta4ttn3uEKw2Ej4v1+g95DZuWp:gbt9vsbt97t1vXycwjZD
MD5:	4C5BC71B3CF6F2584725C0BB3E25D391
SHA1:	F051F482061DC48D09C328C45459DD04DB5B5547
SHA-256:	ACA5DEC430A7470FF1D8A16F9E7BB3CA30F2FF58F3BD60432CF1DDDFA30C9D71
SHA-512:	E280E96E0EF736D1255DF532BFECCE67E670004CC971BB4518DC906F6D76F88508CE139190814782374E31DF15732731D676962AE2A6863CDCCA53DB4E676158
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/hind/v16/5aU69_a8oxmIdGl4BA.woff2
Preview:	wOF2......?X..........>.................................`..\.h..m.....P..`..F..6.$.... .....@....:.U.b.8.`..1J............z-.....Q.....X.!....;. .6.a.X........wo6k....4M........2.rt...l.5.....G...O....3.i....t..~....t...4Wz.!...2....D..mv.%=x.J%Dm.V.g(.,B.$..l.J..<..b..R.2.kY....s.{.m.{~........L....CZ:...t..NQ.........os.K.!... %.....-.....Q.Z...nw...-X4. r....b....?V.7..~....i..........u..S.......E.....5..J...@..&...Lv.....n[x.u......R..M.<..`.....p.....h..;..Q...o.,cm@...V..Zw...........T"....h.C.3.tQK\J...N.VJ @..."...UnV....=.$....6.....P..Y......A....g.8......9.....7.......5NHE.Q.....J........\|..5..".u.8....y...8j.%....%..(......<d.>[....`.A4JN... ...W.0...]...w._.Dh.....4..z...Qy$...K.n.W..X.[.].`.=.......o.G.d.....3...U...2.P..C..*..6..4...'m........;.R_....+..H.L.... ....L...W.. ....D1M"..". ... .x.75..c..;..d..'.$.d...5.H.O.....#..]...$.$.+...i~...#s.t...._........:.c.mD.?...E......1......'.........@.m...9...^..x......

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7865), with no line terminators
Category:	downloaded
Size (bytes):	7865
Entropy (8bit):	5.763350430323151
Encrypted:	false
SSDEEP:	192:1UOwHEV85NbazI5IFe6yL6XTpnkUjYjUDUFX94oJJ9J:1UVW85NbazI5IFe6yL6XTpnkU8XLZ
MD5:	70C8A417566B8730145BEDF388FB783A
SHA1:	531BE35C7DF2C594729539066DD9BDCBBC3641C7
SHA-256:	C21E9D9426349A2D51D4B44EE593FB5EC59146EBC0B0FEC5BAFE166EC9F0F690
SHA-512:	628F5FDCB442E883E81F87279245EBD4525AC793047B737F5D9994E9B844BFFFF7466A845E5124DC5435DE17783AFA5C4A7720953DECB13875C56111F8023B78
Malicious:	false
Reputation:	low
URL:	https://www.canva.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(299))/1(-parseInt(U(216))/2)+parseInt(U(298))/3+-parseInt(U(246))/4+-parseInt(U(224))/5+parseInt(U(232))/6+-parseInt(U(236))/7(-parseInt(U(306))/8)+-parseInt(U(243))/9*(-parseInt(U(280))/10),e===C)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,427693),g=this\|\|self,h=g[V(223)],i={},i[V(294)]='o',i[V(228)]='s',i[V(257)]='u',i[V(241)]='z',i[V(269)]='n',i[V(252)]='I',j=i,g[V(277)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|D===void 0)return F;for(H=m(D),C[a0(284)][a0(304)]&&(H=H[a0(233)](C[a0(284)][a0(304)](D))),H=C[a0(290)][a0(242)]&&C[a0(264)]?C[a0(290)][a0(242)](new C[(a0(264))](H)):function(N,a1,O){for(a1=a0,N[a1(227)](),O=0;O<N[a1(251)];N[O]===N[O+1]?N[a1(239)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(260)][a0(289)](I),J=0;J<H[a0(251)];K=H[J],L=l(C,D,K),I(L)?(M=L==='s'&&!C[a0(220)](D[K]),a0(211)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12986
Entropy (8bit):	7.973905680581498
Encrypted:	false
SSDEEP:	192:2D8dGmzMw2+wLPEb1M+ZuD9VLhK0ZXfD2P69NWtIpRlE7aTyCC1sr2VDW0hfSDzi:/dKw2DBOgLhd2gEt4jeZ5OnO3
MD5:	DDBA72B45E70AD7065507C8D4F317FB2
SHA1:	C6F73F1678F1DC57A142D9BF81E170D7B6ED2F4E
SHA-256:	05C9F76A25F123207E2C16ED53EDFBA550B7E79A02B049DD599A66D9F46688FE
SHA-512:	49515415D97029D58718D6D2AD4F28351C8393010D3F202DC21F5159448F93B042B2F6CDD5EA797FC563187C15D2290C4D1B9E4F808111E06654FA33ED343E79
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/f308c024-a5e9-4e05-ab78-c5f4954b62ad/social_en_au_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D...............1....#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma................1.mdat....?. .r...m2.cf..3A'.... 0.p......... .......W.E.....\......p.O...W..kYh.w.Ix...I.R..Ui..>C0..9V....=Y.\| ...W.^.=.`.c...P9X&...%4.^.$....-...^..)h.?...=Z.x..?.I..x<...9.f.l.f.a.....m.q...:5...(..a.l..E].(.W....&..m.,...K...Hm.8de...v#..9.s2..U.\Y....x..l\.p..b..G...s..v.....7-..21}....>....>K&.e..{P..=8.m..f...aLA..3.p.tt..1..\b...!.....r. ....Emp:......m+nH.K..fw.Ye..6..@.{e.v.;.<..q":P..z.....>.u...F',.'........+U.x.(AV...SV...2_.`E..+F9.}....fR...Qi..9{...qN...LLNS....x7v..Wv...@..q.v3A..&...{&/.9..^r.k.F.iV.NDqxq...9.1.~..-.. ....8...W..)....eaD.w..$.E..7M......+qB}....../:..^.&t.s,Si.{.L....o..%l....D./.\|........x.KA...k...........Fho...j.]6...m...6.L................6.{3358..4Gs..NV...M._..E=$n..b..-

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	842
Entropy (8bit):	4.957424326112546
Encrypted:	false
SSDEEP:	24:tzBXuJlRGZ6vzSiMEjeK7IhdHxsGJcGmBe:ju843M/JhdH9J3mBe
MD5:	3A05DBF1CDD156FCD1677A0B444CC36F
SHA1:	4DBD36F62A617F47B69FB2D5F83BF0FE36ECE44A
SHA-256:	4C122BDEABCF8A8C613B81B5B881469574DAA61B870651D9F06D0F81B4405271
SHA-512:	CE05D3A04F285E246AC43798C384674FB5D292CEA0911CACFD6A7E10772C77B6997D5ED50BF298DDBB6096A02D06BC1E01324C1A35623E07834C8AFC63D536E6
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017 2.824-1.114 0-2.017-1.264-2.017-2.824 0-1.56.903-2.823 2.017-2.823 1.114 0 2.017 1.264 2.017 2.823ZM23.53 12.047c0 1.456-.843 2.635-1.883 2.635s-1.882-1.18-1.882-2.635c0-1.455.843-2.635 1.882-2.635 1.04 0 1.882 1.18 1.882 2.635ZM19.765 22.588c0 2.6-1.687 4.706-3.765 4.706-2.08 0-3.765-2.105-3.765-4.706 0-2.598 1.685-4.706 3.765-4.706 2.078 0 3.765 2.108 3.765 4.706Z" fill="#664500"/><defs><linearGradient id="_1562409365__a" x1="16" y1="32" x2="16" y2="0" gradientUnits="userSpaceOnUse"><stop stop-color="#FFCC4D"/><stop offset="1" stop-color="#FFDF8E"/></linearGradient></defs></svg>

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4045)
Category:	downloaded
Size (bytes):	9827
Entropy (8bit):	5.545155740430146
Encrypted:	false
SSDEEP:	192:yPJtU4kY0g8QMK1RDavVrZ8MOXX/YrTA4Q6gx8Le+vRV5U2NO:yPJtUB2VXX/YrTnQ6vTNU2A
MD5:	DA0B6B378748DC88E393C6EC5F78CC19
SHA1:	6FDFBE359EC82E6066A75FE25B27E67D59B4DA49
SHA-256:	2B348983BA5882DF1FC003A9CEC3E81466F45078B9A9C39DA84608B752044C17
SHA-512:	62265E90AA9B7003AA0C36BBB73A67AEAAAF80AD90DEDC8F0513EE91F3FE2EC72D0B25DA2EA5619636812353C0F81F59DA82B8BEF954B0812E5BF7073385D756
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/dc7743898981ec6d.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6408],{../***/ 206405:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(262047);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var SD,TD,BFa,UD;SD=function(a){return new Promise((b,c)=>{const d=()=>{a.removeEventListener("success",e);a.removeEventListener("error",f)},e=()=>{d();b(a.result)},f=()=>{d();c(a.error)};a.addEventListener("success",e);a.addEventListener("error",f)})};TD=function(a,b){const c=a.Yg(a.cursor.request);a.cursor.continue(b);return c};.BFa=function(a){return new Promise((b,c)=>{a.Xw.addEventListener("complete",()=>b());a.Xw.addEventListener("error",d=>{d=d.target;c((null===d\|\|void 0===d?void 0:d.error)\|\|a.Xw.error\|\|Error("Unknown error"))});a.Xw.addEventListener("abort",()=>c(new AFa))})};UD=function(a,b){return{key:a,record:b}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570828774&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	downloaded
Size (bytes):	1070
Entropy (8bit):	5.431632499517195
Encrypted:	false
SSDEEP:	24:jaoxxNUYUn8G9Ps1Mao2NUYUn8G9PBLdRdP:ja8bUYU8G9UCa7UYU8G9ZLdR5
MD5:	A02222BED6B107DDC7261BF9B0A4F49F
SHA1:	790C946EA99AC1B1C9CDD0358913DCCF60720291
SHA-256:	F2EE1B76D809869376C31B6478491F47C6F0CCE5BF0DC955EA2750B94B3AA9E1
SHA-512:	6501396466796EC21805F68B75DA4D6E84E61063B6E193ABF01D9563927CFFDE6A4CE0E0F86883A7109DB41F117510E979F4C3CFB10A8910CCFE8B4A817C9B59
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086144&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=7012&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570875234&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.9944170369709795
Encrypted:	true
SSDEEP:	24576:i6qZZF9Le/vUqN6rloSP+xgNNtZajKirUAY:XqpZ6vUqCmdG3+8
MD5:	0F2FB06D78E86E5DFCE73A70E26E1BF9
SHA1:	7513DFE9F303161C4E93BC452C3D67C3DB7BC4B4
SHA-256:	237D541C8D961C01F5CCC52940298A30A855027B5187EB31817779FAB48D9C5B
SHA-512:	B2C658BB09CED216471841916D6A0A56ABA0A0C935CD61CB1BE439A9DC09BBFFC9AF98547A53A17AEE7EED0A90EA4782749CFD7CF7A553D1957D8416833B6AE5
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4:2f73406e3e2ec3:1
Preview:	..c...0.OD..$N..-...lG....n..Q.OP...\.-4R..#..l.....KF..u..["0.....K...4..O1$.C.......).P..DB..4....]WK...9.$...(.....6...}....{/...naMP.Th..r..<..C$..(.X.38..?...#...A...6.u6.l..m.y0.1..ZYKa.L..T..5.r=.<.N...?..)..0..2.U.!..?.....V....rB..4.....3...y..asQ..G.1..V...@.R..]vuc.g.3..3P...K.tIR.w.C.jNb.`...@"....m..kj..Z..{...e.S..P.}..<..u.%2+e8.!7._l!R?...v....F.....$..M..4..o..:Y.Gz.a..(.b.s2W.hE.....D..m........s.....d.\..+.7..].T2.........3....~..O..NI...s.k..X..^..'=j.?,....L,.I.."..z5.41x..g..B.o.H..S..t_.'.^..J..#...H.$=.3. ..,.....P...-...`..&$....n..n..q......h.0.o.c..y-lQL.b1/.m..A!...W~...... ......"e..A....q..GM.....1..&__a....%... T.^d...A.V.....t.Z.HJ>.WV.,(...Y....!..qca....3fJ.....6n.)..a...tX.UiB.....#sGt6.T.P-...q.....O.p.".y......;..]..#2./.....\|..\|..).+.......l.._@...{8.:......VZ...N..h.q.d.S...nDU.\|..d8.1..;.7.....0]6,....g.Q(.K..I...uG.i`..t.....:RJ6.L./N.....9...^...&.As...M...Y....."..M.}.&%(}.....N..+..G

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2312
Entropy (8bit):	4.096788340259145
Encrypted:	false
SSDEEP:	48:CQuFoaPLZMYWubqPhmsql6p2z9G7O2QBcgHyB/tWav:2lPlbqPYsql0xgGtWA
MD5:	9ABC2241BF1479263A0A039F3D1E5B5C
SHA1:	A55CBCE3521486D4C9638602552F1DA877FB5411
SHA-256:	0145274162A30A4AA4B234015B7FE608367D10F4A8042D30BA995A5ECF1FDCF7
SHA-512:	0A5B51EEC0171CDDB3B5D9E7F7727D4509F33C63312136CD96A1E29BBC2FA35EFF341AEF41096809D482A16780CC376CAC488C3895E501A10C6FA66F6D8AEBD9
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.685.736-3.711-2.078l-10.22-9.506s-1.473-1.368-2.842.104c-1.368 1.471.103 2.84.103 2.84l9.664 8.989c-.021-.02-.731.692-.744.68L5.917 5.938s-1.472-1.369-2.841.103c-1.369 1.472.103 2.84.103 2.84L13.52 18.5c.012.012-.654.764-.634.783l-8.92-8.298s-1.472-1.369-2.841.103c-1.369 1.472.103 2.841.103 2.841l9.484 8.82c.087.081-.5.908-.391 1.009l-6.834-6.356s-1.472-1.369-2.841.104c-1.369 1.472.103 2.841.103 2.841L11.896 30.71c1.861 1.731 3.772 2.607 6.076 2.928.469.065 1.069.065 1.315.096.777.098 1.459.374 2.372.934 1.175.72 2.938 1.02 3.951-.063l3.454-3.695 3.189-3.412c1.012-1.082.831-2.016.049-3.151z"/><path d="M1.956 35.026a.999.999 0 0 1-.707-1.707L4.8 29.77a.999.999 0 1 1 1.414 1.414l-3.551 3.55a.996.996 0 0 1-.707.292zm6.746.922a.999.999 0 0

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=2OMY0ixiaj6Ix6rUHCC7AJfLaBesNSFnaVA8wnKTRGhtiF47w7fkd00adJFpffiaAohoPBLkyvVFbf171YHu%2Fh0FaMVxd6QN954pu54iMAEt32S6UEODCXq7wt5uYoXNUcg69hdnkLm2hCC1Q%2BuqT3PNtbFHXj1lKRwe8CoY%2Fdxr1HtemeE0V1g81efyQg%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	704119
Entropy (8bit):	7.994068119535527
Encrypted:	true
SSDEEP:	12288:DebRXLMnzsOQe8Y1iGt21g7p4SVla/lniek21lsopO8Jw51sau9rsdQaVnv:ObMQOQeh1Lt2srwliaDssOqwIx94+M
MD5:	0891053448248833D06FD3B0A1407020
SHA1:	09C8AEA9F559064A7F6EA0FEA9A5319D1D6FF40F
SHA-256:	A547FFF5BCEAD5902574AA2EAD3BFCF2594F1A035B8EEE47D37A0C12C158F12E
SHA-512:	A68C547DC4A1AD9AE6174CC19E43A5E8A02D44D72809ECB2B3D484EBDC981C985E59388FD654764EBD81504E040E939BF398E1298B26DFB5B986D59BBB4C8889
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375446/c_howto_website_1284x721.mp4:2f73406e469265:1
Preview:	%.E....n.5...4.0._.I..3\|..l....:....cT..(.<t..V.Q.....BI.......E....n....Q.V.#>%y.6...7..q..../D::.{J..."....4.....>.7..9..W...>...t..x.\......l..-.=._a.+do.......rU..2.....:on).d..9L......y.s....G.. .#b@.T8.. .3........F.8.L..........H....m..\.C+.c.5..^^p6..{....j;JYA...iZ.6...+.9TQ^..;.\|..$....3...W....V,M.E....?..p.+_.I..~9...Y..?E....F......].../`K.6.2.2j...0.E.L...^}<h........1....Q.A.9I..&S..=...6t.....Kk.......{..._..l..<mFM.......3.........'.cc._.Z..t.W....{.8=>..D..!.'..^lc3gr..$A......!W..d_J ..._.y.T.\|_.i.=.%.g.'....>.X.1..U.e%.qY.r..1_.... ...m.M...03?...pW~b.f......p~b.N.n#.RD.t.z.B.[8...2..y4l...<.....[.<+..L>S...Z..x#}...........D..f......vD.nn.W4O..(....\". ..."...=3])..^Cw.cc..<.p.FP..4...... ..9...~..#..{_7.G[t.w...Z.......9..W...=[@..P%...L...a...4.U..m..*;x0.gZ........d.{..aIk...........Y.Tw.....{...Mmwt U.u....kuh..65...^..C.....1.-z'..jQ.5\.@.[zw......C....(.}E...q.j[..,..R.)...`......t......3...;#...%0_=...3s

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=574836&conversionId=7705681&fmt=gif&gtmcb=779165924&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3729)
Category:	downloaded
Size (bytes):	9613
Entropy (8bit):	5.454063878003172
Encrypted:	false
SSDEEP:	192:tJDgh2klvSAaCbruVwfl5omp9KIgrj88J73WYiny9Rk:tJD22kpX3SVwt5omvLgrj88JmYisk
MD5:	B80546B5C4848ABC4F374631BF54D48E
SHA1:	728DE18BE47D6CF0724F3D2413D5CFFE838D1BCA
SHA-256:	DFB2CDB140EEF9E6319FC81731F93B4A208771DCFE9D20B0AFF965570C6B8084
SHA-512:	664278A2FD0DAB85C2AA16BBF905043A362BC78A8BAA620F24E800477D74E06D9033A03F748BE1D134C12F5CE744DF4C55B4713250B5D2C6FF3062B434AB6F6A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/3bbec4133e6eaff3.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6690],{../***/ 206405:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(323028);__web_req__(521481);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var wd=__c.wd;var C=__c.C;var M=__c.M;var O=__c.O;var F=__c.F;.var Qs=function(a){return new Promise((b,c)=>{const d=()=>{a.removeEventListener("success",e);a.removeEventListener("error",f)},e=()=>{d();b(a.result)},f=()=>{d();c(a.error)};a.addEventListener("success",e);a.addEventListener("error",f)})},Msa=function(a,b){const c=a.Ll(a.cursor.request);a.cursor.continue(b);return c},Osa=function(a){return new Promise((b,c)=>{a.aL.addEventListener("complete",()=>b());a.aL.addEventListener("error",d=>{d=d.target;c((null===d\|\|void 0===d?void 0:d.error)\|\|a.aL.error\|\|.Error("Unknown error"))});a.aL.addEventList

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	1130
Entropy (8bit):	5.427190868156113
Encrypted:	false
SSDEEP:	24:jaoxxNyWFmYUn8G9P71Mao2NyWFmYUn8G9P8LdRdP:ja8byWYYU8G9zCa7yWYYU8G9kLdR5
MD5:	59F1D1841FB09773DBFF59203C482C82
SHA1:	82DC4D7A78626C977355634D76ACE82785B844EE
SHA-256:	31695C44D00A5733655AAC762BBBDD5754332D4A710F1A7E31ED355FCDC0987E
SHA-512:	7F8DCF5FA79CD42D3106F4A282E8950867476473EB9CB172A5C713E1B3C4B11C733F14A87F507ABF5B898D295023F9E0FB3B9DC14D3BD435B223F399A714573D
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932844&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=1914&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=16494

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	dropped
Size (bytes):	2780
Entropy (8bit):	5.619793987173711
Encrypted:	false
SSDEEP:	48:ja8bvzYiG9zCa7vzYiG9kLa8b0BYiG9zCa70BYiG9kLAEEusG9/UVi000xNkdR5:+8bbYH7bYP8b0BYH70BYlEEuDylx05
MD5:	BC937DD5B33D20B784BDEAE813C16ECE
SHA1:	FBCE5AFC91557DAD2C91BD9146D9429DDC564097
SHA-256:	EA0267A7E1D197BA56FD7A2807764CB96A0641B97FCFB7AAE3E544A3DA614318
SHA-512:	D28CCEA3A9A5A126ABE65EE942096B8618485F0315FFE0133099B7FBD42BDBFDBCE15D7669E0C069D59C5D88E42933675D075E98D5E349CB94EA11806216CBE9
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1704557105;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1704557105;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.dou

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1525
Entropy (8bit):	4.359418865415674
Encrypted:	false
SSDEEP:	24:t41Ri5D1JURsYbz3QHcchcNq2tkJzvEL16squq3qcEgtNibpq5S+2OV/LvBe8rTd:CsTJnoLdk1Eg7llEuN8M5SjKBeM31dy+
MD5:	8777E8ED572C4159D71B08CCA2972B15
SHA1:	2A57B1E6F2667BA1364CF459161FB868B53C37B8
SHA-256:	E1795BC184F97F29790C807FC91C70846D221904576727698728271D7071F268
SHA-512:	43276A2282A1B088AF417B61942B880253F9D1FCDFFF802F2EBD5BE935D4A708C2AA90842247147D5274CDE52D2B06B5659A607593925822539D6985AE84CFD0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173 1.205-.286.358-.828.401-1.211.097-.11-.084-2.523-1.923-6.182-1.098a.91.91 0 0 1-.764-.184z"/><ellipse fill="#65471B" cx="13.119" cy="11.174" rx="2.125" ry="2.656"/><ellipse fill="#65471B" cx="24.375" cy="12.236" rx="2.125" ry="2.656"/><path fill="#F19020" d="M17.276 35.149s1.265-.411 1.429-1.352c.173-.972-.624-1.167-.624-1.167s1.041-.208 1.172-1.376c.123-1.101-.861-1.363-.861-1.363s.97-.4 1.016-1.539c.038-.959-.995-1.428-.995-1.428s5.038-1.221 5.556-1.341c.516-.12 1.32-.615 1.069-1.694-.249-1.08-1.204-1.118-1.697-1.003-.494.115-6.744 1.566-8.9 2.068l-1.439.334c-.54.127-.785-.11-.404-.512.508-.536.833-1.129.946-2.113.119-1.035-.232-2.313-.433-2.809-.374-.921-1.005-1.649-1.734-1.899-1.137-.39-1.945.321-1.542 1.561.604 1.854.208 3.375-.83

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	dropped
Size (bytes):	1068
Entropy (8bit):	5.438900828391275
Encrypted:	false
SSDEEP:	24:jaoxxNMYUn8G9Ps1Mao2NMYUn8G9PBLdRdP:ja8bMYU8G9UCa7MYU8G9ZLdR5
MD5:	ACC486ED57AA5C745C0581A8F07910E4
SHA1:	D87821DA9BC8FE774E031DDD94F0ADE39B7945A0
SHA-256:	A68EAF287A245B7EF736B88DABCB7B40C6D0D599713545EB18BF409EB82D2F75
SHA-512:	0DC102E5E89FBE0A0968B43C6299A72A1D9EFF16E0DA5E9847B514A7F206DA291F1D82580D29E074C67DFA10371E4994A0FF0700902FD03253F3332D775C0D88
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=117116656;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=117116656;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	24358
Entropy (8bit):	7.983474853622397
Encrypted:	false
SSDEEP:	384:rX0gIrIkOJMDX1SWdeFjZDTIM8s6up2YTKwR6uLi9aWpMcLa5zVup+a6d2dp1MOJ:70gJkvXGZEzs6u1+cfLi5TaRMpB603h
MD5:	4E998BF9187F9DE2C02AE9393FF244AC
SHA1:	7FCEEC796E7971E428731A28AB02C6C8499E1ED5
SHA-256:	52B13D7EE3A2D0C09930130532B1045CF2CE0CDB3D7AEB3588A46DB4488C47B0
SHA-512:	4E056BFA24CF868CBDA0B18AA3F306876DF43ED0FF22F61EABA1D5CE3804EAE5F4653F0911966B552A01F36589BB5EDD5F51410452EAD5C7DEE031EC31771573
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1373917/SuperchargewithAI.7fceec79.avif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@....................................[....8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C.%......ispe................pixi............ipma..........................iref........auxl........]rmdat.....fx>..@2......P..... q..n.:t.....h.w..~.;.....y..i)...$...._7...=.F2.....}\|..Lb.Q...{F/..o.....)^.I<c..u..b)4Vy0..W._... .._l7...._..Q.ln.-..H..r..[..}...C.U....k....!.4.:..?F,.qV.(..ARN..p.FuN..2F.%.6-..b...X.s....D......./..G6....#e.2..:s..?....<d.Y...<.Fr.J..B.{.\..I5.W..@......4./s.@.f[^.!v.@.l...#_.EE.%R.l.e.ECQY..{.d...1...#..B.Rw..KTo..UZ.hUR......k:<...d..xhR.qk:f..?L.>.c.).p.A.*..:[.6.....c.7..&?.j._..!~.+As..>.......x..E....T.....9fx>..@2...D4.a..P..6#M[...o......h..0./'.w..i.)....{.q5^r....@.u.Gc......n....y.Q

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 337, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	79402
Entropy (8bit):	7.958981210950878
Encrypted:	false
SSDEEP:	1536:fXdWCyIna4ZcaTbVATObWMyz2yWRzSQIjL7Cay8hyCi733HiRe:vsIa016TObWCRDIjL+F8Ij73Xse
MD5:	3D99EC2A81748F82DB58EA747DF008C0
SHA1:	824E9C8E942FCCC4939C451730A0EC02556D18DF
SHA-256:	85BFD6E2DD2B7F4776B1E59F5D7B0AD158A63554C11FBF9BB184BE3BCC3B5B2B
SHA-512:	C262EFF3C75B3C8556C981C14433859466D7CEFA303FA154789B549DF5CE69A1FE90ADFDCD94CCDF5C6D5240B67366A6A5B98C27D0A1E3FD7AE101921A25CBD4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...Q......_#.....gAMA......a.....sRGB.........PLTE................................................T.......................................................e..................................."........................}......Z......i.................v.........J.....}..~.....x......{r...l..t...k....n......W..t....n....g....b~...j.t?l...t.P.."..`...^..f..Z...u..._z.zN..`...g..3...oW..wJ...{[.vSl}.sI....wWQ..%..xe.mA.RmW{.kF.qR.dy.wFK~.2..Xm.\|.ey.dt..p_yrt.jK.eBAw.jSEv..C^Wa.Kh.[5[e.Ji.dE.\:.j4P\.@n.wH.zbPlcgGi.._BTd..Q,OV.7a.S29g.X_.ta+.U8qVCA^..H%FN.5_...HFL.YUZ.>V..:.C!~G1X.<U.2J.eT.kJ2cK?6E.=..R.:N.MIM<@.+M.8>.;A.z8.5G}44.l; [@/46.)H.?Bc3CuTD.'C.o/..>m%?z?<@Y4.#;t7cJ2%!7nb'.)2WB3..2g..^.+0%)J>%.M...(U.#K'#'..?1..;....:..'.....5+....-... ....!............2.IDATx.._H.....U.....qtt.E....FFG..Z..u..G..I...V.\|).._.!%.......Z..@..d!......`).......0....E.H......;c.}....D.gt~^......L'....9......?.....w.Z..

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (471)
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	4.926480162194001
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4A/y4uSx4ARITX844wo4pYzQV46/24h:yrdmcXd6NOH4R4uSx4Ayw45o4yzQV46/
MD5:	D1C7B914A3113E0093BBFB6E0C77A86A
SHA1:	58F259AE60B2F7AC7DCDD3E5BCD5809FCC0AF774
SHA-256:	1C933778027CE24A656A1BB90EB5C361768D3CBFC76B1E107F52004C958E0FBF
SHA-512:	2FEDF7114D1E55AAF3B2B5BBE39EE93C7ABC84ACD493B3E5DB38A5C18CD7C592127E68655CA38D532F5B1D8649AE7C80A40BDBC8D776C2DD9C871E1763A01BEF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/743f47b2b32230e6.en.js
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"782":{"js":["344cb3a96a5e3d06.strings.js"],"css":[]},"1348":{"js":["bbc93e31e3c16367.strings.js"],"css":[]},"2063":{"js":["9ebc11625bfadc73.strings.js"],"css":[]},"4478":{"js":["7986dc89564060c6.strings.js"],"css":[]},"7943":{"js":["452a80b53d750182.strings.js"],"css":[]},"9538":{"js":["82cbbba8c3f54a3f.strings.js"],"css":[]}});

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3962)
Category:	downloaded
Size (bytes):	12295
Entropy (8bit):	5.644612168234027
Encrypted:	false
SSDEEP:	192:pnFfXulfhpsIMiSCy97/nqP06QBLe3LiMdDGYV/XByjkJe8qnL7S49EHD6Xwr0dj:3gfRs57/qlQhe7GYu8HgEHD6h
MD5:	C67B71815B815FF30C43A532625619F4
SHA1:	3C2BD6E625C173C915CECD7590C92600A05FB19F
SHA-256:	2801E649D1B7CF17656DAFFAD56BF7A027C2DC1E7676FA12D877CBA3CC58D813
SHA-512:	3A572DA85DDA9FD5C9820395285CB32D37896C70262B14BD4F547F048D1131F567E1018A64665E1A8E5D1287F8E92684BF58B392C05021425285C03723C69AEB
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/118052af16110a6a.ltr.css+18238f6b00219f40.ltr.css+1f9608d8908b0f89.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+88a6aeb385f8aca0.ltr.css+b2f00581c1b688f5.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css
Preview:	/* __FILE_CONTENT_FOR__:118052af16110a6a.ltr.css /..E_yBwg{overflow:hidden;position:relative}./ __FILE_CONTENT_FOR__:18238f6b00219f40.ltr.css */..pvMVEg{display:inline-block;max-width:100%}.RsZ59Q{display:block}._618DsA{padding:8px 0}._618DsA.CeoDuA{max-height:220px;overflow:auto;position:relative}._22JLgA{border:1px solid var(--7hnsIg);border-radius:var(--fKgqJA,4px);padding:0 12px}._27TLPA{flex:1;padding-right:8px}.VjuBng{color:var(--fzXPDA)}._22JLgA._22JLgA._22JLgA{background-color:var(--bDblYw)}._22JLgA.JtrZ3g:hover{border-color:var(--hmBz5w)}._22JLgA._22JLgA:active,._22JLgA.bPreJg{border-color:var(--3j0O2w)}._22JLgA.aVwKtQ{border-color:var(--CgOmqg)}._22JLgA._22JLgA[aria-disabled=true]{background-color:var(--QjoAaQ);border-color:var(--6qQCNQ)}.nMpDaQ,.nMpDaQ.Tp_Zgg.Tp_Zgg{background-color:var(--H8nEqw)}.nMpDaQ.Tp_Zgg.Tp_Zgg:hover{background-color:var(--8ZR-UA)}._0ps_ow{align-items:center;display:grid;min-height:16px}._5XRpNA,._FX8aQ{background:var(--TlUudQ);padding:12px;position

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (709)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.506286565217061
Encrypted:	false
SSDEEP:	24:kjhskjmm7wsHAoW0gb1kOZpr9fQSjkkrA4mMmRaZwJlK23F8:AOAt051kOFfQIrA49mRQ8A26
MD5:	005CF24B11B5B5878D5A5DEC81B8FD35
SHA1:	F5A79287DC691B85C79030158AA4BF10F4966210
SHA-256:	E592D24F925B60E93E5DD7A04C8B1ED5998B80DE5505BE97357307A9B9E65A64
SHA-512:	F35A45DE190816F0AFFAF30A7413D49A6A0313A9CE199C7E11CC29C61C5B74ADB4A62E8AE5A2C1F7EC5071E12EBEA1236D51D11DDF7FA5F9225AE5505CC8C670
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2a4d2075fc08cd96.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5439],{../***/ 542011:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var w8=function(a){return new Promise(b=>setTimeout(b,a))},x8=__c.y(()=>({JV:__c.X(1)}));__c.Vc={yha:function(a,b){const c=a.bk({Xk:{JE:"config"},Aa:x8.Aa,Ca:x8.Ca});return async()=>{try{const d=w8(250).then(()=>{}),e=c.then(f=>f.get("service_worker_flags"));return Promise.race([e,d])}catch(d){b.ea(d)}}}};__c.Vc.delay=w8;__c.Vc.o8=async function(a,b){await (await b.bk({Xk:{JE:"config"},Aa:x8.Aa,Ca:x8.Ca})).put("service_worker_flags",a)};.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}]).//# sourceMappingURL=sourcemaps/2a4d2075fc08cd96.js.map

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	631886
Entropy (8bit):	7.9750915894119325
Encrypted:	false
SSDEEP:	12288:2RgwIF6SYZCkKziMV40q18Ai01vnTEYYmj2SHuaDB3QkLPOUysZn8nPUjS:2pIFTCCp88A9vOmjFFB3QOOZsSnPCS
MD5:	27F4682C656A0F59000165AE0F691CF9
SHA1:	B7C53D2E516610BF87C11E5F3ED8BF7D2D91B633
SHA-256:	D08896E8D0125F22D6AAB9B3C6248B1394DEB4E897DAADDD6679567925BD2EAD
SHA-512:	1A2C401C8D31CB8D91AF008C4994A9240F92E315B5FC32B8458B461B247CC8FF2490C1C5B4996F47197B2717173FBC662E6434145D260D40CBF457E12E8C4FF7
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1316641/c_howto_socialmedia_1284x721.mp4:2f73406e45fe4b:0
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=28.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....Ye............?..wp..>)V.~..cZ....I/.....KH...&H,2.M.8zC`...T.U...{-".\...H.CX....GFEq..L._9..T...n..2Y..8A5...V....O..,.Ue.....3.R!....."vr....q.Fm.7.ls.0;.}...-.P(.]...Y~.+..k%.?zq...0d....9.h$I7.ET....O.....Td....s_...-...4..(..9.^T.....t...k...

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5424)
Category:	downloaded
Size (bytes):	27362
Entropy (8bit):	5.830358892583601
Encrypted:	false
SSDEEP:	384:ELJcaffJaMuwKzJKXrG1DkA8f0NL2WDy3HSasfCwwcYLHjpsG/LDjap2J:EaapYwNXrG1DkD0EdSd6wILDyaLDjaO
MD5:	794EDE66BABE027C711D5C2FBBDED23B
SHA1:	DB978CE499A2C00D27F4C41F6573D3EAAC563E7E
SHA-256:	6F8C138F31253E9E77B04BF33AABF49532393D037FD6A1A736CF4B64AB8F9219
SHA-512:	DE9D6104D48413302C1013CAFC619DB05A3670881E4C1C62717B1B9D4DCDF6172B6F97535113322D66292AB6D5B255DAFCF3075055F07290A1D9507EB89AB02C
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/8c35b77c9580b755.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[4573],{../***/ 795663:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(642643);__web_req__(206405);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var Px=__c.Px;var Lx=__c.Lx;var DW;var Qx=__c.Qx;var YW;var v=__c.v;var R=__c.R;var Hx=__c.Hx;var gb=__c.gb;var Dx=__c.Dx;var hb=__c.hb;var p=__c.p;var tb=__c.tb;var n=__c.n;var u=__c.u;var E=__c.E;var Ex=__c.Ex;var T=__c.T;var W=__c.W;var X=__c.X;var y=__c.y;.var Aga,RV,QV,Bga,TV,bW,fW,mW,Cga,Dga,Ega,Fga,Gga,Hga,Iga,PW,SW,Jga,Kga,Lga,Mga,Nga,Oga,Pga,Qga,Rga,Sga,mX,Tga,Uga,Vga,Wga,Xga,pX,Yga,Zga,$ga,aha,bha,cha,dha,eha,fha,gha,hha,iha,jha,kha,lha,mha,nha,oha,pha,qha,rha,sha,tha,uha,vha,wha,xha,yha,zha,Aha,Bha,Cha,AX,Dha,Eha,Fha,Gha,Hha,Iha,Jha,Kha,Lha,Mha,Nha,CX,Oha,Pha,Qha,Rha,Sha,Tha,Uha,Vha,Wha,Xha,Y

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7159)
Category:	downloaded
Size (bytes):	7223
Entropy (8bit):	5.338101957664223
Encrypted:	false
SSDEEP:	192:P49M5bM/QD1sV5iDg5dFGQYYq63b8RjxjVx01YyIZm:Q9+5sPKg5dFGQjwNRx02Q
MD5:	44D4608B2D68D7DD142847351B546FA0
SHA1:	FA4BD8B36625EC82B9A58E9F64363B2FD6FB6957
SHA-256:	FD8BF31D5EE72EEBEF95894F312EA4E31643423090EE939D5F3F884C550CE761
SHA-512:	3C8135A4D2322969808789C5D56861E70392C564C6D47F766D57289400A07B488DCD8632874E9900782E877B3E56D0867120AA08A424CE3203969F75E29F45A8
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/d60c358ab90474a9.runtime.js
Preview:	(()=>{"use strict";var e,t,r,n,o,i={},s={};function l(e){var t=s[e];if(void 0!==t)return t.exports;var r=s[e]={exports:{}};return i[e](r,r.exports,l),r.exports}l.m=i,e=[],l.O=(t,r,n,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],s=!0,a=0;a<r.length;a++)if((!1&o\|\|i>=o)&&Object.keys(l.O).every((e=>l.O[e](r[a]))))r.splice(a--,1);else if(s=!1,o<i)i=o;if(s){e.splice(f--,1);var c=n();if(void 0!==c)t=c}}return t}else{o=o\|\|0;for(var f=e.length;f>0&&e[f-1][2]>o;f--)e[f]=e[f-1];e[f]=[r,n,o]}},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,l.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var o=Object.create(null);l.r(o);var i={};t=t\|\|[null,r({}),r([]),r(r)];for(var s=2&n&&e;"object"==typeof s&&!~t.indexOf(s);s=r(s))Object.getOwnPropertyNames(s).forEach((t=>i[t]=()=>e[t]));return i.default=()=>e,l.d(o,i),o},l.d=(e,t)=>{for(var r in t)if(l.o(t,r)&&!l.o(e,r))Ob

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	828213
Entropy (8bit):	7.9805506664144765
Encrypted:	false
SSDEEP:	24576:W4QpN2vrXk2oSLzic1S7Y1ix1dO2yX0byqgvibvpMlQ:2povTkgzic1S7BsT6yqXDmG
MD5:	6E7627BE244B41C5E3B529CD8E1CB6D9
SHA1:	9C30F97877B546659A6198B670D5B1A3531641A0
SHA-256:	3DA4A10B89D6C2DA6FE2739382E3B185B747CF03B09FB84AA895E569551EF1EE
SHA-512:	FA5417AAB0A68798EBE87D135B521F88196F048B6CA4EB57A76C3755BEEA9B890FD7BAF6E9677690CF55E6E1D85F7F7131FDB1233605A73B95774D98983F8F6E
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1316640/c_howto_print_1284x721.mp4:2f73406e46105d:0
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=15 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=28.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....Ve...otX.....1..y.je?....a..b........<.2....................u...XXZ.0-../..V......:.:.^lJe......~R..M..IJ..8.."[...P.b7.....!T~.N!..lN...ue....i....nw.-..%$.....<4..:.m..9r2\|*...J.iH.......j.%...P..........b."I.F..w.0...t.g:B..;s._...ef:.zD.......3..

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 478 x 326, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3262
Entropy (8bit):	7.785093998132542
Encrypted:	false
SSDEEP:	48:8z2YHNAD46f9MTR9/TAx2lRemshY9tdyhD/0U1f/8L3JlHsgFcsDchGsDchBB:8z3tH6f9C97NemGFZ0U1kJBsgqsUGsUb
MD5:	A89939DEB626E7356B36CBB165F61D7F
SHA1:	589E61DA8DA841CA53D3E91162F6133F9A592422
SHA-256:	1A44B9E0CCF2BA9EECDB76D4EFBBAC50F20B19E53E75CC9EF9624E0DA3FC0DC1
SHA-512:	9799E24EDD8E2785E303295B23F77029FAE59EB21669CFF7A142A4FCC66A0F73F909A62228275F3DC141F5FAA2527FE5ADFC02DF9497701FB2873AD990B322D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......F......u......gAMA......a.....sRGB........9PLTEGpL.... ...............<.............z....qux.=.TWZ.....r.....tRNS.....-l..........IDATx....:............{o[.'..l...s4.M...';nHg. .. .. .. .. .. .. ..<...WuKt>.-'./.Xi.,...l..@......v....gn(..-.TUxS"/....\|....U....?:.....@=.........C...{!;Wh...K.pG..q:....2,..Q..jZZ..b..5...~U.{i.(.!.1.[..+e;.W...?..z..(.I.!4....1.u.8.Z{=R......8..).5.-E...q......!..=@..D.q...o......6 ...r..=.=..._...u...........K.."oP<Eh.t.wAw.\|o.........g..rfdU;..y..mY..3.yw.W}..}......x...m[..^Bb.....u.=.h.b.[..x..l]...}.w.....Ty.F;..G..Mp...{8....R.8#8o_....y...m./.]...^...S..`......{_......./...}..C...[&5....+VH..e.....{k..t..M...CCM..{%!<...kv..:^D...=....x...e...\|..7_....~..ff..S5SU.s.4xU9.r1.../~L:.NfE.X.w..78....6Q.<'O..$5).V.l:.c.&..\......f..A~e..WL...81...K.St.l...v.g..}.e..W..&qR..\.7Z.._...t...K....i....qt..7.x......F-.$.G.]..U7...~......,..}c.uzi.....MT.S<&.N.u..^..x..TE........ys6..yD

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530)
Category:	downloaded
Size (bytes):	2789
Entropy (8bit):	5.601538182535081
Encrypted:	false
SSDEEP:	48:ja8brNYYiG9zCa7rNYYiG9kLa8b0lYYiG9zCa70lYYiG9kLAEEkhsG9/UVi00+ti:+8brNYYH7rNYYP8b0lYYH70lYYlEEkhn
MD5:	77DDF314376617003A34562CEAFB2976
SHA1:	367B6E801A5858CCA2E1E2C90F87349C92D88164
SHA-256:	3272C80842FDD9738050A29A0D5F1DFA0495D04A892DC77AE264F9CF8B4F4DFE
SHA-512:	A6786A72DA9427DD07849D405467FC1E34FA26D30D2BC93341127DF5FBD5D899E5B2659767981C97DCA85C8BE829A471E9F33C382E8F69C2AA423DCA3E05524F
Malicious:	false
Reputation:	low
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932894&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&tfd=4059&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.dou

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41456, version 1.0
Category:	downloaded
Size (bytes):	41456
Entropy (8bit):	7.994664217432325
Encrypted:	true
SSDEEP:	768:EA6CYSTwaih5Mbei2P6ZEnwmnjRGfL4p/V0qA1E89qja7IcCXKui14zmp/llqu:EGYSUaiLCei2PgEnwoALiN0qA1E82afL
MD5:	4971EDF7A4A0359F252D44D4647AA2C2
SHA1:	B7A585910ED4AF3810783F842AA0E39274B76396
SHA-256:	66C862243067D2ED17D8881A57F8593E0DD35A7488BABB3B3335111A5D1E3591
SHA-512:	F7C69269D0636B08807B86F716A6D245CC4AD69A91C192208463F7ADB9C6950FEDB43A9EA0C77F1440C6787106B9E395BFD08EE0F5DA983BB29DFC60FAFEAC59
Malicious:	false
Reputation:	low
URL:	https://font-public.canva.com/YAFdJjTk5UU/0/CanvaSans-Bold13644182954117137290.33696.33696a29f45c1b554a4c12443b998d21.woff2
Preview:	wOF2..............................................D..D....`..n..............u..>..6.$..:. ..O..{..K[>.q.u.:+....PY.\o..0........o...pT1v2.[Q.l........$...m....(j.jZU... . .}..&.X....<.-;S.y?.V.-r....&...w.Hol......g...C3.../:....7.W...k..m......P...e.sV...F.r...v;D H..,.B.#H.F,.....M..`..]...h}p.....lrr.]ym._...3..,.B.../D.....".1..wm4.......,..........z....=.......k{..F.c........W.dg...2..[.F.u../T.._..\|{!......n..{w..$$.B......Z}.....+.\|U._.\|.`. ..........;"vP,.....x.YwYege.....m.s.....gfdef'.....XJm..1Ec.....3s.{..(R1.T...[B..y......\...g...].....?..F.I...x..."Oq?../...{Z.3..iZ'.3..\|...G....04~......M.%...'D..)L.~.~<.Tt$.B\|.j..-];IQ.)....2lH{`....[_.......lbN...v.M!\......]U.....8....G.B\..;O....:......\..:\|..B>.:..Ozb....X2.@1.q...9.Y...-...5Y8...?...OD.s..........c..}j..-....\..[a..MU.B".@.@A.r..FC2+f9..@dseZ.tl....A....\..w..B.2y........S.h.$O.$k.At.ai..%.G\{.]..H...I .qbh...8._.q.......s.....v.]..9a.....~*{}v,..9..mop......".\

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28507)
Category:	downloaded
Size (bytes):	28651
Entropy (8bit):	5.210505690840614
Encrypted:	false
SSDEEP:	384:zGpqrJ94LTvsqjdkeK7XG5UmXeslGpBmmFUSFGc8Zic7n+qZ0EP0:zBJ94LT8eCWX/8pB4c8ZbjZ0Es
MD5:	051F2ADE56DB8CA8E3BE28F90674CF38
SHA1:	E0FE8D5006CCCDFFF38F022E86423699F06D132F
SHA-256:	29B0820CF5FE5376477F916B97A72E20C760CF5334553DDF70922A93EB8DC135
SHA-512:	A118BD7A633FC84B625CDE56F4BA76BC7A6BF2BC0BA99E48412713EC7A130DAD38686FB5B0BECB0C581293ED8B8B3EE10908185BBB553E7FA7083494F2217192
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1be900779a582cef.vendor.js
Preview:	/! For license information please see 1be900779a582cef.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[6269],{167824:e=>{e.exports=e=>!(!e\|\|e.length<3)&&(255===e[0]&&216===e[1]&&255===e[2])},66209:e=>{e.exports=function(e){return!(!e\|\|e.length<8)&&(137===e[0]&&80===e[1]&&78===e[2]&&71===e[3]&&13===e[4]&&10===e[5]&&26===e[6]&&10===e[7])}},127661:(e,t,r)=>{r.d(t,{K5:()=>d,Om:()=>V,YN:()=>_,kq:()=>j,p4:()=>f,zO:()=>w});var n=r(168949),o=function(){};function i(e,t){void 0===t&&(t="Illegal state"),e\|\|function(e){throw new Error("[mobx-utils] "+e)}(t)}var s=function(e){return e&&e!==Object.prototype&&Object.getOwnPropertyNames(e).concat(s(Object.getPrototypeOf(e))\|\|[])},u=function(e){return function(e){var t=s(e);return t.filter((function(e,r){return t.indexOf(e)===r}))}(e).filter((function(e){return"constructor"!==e&&!~e.indexOf("__")}))},a="pending",c="fulfilled",l="rejected";function p(e){switch(this.state){case a:return e.pendi

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45562)
Category:	downloaded
Size (bytes):	331760
Entropy (8bit):	5.54560342809133
Encrypted:	false
SSDEEP:	6144:NvIgDHgGIs4Rn72BgRD0/PBCnIHHC89tg9aljRh:dTDHW2B0EB/
MD5:	400E4216021629A251D225178058E41F
SHA1:	204D9A06AA9AD4DDD61F22A06A2FB6830A14C0DF
SHA-256:	78E4ED5A61789077F1CD50A85BEE8987F09607CFAD17BD554B1451E023EAF1DD
SHA-512:	C4C4464E0D1AD7D4C69E9DBEECF379C6521DDBB3EE39201B97D910CDD614F6ECFEB6102DD9FBB76CAA47B21F43614FEA6CFD07B16C91F3CF76193B923E26BEDB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TZPTKRR&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"261",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"label"},{"function":"__r"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_content"},{"function":"__c","vtp_value":"844585682227065"},{"function":"__cvt_12729902_717"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"product_variant"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"country_code"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"u

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8637)
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	5.634940892294206
Encrypted:	false
SSDEEP:	96:aWfeFz1eXyNeC8jXTqvKlq14bOYVH1doctYnWwELc0mcDJoab4OGzyQVMv4nuZ:e2+8jmvtGdoNnWf5oaed+
MD5:	773E2012DF644BA3358FF592B1188A99
SHA1:	FD294C29C6CFC4DF0A27E94F227DD41C34644A53
SHA-256:	44894AFE9CD925D8DF1FD3C667CF2D615C64045C22BA1F774DA6FC46171FFBDF
SHA-512:	8F2F95950CFA7671757FBD24511C729E9D132927DEC10061F057F9249BFC5ADF2E16BFA970CEF55E66487E2BBF16E33EFF64C90504B0DBB3805E1847957C9783
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b3ad105788169a6a.ltr.css
Preview:	._pFsfA{clip:rect(1px,1px,1px,1px);border:0;font-size:0;height:1px;left:0;margin:-1px;overflow:hidden;padding:0;position:absolute;top:0;white-space:nowrap;width:1px}.dkWypw{align-items:center;box-sizing:border-box;display:inline-flex}.dkWypw:before{content:"\00200B";line-height:1;width:0}.dkWypw>svg{display:block;height:100%;width:100%}.R3BUpw{height:12px;width:12px}.uRWxVA{height:16px;width:16px}.NA_Img{height:24px;width:24px}.JRkz2A{height:32px;width:32px}@keyframes _vsOSw{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}._6ti9_A{animation:_vsOSw .5s linear infinite}[dir=rtl] .lmfTqA{transform:scaleX(-1)}.RMcv3A{color:var(--pUV7hA)}.M1IlTw{color:var(--FTyzZQ)}.EpS93g{color:var(--fSfh3A)}._7_8FQQ{color:var(---VkLcA)}.Tb7P_g{color:var(--05tvjQ)}.R5PmNg{display:block}.E_qVWQ{display:grid;height:100%}.UKsLwg{--d81tuA:0px;--_evPSA:var(--d81tuA);--_f2RZA:var(--_evPSA);--uN5Olw:var(--_f2RZA);---XJdPg:var(--_evPSA);--cmJCGw:var(---XJdPg);--m4p2Fg:var(--cmJCGw);--nukydw:var(--m4p2Fg);--y

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (531)
Category:	downloaded
Size (bytes):	750
Entropy (8bit):	5.5414538192902185
Encrypted:	false
SSDEEP:	12:kjhskjmmcyMnwf0Hz0oW0+NNJ1kOZw500a4GbUuvfs010IN4GbegLccDRfHJVrK/:kjhskjmmMwsHAoW0gFkOZw500a4GbUua
MD5:	D59A4DDAD62794F43FEAC3D013CAA8A3
SHA1:	7872C36284586968B5439E24E303536497E2383B
SHA-256:	F6EBE36343DB70377C5235FB45A0B47B7B85DFECF7C85F946D9EB5D9AC01928E
SHA-512:	2C4795BF39C679E5110C5A5CC452ED1C405A782D02C1F8DA459A9AF688BC994A8B5033B30120B8F59F0C1363EA5B98A405D888CE3B146F8DDE76E82BA28A2CED
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/ad93ef588d339385.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5995],{../***/ 262047:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var zFa=function(){var a=window;a.addEventListener("dragstart",b=>{null!=b.target&&(b.target instanceof a.HTMLElement&&!1===b.target.draggable\|\|b.target instanceof a.SVGElement)&&(b.preventDefault(),b.stopPropagation())},!0)};var RD=!1;RD\|\|"undefined"===typeof window\|\|(zFa(),RD=!0);.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}]).//# sourceMappingURL=sourcemaps/ad93ef588d339385.js.map

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	4.546742488437108
Encrypted:	false
SSDEEP:	6:tI9mc4sl3WfR9F37qCdzU4jQT1m9etUNq1RQv7HD6DVJOp0zjyA0mI4YLJ5TDh:t41WffF37vdz3QT49etN127gtvb0mE/x
MD5:	0483F2B648DCC986D01385062052AE1C
SHA1:	61BD815F1497863265A76D92623042835E5E7FE2
SHA-256:	09A743EE0C32CA57C9BE64B13B29C396310D1DD309CB4D7D3BE722E47DB95F27
SHA-512:	359F9BCC2441DC48FFBE69353BB7D4143A2037B0263BD5F0CFB06B14D5F15D9A6E574930E88A84081C61698BF3E2F5333BF9081865183AA7F9202AAC078C10FF
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/0483f2b648dcc986d01385062052ae1c.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1.751 22.587 11.216 31.568 18 34.034c6.783-2.466 16.249-11.447 17.617-19.959.17-.721.268-1.469.268-2.242z"/></svg>

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (707)
Category:	downloaded
Size (bytes):	926
Entropy (8bit):	5.497067716770392
Encrypted:	false
SSDEEP:	24:kjhskjmmlwsHAoW0ghkOZbrN2zL28vjukrAqRAZ8JwJlK23u:AOAvl0PkO3uLJrAqRl8A2+
MD5:	863AA10AF752A9F7F786F51E37549655
SHA1:	97625C31C75CCE3161922ECE6439E10A05E23BE6
SHA-256:	3A33C51FCEDC3BDF76C60AF5D3C523EBB27755CBA613CDDF0D2A2C97ED070BE4
SHA-512:	9648CC872AE229FC65C7801005EC8D38EBEBC80A0E908CE13B2888043FB71755570578CCAAFE854C27986FA9F7AE0E4B3931C1A57BC058E877F1E3A80577E96B
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/0f5ea65290dd5dce.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6997],{../***/ 542011:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(262047);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var X3=function(a){return new Promise(b=>setTimeout(b,a))},Y3=__c.A(()=>({pea:__c.U(1)}));__c.bc={EGa:function(a,b){const c=a.rv({qt:{fS:"config"},T:Y3.T,oa:Y3.oa});return async()=>{try{const d=X3(250).then(()=>{}),e=c.then(f=>f.get("service_worker_flags"));return Promise.race([e,d])}catch(d){b.Aa(d)}}}};__c.bc.delay=X3;__c.bc.Rua=async function(a,b){await (await b.rv({qt:{fS:"config"},T:Y3.T,oa:Y3.oa})).put("service_worker_flags",a)};.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}]).//# sourceMappingURL=sourcemaps/0f5ea65290dd5dce.js.map

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1010)
Category:	downloaded
Size (bytes):	1073
Entropy (8bit):	5.6055484543469705
Encrypted:	false
SSDEEP:	12:fyPYwaYU2VlQDsK7pkfOrufedImpWZu3+7BtfZUwfVtLEeQBeaxWLGewQZGDuIRY:KPZa4VTWruoImsf7HRhLEBB9WDXtv
MD5:	0D6EE7A905222E37948763E67827F437
SHA1:	BB3C976CC0ED36BC34BF0B90C983FAE5AF045AD2
SHA-256:	DC3E7F2F1540369F9DCF1F72D39D221E568D312B807A141BC175CD183E96D303
SHA-512:	80318BDBD07842F28CC7EB222D05256975F6D5A471EF8A01B5FD8F2CDA415C3EAC378F8B6D520498501E4EA46413A7BC6CC66267FAE1857E10AAB6DC0BF724FD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/b157bc1b425e2d2a.ltr.css
Preview:	.light{--cT3jbA:0.07;--HtChog:0.025}.dark{--cT3jbA:0.15;--HtChog:0.10}@keyframes HrpoWA{0%{opacity:var(--cT3jbA)}25%{opacity:var(--HtChog)}50%{opacity:var(--cT3jbA)}to{opacity:var(--cT3jbA)}}.n7vSfw{background:var(--pUV7hA);opacity:var(--cT3jbA)}.S_ZkxQ{animation:HrpoWA 1.4s infinite}.abYU1Q{border-radius:9999px}.abYU1Q,.ccpanQ{padding-top:100%;width:100%}.UG13Dw,.ccpanQ{border-radius:var(--fKgqJA,4px)}.UG13Dw{height:100%;width:100%}._4RR_JA{border-radius:0}._2PfzsQ,.uYOLFg{border-radius:var(--SatqyQ,10px)}.uYOLFg{height:1rem}.KNA9cA{border-radius:var(--SatqyQ,10px);height:1.4rem}.h7eUeg{height:0;position:relative;width:100%}._3FYLtg{display:grid;grid-template:minmax(0,1fr) /minmax(0,1fr);height:100%;left:0;position:absolute;top:0;width:100%}._3FYLtg>*{grid-area:1/1}.dxuhGw{flex:1 0}._5jkjvQ{align-items:center;display:flex;justify-content:center}.MALKfQ{margin:0 16px}.WX6IsA{color:var(--fzXPDA);margin:0 8px;text-transform:uppercase;-webkit-user-select:none;-moz-user-select:none;user-se

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.997929372431289
Encrypted:	true
SSDEEP:	24576:UpLlIHVy1QwoAyaXgiABUDtvwpZlkFBB9kRfo12D7jL2z1CcC:UP42QwvyIgiABUhmlKFuA12Df6JQ
MD5:	8C14860D89D12B07E24F987BD5B70D36
SHA1:	786966E1D4109DB289F262E7A593BEB1603AE765
SHA-256:	A789A2C7239EF8EFAA6341472A81F87647C3297693D479090E7B103DE8579F7D
SHA-512:	B2FD7A9B8DA74A096FFECE166B706CD27379C9A0534716DB78C993D520B82DF3C9DBA856761BEBD06DEE507096ED1454920E9231FBA2242C5DF75569B36317BF
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4:2f73406e468869:1
Preview:	.Nm3\..^&..d/..LE0.&}~...f.Y.=..j7h..q.E..C.A8..w.G..\|.q...H.B.z.Z4......GV$...i....T.!..\|B.. ..?.\..IW.....r....hKT.2...x.\...S.......4..l...Q..M..U...D.hJ..}?....4...('....Z.............\|..<.@.#.........D.a......6....#.t.l.``.Yo.[.o..D...Q..R+.....DT....fx........c.y..Z...yjCd.8e..~..%2.bm#~#i.......5....o...,r..ij.@.RYFD........;O...<T...Dw.l.......qbW.c.X.?@f}i..............b..zU',..ph..sq.7/.I.".A.Rs.W...K=>..HC.-....-.Y6......x....u....Tw......=.......0o..\..#.z.W.p...H..z.L..b......;`B.>._......9.o..xs...H8iI........9....[~...a........J..qd.e..)...Q...T......../..+.=...*z@..K.]..E........K.&f...8..0.! .ju.,9?....\Y]'T.p.^{j.p.Wv.5R..7.$.`3....M<...&2..<..D\.6L.TZ..=..q.'.`&...".......#K`C!..A.. ....k....d.vK...%..(.D..j..c?.]..L..7....&...J...&.V..=...iG......7.O..`...#.T.. ..=.........N..ek............-...d.T&~...# g.D:/..!.v.K:).A[..-.....eaP....=...(p1x.f.......-5lM{.rT..@...1.%.r.\|.W.Pi.......C.p?....q{e>M....?...

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (742)
Category:	dropped
Size (bytes):	3481
Entropy (8bit):	5.657237602613768
Encrypted:	false
SSDEEP:	96:+8bvYfmiQJ7vYfmi+8b0BYfmiQJ70BYfmikEE1miCbyB2U5:+8bAE7A28b0WE70W5EDAU5
MD5:	E8E84FEC9CC83595D5EA5A7AC9DEF686
SHA1:	2B1BDE24AFDFFFB3C17B10B99ECA10DDC799CC15
SHA-256:	C5006A61F4E66B2A6BF9B65CE5116984DBFA5B467D95B1A884FF68ADD8B5290E
SHA-512:	9F76CD85C0E33229C84A66BF7EE5F1F43E6EC5E7242BF56B8B8CA19950FE9120AF16F5DD3069EF19330E33442B2EC7D56983502060955624688D6C20AC1F8ED4
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1795515039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1795515039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auid

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2529)
Category:	downloaded
Size (bytes):	2592
Entropy (8bit):	5.4885873583091955
Encrypted:	false
SSDEEP:	48:Hgkf49m6av9sUegR8jyEJ9H7yDf78HmCRJxZ:VFB8jd7If7umCR/Z
MD5:	6B3539DBA386DD177612D6169608CD52
SHA1:	720B6D0E4C657698C3D1E17CCCFFD78F44888FA8
SHA-256:	BB304B360304C47D9ECF9E14A1F9D0173A95FD4455EFDEA1AF50DED95EA36585
SHA-512:	F40D4D3A8DF3A67351888065DFAD5786A9B8B6977BCA61ABEB05DCA23564EB3C4A20AEE2F640BE26AC75FDC1D1E9F65BC166AFCB2FAF11DA55E4F0E826ACC6AD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/2aa80d3e88fb64ec.ltr.css
Preview:	._0yZ6Qg{text-rendering:geometricPrecision}.aF9o6Q{height:100%;pointer-events:auto}.XfBqww{-webkit-user-select:text;-moz-user-select:text;user-select:text}.N5u5uw{animation-fill-mode:forwards;animation-name:_0qIsaA;transform:scale(0)}@keyframes _0qIsaA{to{transform:scale(1)}}.q7pEvg{animation-fill-mode:forwards;animation-name:_4_76aA;transform:scaleX(0);transform-origin:left}@keyframes _4_76aA{to{transform:scaleX(1)}}.f23SJw{animation-fill-mode:forwards;animation-name:_293oyg;transform:scaleY(0);transform-origin:bottom}@keyframes _293oyg{to{transform:scaleY(1)}}._3QYyyg{animation-fill-mode:forwards;animation-name:pAWabw;opacity:0}@keyframes pAWabw{to{opacity:1}}.Zo18Jg{animation-fill-mode:forwards;animation-name:EtXHrg;opacity:0;transform:rotate(270deg)}@keyframes EtXHrg{to{opacity:1;transform:rotate(1turn)}}._3tQhmA{overflow:hidden;position:relative;scrollbar-color:rgba(17,23,29,.6) transparent;scrollbar-width:thin;z-index:0}._3tQhmA::-webkit-scrollbar-track{border-radius:4px}._3tQhmA

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1766)
Category:	downloaded
Size (bytes):	20702
Entropy (8bit):	5.5515583960012505
Encrypted:	false
SSDEEP:	384:Dwpv3seNkOjhxuQSqK5L6QafZpTd7/RpDaE3YsOD3D951OdWiNvZs5r1qj3x7cVO:Dwpv3seNkOjTuQSqDQa7TdTRp+EYdvA5
MD5:	215C3CD67125380D17A1E13186D4F6E3
SHA1:	7DE501DB38F9F6CEF8411A35FA631D5242418E9C
SHA-256:	6CFC6F8B40AC262248DE1BC49E8429F8996D27C20FE761A1DD9A364BF8304805
SHA-512:	A2D658F2B9BB00EBEEBC79A47EFCB2EA61C36845D1EFC01D446FB8A71F1FB51C7E0A502713C88FAB659DA43CE6D425C98690688EB17D462B103298F641BEDE2F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e647c3f88a50ee5c.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5319],{../**/ 323028:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(391214);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var Gr;var Wqa,Xqa,Yqa,Hr,$qa,Jr,bra,Kr,era,Mr,Nr,gra,lra,kra,Pr,mra;Wqa=function(){var a=window;a.addEventListener("dragstart",b=>{null!=b.target&&(b.target instanceof a.HTMLElement&&!1===b.target.draggable\|\|b.target instanceof a.SVGElement)&&(b.preventDefault(),b.stopPropagation())},!0)};Xqa=function(a){const b=a.create();b.JW=c=>{var d;null===(d=a.JW)\|\|void 0===d?void 0:d.call(a,c)};return b};.Yqa=function(a,b){if(!b)return Array(a.meta.length).fill(0);const c=a.meta.lengtha.length;if(b.flat().length!==c)throw new Gr(`Could not set uniform '${a.meta.type} ${a.name}'. Expected data with a length of ${c} but your data ha

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.359418865415674
Encrypted:	false
SSDEEP:	24:t41Ri5D1JURsYbz3QHcchcNq2tkJzvEL16squq3qcEgtNibpq5S+2OV/LvBe8rTd:CsTJnoLdk1Eg7llEuN8M5SjKBeM31dy+
MD5:	8777E8ED572C4159D71B08CCA2972B15
SHA1:	2A57B1E6F2667BA1364CF459161FB868B53C37B8
SHA-256:	E1795BC184F97F29790C807FC91C70846D221904576727698728271D7071F268
SHA-512:	43276A2282A1B088AF417B61942B880253F9D1FCDFFF802F2EBD5BE935D4A708C2AA90842247147D5274CDE52D2B06B5659A607593925822539D6985AE84CFD0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/8777e8ed572c4159d71b08cca2972b15.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173 1.205-.286.358-.828.401-1.211.097-.11-.084-2.523-1.923-6.182-1.098a.91.91 0 0 1-.764-.184z"/><ellipse fill="#65471B" cx="13.119" cy="11.174" rx="2.125" ry="2.656"/><ellipse fill="#65471B" cx="24.375" cy="12.236" rx="2.125" ry="2.656"/><path fill="#F19020" d="M17.276 35.149s1.265-.411 1.429-1.352c.173-.972-.624-1.167-.624-1.167s1.041-.208 1.172-1.376c.123-1.101-.861-1.363-.861-1.363s.97-.4 1.016-1.539c.038-.959-.995-1.428-.995-1.428s5.038-1.221 5.556-1.341c.516-.12 1.32-.615 1.069-1.694-.249-1.08-1.204-1.118-1.697-1.003-.494.115-6.744 1.566-8.9 2.068l-1.439.334c-.54.127-.785-.11-.404-.512.508-.536.833-1.129.946-2.113.119-1.035-.232-2.313-.433-2.809-.374-.921-1.005-1.649-1.734-1.899-1.137-.39-1.945.321-1.542 1.561.604 1.854.208 3.375-.83

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.1994764927035653
Encrypted:	false
SSDEEP:	3:M+xRKSWljGkhbAYn:Xst9
MD5:	52CAA374F9D8E80A43D843453A09451E
SHA1:	F20B4B2FC00180AD9895BED85B931F038BDCDF18
SHA-256:	4F8F48B18463DD38185B16DEEE997ADF27F88ED4036BEA70AFA90A9CE8DAD648
SHA-512:	FCBFDDCB33739EAF3E2E95086599D04E4FE7B07A3905E3710BD303C005EE2DEF632F2F59817895ABA8C0A1B14C77941FFCFE232E74E8401CB873AC3663E71E08
Malicious:	false
Reputation:	low
Preview:	R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	92668
Entropy (8bit):	5.391880432393615
Encrypted:	false
SSDEEP:	1536:seJRPPBN+tt7IKkd2ye5UVYSffpSQJYsJyH1gOV5IBFNqFWjZXQO1UuwcN:seJRPPBctt7I9PaefpSQJYsJyH1gO0dx
MD5:	5F33666C18680E5BEFC0159FDCBE9C37
SHA1:	E6589F311B66B56BF890D2151DC58640ADC10DF4
SHA-256:	5C5FBA728781ECA822DEC08EDF2193C7913951CDCF7602E316D771EDB2CC09DF
SHA-512:	1260C69FD032A08306CE66E1BF9F9EBBA1C7A36A8C3A980FDD3D4BEE52A70F6193804CD4F1EE99FA198629D44BAFD797550055DB47FEA0970AD6EA5E481B7E7D
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/1b96dc175117e75c.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const h={bn:s.Z,A:n.G,qr:n.r,it:r.Z,qt:o.Z,xt:o.Z.ep,D:a.Z,zo:l.Z}},94368:(t,e,i)=>{i.d(e,{Z:()=>s});const s={pn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.length);for(let n=0;n<i.length;++n)s[n]=i.charCodeAt(n);return s}}},412730:(t,e,i)=>{i.d(e,{G:()=>s,r:()=>n});const s={CustomEvent:"ce",Pr:"p",Sl:"pc",oc:"ca",Ra:"i",qs:"ie",T:"cci",W:"ccic",_:"ccc",L:"ccd",Wh:"ss",bh:"se",Je:"si",Re:"sc",He:"sbc",Pe:"sfe",ro:"iec",vl:"lr",yl:"uae",U:"ci",F:"cc",Al:"lcaa",$l:"lcar",En:"inc",An:"add",Un:"rem",Sn:"set",Cl:"sgu"},n={Fr:"feed_displayed",ac:"content_cards_displayed"}},657070:(t,e,i)=>{i.d(e,{Z:()=>s});const s={nt:()=>{const t=t=>{const e=(Math.random().toString(16)+"000000000").substr(2,8);return t?"-"+e.substr(0,4)+"-

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	dropped
Size (bytes):	1128
Entropy (8bit):	5.4291133377269825
Encrypted:	false
SSDEEP:	24:jaoxxNvtYUn8G9P71Mao2NvtYUn8G9P8LdRdP:ja8bvtYU8G9zCa7vtYU8G9kLdR5
MD5:	9ACBDD6E3A6C5CF9FA698FF63A77FAC3
SHA1:	4EE7EE352BAF429906068793DF3EE3BE163F9589
SHA-256:	B9964362F430F63EB2E4DD1B033A654D09097E85226690B88D260B83D5ACF588
SHA-512:	F16969313EA47BA4AA09A7AEA7A050E4A916FDDA0A37ACA44A18B6998F9F739C5D9A19D3508C25572DF87E9FBCBD91143FDD767D71F5467221FEC4957AE882B1
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1592682549;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1592682549;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13267)
Category:	downloaded
Size (bytes):	13330
Entropy (8bit):	5.7461995257586445
Encrypted:	false
SSDEEP:	192:eUG8YT+I0FFQOAMBzKaCkQrFAWhz4iOoxHWeeClhAVyyMjFuF3C+sS2xBXc:3G8YT+I+C+BzyGgkrVydc
MD5:	8FFFC4AE918545148C514C3E3678BA51
SHA1:	60C24FE2BA01CD982974D28232C643BC78EBC895
SHA-256:	49AF944FBF4ABA42AEDB71F4AEE4FD0837017283FA97F9A6F6BD39E39B84A3AB
SHA-512:	65718E99469A8FE719804108192D59A982B49C0AD7B69CEC1B0EBD40134C62FA751CA870B1B2890EA488D920742AD464CDE508F2351F00AA22DF337ECDC4A9A0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/95b3da1a84e71c81.ltr.css
Preview:	._1I5x5g{-webkit-tap-highlight-color:transparent;cursor:pointer;display:flex}.bV4U1g{align-items:center;padding:4px 0}.XsQNVg{cursor:not-allowed}.SPXzig{-webkit-appearance:none;-moz-appearance:none;appearance:none;margin:0;opacity:0;width:0}.ZJon7Q{align-self:flex-start}.ZJon7Q,.tdZD9A{display:inline-flex}.tdZD9A{align-items:center;background:var(--bDblYw);border-radius:4px;box-shadow:inset 0 0 0 1px var(--6TS0wQ);flex:0 0;justify-content:center;margin:4px;transition:box-shadow .1s ease-in-out}.tdZD9A:before{content:"\00200B";width:0}.tdZD9A{height:16px;width:16px}.tdZD9A.nv35GQ{height:24px;width:24px}.VqRjiQ.tdZD9A{color:var(--_mHLrA)}.s905NQ.tdZD9A{color:inherit}.AqfZZQ,.IbvMRg{color:var(--4Yobmg);opacity:0}.tdZD9A.EPEuzg,.tdZD9A.te6xBw{box-shadow:inset 0 0 0 8px}.tdZD9A.nv35GQ.EPEuzg,.tdZD9A.nv35GQ.te6xBw{box-shadow:inset 0 0 0 16px}.tdZD9A.EPEuzg .IbvMRg,.tdZD9A.te6xBw .AqfZZQ{opacity:1}.tdZD9A.XsQNVg,.tdZD9A.nv35GQ.XsQNVg{background:var(--6899sQ);box-shadow:inset 0 0 0 1px var(--6

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570862163&gtmcb=917437882
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3855
Entropy (8bit):	7.8409923713673635
Encrypted:	false
SSDEEP:	48:SfEu62YWi4vZrnEDCIpnysDL6qAOFzGACostUFas2xwfsqDNRNHAM1fr951YMQQa:Sf62DpZY16qU72NffnD151fBrYIv+3
MD5:	BBA3545AC3959218F010A953B40EB6F3
SHA1:	71BD352D39F77A56E573E06FF3331AD99530519B
SHA-256:	A824F2AE40E7A443006918FB3C67AEE30A61353F30820F7523E2BC85693B5DFC
SHA-512:	E6FBB23CD0A6AAC4BFD1EF2685977E4C664D3B9A932F29112FAFCEE494F1695EF6BEA2536C2F7F589C6A1FEF901BAE8C780DE8EF703B9626803DA4B4161FB4E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB........iPLTEGpL.............................................z,....UP......8e..^.U.I........r~..........w.".._..Uvo.....tRNS..........tQ.+..k.....)IDATx...]O.0...U..........._y...t_.}.>......8i.................................................................X-N._...!......\...M.Z../...~....9.'.\|.].../[..J+{.....~...=j.Nr.Jt...$.6e^.0S.......r..77%..p)..qVSImJ...R.[".g..S..l.W2v...."...H...M].d...A....4.%.U.0..RM....9..,7....h%.YX2..rIU{....&..t..l.6..k..+..\VS...=Q.Ta.hV..W....O..T..%..IiP.Ui).t......t.n$E.d....:V..:..Wu--'5..z)k{.l.h....lc7...{_h....K9F...]..=.(Bm.R..4......E.c9T.T..k..6,._...?A$..C...x!..l..3ai..v...].f.....u6_.....J.3,.=0.AD.._..b..@.....iR,.to=&.L..W....l...#2Nw..TKI.}R<F.".3..II..".IiP.I....['E.2)../I.....fQ.H.8IJ!..A.$).ngIE_IQ..M..E.IRr.Tt...G.KRZ...4*.O.=.#)...$5.\|.I.}R.>. )..S.d...9...........L..99..\.~A....."....;.'.k......`..X.....;zJg..........y..R..~...

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	4.902273486376956
Encrypted:	false
SSDEEP:	6:8VCTYLAr5LVQ2eBg+Au57lfk3Fw8KEMrEL/Z:8GeXAu5R8VBC4Z
MD5:	823314F0820505213FB53A70DC7CC636
SHA1:	63537C02AC34510513FA57FF80973A1AAB49C1FA
SHA-256:	36BAC228598E2C10DB69D8875787777E991E494AABDF585594D50E0417657DDF
SHA-512:	8B381758D155DDF7DBEF9945CE410DA197A38A18ACC2933E890091E8CFED61401B0EC29486A5FEE71D5DDB04B7B15E104C31E9A7A7885B8D0702EDDA24E4EDF4
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/5b2d464c2f59a733.ltr.css
Preview:	._682gpw{-webkit-touch-callout:none;-webkit-user-drag:none;-webkit-tap-highlight-color:transparent;-webkit-user-select:none;-moz-user-select:none;user-select:none}./# sourceMappingURL=sourcemaps/5b2d464c2f59a733.ltr.css.map/

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8965)
Category:	downloaded
Size (bytes):	27928
Entropy (8bit):	5.6382525885618096
Encrypted:	false
SSDEEP:	384:YhcP7n/l0Kboqt62Kq6MWT5cV2F1LuZGJEtrZh8LZeqUpwpb8BI:n/lNMJWrZ1qpb8BI
MD5:	BE438367382068D93A1D05CCCED24404
SHA1:	569A3EF4F339FF2BB39D30E64C2BAB195D6DBC2A
SHA-256:	B9F7DC5B0C907C430D12E0E2427148335E0288C01A82461E5B114E5011DC6C8F
SHA-512:	0EDB73C66496424BFD95068DE24B455566D026A1656111A229BD3A5F7B7EDCA75DD3F39B1804B4D2A354ECC7732F86E48483383CBDE6A180757CC8CA89C0D13F
Malicious:	false
Reputation:	low
URL:	https://chunk-composing.canva.com/chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+03c124a95e7ed5c8.ltr.css+00787dffd4c1a100.ltr.css+b718cbbc9087429d.ltr.css+d2208eebbe189dbc.ltr.css+4d059dc08c82efef.ltr.css
Preview:	/* __FILE_CONTENT_FOR__:8b0efce4dcfa662a.ltr.css */..light{--e0RFhg:hsla(0,0%,100%,.5)}.dark{--e0RFhg:hsla(0,0%,100%,.4)}.zk9iKQ{height:100%;left:0;pointer-events:none;position:fixed;top:0;width:100%}.AEurtw,.WgUfqg{pointer-events:auto}.AEurtw{position:absolute}.Vef6sw{background-color:var(--TlUudQ);box-sizing:border-box;color:var(--pUV7hA);display:flex;flex-grow:1;height:100%;overflow:hidden}.LGK0Aw{overflow:visible}._1EwbGQ{transition:transform .25s cubic-bezier(0,0,.2,1)}.QSKRKA{transition:transform .2s cubic-bezier(.4,0,1,1)}.DS1ecQ.C_oBTg{border-radius:0 0 var(--luBooQ,12px) var(--luBooQ,12px)}.djQE1Q .Vef6sw.C_oBTg,.djQE1Q .Vef6sw.C_oBTg:before,.djQE1Q.Vef6sw.C_oBTg,.djQE1Q.Vef6sw.C_oBTg:before{border-radius:var(--luBooQ,12px) var(--luBooQ,12px) 0 0}.Vef6sw:before{background-color:inherit;content:" ";height:100vh;left:0;pointer-events:none;position:absolute;top:0;width:100%;z-index:-1}.Vef6sw.jIrsCQ:before{top:30px}.Vef6sw._8AVeyQ:before{box-shadow:var(--4ClGCw)}.DS1ecQ,.djQE1Q{h

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1525579
Entropy (8bit):	5.5847471291564625
Encrypted:	false
SSDEEP:	24576:X1xQ9BwNy1JwNy1OD4ol7EKhtbRLM8s2J0Ano8V+F8raznhMTZ2umuwRwnpsVoQL:X1xQ920ol4KhtbRLM8s2vnXV+3hMTZ2n
MD5:	B205A9A803F0BEA000CF8928CF4BBC0B
SHA1:	8AE6D634A72E5C6101BE46C4FFF623328F74B9E0
SHA-256:	A7BA05293B560EDAB2D4D22D5564BA28BC8FBE3D3BEDDEA8B2C7525D01D3456A
SHA-512:	4B4EBED006FADC1771952C44ACB34DC18CB6BEB80230D44036109FE1DA8623ABD6ADF183AFA7726EF8EA8EE21430E64AFECE4EF84AFC6F8B35DD1EAD06DAC940
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/pages/product/visual_suite/home-77221781a3080c3f.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[50294,77650,16948,91275,24061],{"./node_modules/@canva/easel/lib/src/base/debounce.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.debounce=void 0;t.debounce=function(e,t=50,n={}){let r;"object"===typeof t?(n=t,r=50):r=t;const{leading:a}=n;let o,i,s,l=!0;return function(...t){if(!i){let e;const t=new Promise((t=>e=t));i={promise:t,resolve:e}}const{promise:n,resolve:c}=i,u=()=>{c(e.apply(this,t)),i=void 0};return a&&l?u():(clearTimeout(o),o=setTimeout(u,r)),a&&(l=!1,clearTimeout(s),s=setTimeout((()=>l=!0),r)),n}}},"./node_modules/@canva/easel/lib/src/base/exists.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.exists=void 0,t.exists=function(e){return null!=e}},"./node_modules/@canva/easel/lib/src/base/id_generator/id_generator.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.IdGenerator=void 0;t.IdGenerator=class{constructor(e="__i

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2770
Entropy (8bit):	4.773533285429319
Encrypted:	false
SSDEEP:	48:vHHPvxmiKDA63s6/azqV6jRblmTTMociwACxlxljp:3vxBKDA63//9VSzmTdcigrt
MD5:	0B8C32BD74FBE7B22DD7487F9D663115
SHA1:	47D3E68358AB40C9826E61B92E22128738AD99E4
SHA-256:	86F3464B435F45EF498BC2A621CAD3DE242CFAE23932B1F8A02244309A68173B
SHA-512:	C811698EE28764A2D7FA9C0AD271F3C71361EC3569B5DA4360DB09FBDE25B833A810644DDD6676654C6D650DEE790AAA4A69059D7373824F5FBC18991AA16975
Malicious:	false
Reputation:	low
URL:	https://cdn.metadata.io/site-insights.js
Preview:	(function () {. var accountId;. var visitorIdKey = "Metadata_visitor_id";. var sessionIdKey = "Metadata_session_id";. var baseUrl = "https://api-gw.metadata.io";. var blacklistIds = [1721];.. function getCookieValue(key) {. var cookie = document.cookie.split("; ").find(function (cookie) {. return cookie.indexOf(key) === 0;. });.. if (cookie) {. return cookie.split("=")[1];. }.. return null;. }.. function setCookieValue(key, value, expires) {. document.cookie = key + "=" + value + "; expires=" + expires + "; path=/";. }.. function createId() {. return Date.now().toString(36) + Math.random().toString(36).substring(2);. }.. function createCookieExpiration(minutes) {. return new Date(new Date().getTime() + 1000 * 60 * minutes).toGMTString();. }.. var visitorId = (function () {. var storedVisitorId = getCookieValue(visitorIdKey);.. if (storedVisitorId) {. return storedVisitorId;. }.. var visitorId = createId();. var expires

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5818)
Category:	downloaded
Size (bytes):	5881
Entropy (8bit):	5.663077306686578
Encrypted:	false
SSDEEP:	96:ymR5Bt9D95GepDHkrOXWtwBFo05jRLAZhfg0z4NFGqEgc2:/R5BjDzloAdAZhfb4N8Fg3
MD5:	892207F5EF789AED212E325E5CD54633
SHA1:	D6AC3258F604AA3DE596DC6EE11BAFE1647CBB6C
SHA-256:	454999A07A8B331E726BDD757D00C342DC53FE523D5B84F4CF8D540154228746
SHA-512:	8DE3023EE28561E79B40B712FBA4DAF7D55DFE3F7452203AD78DF3A95E1AF154F961CE273428E0894A4C2CCDEE0069428C069C50CA6EBD5FADE5DD364AF05BD6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/e211aff63b38189e.ltr.css
Preview:	._9Mb__A{border:0;box-sizing:border-box;list-style:none;margin:0;padding:0}.TsqTMg{justify-content:normal}.VpI6pA{justify-content:center}._NLu4Q{justify-content:start}.WkHsXQ{justify-content:flex-start}.KWHRmg{justify-content:end}._6Wu_wQ{justify-content:flex-end}._9Jwa9A{justify-content:space-between}.SdPLvg{align-items:stretch}.PbKupw{align-items:center}.IQbIXQ{align-items:start}.Pv4hww{align-items:flex-start}.l14TtA{align-items:end}.pjmL_Q{align-items:flex-end}.KYVkRQ{align-self:stretch}.W6llkg{align-self:center}._8a9K5A{align-self:start}.Q91wWg{align-self:flex-start}.JN1M0g{align-self:end}.mZB6gA{align-self:flex-end}.light{--YkBpzA:#f6f7f8}.dark{--YkBpzA:hsla(0,0%,100%,.15)}._6hNByg{background-image:linear-gradient(45deg,var(--YkBpzA) 25%,transparent 25%),linear-gradient(-45deg,var(--YkBpzA) 25%,transparent 25%),linear-gradient(45deg,transparent 75%,var(--YkBpzA) 75%),linear-gradient(-45deg,transparent 75%,var(--YkBpzA) 75%);background-position:0 0,0 8px,8px -8px,-8px 0;background-

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	5.220117951838624
Encrypted:	false
SSDEEP:	12:kjhskjmm7yHnwf0Hz0oW0+NNJ2yQGGi7yQGGnXdlJVrvyQGGiO:kjhskjmmuHwsHAoW0gmydB7ydkJlvydo
MD5:	053A8A9B0E21E83550C191F2832F490D
SHA1:	9E30394F1C291B8D37EC950545B5C63A0B607123
SHA-256:	B28F86681052C4320B1759EE2FE02C4FB2647DFDA37C01119C054D63AEFDC42F
SHA-512:	6B75EA27BB913F16E696DED5B4859C795AA7C721B889F0A13D89DEB494428DC7A0E0DAE9F364AC7550C8EC07F32834433DCC462D9E98707330911447863D408F
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/c2aba0ace5513e3b.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5234],{../***/ 237221:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {.}).call(self, self._45f7853dc7660378a038952b53c0953e);}..}])

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	8923
Entropy (8bit):	7.919611819145398
Encrypted:	false
SSDEEP:	192:29vjb4988EUCPrtGoFD2Z0440y55s/wcsLtn88YSkN:svX465XGw6Zty55s/+Ltn88YSO
MD5:	447D04D6CAFE42A82BFD8F5166340897
SHA1:	DBDDE27870BBD0F6DC6FEA7B811DB1DE260FCEBA
SHA-256:	5CD6BFD187C9381553B7D8E51B0D68B7DC46432E0F7FABA31A9D16B95740844E
SHA-512:	B7025F983D23E36B1A1F7D246025393881BC4AC9BEBE87BF7FD655000EA78F9F193674999C4807A01A39FE075D59AFA9975B6A1D842717753751BBE4A5B4563E
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........7....................................................................B.u.............i.................................(}UAU.T.PUAR.T.....PUAU.T.PQG........................................j....>....L..7.\|h7.\|h7.\|h7.\|h7.\|h7.\|h7...Ml......W:IG.T.R..........Ro....c.ni.]h....\.v.;....F.._....p..........M..M.V;f....'\.K........C..^R..P........8....n..~{~.u.fag.;....;...3....;...3....;...3..............B.F.....$F...DlI..$FhI..DlI..$F...DlI...f=g...A/.[.K..-).SK.8......[.WTC.'.O-)zE.%#Vw....._bm`g....B+G>..[..-\|;...tl?7.o:M......\F;'....(~.B&..M...F_..F......u...........~..A=k.s:.........z.k\|-.&Q.}..D6M.^#E......y.....w..!.......>W.v.C..H....L=. .8G....ywb.......mW.u...K..0....@.s...p...........N..t+8?n.3y....>......rKJ.......\...eu.v.....w>...`.... +\.x\k.B/.p......N.6

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2244)
Category:	downloaded
Size (bytes):	4279
Entropy (8bit):	5.678199938842916
Encrypted:	false
SSDEEP:	96:K3HJ/ENodHdv5U0uPMVtJ4LoUkLK1wmPLn29wH96A2M:KXJBzy0uPkJ47kLSwqLxH912M
MD5:	B2C2EFF5A155B675AC04E00A28DB44C8
SHA1:	70AC3363E32471A4C8E8C86091E8CF813817F0DF
SHA-256:	22980D48A24D75297294DC27C90A50B27FD76AC2DAE884A098CE61121309A3D4
SHA-512:	19D79851B6FECB98C4DEEEBDB1506E4A64C7B289DC56F0FD6F6939BD4F2EBF12984642D6F7ECCE7BCB226F15486A8339B04FA7487EE64B3A507657D9A41A23C0
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/a022fff96ad93c0b.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6232],{../***/ 885971:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(94958);__web_req__(206405);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var QAa=function({key:a}){return new OAa(new PAa(a))},RAa=async function(a){(await a.A.Ih()).qa("CONTINUE_WITH_ACCOUNT_PANEL",{})},TAa=function({I:a,Cd:b,Kg:c,Ih:d,source:e,ze:f,lk:g,B:k,$E:l,ya:m,ac:q,lla:r="AUTH_PUK",gZ:t,Bna:w}){const x=c.Ph,z=c.rg,A=c.Pb,B=c.jb.store.mode\|\|void 0,C=__c.wV.find(ma=>ma===B),D=QAa({key:r});c=!t\|\|C;r=!D.store.Fm\|\|(D.store.Fm?0<6048E5-(Date.now()-D.store.Fm)?!1:!0:!1);if(!c\|\|!r)return null===w\|\|void 0===w?void 0:w(),{bJ:void 0};w=b.jh;c=b.bc;b=b.bb;const G=new __c.Vh({I:a,.source:e});r=new __c.Wh(a,e);t=new __c.CV;const J=new __c.DV;e=()=>{l();void RAa(ka)};a=new __c.di(z

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	207271
Entropy (8bit):	5.282108965634635
Encrypted:	false
SSDEEP:	3072:l3nmIKOX2EheW05idF7zpwY3iS4rt/ZcYJ:9nmIK82rWAidFXpwYylZPJ
MD5:	FFFA6CE58572C2B43701705ADB3C0E12
SHA1:	A5376AD536C41DA87FC2AE88A33610E736EB8D95
SHA-256:	ADC27B7D15BED63DD68A0AA959A6D0DF8076A4722F58CA446E7D7135AF979ECB
SHA-512:	F3A8BCED81A7CAB8C9509FB3F4AF47272460AE402A8029B69D25E761B0134D287A3CA1D3B44F0FDB2389DD5F334F3F8C293572C046C7455FB19BBF5D6FB4E2D6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/10e70838bb909c0c.vendor.js
Preview:	/! For license information please see 10e70838bb909c0c.vendor.js.LICENSE.txt /."use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.render,a=t\|\|n;return"function"!=typeof a?null:(0,r.S)(a)}a.displayName="Observer"},433581:(e,t,n)=>{n.d(t,{FY:()=>i.F,Pi:()=>o.P,Qj:()=>l.Q,fv:()=>u.f});n(809991);var r=n(321645),a=n(356158),i=(n(38672),n(391367)),o=n(350666),l=n(68743),u=n(764947);n(433579),n(548495),n(887735);(0,a.z0)(r.m)},350666:(e,t,n)=>{n.d(t,{P:()=>s});var r=n(667294),a=n(391367),i=n(38672),o="function"==typeof Symbol&&Symbol.for,l=o?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=o?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((function(e){return null})).$$typeof;function s(e,t){var n;if(u&&e.$$typeof===u)throw new Error("[mobx-react-lite] You are trying to use `observer` on

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.147515720258005
Encrypted:	false
SSDEEP:	12288:dYyG8xDFQ3XJABeVTDje5ZkvYVcYJwhIlBHjv9W3ounb6vm:dYHkDFute5Zkv7Y+hqBr9M5b6e
MD5:	D1121E39EDFF9E35864CB8C33678B4DE
SHA1:	B12562B1E4C8196E2BE61659799222E8C6BC682A
SHA-256:	21E6B41D1EFEAE5CAA95619122AD8A1BA4BD0DCC354993B13A7DE2430DDA2B08
SHA-512:	C7395A003A41EE5FE01C1EAE198984D5C7D87787EB627CB1BD3B35AB8C20B7FAE39F1B3611B404AD4E3D3C10CF5CA42776B9495C41F91FAE21C0CF4A5BFC765A
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4:2f73406e44406c:0
Preview:	....ftypmp42....mp42mp41../.moov...lmvhd.............._.....................................................@..................................&trak...\tkhd........................................................................@........8.....$edts....elst........................mdia... mdhd..............a....0.......@hdlr........vide.............Mainconcept Video Media Handler...6minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H.........AVC Coding............................3avcC.M@....gM@.R...O.,.............2....h..5 ....stts...........>.......(stsc.......................:............stsz...........>..>....}...h...%.......C...&...)...........p...............................w..._...`.......;.......#..Qk...[...]...J...................5...........4...n.......x...2...........z...u.......g..............Zl..........+t...u..........................!6...e........

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 425 x 290, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	19376
Entropy (8bit):	7.914904441370808
Encrypted:	false
SSDEEP:	384:JwSA8muBOUYzxOIKSHFzPx7eWeh/E+71bLrQv/IGDAY+XbgWggY:JwYmZOInAhzBLcv/IwAYEOf
MD5:	CFB9664646E83F68422679B9FDC448A0
SHA1:	D1D2A345A8F84C03B84B09B0BC2CCB38DAF47F0E
SHA-256:	8C1C692B0B342C1EA48DBD0902DB3E3612F7C46898D0933B4AC83D051B546DC9
SHA-512:	441F65AB75013C9D50461F9FCE45DCCF215072369B588FA77ADB09BD6742FF9281E77CF064928550997F849A0B3E068C962DA8F4DEE2CA542ED8F188E6729DE9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....t..r....gAMA......a.....sRGB........VPLTEGpL..@.......................................w..................-.........S..............................L..}.......................................~.V..................t..t...........n.m.~.....b.}..i.w..\..k.z..j..Y..P.xjv~\.smQ.D.F..7.~;..5.jTlz>.mF.bQ[q=.`Cql+.f4.c7.[$.T/ut..H5LR..P#.J,c5-+9#L8.w3.Y.....+....y......tRNS...-4`i...........Y.....I.IDATx...n.0..w[U..s8s.!...%.KD.J....e..&...T%......B..?./.0..0..0..0..0..0..0..0..0.g....}..]f;.b...<m.!..4M.u.....t...{\>>...L.h..U..G.<...l.v...P........{..>..<.:..\].3.j...........?.t.".O.}...&.!...~.(....D..Z..xJ.;M.).cdK.O8...T.5.z.o..E@..N.\.n.;.A....EA5.dS^n..).....i{.w...\|z...\-...d.."....qSZ..An........4U .jp.Bx[.Z ...j..>.\.T.YS...D9t..<...<.L.....DRP..=-. MC_QM3..}1....).."_.j...(.S.=.k.D..z..s.ptUv.P...L^OwU..m0.......,u...z......8...`.1.J.X.^...;O.......D.\W.........z>^w.*narVU..Z......X..........

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	470
Entropy (8bit):	4.428280927846403
Encrypted:	false
SSDEEP:	12:t41WffQa0L0Nn7Ke+FuMXc7w0mHm1dNB2d4b:t414fzy0tsFjc7awdadg
MD5:	E5C5A4D109AEB5234E4405032DFD4800
SHA1:	4208CA1C20A9914F396350866B5DB5BB3A851B77
SHA-256:	0E19C6400D8E588E305CC6B80195926FEB73BD09F05732AAC6CCE1483A509A75
SHA-512:	D238FFD9149EE1EF975BA39C7B7AA70CD255B10A2B68E4C1DC8BA29484E18C1925B86A8DD11969B648EA6322E474EDE5CC5792A76456D83E04B8C1DE82B810AD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.203 1.978 1.978 0 0 1 1.866-1.363L12.947 13l3.179-9.549a1.976 1.976 0 0 1 3.749 0L23 13l10.036.015a1.975 1.975 0 0 1 1.159 3.566l-8.062 5.681 3.034 9.792a1.97 1.97 0 0 1-.72 2.194 1.957 1.957 0 0 1-1.16.379z"/></svg>

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54659)
Category:	downloaded
Size (bytes):	54722
Entropy (8bit):	5.2290425481566025
Encrypted:	false
SSDEEP:	768:cqCxqh8zYg6rtm0OTxEXE6ZQH+3dSDzrnERXS2Z3B+k2L:ZhOS+NLHsGzrnERmk2L
MD5:	05B9C89EC10DA17AEA465DA7508E5AFB
SHA1:	934E50AB28C7BB512A823D0AE369AF520D377188
SHA-256:	0E722C64795069C7507585B2C65E227E7F84722D45D68F23B5C6AF347C543C36
SHA-512:	B4F2FD9AE21D9BE670F4C33EC3241CDDFBD260B69AE85774E63F48528AA1CFF14C4F47AB018F78C75291F92993E62626D92DC1ED2CBB929E0542BD1A266D8211
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/527f411d8cbc0878.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{168949:(e,t,n)=>{n.d(t,{$$:()=>Ie,EH:()=>It,Ei:()=>zn,Fl:()=>Ve,Gf:()=>Qt,LG:()=>Mt,LJ:()=>Qn,LO:()=>Ee,M5:()=>ln,N7:()=>bn,PS:()=>On,Pb:()=>cr,SB:()=>Ot,SW:()=>Ze,U5:()=>Gt,VO:()=>dn,XP:()=>vn,ZN:()=>mn,Zf:()=>He,aD:()=>Dt,cp:()=>z,dw:()=>Zt,eJ:()=>hn,gx:()=>wn,hz:()=>Wt,jQ:()=>$t,kS:()=>Ar,le:()=>mt,ls:()=>an,mJ:()=>at,n7:()=>tr,p6:()=>X,pA:()=>zt,pu:()=>ft,qh:()=>pn,qp:()=>wr,rC:()=>Nn,rg:()=>nt,so:()=>q,vP:()=>Zn,wM:()=>ot,z:()=>Bt});function r(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];throw new Error("number"==typeof e?"[MobX] minified error nr: "+e+(n.length?" "+n.map(String).join(","):"")+". Find the full error at: https://github.com/mobxjs/mobx/blob/main/packages/mobx/src/errors.ts":"[MobX] "+e)}var i={};function o(){return"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:i}va

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	30610
Entropy (8bit):	7.9922316109341205
Encrypted:	true
SSDEEP:	768:2xSIYQo0dLF0G6qKHttFKKnmgJDRvnKJWU2L5iS8Yztmys6d:0SooMwqKH15nLYJWU21F8kd
MD5:	B9FBFA23CF7AC7F67EAA1656BA453E6E
SHA1:	2D1D024241F3EA6D40AEFDD5042527640F7E9E4E
SHA-256:	6CD98C46CB398FDB4F518B40D63F8C373838872D593D813371F60A914975E493
SHA-512:	C89BB260081B2B6479E1FFB8CBD34456452E31D06B57036D176E5EFABA5407B907E0712BAB5921066D8E2A352CC971AF4C7A37CC1B06058DE15C7BE949758365
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/blob/1232024/Features_LibraryAssets.png
Preview:	RIFF.w..WEBPVP8L~w../.AH...6.mU..?..........}w...6.F..H.7}.`.9q../.......Q....0.K.2k.w.uOI.....8...d).D.PB...0. 0...>e./...D.......f."."....C.QM.............4X...YI...B}..\|C..L...`.X>r....W.Vg.......W.?2....^.WqqbP6.Re\|...vf-.....O....1...H.O...g..q<....&.T....vI.I..t....:.L2..8..<e.......4 ....}.%..b.....v.xs,w..D=....O. ......O...~..s.Y............S8o.r..m...'..!"&....\|..l.R..l...K.).d.vk...^/.h .C.).R`..:hK..^3.T.K.RJF._.l+q-...&.z.B....n.v6..6..@..\\.e.`#..+.K.Y.%\..@.t}r....c.9.Z.>]y....l5n%$..,r..K^...,.k..Z..A.M.P.../+...)U7.....s.......?-.............RV.}.]7.l[.DA>.g...k..y..")^........{...X...`t................$.w.l$....m..$);3....\|..L.D..(.L .<...........$..?g.......m1hRq..(f..]....k..._{._.X.E:.V..zc..NR.......o..q...Z..^.}...i....]...Y..V.W...>..=...%....f.....6;.n..1..._............U.Fj...c..-K..$Zt.)...[...~......\|.....)l..sW.K....Jeg...B.^@....(..K.bbT-...L..<...\.i..D.J.b.f..~.y..r.Y....-.yv...I.?.Bo..8....,.z.:...}

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4345
Entropy (8bit):	7.895686999171747
Encrypted:	false
SSDEEP:	96:2nrHrC8bLLgh1I4REmnrmi3PWQAhqpTrrubEVkp47IdZ4ieKheLC/yfR:2TrvLL6I4+83U4TrrulcIdKiXm
MD5:	9BE6BB66FB4E1D7DA8EE37BCD1BACB48
SHA1:	D37D45D1E3344F028E08C4ADD196F4AF45860028
SHA-256:	1B08220621D52D94C1F8641FA307D5DA43DA0CC647D7B7B8694E6DCFD37DF2EF
SHA-512:	DBF8058F7A6E9724670847610A97C7AE1FAF0B6C1F99E4F17D15E29C032630395A80902439A26B46D5CBE21672024CAA049EA9DE20524631CE363BFFC913A138
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D....................#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma..................mdat....?. .r...m2..f../A'....?.. .D.....VVp.A.......r....}.W.d)...?.I.@.PR.........s..T...+sD...)%oB."a.\|..h...b...G/.[../.%../.M..%..x..:.w....Fa.....P....D7..5.........pR.].Z&..s.M.OL../....1..$I\|9.O.....P.Dy"..b....`;..~..y.d<H'...G3...x....v.^...M...&.1..F.....@l.P.8=....w...&R....o".b.....k..9L..q...hy..'..Lf"..5.N.2[I.E8..]..,S..7G...DZ.5...d2..7k..E..CX.#3.s.<YPmk}...^.......q..........q9e......`.K&..U..k.....a.....$....p$v."....qyw....L\.V_./.ZsR.<../t...._.Qt.....:.........+...VhR.\N.*g+.pc..,.-y...a..N..0LD...H_...(..Pl.l.fB1nI...R.+.....{..N.My.\eS..\z..C %....v..JU.+....H..._..%.x...\..E.^I...P..B..."P9.....F...8mI.+@.....a=S..{iLg..M... ..._/.27.".[?!...5W..q+...." .D...<HY.Qa.i.$..$..g1F..wx.YJ.FZu

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1213)
Category:	downloaded
Size (bytes):	1276
Entropy (8bit):	5.7319373696008284
Encrypted:	false
SSDEEP:	24:QH6NCH+Qwdgy4h4lKCKgK3K8A2C0jVZO6C8VZeH7yrbbtMJJVUS13tmItvUV:uY0+Q2uh4lKpgK68VF+7yDQbv19DUV
MD5:	4B68892E3B70F86ABC8713D3E73D94F4
SHA1:	C0C2110661A931F7D2982848C7F978BE32F7F2F9
SHA-256:	978585ADCEEA66C5EBBC9B32E822B5C32CF8BA843D86CC0CA988D3BECAC28463
SHA-512:	5CFBB9B3F305EAC4A84146115A999AE61B9DA31719B9F06F599E17FCDA11A8087A74195D7EABF7648E5F829073CB19070747375359BCA0FB8FBD448528D1B99C
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/74fe30c142f4f8d5.ltr.css
Preview:	.light{--bXlxoQ:#515154}.dark{--bXlxoQ:#fff}.XSIU_A{color:var(--bXlxoQ)}.AaIL8A>._38oWvQ,.COAWQQ>._38oWvQ,.DVU3Ig>._38oWvQ,.EWWUeQ>._38oWvQ,.HvfyOw>._38oWvQ,.LIVcOQ>._38oWvQ,.X81f_w>._38oWvQ,._4OwRPg>._38oWvQ,._6Ppl_A>._38oWvQ,._6m2fgg>._38oWvQ,._7IvJg>._38oWvQ,.wKc35A>._38oWvQ,.w_WokQ>._38oWvQ,.yW9CTQ>._38oWvQ{flex:1!important;margin-right:24px!important;width:100%}._k_QMg{grid-auto-flow:row}._k_QMg,._tWwOw{grid-row-gap:16px;display:grid}._tWwOw{grid-template-columns:minmax(0,1fr)}.NUc_Zw{grid-row-gap:16px;display:grid}._4C1vIA>.YL_ApQ,._4C1vIA>.qqCHKg{transition:opacity .3s ease-in-out}.gWeP3g,.qqCHKg{opacity:0}.YL_ApQ{opacity:1}.pOll6Q>.gum40Q{display:none}.g1T5pQ>.gum40Q{visibility:hidden}.k4R_pA{height:100%}.XlmJhg,.k4R_pA{display:flex;flex-direction:column}.XlmJhg{flex-grow:1;justify-content:flex-end}.Fs7OfA{min-height:1em}.AChqEA{grid-row-gap:4px;display:grid;list-style:disc;padding-left:16px}.lqHyqQ{display:list-item}.eKnFWA{margin:4px 0 0}._10_OSg{color:var(--FTyzZQ)}.RpYbJQ{c

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1086)
Category:	dropped
Size (bytes):	3854
Entropy (8bit):	5.68665525898673
Encrypted:	false
SSDEEP:	96:yTQpiipgnFg8bKYQ7KYC8bYYQ7YY/OVeANxPN5:ynipgC8blQ7lC8bfQ7f/OVeA715
MD5:	3F69C88714C0945C737DC28B47EE731F
SHA1:	1C6DDDBDDA1C13BDF523B2521935E71437F9D0F3
SHA-256:	9BC71DC620EAF4FA6E8B6BAA3A7B7EBB6775EEA9081826A57A8E9837E5E40DDC
SHA-512:	FB9D71FD05009153AC0F0BDFEE00176BA9E5135A02146B1C4445EC3ECB22BBE6606C04C4F301674597DF0F258764531A1789732114D1CBF1A87EB5D9701E9621
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1038169164&fst=1711570848230&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&ua

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 264x360, components 3
Category:	dropped
Size (bytes):	15300
Entropy (8bit):	7.960669746769456
Encrypted:	false
SSDEEP:	384:sBn+GZLLLLuff2BZ1Aza/0D1hk0bAVXhvH3v8HJcydSIVkV8jpq1cB:Cn+GZ1hehk0bSvH30HJ4IVi8jMGB
MD5:	752914BEEC3BD80CAB4CBA35E0FCABC6
SHA1:	8D93451E2164F9D3693BEBA0749DA843F79B7D5D
SHA-256:	8347923F2F831BE0B10C9272436064F99B7CA91090D8742694CE0B52DD7F6824
SHA-512:	AF056D85CE375517B8B5C0A865A61DC0E70CF0310AFAEA44F8B5CF93B1C983D8E23533161C576517A29E14EEC7019F654551CE1E4418AF356D1EA1C457FE7427
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......h...."..........7....................................................................A.t.* D.....J..* D.....J..* D.....J..* D.....J...(Y.B.p..4+e."T@.Q.%D..."T@.Q.%D..V.K..l.[8hV. D.B......J..* D.....J..* D.....J..* D.....J..* D.JM.4+g....B.p..4+g....B.p..4+g....B.p..4+g....B.p..B.. .................................L..d..1$.f0..c.Lf0..c.Lf0..c.Lf0..c.Lf0..c.Lf0..c.Lf0..c.Lgh.;.OS+...).U.v..v.Ri.:.$.....s....vNI.......{m..3.S..n..%9...]....J...g...Nmm.V:Q9..i.t.s:Y.M.)...].0.....Y1\|...>....N..Z....n..u.....q............h..."y._.u1~U..]:..2...'..NPoX...95.hY5.[...\|..,...M...m..7........N.V....[.......].......y...M{<........G;k.I..P........n}._.....NJ....e.[y....U...%..J.W............nU...+pEx.....m.?..Q........4[.i......f..}.7u.:.3....r]...Y..e1/.*l..:......'.w...H4r..=........\\|

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2329)
Category:	downloaded
Size (bytes):	5755
Entropy (8bit):	5.400142665942279
Encrypted:	false
SSDEEP:	96:kdJDwY0stPHD6309AiDipj0N0nQ+QX3AnDBDiVNHONXNz+Mb:kHN0sZmE9AiD80Cn4k62D
MD5:	1C1CA0E1692BBE15FDD1BF07BA4E9798
SHA1:	4CFA1D93CE3BCB36AC2347343CFE21D1D4F91DFF
SHA-256:	CB85267912A7FF0F0ABC3C51B47D8C95AE45E3639CEC739BA3D11A51D5494F33
SHA-512:	5CFD6FD07EB1BC0F8E9CAA93AD153869DBA75643AA13960E287DEA50676BF875E8C67103E2FE1A51899115500351A9E9FE8984987D21EE5207A88126BD72190A
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/49800cd02344befb.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6405],{../***/ 506261:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(391214);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var jka;__c.lo=function(a,b){const c=[],d=[];let e=0;for(const f of a)b(f,e)?c.push(f):d.push(f),e++;return[c,d]};.__c.mo=function(a){return __c.xl({design_id:a.Yc,design_version:a.wta,doctype_id:a.hb,category_id:a.rj,connected_client_ids:a.Ihb,time_since_navigation_start:a.Wxb,page_width:a.vl,page_height:a.$i,num_elements_in_page:a.Tpb,num_elements_or_items_in_design:a.Upb,num_pages_in_design:a.Nr,num_characters_in_design:a.Spb,brand_kit_id:a.Ofb,design_session_id:a.Sib,navigation_correlation_id:a.Wt,is_design_owner:a.Q3,design_owner_user_id:a.DT,access_role:a.Pd,view_mode:a.pZ,edit_mode:a.Kjb,positioning:a.Bd,.is_proport

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 328, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	20134
Entropy (8bit):	7.916602740527245
Encrypted:	false
SSDEEP:	384:HPnEKqx3MNkM8EbBQsQdmxLKnHNtJIOYq5mcaiKh0BLER3hBW+:vnxqx3MF8E9Qs7YHfXccaZa9GxBW+
MD5:	0E2DF836602C66566376A546A14DAE42
SHA1:	0BD679FDBC806F785C6BED4EE558107A95C4C710
SHA-256:	445BD31CC67DD686A1DF6B2DAE1C4DA0CC69E125EE97EF780E848848BF504D81
SHA-512:	0F3EAB1A9E860CC45BF45F604983DCA1986C3D5B21562B8DBBA7AA71E1F71DA4269E0B0A2B36A484C819426F339BC924F7644D9C9C545FB0FF8246A9B8C181AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H.............sRGB.......N`IDATx...AN.@.D.n;..Y...?$I@n...r....Q.....z9..._..>~I....z>}nu.......u.$I.hY...u.uj.%I........WI.$..T...T...$I.B:.e.. .r.S=5...#I...2..c....[.$)....b.2.@0S...f....L.. .)...3e..`.........2.@0S...f....L.. .)...3e..`.........2.@0S...f....L.. .)...3e..`.........2.@0S...f....L.. .)...3e..`.........2.@0S...f....L.. .)...n.$...A......^k.-YW.#2....\|.`R...L....I..`0)...&e......0......2..`R...L....I..`0)...&e......0......2..`R...L....I..`0)...&e......0......2..`R...L....I..`0).3Tu...n.]Y..._..T.....O..:.....JW%?.[....:Y.};./..0.s.SI......;_.r.?w..N..;...t.]....t.u.8.te..q...%f...20.:;...w.s...~.^..V..m]7..q.8..g>.....n.....\|..]....{.:...g......Z......Ca..l.ac.L]..0c.#@.`...pWTTD.....E......v...!%.9...@.$$.$@B.B..$!.p...Y.W.6D.....+q...O..7.'"#..o>.v PJ.*eJY..L.Rb..KG.4.O..]...R.`.J....OC..d.2<....4Kt.N.i jV.........t.<..av..fi.;@..'."..L..Ei.a.0.E....O. l6.!...$..B....feJY....f...Of..e...d.....X6.k?..&..>.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfXHqq/H4Y3:29M3tRdfaqN
MD5:	2DEA9F0F7E122E81EE9A3752902BDF19
SHA1:	8747D6D270E001CEEA1174FF1D365D9CDEA52DCD
SHA-256:	3D49CCE674B56473177888E83BA3303C68B74AF8F0032A94F4814F73F59132B9
SHA-512:	723AC6A0C7A4139882197D5E4B59A48DB20A83C63E498C8C5FA1E057DBA75F33A1F927CC286D006BF107A04211998873FCC82656B719C40D49F633C466F0CD8F
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":400,"body":""}}..

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	470
Entropy (8bit):	4.428280927846403
Encrypted:	false
SSDEEP:	12:t41WffQa0L0Nn7Ke+FuMXc7w0mHm1dNB2d4b:t414fzy0tsFjc7awdadg
MD5:	E5C5A4D109AEB5234E4405032DFD4800
SHA1:	4208CA1C20A9914F396350866B5DB5BB3A851B77
SHA-256:	0E19C6400D8E588E305CC6B80195926FEB73BD09F05732AAC6CCE1483A509A75
SHA-512:	D238FFD9149EE1EF975BA39C7B7AA70CD255B10A2B68E4C1DC8BA29484E18C1925B86A8DD11969B648EA6322E474EDE5CC5792A76456D83E04B8C1DE82B810AD
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/e5c5a4d109aeb5234e4405032dfd4800.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.203 1.978 1.978 0 0 1 1.866-1.363L12.947 13l3.179-9.549a1.976 1.976 0 0 1 3.749 0L23 13l10.036.015a1.975 1.975 0 0 1 1.159 3.566l-8.062 5.681 3.034 9.792a1.97 1.97 0 0 1-.72 2.194 1.957 1.957 0 0 1-1.16.379z"/></svg>

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6948
Entropy (8bit):	7.938264791794446
Encrypted:	false
SSDEEP:	192:2cVPn6xrFkjdxwLdQScnp5oq38yDtB70SaC4XMDNYaHY+:N6xr+BKLVmQqlDBZ4XMBV
MD5:	F868785BF234524D1EA8C931BB61B9D4
SHA1:	F7CAA2FEB08E9AA3E4F665F20CD40B2F30987CCD
SHA-256:	927FD8860A2FF6B3B720428CD654D5BDE17E99B63FC59B348467A1B32A689247
SHA-512:	C1FE98539C2E69A50ED9EEF0D5D9AA09F7CC514A9FDD7191E6C523894B4CA2A488CF29A243E4F0CF10471FF27E3AFF51B394C2F463BA9ACF1806F58603277187
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/d0e11c60-5f8b-4652-bcd0-33ee2be22093/videos_en_au_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D................2...#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma.................:mdat....?. .r...m2.4f..3C'....?...... ....... ...u...r...;:..f>.y[.a...ni.... .....oMs?.s.R...Y...:...^..n....o(....Va....Bh/c@E..0,..{..?P.....W.15^3..O-.v6(...5.q.4......i{..1u.e..5c..!......g........"M.fK>. J....?n.).Y.>..h...W.rZG...@......[....9....0....]..I`R.x.a9..]."... .C.[K.{;0...`...._r..k..A.A...ps.vG../q..S....."o..U.....CL.K...t..M...8{.1:.M...4...5.K......#.y..b.p(^.}..3...,{d..1..W...%.....),q....1.z#..$.`...=..!....R.iN....z}. .w...f5F.{MBZj....=.b.8.H..v K.L.1aU.m..}......%..e.?.tH..[.v...>....N..f.<h.^'..I....C...qb'*.Cs......YC..D.7..]..-.....e..o.c...:.2..1...D.......8.d).....Z...Xm_LU...mz...\N.]..9C................K.]...H...v,....7..+.7..].P\.7.d..S.de..RPkgA\|.Z.#.../...2[...+d....:..S,u.]v

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	5.6143330227315795
Encrypted:	false
SSDEEP:	48:ja8bNYiG9zCa7NYiG9kLa8b0BYiG9zCa70BYiG9kLAEERKsG9/UVi00xJkdR5:+8bNYH7NYP8b0BYH70BYlEE0DyEc5
MD5:	CA09DF19C5FC6D781FFE4F3152A8D1A6
SHA1:	CCE5E83B832BFB220BB3D5BF8E4A90E71F9A5506
SHA-256:	736A7A216057B5097482C4986DAD523A99AD1469DE6A80E76F0B2B00F29AD72D
SHA-512:	F02076B93C96E6FD320575A745CCFD9801C7BA2041EF5DCF44F070139560395AB2CA534D3587E38E6A267D555E7C5DD02E40D5F088EE6AC7928AD815950DAEB8
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1084364917;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1084364917;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?"]}..event: message.data: {"send_pixel":["https://ad.dou

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1865
Entropy (8bit):	4.5836861143934104
Encrypted:	false
SSDEEP:	24:t8BQuQeRMDZCgVaMjCLSR9gVa/DtCLSX3GcCTEtRupMxaF7zDNKVoStCG/zoWSiN:Yhc7Vf0HVzG3GBMDURxbWlPjJH9J3mBe
MD5:	3E78EF31F2928A74C6D7BA19B91D0570
SHA1:	FA840BD4404B1B843A72164F2491AF6C4718A214
SHA-256:	847435388F6B42D6C869D02DF3EC08D61333A19AC4B90EBBFF3BC0B87B60A202
SHA-512:	0B1951AD9492468748B18217003BF7EBAD56FA14CB434C37D6DF2440C43D73AF5AA9068EC517596E9D63B150F3ED28C20F44FFCD6814DF70D2C9228C91994DDE
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg
Preview:	<svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 15.809c-.055-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.195 3.103a.47.47 0 0 0 .136.556c.165.134.4.138.575.013.011-.009 1.188-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.469.469 0 0 0 .574-.01.471.471 0 0 0 .136-.558ZM14.836 15.809c-.056-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.194 3.103a.47.47 0 0 0 .71.569c.011-.009 1.187-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.468.468 0 0 0 .574-.01.47.47 0 0 0 .136-.558ZM28.524 14.118a.943.943 0 0 1-.874-.592c-1.673-4.183-5.856-5.064-5.898-5.074a.94.94 0 1 1 .369-1.844c.212.041 5.229 1.099 7.278 6.219a.942.942 0 0 1-.875 1.291ZM4.053 14.118a.941.941 0 0 1-.873-1.291c2.048-5.12 7.065-6.178 7.277-6.22a.94.94 0 0 1 .373 1.845c-.174.036-4.242.923-5.902 5.074a.944.944 0 0 1-.875.592ZM

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10365)
Category:	downloaded
Size (bytes):	10428
Entropy (8bit):	5.491887296045604
Encrypted:	false
SSDEEP:	192:ylOCYxjfxaHxaqK1ApReFM8M5eJ57qamEFPB:yfidaRaqOHqdQ7qamEFB
MD5:	B39828D5A64CA4B0B94C2F82E29E97F9
SHA1:	2EFEE615762D095249A27E9879CA0924CA8CF56B
SHA-256:	A6D9369A0D731E72F8AA76A866AD1F13896A4313F033D7936BC810EDF46FBA10
SHA-512:	A19EBEDD362623C93110485B2E89D0190899E36ED842974BF870ABAF2A0F56FE715C59971BD5134E680010C9448C7D4D7D6D6900BAA3CD9B226448CA2A81B011
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/c37d32c9d9aa798c.ltr.css
Preview:	@font-face{font-display:swap;font-family:Noto Sans Variable;font-style:normal;font-weight:125 950;src:url(images/621675e6be83f675d33562d2ff7a0f63.woff2) format("woff2");unicode-range:u+06??}@font-face{font-display:swap;font-family:Noto Sans Variable;font-style:normal;font-weight:125 950;src:url(images/762fe37b99d49707e783d6281412d12f.woff2) format("woff2");unicode-range:u+0590-05ff}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:400;src:url(images/d83221ee6a6841b17a754f68b6c5a3de.woff2) format("woff2");unicode-range:u+0900-097f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:600;src:url(images/e237b20d624e9275cdc02a523ab7f983.woff2) format("woff2");unicode-range:u+0900-097f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:700;src:url(images/3b5447850810ff964de17bcd37e03d5a.woff2) format("woff2");unicode-range:u+0900-097f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	4.957424326112546
Encrypted:	false
SSDEEP:	24:tzBXuJlRGZ6vzSiMEjeK7IhdHxsGJcGmBe:ju843M/JhdH9J3mBe
MD5:	3A05DBF1CDD156FCD1677A0B444CC36F
SHA1:	4DBD36F62A617F47B69FB2D5F83BF0FE36ECE44A
SHA-256:	4C122BDEABCF8A8C613B81B5B881469574DAA61B870651D9F06D0F81B4405271
SHA-512:	CE05D3A04F285E246AC43798C384674FB5D292CEA0911CACFD6A7E10772C77B6997D5ED50BF298DDBB6096A02D06BC1E01324C1A35623E07834C8AFC63D536E6
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017 2.824-1.114 0-2.017-1.264-2.017-2.824 0-1.56.903-2.823 2.017-2.823 1.114 0 2.017 1.264 2.017 2.823ZM23.53 12.047c0 1.456-.843 2.635-1.883 2.635s-1.882-1.18-1.882-2.635c0-1.455.843-2.635 1.882-2.635 1.04 0 1.882 1.18 1.882 2.635ZM19.765 22.588c0 2.6-1.687 4.706-3.765 4.706-2.08 0-3.765-2.105-3.765-4.706 0-2.598 1.685-4.706 3.765-4.706 2.078 0 3.765 2.108 3.765 4.706Z" fill="#664500"/><defs><linearGradient id="_1562409365__a" x1="16" y1="32" x2="16" y2="0" gradientUnits="userSpaceOnUse"><stop stop-color="#FFCC4D"/><stop offset="1" stop-color="#FFDF8E"/></linearGradient></defs></svg>

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10774)
Category:	downloaded
Size (bytes):	10837
Entropy (8bit):	5.33630761588339
Encrypted:	false
SSDEEP:	192:emBNh6pzZB9GyJ12UmBWgGVnWssK3RqBLM7Sw4v5nHpYHC60vgV1RUuI1pNBxc:xNh6pFjGyJ12UQGVnBd3ABfv5HH6ugJZ
MD5:	34E1C8F1D5FDC60E02201C32EFB25E58
SHA1:	F986690F28303BB9B00FC4C59B8576885C812289
SHA-256:	66491D47F51B0E9C879C3224EF5B95A67595E838416616BC737A75D847C4B6AE
SHA-512:	9EDCA9ECB864940B1F701012F67ACC0EC0E66CD4B04AF99CC396188CF0DCFC990B9AF2348A0E0B11BF79D50189935D906FB0EC7995C60879D7041263C1D21D07
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/3ca27320fba118d7.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{353610:(t,e,n)=>{n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}setupOnce(t,e){const n=t=>{const n=e().getIntegration(i);if(n){try{if(function(t,e){if(!e)return!1;if(function(t,e){const n=t.message,r=e.message;if(!n&&!r)return!1;if(n&&!r\|\|!n&&r)return!1;if(n!==r)return!1;if(!c(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;if(function(t,e){const n=u(e),r=u(t);if(!n\|\|!r)return!1;if(n.type!==r.type\|\|n.value!==r.value)return!1;if(!c(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;return!1}(t,n._previousEvent))return("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&r.kg.warn("Event dropped due to being a duplicate of previously captured event."),null}catch(s){return n._previousEvent=t}return n._previousEvent=t}return t};n.id=this.name,t(n)}}function o(t,e){let n=s(t),r=s(e);

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Reputation:	low
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4197)
Category:	downloaded
Size (bytes):	67833
Entropy (8bit):	5.350702180369704
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXvtMHM9rEqJ19JnTZ02LKVlEyLr:RIT7OXGs9rZRtj8lt3
MD5:	D7E3DA4BCCE0D6A39785624F92DE0CA3
SHA1:	228CE5501235D58F86C00CD552431D38DA15F90C
SHA-256:	EE8FA8CAF39DD0A3A61ABE4C3E89FD03C0E24C245F712F794F110A418709115B
SHA-512:	078A619A8EA0FF17F0C1760AF409FB3E020D6B3470CA72B2C65A2F89C48436DBB31A761DF95F7973E94555CB561D90ECCEC76503C8AA4469F2F4AF88143CE2FE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/844585682227065?v=2.9.151&r=stable&domain=www.canva.com&hme=8ce74e881727851b4427183947937854816d72704925561b9de6420cd43214ee&ex_m=66%2C111%2C98%2C102%2C57%2C3%2C92%2C65%2C15%2C90%2C83%2C48%2C50%2C157%2C160%2C171%2C167%2C168%2C170%2C28%2C93%2C49%2C72%2C169%2C152%2C155%2C164%2C165%2C172%2C120%2C14%2C47%2C176%2C175%2C122%2C17%2C32%2C36%2C1%2C40%2C61%2C62%2C63%2C67%2C87%2C16%2C13%2C89%2C86%2C85%2C99%2C101%2C35%2C100%2C29%2C25%2C153%2C156%2C129%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C53%2C58%2C60%2C70%2C94%2C26%2C71%2C8%2C7%2C75%2C45%2C20%2C96%2C95%2C9%2C19%2C18%2C77%2C82%2C44%2C43%2C81%2C37%2C39%2C80%2C52%2C78%2C31%2C41%2C34%2C69%2C0%2C88%2C4%2C84%2C76%2C79%2C2%2C33%2C59%2C38%2C97%2C42%2C74%2C64%2C103%2C56%2C55%2C30%2C91%2C54%2C51%2C46%2C73%2C68%2C23%2C104
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7293
Entropy (8bit):	7.943096798745388
Encrypted:	false
SSDEEP:	192:2mkMDtRd6BVgt1QCLVXj9qWGdq1YRHykc3u:NdZOqXcJdKYRH9c3u
MD5:	B4AB048D37D443AE86984BDD74FA9B68
SHA1:	A6439314B3A439A8A4E0F17ADB704A1C3FF310A1
SHA-256:	4A3CAE6C29A99AE5C7D41CC74E6402DBB50817EB53E2EFD7823143CAB72D6D35
SHA-512:	E501364170C90C907194846319D3C32B9C82D3722211A9B2092A8E0456E5ACA60E226175E7E75ED4C09994B9E30C4868C29B13256BF5A70D33DC3FF850B65A0B
Malicious:	false
Reputation:	low
URL:	"https://content-management-files.canva.com/cdn-cgi/image/format=auto,w=264/75d73709-81d8-4be7-baaa-ea27097f6212/presentations_en_au_desktop.jpg"
Preview:	....ftypavif....mif1miaf....meta.......!hdlr........pict.................pitm..........iloc....D....................#iinf..........infe........av01....Viprp...8ipco....ispe...........h....av1C.?@.....pixi............ipma..................mdat....?. .r...m2.6f..3C'.... ..x.......0. ...)...T.....B..q.y;.fX..+gKD...aB..F.......9...r8.`..W.yp.T.a..:.t/....(?...yc....._.....(......s./........D.~8...q..8...K....n{....7..T)U.LT...9..!X{..L.M.~..#.o.WLw.do.r.L...[..U.e.....j.k....6.\|...Z..StW....d&..Z.(M....(...W...o..3.2j..f...(...r..dAd.0.S/u..Q.]r...2...87W.S.v......;..^K......p..#c......UDmSUY....vq..ro/R..Z4o,.. .....;..u.G.S&.V..E.2....8.I.....<..:M.Q.I.9.P..].O...ezj^..A..%...~>m.C.rq .V{.....X.....U5.....x.}.\|....f.y.rQ.C.#{.....]...K..o{...2:v.g#3.F}.. .-.S../...W.}..{..M..fZcim..a.p.&.l.._..\1iT.....\|........4y.Rl.;.I..GxW),..$.3...dX...K.y`A`_...q3..v.vB.q.<.J...#......._.~......'...g.d..(.<N\|.`'..".....@K.a...Dp....0.......{l.:.../.D v}T.....hd.

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	150501
Entropy (8bit):	5.6482875561204855
Encrypted:	false
SSDEEP:	3072:0Zc/2yVre3Ws05MeIY+kgjanV8ftAC97b2q1o747M:0ZcuyVre3Ws05MeIY+kgjfbnS7oM
MD5:	C98A65B66721EA60C76427E0DF5ED4EA
SHA1:	3EA6894CF644A6436930B656958268F625D448B0
SHA-256:	8C36D85CCAAFA2B9D8B70AA186AEFDE2EECFA1161C69674975D9D425FF09CEF8
SHA-512:	5CFA62EDCF4AE6A5DB2B6A207E61085E21DAD35AFDA9C0EFE505C5E0B6B6FDB906D72700C3985DD013123037ABBF85952BD318B91AD421518008D98AEE1C8892
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.css
Preview:	.EtEoeSn{display:inline-block;vertical-align:text-bottom;box-sizing:border-box}.EtEoeSn>svg{width:100%;height:100%;display:block}.K_kfAp2{width:12px;height:12px}._7m7th0{width:16px;height:16px}.qA-OWJy{width:24px;height:24px}.HwaoRo0{width:32px;height:32px}@-webkit-keyframes e_IDZRV{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes e_IDZRV{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@-webkit-keyframes _8yhmdWO{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(-1turn);transform:rotate(-1turn)}}@keyframes _8yhmdWO{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(-1turn);transform:rotate(-1turn)}}[dir=ltr] .VuiHhTP{-webkit-animation:e_IDZRV .5s linear infinite;animation:e_IDZRV .5s linear infinite}[dir=rtl] .VuiHhTP{-webkit-animation:_8yhmdWO .5s linear infinite;animatio

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1865
Entropy (8bit):	4.5836861143934104
Encrypted:	false
SSDEEP:	24:t8BQuQeRMDZCgVaMjCLSR9gVa/DtCLSX3GcCTEtRupMxaF7zDNKVoStCG/zoWSiN:Yhc7Vf0HVzG3GBMDURxbWlPjJH9J3mBe
MD5:	3E78EF31F2928A74C6D7BA19B91D0570
SHA1:	FA840BD4404B1B843A72164F2491AF6C4718A214
SHA-256:	847435388F6B42D6C869D02DF3EC08D61333A19AC4B90EBBFF3BC0B87B60A202
SHA-512:	0B1951AD9492468748B18217003BF7EBAD56FA14CB434C37D6DF2440C43D73AF5AA9068EC517596E9D63B150F3ED28C20F44FFCD6814DF70D2C9228C91994DDE
Malicious:	false
Reputation:	low
Preview:	<svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 15.809c-.055-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.195 3.103a.47.47 0 0 0 .136.556c.165.134.4.138.575.013.011-.009 1.188-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.469.469 0 0 0 .574-.01.471.471 0 0 0 .136-.558ZM14.836 15.809c-.056-.127-1.41-3.103-4.195-3.103-2.783 0-4.138 2.976-4.194 3.103a.47.47 0 0 0 .71.569c.011-.009 1.187-.849 3.484-.849 2.284 0 3.458.83 3.485.848a.468.468 0 0 0 .574-.01.47.47 0 0 0 .136-.558ZM28.524 14.118a.943.943 0 0 1-.874-.592c-1.673-4.183-5.856-5.064-5.898-5.074a.94.94 0 1 1 .369-1.844c.212.041 5.229 1.099 7.278 6.219a.942.942 0 0 1-.875 1.291ZM4.053 14.118a.941.941 0 0 1-.873-1.291c2.048-5.12 7.065-6.178 7.277-6.22a.94.94 0 0 1 .373 1.845c-.174.036-4.242.923-5.902 5.074a.944.944 0 0 1-.875.592ZM

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.4800019173712124
Encrypted:	false
SSDEEP:	24576:Wba9PqbJAvvZz3AzAQ17OFH49D4c17Nq7qlwe3JxX1H:Y+vZEcTc5NHlw81H
MD5:	9BE3A83A6D9AB441090F0D888FA06494
SHA1:	25CC94C5C3071CBCAB79F0AB9C18B881E9408CC6
SHA-256:	354FE84F47F00B729FFC27E00828F2B708D974FFBC40710D4F7D373489C466D2
SHA-512:	4144C753B185F3194D13BC59A9F32F371B3A865309D7274E70E4BFC3A69C3D2EEC4D041FCD6F1D623B64A0681D42D7C968CBF723A384E29317E821FEB38C9DAD
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4:2f73406e468869:0
Preview:	....ftypmp42....mp42mp41....moov...lmvhd.............._..".................................................@...................................trak...\tkhd.....................".................................................@........8.....$edts....elst........."............ymdia... mdhd..............a............@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H.........AVC Coding............................3avcC.M@....gM@.R...O.,.............2....h..5 ....stts...........y........stsc...............y........stsz...........y..3....N...............I...........}...C...........,.............................../..=....8...........r..2........+......>........D...z..I]...........i..P............s..>^.......R......3........=...y..!B..-4...........p...K.......a...<..1...............B...............0d

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1864)
Category:	downloaded
Size (bytes):	15480
Entropy (8bit):	5.456607920371231
Encrypted:	false
SSDEEP:	384:3XJiB3OzWa56ucA4nRr666hu3MzKSzGjCjIzR3jwpagKqikvL2u:363OzWa56ucAkF66UuczXGjkIZMpagKE
MD5:	BC7B8E4FC98E758EA6EF928A645ED0BA
SHA1:	4B1C0337558102692C0CFEF717F8706D399D1AD0
SHA-256:	BECC22542B5D4EB3E11614A6B5B0D7E7D4DA25AB9FFF134C832233FBCC90C6B7
SHA-512:	80E1AFC9529DD9963F7042899144CD402F8AD6D42D80A9D9A21BB8C7E5CE921D1F900557B9F1753685C9E8F0F022E1D1B13FFC88AACD1C02369F540B39E0C25B
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/22cc66011136881a.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{../***/ 294112:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(206405);__web_req__(262047);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var A=__c.A;var QC=__c.QC;.var HYa=async function(a,b){const c=__c.Nh(__c.Lh([UV,"create"])),[d,{nba:e}]=await Promise.all([a.Ka.post(c,VV.T(b),{ob:"recordanalyticsevent"}),__webpack_require__.me(206405).then(()=>({nba:GYa}))]);return e.oa(d)},JYa=async function(a,b){const c=__c.Nh(__c.Lh([UV,"createBatch"])),[d,{mba:e}]=await Promise.all([a.Ka.post(c,WV.T(b),{ob:"recordanalyticseventbatch"}),__webpack_require__.me(206405).then(()=>({mba:IYa}))]);return e.oa(d)},XV=function(a){if(!a.JV){const b=a.FF.url,c=a.FF.aya,d=a.FF.mM;.a.JV=new Promise(e=>{a.global.sensorsDataAnalytic201505="sa";a.global.sa={para:

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780)
Category:	downloaded
Size (bytes):	999
Entropy (8bit):	5.5112593748857845
Encrypted:	false
SSDEEP:	24:kjhskjmqwsHAoW0ghJ2ydB7yd45rExWy6YjbQkrAK+lRIyfwJlvydNV:AOAN0d2yD7yjxiitrAJR58Vyh
MD5:	29AF3C00043E7495CDA33AACBCBE0E0D
SHA1:	87C850094EB7421F8A29045D8E37AAA14C3165C8
SHA-256:	F2529E82A6AB00180B17BAE2787D7E95318C80871FA90A99781B3B93B64AF426
SHA-512:	AE2BC75B0BF2B74ED9DA68B279ED6587E72C3723882174319D68F406C3D43AE8369608531D16D96A1E2F8BCC995D7C010757B257AE5BB5804B2E45F4D93F0E25
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/8bbce396e583673b.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7631],{../***/ 542011:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(237221);self._45f7853dc7660378a038952b53c0953e = self._45f7853dc7660378a038952b53c0953e \|\| {};(function(__c) {var OXb=function(a){return new Promise(b=>setTimeout(b,a))},M3=__c.F(()=>({DNa:__c.Q(1)}));__c.Hb={Zhb:function(a,b){const c=a.II({dG:{Iga:"config"},serialize:M3.serialize,deserialize:M3.deserialize});return async()=>{try{const d=OXb(250).then(()=>{}),e=c.then(f=>f.get("service_worker_flags"));return Promise.race([e,d])}catch(d){b.Oa(d)}}}};__c.Hb.delay=OXb;__c.Hb.d6a=async function(a,b){await (await b.II({dG:{Iga:"config"},serialize:M3.serialize,deserialize:M3.deserialize})).put("service_worker_flags",a)};.}).call(self, self._45f7853dc7660378a038952b53c0953e);}..}]).//# sourceMappingURL=sourcemaps/8bbce396e583673b.js.map

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6255)
Category:	downloaded
Size (bytes):	6575
Entropy (8bit):	5.193348121455284
Encrypted:	false
SSDEEP:	192:+w10M5gSEu7CPgbAG8hRqiHejjAdrNOw7Nq06Eiyw:X+s8hRqWowcNp1
MD5:	7C2661E14845BFF4056D373392FE6A49
SHA1:	E970CDF98246D38B6152CAAC280B4391542E24C3
SHA-256:	85C49FE0A19EF99DEE96FF69643DF939420C9143BF818E17E37A7E436E795182
SHA-512:	59D0DEFF68914E609BCD6A07264B6E4D9F4847B7C906A7D7AC9ADCFDAD1F07854325F0E49436CBE064A0B17B40DBCDB74DFD644CF5B457AD917B4EFA3DADD8EA
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/688b591acbc2d2de.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"VLwKhw\":\"More\",\"oJ2iOQ\":\"/ year\",\"iTO0ug\":\"<strong>Pro</strong>\",\"xz1e8Q\":\"Collaborate with real-time comments and assign tasks\",\"ZT1FEg\":\"Try free for {0, plural, one {# day} other {# days}}\",\"G2z0Ng\":\"Features you.ll love\",\"zzUy4A\":\"Maintain brand consistency at scale with Brand Controls™, Brand Templates, and design approval workflows\",\"uwpwVA\":\"Upgraded usages of Magic design tools (500 pages of translation per month and 500 monthly Text to Image usages for each member)\",\"zDD87g\":\"Features you.ll love:\",\"JcVAIw\":\"Upgraded usages of Magic design tools (500 pages of translation per month and 500 monthly Text to Image usages)\",\"+1+Mbw\":\"Schedule social media content to Weibo\",\"BQdI/w\":\"..Wide range of printable products to design and get delivered to your door\",\"4r+dZg\":\"Get started\",\"Ks5pxQ\":\"Remove image backgrounds instantly with Background Remover\",\"NrD9HA\":\"Less\

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3758)
Category:	downloaded
Size (bytes):	3808
Entropy (8bit):	5.199356662649927
Encrypted:	false
SSDEEP:	96:UYcZtiAOT4DAppR6dqvpHkr634Vacx4XfQO:IXJAppvvpHLilO
MD5:	45CDA07250FC5C29753D3F5213EDE851
SHA1:	164CDEBA0C944C96B10DAE768D61D9616368CCE5
SHA-256:	32157F5D72D679CA6207104EEAD03F156CE99FC3CAA84C43F480D371F6112EF3
SHA-512:	114DF5ABD0B1D67F9B01BC8CE6050F193568582BA644A58CDF7D41279957A22FB17EC1AE75BB305E513D7906F9DF7120DDDCCC4261529D8CB95B30F37DB77657
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/8643.b8f14875e0e505be.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8643],{"./src/services/analytics/plugins/google_tag_manager_plugin.ts":function(t,e,n){n.r(e),n.d(e,{GoogleTagManagerPlugin:function(){return d}});var a=n("./node_modules/@swc/helpers/src/_class_call_check.mjs"),i=n("./node_modules/@swc/helpers/src/_define_property.mjs"),s=n("./node_modules/@swc/helpers/src/_sliced_to_array.mjs"),o=n("./node_modules/@swc/helpers/node_modules/tslib/tslib.es6.mjs"),r=n("./node_modules/tslib/tslib.es6.js"),c=n("./src/base/time/system_clock.ts");var d=function(){function t(e,n,i){var s;(0,a.Z)(this,t),this.config=e,this.clock=n,this.global=i,this.active=!1,this.dataLayer=[],i.dataLayer&&console.debug("dataLayer is already initialized. You might be creating more than 1 instance of GoogleTagManagerPlugin."),i.dataLayer=null!==(s=i.dataLayer)&&void 0!==s?s:[],this.dataLayer=i.dataLayer}var e=t.prototype;return e.track=function(t){return(0,r.mG)(this,void 0,void 0,(function(){var e;return(0,

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1711570864360&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (61437)
Category:	downloaded
Size (bytes):	542603
Entropy (8bit):	5.659021667010059
Encrypted:	false
SSDEEP:	12288:UC6ukUCEXXeM1PnTdKyrHxkUCEXXeM1PnTdKyrHDVd1Gpzghl:S6PnTdKyrH5PnTdKyrHDzhl
MD5:	E1CA121934F6E999F082C766251AA124
SHA1:	8BDCC2F13C1AE764409EC090C1B5E41BF0C27F0D
SHA-256:	EC526856F646D1D99780DF1C6A1A96B196AD3A49B7F89F2BAE805EE41CE1099C
SHA-512:	8EA8B4D8296CDA8A263FEE1D6CDD18AE362CEDCF8FBB857847210834A802EBA1AB6DAA303CC7497E770A80A5C2FC0312252AF941F0AC95D5A0B8E0A257C4C57E
Malicious:	false
Reputation:	low
URL:	https://www.canva.com/visual-suite/
Preview:	<!DOCTYPE html><html dir="ltr" lang="en-US" class="nojs"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Introducing the Visual Suite \| Canva</title><link href="https://static.canva.com/static/images/favicon-1.ico" rel="shortcut icon"/><meta name="description" content="Redesign the way you work with Canva's free Visual Suit. It has everything you need to unlock your creativity and design for the new visual era. "/><link rel="canonical" href="https://www.canva.com/visual-suite/"/><meta name="robots" content="max-image-preview:large"/><meta property="og:url" content="https://www.canva.com/visual-suite/"/><meta name="slack-app-id" content="A028R8CCLNR"/><meta property="og:description" content="Redesign the way you work with Canva's free Visual Suit. It has everything you need to unlock your creativity and design for the new visual era. "/><meta property="og:locale" content="en_US"/><meta property="og:type" content="website

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (781)
Category:	downloaded
Size (bytes):	1713
Entropy (8bit):	5.466168989664093
Encrypted:	false
SSDEEP:	48:AOA0s0nkOAdJCxgJpCMQIDlKeqNFGY77pEZHP9dA2Q:XvnJwJcgJpjbxKe0FGalkA2Q
MD5:	1D8C6631AADD98078CE12A85F470CA59
SHA1:	1E79895E0509057C7414BB8707A8B147AFE25CB0
SHA-256:	253CACE1BE47DAC0F4DC755BC7661AD5E3D1D1357F2B5B132A6DAFF53CDD071F
SHA-512:	D3944EBB27913D6568039594FD2F55422E6904AF8252DB471CB48DBB0BC97F3B3A615E34A4A42BCE27A2D95F2EB770E9E7BF969B93A83BE506A0A27A10E0D31C
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/0ee21888ed45a29e.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2841],{../***/ 716038:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var x$=function(a){return`${a.userId}-${a.Db}-${a.ly}`},y$=async function(a,b){const c=b.userId,d=b.Db;b=b.zd;await (await __c.hv(a)).put(b,new __c.gv({userId:c,Db:d}))},eDa=async function(a,b){const c=b.userId,d=b.Db,e=b.Aa,f=b.Ca,g=b.dn;b=x$({ly:b.Xk.ly,userId:c,Db:d});await y$(a,{userId:c,Db:d,zd:b});return a.Y5(b,e,f,g)},fDa=async function(a,b){const c=(await (await __c.hv(a)).getAll()).filter(({dH:d})=>d.userId!==b);await __c.jv(a,c.map(d=>d.key))},hDa=async function(a){a=await a.bk({Xk:{JE:"private_data_persist_consent"},.Aa:z$.Aa,Ca:z$.Ca});return new gDa(a)},iDa,z$,gDa;__c.mv.prototype.Ex=__c.ea(12,async function(a){const b=a.userId,c

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	4.114328576097192
Encrypted:	false
SSDEEP:	24:t414ffo3Q0QIvvdznG0UezpigqybgrKrPO20hLMXlr9NkOf/qd0mdz9w/zAI:CH3Q0dvRG0zvBMOr10mx9m8vUAb
MD5:	ABA10B640F15BB01B8E5F0B804EEFC7F
SHA1:	65D1EDB21B0F31D4CCB9703EB05132A0E42D093D
SHA-256:	6A21FCEDE3E9D5593CF90C894BC059A94BBAE8D5D22ED0AC5511A1327F276881
SHA-512:	FDC916824C065944D02B7956BE310F01B9A56562BBB1510C345EDC925EA6CE478D235B5348AD140028CFA4F483BF1E947533CB83176A9F44DC13353A938329DF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12.322-2.125 4.688-6.875 2.062-6.875 6.771v10.719c0 1.833.18 3.595 2.758 3.885C8.195 34.219 7.633 36 11.238 36h18.044a3.337 3.337 0 0 0 3.333-3.334c0-.762-.267-1.456-.698-2.018 1.02-.571 1.72-1.649 1.72-2.899 0-.76-.266-1.454-.696-2.015 1.023-.57 1.725-1.649 1.725-2.901 0-.909-.368-1.733-.961-2.336a3.311 3.311 0 0 0 1.251-2.581z"/><path fill="#EE9547" d="M23.02 21.249h8.604c1.17 0 2.268-.626 2.866-1.633a.876.876 0 0 0-1.506-.892 1.588 1.588 0 0 1-1.361.775h-8.81c-.873 0-1.583-.71-1.583-1.583s.71-1.583 1.583-1.583H28.7a.875.875 0 0 0 0-1.75h-5.888a3.337 3.337 0 0 0-3.333 3.333c0 1.025.475 1.932 1.205 2.544a3.32 3.32 0 0 0-.998 2.373c0 1.028.478 1.938 1.212 2.549a3.318 3.318 0 0 0 .419 5.08 3.305 3.305 0 0 0-.852 2.204 3.337 3.337 0 0 0 3.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	851140
Entropy (8bit):	7.213344930747092
Encrypted:	false
SSDEEP:	12288:uSCXNTc3E1yQ9rYDMslwYFX2sMTueO25mFJ44KRHiJbZ1q1tyU+mQ+crxu4O:pecwslw4R+PO25w0hiJN1q1tLGVu4O
MD5:	33A203FA9FB681475E53231C62EB37EC
SHA1:	29C75CBEFC28CCDB22B79ABA7F3020E6F0D20B1F
SHA-256:	E6FAB7534398372DCD49E302AD2434F05C82CCF4826C7C007A76E29913A47DF9
SHA-512:	0776BA7881A9B774E682B58E01ABCC337F865CA6BE44C7967746A66F8B01CE9CEA515D78E0E00CA579787C54CAB097DD9CFE76AC14A34A6BB1290B94B71FBC81
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4:2f73406e44406c:3
Preview:	..(B~].....{%g..5N5.Y..u8.......X..;.........\|...l!.id$.XB.\|L...y.F.N.=...C...l....q.$...9QT..u3..czc.M...jD.......R.uz.....EV.3..T.M[:.x.}.8."../@...+/.`Rf2`o......ZP..`......6..=.[.X.i...O.77o.c.......b..y\...J3K..\|..dJ.h..W...,.....Z.0..-.D.K....l..o.L........Qvg1.p...?v..+....v.w...x46o/PB..^..#6....iI....:..T..H.f..P...'....T.ciWB...C.h.Y.A...#.5..........a.f..VDGN..pv.....N2..\|.Y=.\|...i...n..0O\.;...#>f.,:.e...c,)K...N...<_.q...pq......C...Iu..n`.,_s.:.S...b.J.!...M.~.......1)..9N..._.....bu..Y....7!..gGH..5Ia....-"f.E..u.......p.....H].8D..\|4........6+bd{.....K+t..r)../..F..>....(....`S..q...[.4.#.....xM.M'S..K.c.TL.o....#.....H.....t--..-......}..<.+Ox.o........0.....HL..\|W.f.N=j....J.f..1.......^..oq..t..........G...zN.0[....4.9<..7.<~.3..O.B"...s.G...8.<.....H"$..1.].,.mhV>E..U.K ...(.np..E9y..5.....Pm..y. ...I........6....?/...L.&K.o.R..&...dD...J.rUj0...7H..sO..?..+....3.;.......(..v.....p.....7.2.4..C.....#IyQ...o.(,^

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	5538
Entropy (8bit):	5.4524596969899815
Encrypted:	false
SSDEEP:	96:YMqZ4zDh8y/L26Q5GATexapnU350/lHE0e0O1rfaoncAOJEGxS06aVwCoCSZB3b/:YMlD2y/L26Hz2ygqLxOJEGxSoVL3eBhZ
MD5:	3F28C4776444D0F5EB4051F477019438
SHA1:	BFB9377AE8F9CAA6642FE7AAB97902CD57676701
SHA-256:	69CDBA3A1BB4DB713F0CAB413514C60B80A4AA2227B16C083013196369FB36EA
SHA-512:	EF274938759F69E12FAF567F5AAD95D939A559D6D66E13B7CBB56344B019DFA59ED3D940FEAA66BF0738175D55BC27DA985EDFECA2D11FFE989635ABACD3AB74
Malicious:	false
Reputation:	low
URL:	https://static.canva.com/web/a42419d3d437dc30.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5110],{../***/ 13778:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(476834);self._e4773d6932616a85f2eac86f437df8f7 = self._e4773d6932616a85f2eac86f437df8f7 \|\| {};(function(__c) {var O=__c.O;var Q=__c.Q;var I=__c.I;.var xg=function(a){if(null!=a){if("string"===typeof a)return new __c.Lc({value:a});if("number"===typeof a)return Number.isInteger(a)?new __c.$e({value:a}):new __c.af({value:a});if("boolean"===typeof a)return new __c.Ze({value:a});if(Array.isArray(a)){const c=[];a.forEach(d=>{d=xg(d);void 0!==d&&c.push(d)});return new __c.Hc({values:c})}var b=[];Object.entries(a).forEach(([c,d])=>{(d=xg(d))&&b.push(new __c.N({name:c,value:d}))});return new __c.Jc({values:b})}},yg=function(a){const b=[];a.tags&&(a.tags.forEach((d,.e)=>{b.push(new __c.Kc({name:e,value:d}))}),b.sort());const c=[];a.extra&&(a.extra.forEach((d,e)

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10059)
Category:	downloaded
Size (bytes):	10112
Entropy (8bit):	5.389981681024748
Encrypted:	false
SSDEEP:	192:qhcTfQJeOkkGG1Hom46cYgAiQagJT2y91dCRMo/5378kzYIopHmH7a6:qhIQvkkGG12AjtH1dCR3/53zzYIopH4
MD5:	7DD697EA857973D26ECA0A53B572382A
SHA1:	F67436143E7A3A92BF41F42A908D7D9BE94083D9
SHA-256:	E86DFE63E8E1317CE866A2352BC2E4E1186F272EA8FCD6ACD3E6C5000BE20C95
SHA-512:	E7C70DBFB3092F24CFD2005D93F26DDD1298A9E3991AF605D081849E2F7259DA288EB8150B6C89EEEC03213B0B8F47CE0D0E0EED1E5838A711379501B7B8401D
Malicious:	false
Reputation:	low
URL:	https://static-cse.canva.com/_next/static/chunks/webpack-feafa46848d16e44.js
Preview:	!function(){"use strict";var e={},c={};function a(d){var f=c[d];if(void 0!==f)return f.exports;var t=c[d]={id:d,loaded:!1,exports:{}},n=!0;try{e[d].call(t.exports,t,t.exports,a),n=!1}finally{n&&delete c[d]}return t.loaded=!0,t.exports}a.m=e,a.amdD=function(){throw new Error("define cannot be used indirect")},a.amdO={},function(){var e=[];a.O=function(c,d,f,t){if(!d){var n=1/0;for(i=0;i<e.length;i++){d=e[i][0],f=e[i][1],t=e[i][2];for(var b=!0,r=0;r<d.length;r++)(!1&t\|\|n>=t)&&Object.keys(a.O).every((function(e){return a.O[e](d[r])}))?d.splice(r--,1):(b=!1,t<n&&(n=t));if(b){e.splice(i--,1);var o=f();void 0!==o&&(c=o)}}return c}t=t\|\|0;for(var i=e.length;i>0&&e[i-1][2]>t;i--)e[i]=e[i-1];e[i]=[d,f,t]}}(),a.n=function(e){var c=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(c,{a:c}),c},function(){var e,c=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__};a.t=function(d,f){if(1&f&&(d=this(d)),8&f)return d;if("object"=

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 27, 2024 21:19:58.015573025 CET	192.168.2.4	1.1.1.1	0x28bb	Standard query (0)	blyocelectric.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.015711069 CET	192.168.2.4	1.1.1.1	0x7e34	Standard query (0)	blyocelectric.com	65	IN (0x0001)	false
Mar 27, 2024 21:19:58.672113895 CET	192.168.2.4	1.1.1.1	0xc270	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.672259092 CET	192.168.2.4	1.1.1.1	0x5d89	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:19:59.610737085 CET	192.168.2.4	1.1.1.1	0x4edf	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.612046003 CET	192.168.2.4	1.1.1.1	0x3653	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:19:59.621012926 CET	192.168.2.4	1.1.1.1	0x2795	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.621331930 CET	192.168.2.4	1.1.1.1	0xe685	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:00.666934013 CET	192.168.2.4	1.1.1.1	0xb428	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.667517900 CET	192.168.2.4	1.1.1.1	0xb594	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Mar 27, 2024 21:20:00.779834032 CET	192.168.2.4	1.1.1.1	0xf2f6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.781469107 CET	192.168.2.4	1.1.1.1	0xa678	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:01.028227091 CET	192.168.2.4	1.1.1.1	0xacba	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:01.028707027 CET	192.168.2.4	1.1.1.1	0x34fb	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:01.220527887 CET	192.168.2.4	1.1.1.1	0x87aa	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:01.220832109 CET	192.168.2.4	1.1.1.1	0x1143	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Mar 27, 2024 21:20:03.787314892 CET	192.168.2.4	1.1.1.1	0xd112	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:03.787565947 CET	192.168.2.4	1.1.1.1	0xdcaa	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:04.120343924 CET	192.168.2.4	1.1.1.1	0x345f	Standard query (0)	font-public.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.120488882 CET	192.168.2.4	1.1.1.1	0x22bf	Standard query (0)	font-public.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:04.403541088 CET	192.168.2.4	1.1.1.1	0x1975	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.404062033 CET	192.168.2.4	1.1.1.1	0x2316	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:04.503206968 CET	192.168.2.4	1.1.1.1	0xa5c0	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.503348112 CET	192.168.2.4	1.1.1.1	0x539b	Standard query (0)	media.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:04.599986076 CET	192.168.2.4	1.1.1.1	0xacf0	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.600131989 CET	192.168.2.4	1.1.1.1	0x9295	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:04.897510052 CET	192.168.2.4	1.1.1.1	0x20a9	Standard query (0)	sdk.iad-01.braze.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.897851944 CET	192.168.2.4	1.1.1.1	0x1c1e	Standard query (0)	sdk.iad-01.braze.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:05.130244970 CET	192.168.2.4	1.1.1.1	0x48af	Standard query (0)	media.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:05.130561113 CET	192.168.2.4	1.1.1.1	0x5f9b	Standard query (0)	media.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:05.963857889 CET	192.168.2.4	1.1.1.1	0x7c66	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:05.964036942 CET	192.168.2.4	1.1.1.1	0x22f3	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Mar 27, 2024 21:20:05.964654922 CET	192.168.2.4	1.1.1.1	0x969e	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:05.964936972 CET	192.168.2.4	1.1.1.1	0x70ef	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:06.664839029 CET	192.168.2.4	1.1.1.1	0x8202	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.665055990 CET	192.168.2.4	1.1.1.1	0x46d	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:07.208378077 CET	192.168.2.4	1.1.1.1	0x31dd	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.208525896 CET	192.168.2.4	1.1.1.1	0xdea6	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:07.209460974 CET	192.168.2.4	1.1.1.1	0xa5ab	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.209619045 CET	192.168.2.4	1.1.1.1	0x99a1	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:07.210190058 CET	192.168.2.4	1.1.1.1	0x432a	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.210448027 CET	192.168.2.4	1.1.1.1	0x84e0	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:08.746078014 CET	192.168.2.4	1.1.1.1	0x67f3	Standard query (0)	telemetry.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:08.746403933 CET	192.168.2.4	1.1.1.1	0x7b33	Standard query (0)	telemetry.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:09.628155947 CET	192.168.2.4	1.1.1.1	0x2edf	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.628437996 CET	192.168.2.4	1.1.1.1	0x8612	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:09.636535883 CET	192.168.2.4	1.1.1.1	0xa80c	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.637063026 CET	192.168.2.4	1.1.1.1	0x4aa4	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:19.333096981 CET	192.168.2.4	1.1.1.1	0xdedc	Standard query (0)	content-management-files.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.333475113 CET	192.168.2.4	1.1.1.1	0xa624	Standard query (0)	content-management-files.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:19.868401051 CET	192.168.2.4	1.1.1.1	0x8481	Standard query (0)	content-management-files.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.868940115 CET	192.168.2.4	1.1.1.1	0xdf57	Standard query (0)	content-management-files.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:24.707907915 CET	192.168.2.4	1.1.1.1	0xd4f7	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.708066940 CET	192.168.2.4	1.1.1.1	0x88c9	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:24.708583117 CET	192.168.2.4	1.1.1.1	0xbc6b	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.708687067 CET	192.168.2.4	1.1.1.1	0x45b2	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:24.709681988 CET	192.168.2.4	1.1.1.1	0x46c4	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.709785938 CET	192.168.2.4	1.1.1.1	0xe7e6	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:25.320086956 CET	192.168.2.4	1.1.1.1	0x12e6	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.320522070 CET	192.168.2.4	1.1.1.1	0x9b61	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:25.381459951 CET	192.168.2.4	1.1.1.1	0xb0d4	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.381596088 CET	192.168.2.4	1.1.1.1	0x92e9	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:25.710994959 CET	192.168.2.4	1.1.1.1	0x6da8	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.711122036 CET	192.168.2.4	1.1.1.1	0xcf71	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:25.746743917 CET	192.168.2.4	1.1.1.1	0xfe59	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.746983051 CET	192.168.2.4	1.1.1.1	0x115b	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:25.829018116 CET	192.168.2.4	1.1.1.1	0x3bc	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.829160929 CET	192.168.2.4	1.1.1.1	0x5c09	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.334575891 CET	192.168.2.4	1.1.1.1	0x4ee9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.334924936 CET	192.168.2.4	1.1.1.1	0xb348	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.343930960 CET	192.168.2.4	1.1.1.1	0x233e	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.344186068 CET	192.168.2.4	1.1.1.1	0xd294	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.626153946 CET	192.168.2.4	1.1.1.1	0x41bd	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.626488924 CET	192.168.2.4	1.1.1.1	0xf52f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.928015947 CET	192.168.2.4	1.1.1.1	0x8b21	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.928175926 CET	192.168.2.4	1.1.1.1	0xa61c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.931469917 CET	192.168.2.4	1.1.1.1	0x40ad	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.931657076 CET	192.168.2.4	1.1.1.1	0xd0c6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.982316017 CET	192.168.2.4	1.1.1.1	0x3d17	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.982611895 CET	192.168.2.4	1.1.1.1	0x6518	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.994122982 CET	192.168.2.4	1.1.1.1	0x8b51	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.994332075 CET	192.168.2.4	1.1.1.1	0xa7ab	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:26.997425079 CET	192.168.2.4	1.1.1.1	0xf279	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.998157024 CET	192.168.2.4	1.1.1.1	0x8c44	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.003740072 CET	192.168.2.4	1.1.1.1	0x756	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.004210949 CET	192.168.2.4	1.1.1.1	0xb49a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.201877117 CET	192.168.2.4	1.1.1.1	0xc2b1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.202007055 CET	192.168.2.4	1.1.1.1	0xa28e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.404633999 CET	192.168.2.4	1.1.1.1	0xfd09	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.404782057 CET	192.168.2.4	1.1.1.1	0x16	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.492198944 CET	192.168.2.4	1.1.1.1	0xcff1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.492439985 CET	192.168.2.4	1.1.1.1	0x6fb7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.636234045 CET	192.168.2.4	1.1.1.1	0xd71c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.636234045 CET	192.168.2.4	1.1.1.1	0xd481	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:27.680802107 CET	192.168.2.4	1.1.1.1	0x421d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.680965900 CET	192.168.2.4	1.1.1.1	0x440c	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:28.161199093 CET	192.168.2.4	1.1.1.1	0xb72c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.161199093 CET	192.168.2.4	1.1.1.1	0x75f7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:28.234529018 CET	192.168.2.4	1.1.1.1	0xf3b3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:28.234529018 CET	192.168.2.4	1.1.1.1	0x46ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.256290913 CET	192.168.2.4	1.1.1.1	0x8b9f	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.256618977 CET	192.168.2.4	1.1.1.1	0xd55c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:30.654778004 CET	192.168.2.4	1.1.1.1	0xf468	Standard query (0)	akkadaindevelopment.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:30.655039072 CET	192.168.2.4	1.1.1.1	0x860f	Standard query (0)	akkadaindevelopment.com	65	IN (0x0001)	false
Mar 27, 2024 21:20:31.296672106 CET	192.168.2.4	1.1.1.1	0xbf83	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:31.297136068 CET	192.168.2.4	1.1.1.1	0x98b4	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:32.152941942 CET	192.168.2.4	1.1.1.1	0x9b75	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:32.153434992 CET	192.168.2.4	1.1.1.1	0xa9b5	Standard query (0)	d2te5kruq0pvbl.cloudfront.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:48.033699036 CET	192.168.2.4	1.1.1.1	0xb8ea	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.034018993 CET	192.168.2.4	1.1.1.1	0x1ecf	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:48.099287033 CET	192.168.2.4	1.1.1.1	0x8a6a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.099724054 CET	192.168.2.4	1.1.1.1	0x4133	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:48.105842113 CET	192.168.2.4	1.1.1.1	0xe259	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.106003046 CET	192.168.2.4	1.1.1.1	0x83ee	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:53.543150902 CET	192.168.2.4	1.1.1.1	0x4dfc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:53.543515921 CET	192.168.2.4	1.1.1.1	0x8bcf	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:20:53.545640945 CET	192.168.2.4	1.1.1.1	0x82b3	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:53.546348095 CET	192.168.2.4	1.1.1.1	0xc3f1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:03.585717916 CET	192.168.2.4	1.1.1.1	0x904e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.585863113 CET	192.168.2.4	1.1.1.1	0xb32b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:03.684129000 CET	192.168.2.4	1.1.1.1	0x66de	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.684379101 CET	192.168.2.4	1.1.1.1	0x2779	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:03.757894993 CET	192.168.2.4	1.1.1.1	0x2d4e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.758131981 CET	192.168.2.4	1.1.1.1	0xe7b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:04.404921055 CET	192.168.2.4	1.1.1.1	0xcd37	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.405174017 CET	192.168.2.4	1.1.1.1	0xec0a	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:04.405602932 CET	192.168.2.4	1.1.1.1	0xf003	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.405771017 CET	192.168.2.4	1.1.1.1	0x242a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:04.721364975 CET	192.168.2.4	1.1.1.1	0xacca	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.721637964 CET	192.168.2.4	1.1.1.1	0xb9f2	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:04.722132921 CET	192.168.2.4	1.1.1.1	0x6da8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.722270012 CET	192.168.2.4	1.1.1.1	0xeb98	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:04.729943991 CET	192.168.2.4	1.1.1.1	0x2f8a	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.730113029 CET	192.168.2.4	1.1.1.1	0x9b70	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:05.271686077 CET	192.168.2.4	1.1.1.1	0x48c1	Standard query (0)	www.pinterest.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.271965027 CET	192.168.2.4	1.1.1.1	0x7d1c	Standard query (0)	www.pinterest.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:05.437911987 CET	192.168.2.4	1.1.1.1	0x20ee	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.438057899 CET	192.168.2.4	1.1.1.1	0xa375	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:05.965492010 CET	192.168.2.4	1.1.1.1	0xc209	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.965635061 CET	192.168.2.4	1.1.1.1	0xb9b2	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:05.994400978 CET	192.168.2.4	1.1.1.1	0x799d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.994400978 CET	192.168.2.4	1.1.1.1	0xfe3e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:06.001677990 CET	192.168.2.4	1.1.1.1	0xe824	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.001677990 CET	192.168.2.4	1.1.1.1	0x1d79	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:06.053024054 CET	192.168.2.4	1.1.1.1	0x3b37	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.053226948 CET	192.168.2.4	1.1.1.1	0x6326	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:06.174639940 CET	192.168.2.4	1.1.1.1	0xc86f	Standard query (0)	www.pinterest.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.174639940 CET	192.168.2.4	1.1.1.1	0x95a6	Standard query (0)	www.pinterest.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:06.179549932 CET	192.168.2.4	1.1.1.1	0x72d7	Standard query (0)	www.pinterest.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.179759026 CET	192.168.2.4	1.1.1.1	0xe91a	Standard query (0)	www.pinterest.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:07.074764967 CET	192.168.2.4	1.1.1.1	0x16a8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:07.078746080 CET	192.168.2.4	1.1.1.1	0xb64a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:07.141196966 CET	192.168.2.4	1.1.1.1	0x4efb	Standard query (0)	static-cse.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:07.141427994 CET	192.168.2.4	1.1.1.1	0x239c	Standard query (0)	static-cse.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:08.501390934 CET	192.168.2.4	1.1.1.1	0xf92e	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.501800060 CET	192.168.2.4	1.1.1.1	0x2b56	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:08.745281935 CET	192.168.2.4	1.1.1.1	0x8902	Standard query (0)	static-cse.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.745460987 CET	192.168.2.4	1.1.1.1	0x5a64	Standard query (0)	static-cse.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:09.519872904 CET	192.168.2.4	1.1.1.1	0x27ca	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.520001888 CET	192.168.2.4	1.1.1.1	0xaf5e	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:09.967881918 CET	192.168.2.4	1.1.1.1	0xe78e	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.968024015 CET	192.168.2.4	1.1.1.1	0x2e87	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:10.117502928 CET	192.168.2.4	1.1.1.1	0xcae9	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.117661953 CET	192.168.2.4	1.1.1.1	0x57e1	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:10.637413979 CET	192.168.2.4	1.1.1.1	0xb88b	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.637690067 CET	192.168.2.4	1.1.1.1	0x31f0	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:13.458501101 CET	192.168.2.4	1.1.1.1	0xb75b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.458878040 CET	192.168.2.4	1.1.1.1	0x4fbd	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:13.495568991 CET	192.168.2.4	1.1.1.1	0x3a96	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.499803066 CET	192.168.2.4	1.1.1.1	0x8ac4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:14.704272032 CET	192.168.2.4	1.1.1.1	0x1588	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:14.704416037 CET	192.168.2.4	1.1.1.1	0xea2e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:14.850594044 CET	192.168.2.4	1.1.1.1	0x90a5	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:14.852236986 CET	192.168.2.4	1.1.1.1	0x5089	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:15.460401058 CET	192.168.2.4	1.1.1.1	0x4f97	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:15.460547924 CET	192.168.2.4	1.1.1.1	0x52e5	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:16.381081104 CET	192.168.2.4	1.1.1.1	0x783c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.381217003 CET	192.168.2.4	1.1.1.1	0xef32	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:16.445125103 CET	192.168.2.4	1.1.1.1	0x9bf9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.445336103 CET	192.168.2.4	1.1.1.1	0xe0af	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 27, 2024 21:21:17.253498077 CET	192.168.2.4	1.1.1.1	0xcee2	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.253952980 CET	192.168.2.4	1.1.1.1	0x4cff	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Mar 27, 2024 21:21:17.258856058 CET	192.168.2.4	1.1.1.1	0x4f11	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.259124994 CET	192.168.2.4	1.1.1.1	0x2f58	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 27, 2024 21:19:58.220205069 CET	1.1.1.1	192.168.2.4	0x28bb	No error (0)	blyocelectric.com		52.21.33.16	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.220205069 CET	1.1.1.1	192.168.2.4	0x28bb	No error (0)	blyocelectric.com		52.2.56.64	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.767330885 CET	1.1.1.1	192.168.2.4	0xc270	No error (0)	www.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.767330885 CET	1.1.1.1	192.168.2.4	0xc270	No error (0)	www.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:58.767430067 CET	1.1.1.1	192.168.2.4	0x5d89	No error (0)	www.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:19:59.705883026 CET	1.1.1.1	192.168.2.4	0x4edf	No error (0)	static.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.705883026 CET	1.1.1.1	192.168.2.4	0x4edf	No error (0)	static.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.708722115 CET	1.1.1.1	192.168.2.4	0x3653	No error (0)	static.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:19:59.717972040 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.717972040 CET	1.1.1.1	192.168.2.4	0x2795	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:19:59.719326973 CET	1.1.1.1	192.168.2.4	0xe685	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:00.762727022 CET	1.1.1.1	192.168.2.4	0xb428	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.875436068 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:00.877016068 CET	1.1.1.1	192.168.2.4	0xa678	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:01.123910904 CET	1.1.1.1	192.168.2.4	0xacba	No error (0)	chunk-composing.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:01.123910904 CET	1.1.1.1	192.168.2.4	0xacba	No error (0)	chunk-composing.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:01.124419928 CET	1.1.1.1	192.168.2.4	0x34fb	No error (0)	chunk-composing.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:01.316226959 CET	1.1.1.1	192.168.2.4	0x87aa	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:03.882953882 CET	1.1.1.1	192.168.2.4	0xd112	No error (0)	www.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:03.882953882 CET	1.1.1.1	192.168.2.4	0xd112	No error (0)	www.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:03.883439064 CET	1.1.1.1	192.168.2.4	0xdcaa	No error (0)	www.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:04.216650963 CET	1.1.1.1	192.168.2.4	0x22bf	No error (0)	font-public.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:04.216769934 CET	1.1.1.1	192.168.2.4	0x345f	No error (0)	font-public.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.216769934 CET	1.1.1.1	192.168.2.4	0x345f	No error (0)	font-public.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.498265028 CET	1.1.1.1	192.168.2.4	0x1975	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.598297119 CET	1.1.1.1	192.168.2.4	0x539b	No error (0)	media.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:04.600087881 CET	1.1.1.1	192.168.2.4	0xa5c0	No error (0)	media.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.600087881 CET	1.1.1.1	192.168.2.4	0xa5c0	No error (0)	media.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.695916891 CET	1.1.1.1	192.168.2.4	0x9295	No error (0)	static.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:04.696136951 CET	1.1.1.1	192.168.2.4	0xacf0	No error (0)	static.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.696136951 CET	1.1.1.1	192.168.2.4	0xacf0	No error (0)	static.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:04.992144108 CET	1.1.1.1	192.168.2.4	0x20a9	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:04.992786884 CET	1.1.1.1	192.168.2.4	0x1c1e	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:05.227377892 CET	1.1.1.1	192.168.2.4	0x5f9b	No error (0)	media.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:05.229252100 CET	1.1.1.1	192.168.2.4	0x48af	No error (0)	media.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:05.229252100 CET	1.1.1.1	192.168.2.4	0x48af	No error (0)	media.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.059892893 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.059892893 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	d1w725hft9421a.cloudfront.net		99.86.229.18	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.059892893 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	d1w725hft9421a.cloudfront.net		99.86.229.49	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.059892893 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	d1w725hft9421a.cloudfront.net		99.86.229.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.059892893 CET	1.1.1.1	192.168.2.4	0x7c66	No error (0)	d1w725hft9421a.cloudfront.net		99.86.229.35	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.060549974 CET	1.1.1.1	192.168.2.4	0x969e	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.060549974 CET	1.1.1.1	192.168.2.4	0x969e	No error (0)	collectoru.us.tvsquared.com		18.190.43.29	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.060549974 CET	1.1.1.1	192.168.2.4	0x969e	No error (0)	collectoru.us.tvsquared.com		18.223.63.188	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.068674088 CET	1.1.1.1	192.168.2.4	0x22f3	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.101887941 CET	1.1.1.1	192.168.2.4	0x70ef	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.760739088 CET	1.1.1.1	192.168.2.4	0x46d	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.761406898 CET	1.1.1.1	192.168.2.4	0x8202	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:06.761406898 CET	1.1.1.1	192.168.2.4	0x8202	No error (0)	collectoru.us.tvsquared.com		18.190.43.29	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:06.761406898 CET	1.1.1.1	192.168.2.4	0x8202	No error (0)	collectoru.us.tvsquared.com		18.223.63.188	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.303437948 CET	1.1.1.1	192.168.2.4	0x31dd	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:07.303437948 CET	1.1.1.1	192.168.2.4	0x31dd	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.303437948 CET	1.1.1.1	192.168.2.4	0x31dd	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.305222988 CET	1.1.1.1	192.168.2.4	0x432a	No error (0)	sb.scorecardresearch.com		108.139.47.50	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.305222988 CET	1.1.1.1	192.168.2.4	0x432a	No error (0)	sb.scorecardresearch.com		108.139.47.33	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.305222988 CET	1.1.1.1	192.168.2.4	0x432a	No error (0)	sb.scorecardresearch.com		108.139.47.92	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.305222988 CET	1.1.1.1	192.168.2.4	0x432a	No error (0)	sb.scorecardresearch.com		108.139.47.108	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.306375980 CET	1.1.1.1	192.168.2.4	0xa5ab	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.306375980 CET	1.1.1.1	192.168.2.4	0xa5ab	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:07.311486006 CET	1.1.1.1	192.168.2.4	0xdea6	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:08.841247082 CET	1.1.1.1	192.168.2.4	0x67f3	No error (0)	telemetry.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:08.841247082 CET	1.1.1.1	192.168.2.4	0x67f3	No error (0)	telemetry.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:08.843014002 CET	1.1.1.1	192.168.2.4	0x7b33	No error (0)	telemetry.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:09.723376036 CET	1.1.1.1	192.168.2.4	0x2edf	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.723376036 CET	1.1.1.1	192.168.2.4	0x2edf	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.731308937 CET	1.1.1.1	192.168.2.4	0xa80c	No error (0)	sb.scorecardresearch.com		18.154.227.51	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.731308937 CET	1.1.1.1	192.168.2.4	0xa80c	No error (0)	sb.scorecardresearch.com		18.154.227.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.731308937 CET	1.1.1.1	192.168.2.4	0xa80c	No error (0)	sb.scorecardresearch.com		18.154.227.32	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:09.731308937 CET	1.1.1.1	192.168.2.4	0xa80c	No error (0)	sb.scorecardresearch.com		18.154.227.100	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:13.798136950 CET	1.1.1.1	192.168.2.4	0x86ad	No error (0)	windowsupdatebg.s.llnwi.net		69.164.0.0	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:14.277584076 CET	1.1.1.1	192.168.2.4	0xd748	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:14.277584076 CET	1.1.1.1	192.168.2.4	0xd748	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.428921938 CET	1.1.1.1	192.168.2.4	0xdedc	No error (0)	content-management-files.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.428921938 CET	1.1.1.1	192.168.2.4	0xdedc	No error (0)	content-management-files.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.430699110 CET	1.1.1.1	192.168.2.4	0xa624	No error (0)	content-management-files.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:19.965327978 CET	1.1.1.1	192.168.2.4	0x8481	No error (0)	content-management-files.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.965327978 CET	1.1.1.1	192.168.2.4	0x8481	No error (0)	content-management-files.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:19.965840101 CET	1.1.1.1	192.168.2.4	0xdf57	No error (0)	content-management-files.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:24.803034067 CET	1.1.1.1	192.168.2.4	0xd4f7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803034067 CET	1.1.1.1	192.168.2.4	0xd4f7	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803903103 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803903103 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803903103 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803903103 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.803903103 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.804644108 CET	1.1.1.1	192.168.2.4	0x46c4	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:24.804977894 CET	1.1.1.1	192.168.2.4	0x45b2	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415029049 CET	1.1.1.1	192.168.2.4	0x12e6	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415029049 CET	1.1.1.1	192.168.2.4	0x12e6	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415029049 CET	1.1.1.1	192.168.2.4	0x12e6	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415029049 CET	1.1.1.1	192.168.2.4	0x12e6	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415029049 CET	1.1.1.1	192.168.2.4	0x12e6	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.415596962 CET	1.1.1.1	192.168.2.4	0x9b61	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.477859020 CET	1.1.1.1	192.168.2.4	0xb0d4	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.808412075 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.808412075 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.808412075 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.808412075 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.841651917 CET	1.1.1.1	192.168.2.4	0xfe59	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.841651917 CET	1.1.1.1	192.168.2.4	0xfe59	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.841651917 CET	1.1.1.1	192.168.2.4	0xfe59	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.841651917 CET	1.1.1.1	192.168.2.4	0xfe59	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.841651917 CET	1.1.1.1	192.168.2.4	0xfe59	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.842016935 CET	1.1.1.1	192.168.2.4	0x115b	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924196005 CET	1.1.1.1	192.168.2.4	0x3bc	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924196005 CET	1.1.1.1	192.168.2.4	0x3bc	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924196005 CET	1.1.1.1	192.168.2.4	0x3bc	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924196005 CET	1.1.1.1	192.168.2.4	0x3bc	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924196005 CET	1.1.1.1	192.168.2.4	0x3bc	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:25.924566031 CET	1.1.1.1	192.168.2.4	0x5c09	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:26.429594994 CET	1.1.1.1	192.168.2.4	0x4ee9	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.429594994 CET	1.1.1.1	192.168.2.4	0x4ee9	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.429817915 CET	1.1.1.1	192.168.2.4	0xb348	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:26.441880941 CET	1.1.1.1	192.168.2.4	0x233e	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.441880941 CET	1.1.1.1	192.168.2.4	0x233e	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.441880941 CET	1.1.1.1	192.168.2.4	0x233e	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.441880941 CET	1.1.1.1	192.168.2.4	0x233e	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.720698118 CET	1.1.1.1	192.168.2.4	0x41bd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:26.720698118 CET	1.1.1.1	192.168.2.4	0x41bd	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:26.721657038 CET	1.1.1.1	192.168.2.4	0xf52f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:26.968434095 CET	1.1.1.1	192.168.2.4	0xda68	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:26.968434095 CET	1.1.1.1	192.168.2.4	0xda68	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.023333073 CET	1.1.1.1	192.168.2.4	0x8b21	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.023333073 CET	1.1.1.1	192.168.2.4	0x8b21	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.023719072 CET	1.1.1.1	192.168.2.4	0xa61c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.026854038 CET	1.1.1.1	192.168.2.4	0xd0c6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.026977062 CET	1.1.1.1	192.168.2.4	0x40ad	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.026977062 CET	1.1.1.1	192.168.2.4	0x40ad	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.077961922 CET	1.1.1.1	192.168.2.4	0x6518	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.077981949 CET	1.1.1.1	192.168.2.4	0x3d17	No error (0)	googleads.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.077981949 CET	1.1.1.1	192.168.2.4	0x3d17	No error (0)	googleads.g.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.089394093 CET	1.1.1.1	192.168.2.4	0xa7ab	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.089629889 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	ad.doubleclick.net		142.250.31.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.089629889 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	ad.doubleclick.net		142.250.31.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.092691898 CET	1.1.1.1	192.168.2.4	0xf279	No error (0)	adservice.google.com		172.253.115.155	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.092691898 CET	1.1.1.1	192.168.2.4	0xf279	No error (0)	adservice.google.com		172.253.115.156	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.093445063 CET	1.1.1.1	192.168.2.4	0x8c44	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.098802090 CET	1.1.1.1	192.168.2.4	0x756	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.098802090 CET	1.1.1.1	192.168.2.4	0x756	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.099368095 CET	1.1.1.1	192.168.2.4	0xb49a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.296717882 CET	1.1.1.1	192.168.2.4	0xc2b1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:27.296717882 CET	1.1.1.1	192.168.2.4	0xc2b1	No error (0)	star-mini.c10r.facebook.com		157.240.229.35	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.296780109 CET	1.1.1.1	192.168.2.4	0xa28e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:27.500895977 CET	1.1.1.1	192.168.2.4	0xfd09	No error (0)	ad.doubleclick.net		142.250.31.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.500895977 CET	1.1.1.1	192.168.2.4	0xfd09	No error (0)	ad.doubleclick.net		142.250.31.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.501538038 CET	1.1.1.1	192.168.2.4	0x16	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.587315083 CET	1.1.1.1	192.168.2.4	0x6fb7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.588820934 CET	1.1.1.1	192.168.2.4	0xcff1	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.588820934 CET	1.1.1.1	192.168.2.4	0xcff1	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.105	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.103	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.99	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.106	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.104	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731206894 CET	1.1.1.1	192.168.2.4	0xd71c	No error (0)	www.google.com		172.253.122.147	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.731940985 CET	1.1.1.1	192.168.2.4	0xd481	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:27.775424957 CET	1.1.1.1	192.168.2.4	0x421d	No error (0)	adservice.google.com		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.775424957 CET	1.1.1.1	192.168.2.4	0x421d	No error (0)	adservice.google.com		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:27.775839090 CET	1.1.1.1	192.168.2.4	0x440c	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:28.256249905 CET	1.1.1.1	192.168.2.4	0x75f7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:28.256912947 CET	1.1.1.1	192.168.2.4	0xb72c	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.256912947 CET	1.1.1.1	192.168.2.4	0xb72c	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.329782963 CET	1.1.1.1	192.168.2.4	0xf3b3	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.330146074 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.352185011 CET	1.1.1.1	192.168.2.4	0x8b9f	No error (0)	ad.doubleclick.net		142.250.31.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.352185011 CET	1.1.1.1	192.168.2.4	0x8b9f	No error (0)	ad.doubleclick.net		142.250.31.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:28.353251934 CET	1.1.1.1	192.168.2.4	0xd55c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:30.811062098 CET	1.1.1.1	192.168.2.4	0xf468	No error (0)	akkadaindevelopment.com		52.21.33.16	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:30.811062098 CET	1.1.1.1	192.168.2.4	0xf468	No error (0)	akkadaindevelopment.com		52.2.56.64	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:31.407708883 CET	1.1.1.1	192.168.2.4	0xbf83	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.95	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:31.407708883 CET	1.1.1.1	192.168.2.4	0xbf83	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.100	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:31.407708883 CET	1.1.1.1	192.168.2.4	0xbf83	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.38	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:31.407708883 CET	1.1.1.1	192.168.2.4	0xbf83	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.39	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:32.253513098 CET	1.1.1.1	192.168.2.4	0x9b75	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.100	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:32.253513098 CET	1.1.1.1	192.168.2.4	0x9b75	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.39	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:32.253513098 CET	1.1.1.1	192.168.2.4	0x9b75	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.95	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:32.253513098 CET	1.1.1.1	192.168.2.4	0x9b75	No error (0)	d2te5kruq0pvbl.cloudfront.net		3.162.125.38	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:46.909928083 CET	1.1.1.1	192.168.2.4	0xfb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:20:46.909928083 CET	1.1.1.1	192.168.2.4	0xfb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.129148960 CET	1.1.1.1	192.168.2.4	0xb8ea	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.129148960 CET	1.1.1.1	192.168.2.4	0xb8ea	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.129982948 CET	1.1.1.1	192.168.2.4	0x1ecf	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:48.193972111 CET	1.1.1.1	192.168.2.4	0x8a6a	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.193972111 CET	1.1.1.1	192.168.2.4	0x8a6a	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.195117950 CET	1.1.1.1	192.168.2.4	0x4133	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:48.200439930 CET	1.1.1.1	192.168.2.4	0xe259	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.200439930 CET	1.1.1.1	192.168.2.4	0xe259	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:48.201246023 CET	1.1.1.1	192.168.2.4	0x83ee	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:53.638113976 CET	1.1.1.1	192.168.2.4	0x8bcf	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:53.638693094 CET	1.1.1.1	192.168.2.4	0x4dfc	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:53.638693094 CET	1.1.1.1	192.168.2.4	0x4dfc	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:53.640861034 CET	1.1.1.1	192.168.2.4	0xc3f1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:20:53.640938997 CET	1.1.1.1	192.168.2.4	0x82b3	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:20:53.640938997 CET	1.1.1.1	192.168.2.4	0x82b3	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.680493116 CET	1.1.1.1	192.168.2.4	0xb32b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:03.681054115 CET	1.1.1.1	192.168.2.4	0x904e	No error (0)	ad.doubleclick.net		172.253.62.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.681054115 CET	1.1.1.1	192.168.2.4	0x904e	No error (0)	ad.doubleclick.net		172.253.62.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.778918982 CET	1.1.1.1	192.168.2.4	0x66de	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.778918982 CET	1.1.1.1	192.168.2.4	0x66de	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.779612064 CET	1.1.1.1	192.168.2.4	0x2779	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:03.852931976 CET	1.1.1.1	192.168.2.4	0x2d4e	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.852931976 CET	1.1.1.1	192.168.2.4	0x2d4e	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:03.853688955 CET	1.1.1.1	192.168.2.4	0xe7b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:04.500540972 CET	1.1.1.1	192.168.2.4	0xf003	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501195908 CET	1.1.1.1	192.168.2.4	0xec0a	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501828909 CET	1.1.1.1	192.168.2.4	0xcd37	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501828909 CET	1.1.1.1	192.168.2.4	0xcd37	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501828909 CET	1.1.1.1	192.168.2.4	0xcd37	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501828909 CET	1.1.1.1	192.168.2.4	0xcd37	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.501828909 CET	1.1.1.1	192.168.2.4	0xcd37	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.816761017 CET	1.1.1.1	192.168.2.4	0xb9f2	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.816761017 CET	1.1.1.1	192.168.2.4	0xb9f2	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.816879034 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.816879034 CET	1.1.1.1	192.168.2.4	0x6da8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.817251921 CET	1.1.1.1	192.168.2.4	0xacca	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.817251921 CET	1.1.1.1	192.168.2.4	0xacca	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.817251921 CET	1.1.1.1	192.168.2.4	0xacca	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.818006992 CET	1.1.1.1	192.168.2.4	0xeb98	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.818006992 CET	1.1.1.1	192.168.2.4	0xeb98	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.824673891 CET	1.1.1.1	192.168.2.4	0x9b70	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.824673891 CET	1.1.1.1	192.168.2.4	0x9b70	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.824673891 CET	1.1.1.1	192.168.2.4	0x9b70	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:04.827053070 CET	1.1.1.1	192.168.2.4	0x2f8a	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.366503000 CET	1.1.1.1	192.168.2.4	0x48c1	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:05.367526054 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.367526054 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.367526054 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.533018112 CET	1.1.1.1	192.168.2.4	0xa375	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.533018112 CET	1.1.1.1	192.168.2.4	0xa375	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.533459902 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.533459902 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:05.533459902 CET	1.1.1.1	192.168.2.4	0x20ee	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.060986042 CET	1.1.1.1	192.168.2.4	0xb9b2	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:06.061039925 CET	1.1.1.1	192.168.2.4	0xc209	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.061039925 CET	1.1.1.1	192.168.2.4	0xc209	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.089755058 CET	1.1.1.1	192.168.2.4	0xfe3e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:06.090356112 CET	1.1.1.1	192.168.2.4	0x799d	No error (0)	ad.doubleclick.net		172.253.115.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.090356112 CET	1.1.1.1	192.168.2.4	0x799d	No error (0)	ad.doubleclick.net		172.253.115.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.096184969 CET	1.1.1.1	192.168.2.4	0x1d79	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:06.096585035 CET	1.1.1.1	192.168.2.4	0xe824	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.096585035 CET	1.1.1.1	192.168.2.4	0xe824	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.147672892 CET	1.1.1.1	192.168.2.4	0x3b37	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.148062944 CET	1.1.1.1	192.168.2.4	0x6326	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269236088 CET	1.1.1.1	192.168.2.4	0x95a6	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269236088 CET	1.1.1.1	192.168.2.4	0x95a6	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269236088 CET	1.1.1.1	192.168.2.4	0x95a6	No error (0)	www.gslb.pinterest.net	www.pinterest.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.269458055 CET	1.1.1.1	192.168.2.4	0xc86f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.274422884 CET	1.1.1.1	192.168.2.4	0x72d7	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:06.276613951 CET	1.1.1.1	192.168.2.4	0xe91a	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:06.276613951 CET	1.1.1.1	192.168.2.4	0xe91a	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:07.169604063 CET	1.1.1.1	192.168.2.4	0x16a8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:07.169604063 CET	1.1.1.1	192.168.2.4	0x16a8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:07.174110889 CET	1.1.1.1	192.168.2.4	0xb64a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:07.174110889 CET	1.1.1.1	192.168.2.4	0xb64a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:07.236615896 CET	1.1.1.1	192.168.2.4	0x4efb	No error (0)	static-cse.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:07.236615896 CET	1.1.1.1	192.168.2.4	0x4efb	No error (0)	static-cse.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:07.242304087 CET	1.1.1.1	192.168.2.4	0x239c	No error (0)	static-cse.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:21:08.596453905 CET	1.1.1.1	192.168.2.4	0x2b56	No error (0)	www.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:21:08.597531080 CET	1.1.1.1	192.168.2.4	0xf92e	No error (0)	www.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.597531080 CET	1.1.1.1	192.168.2.4	0xf92e	No error (0)	www.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.647759914 CET	1.1.1.1	192.168.2.4	0xfeaa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:08.647759914 CET	1.1.1.1	192.168.2.4	0xfeaa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.850225925 CET	1.1.1.1	192.168.2.4	0x8902	No error (0)	static-cse.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.850225925 CET	1.1.1.1	192.168.2.4	0x8902	No error (0)	static-cse.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:08.851665974 CET	1.1.1.1	192.168.2.4	0x5a64	No error (0)	static-cse.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:21:09.615037918 CET	1.1.1.1	192.168.2.4	0x27ca	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:09.615037918 CET	1.1.1.1	192.168.2.4	0x27ca	No error (0)	static-cdn.hotjar.com		18.160.41.49	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.615037918 CET	1.1.1.1	192.168.2.4	0x27ca	No error (0)	static-cdn.hotjar.com		18.160.41.58	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.615037918 CET	1.1.1.1	192.168.2.4	0x27ca	No error (0)	static-cdn.hotjar.com		18.160.41.112	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.615037918 CET	1.1.1.1	192.168.2.4	0x27ca	No error (0)	static-cdn.hotjar.com		18.160.41.53	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:09.615225077 CET	1.1.1.1	192.168.2.4	0xaf5e	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:10.063328981 CET	1.1.1.1	192.168.2.4	0x2e87	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:10.064609051 CET	1.1.1.1	192.168.2.4	0xe78e	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:10.064609051 CET	1.1.1.1	192.168.2.4	0xe78e	No error (0)	collectoru.us.tvsquared.com		18.223.63.188	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.064609051 CET	1.1.1.1	192.168.2.4	0xe78e	No error (0)	collectoru.us.tvsquared.com		18.190.43.29	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.211963892 CET	1.1.1.1	192.168.2.4	0xcae9	No error (0)	script.hotjar.com		99.84.191.43	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.211963892 CET	1.1.1.1	192.168.2.4	0xcae9	No error (0)	script.hotjar.com		99.84.191.77	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.211963892 CET	1.1.1.1	192.168.2.4	0xcae9	No error (0)	script.hotjar.com		99.84.191.41	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.211963892 CET	1.1.1.1	192.168.2.4	0xcae9	No error (0)	script.hotjar.com		99.84.191.81	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.733696938 CET	1.1.1.1	192.168.2.4	0x31f0	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:10.735589981 CET	1.1.1.1	192.168.2.4	0xb88b	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2024 21:21:10.735589981 CET	1.1.1.1	192.168.2.4	0xb88b	No error (0)	collectoru.us.tvsquared.com		18.223.63.188	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:10.735589981 CET	1.1.1.1	192.168.2.4	0xb88b	No error (0)	collectoru.us.tvsquared.com		18.190.43.29	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.553091049 CET	1.1.1.1	192.168.2.4	0xb75b	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.553091049 CET	1.1.1.1	192.168.2.4	0xb75b	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.554251909 CET	1.1.1.1	192.168.2.4	0x4fbd	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:13.590779066 CET	1.1.1.1	192.168.2.4	0x3a96	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.590779066 CET	1.1.1.1	192.168.2.4	0x3a96	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:13.596322060 CET	1.1.1.1	192.168.2.4	0x8ac4	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:14.799540997 CET	1.1.1.1	192.168.2.4	0xea2e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:14.801096916 CET	1.1.1.1	192.168.2.4	0x1588	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:14.801096916 CET	1.1.1.1	192.168.2.4	0x1588	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:14.947316885 CET	1.1.1.1	192.168.2.4	0x5089	No error (0)	www.canva.com			65	IN (0x0001)	false
Mar 27, 2024 21:21:14.947330952 CET	1.1.1.1	192.168.2.4	0x90a5	No error (0)	www.canva.com		104.16.224.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:14.947330952 CET	1.1.1.1	192.168.2.4	0x90a5	No error (0)	www.canva.com		104.17.239.159	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:15.555787086 CET	1.1.1.1	192.168.2.4	0x4f97	No error (0)	sb.scorecardresearch.com		3.162.112.2	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:15.555787086 CET	1.1.1.1	192.168.2.4	0x4f97	No error (0)	sb.scorecardresearch.com		3.162.112.60	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:15.555787086 CET	1.1.1.1	192.168.2.4	0x4f97	No error (0)	sb.scorecardresearch.com		3.162.112.116	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:15.555787086 CET	1.1.1.1	192.168.2.4	0x4f97	No error (0)	sb.scorecardresearch.com		3.162.112.64	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.476059914 CET	1.1.1.1	192.168.2.4	0xef32	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:16.476082087 CET	1.1.1.1	192.168.2.4	0x783c	No error (0)	ad.doubleclick.net		142.251.167.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.476082087 CET	1.1.1.1	192.168.2.4	0x783c	No error (0)	ad.doubleclick.net		142.251.167.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.540956020 CET	1.1.1.1	192.168.2.4	0x9bf9	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.540956020 CET	1.1.1.1	192.168.2.4	0x9bf9	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:16.540973902 CET	1.1.1.1	192.168.2.4	0xe0af	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 27, 2024 21:21:17.348828077 CET	1.1.1.1	192.168.2.4	0xcee2	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.348828077 CET	1.1.1.1	192.168.2.4	0xcee2	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.354767084 CET	1.1.1.1	192.168.2.4	0x4f11	No error (0)	sb.scorecardresearch.com		18.160.10.96	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.354767084 CET	1.1.1.1	192.168.2.4	0x4f11	No error (0)	sb.scorecardresearch.com		18.160.10.44	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.354767084 CET	1.1.1.1	192.168.2.4	0x4f11	No error (0)	sb.scorecardresearch.com		18.160.10.18	A (IP address)	IN (0x0001)	false
Mar 27, 2024 21:21:17.354767084 CET	1.1.1.1	192.168.2.4	0x4f11	No error (0)	sb.scorecardresearch.com		18.160.10.71	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	52.21.33.16	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:58 UTC	677	OUT	GET /4xmaf95qR5m4wJYw4 HTTP/1.1 Host: blyocelectric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:19:58 UTC	260	IN	HTTP/1.1 302 Found Location: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Date: Wed, 27 Mar 2024 20:19:58 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:58 UTC	785	OUT	GET /design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1 Host: www.canva.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:19:59 UTC	1129	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:19:59 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21416a8f7576d-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; Path=/; Max-Age=31536000; Expires=Thu, 27 Mar 2025 20:19:59 GMT; Secure; HttpOnly; SameSite=NONE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-YAaocUluoTLkxNNZFFK5mw'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=86b21416a8f7576d&app=design_viewer&policyHash=f8d20cad Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-Request-ID: 86b21416a8f7576d x-robots-tag: noindex, nofollow X-XSS-Protection: 1; mode=block
2024-03-27 20:19:59 UTC	1375	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 36 33 56 51 71 51 4d 38 38 65 6c 53 68 39 78 72 30 46 48 46 56 75 53 51 4b 78 56 41 71 6c 67 62 77 6d 64 56 79 74 6b 7a 37 55 32 31 41 78 34 55 5a 32 75 57 7a 6b 45 67 6f 36 39 31 34 76 5a 50 6e 4d 73 59 50 78 77 4b 42 45 54 6d 78 33 30 64 52 65 76 59 68 55 4c 79 75 66 61 4c 64 6d 6f 61 71 51 59 44 6b 46 59 4d 68 4f 66 68 75 68 42 57 48 42 59 6c 4e 4f 36 63 5a 66 34 37 25 32 42 77 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c 3a 20 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=63VQqQM88elSh9xr0FHFVuSQKxVAqlgbwmdVytkz7U21Ax4UZ2uWzkEgo6914vZPnMsYPxwKBETmx30dRevYhULyufaLdmoaqQYDkFYMhOfhuhBWHBYlNO6cZf47%2BwM%3D"}],"group":"cf-nel","max_age":604800}NEL:
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 37 66 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 46 61 78 20 44 6f 63 75 6d 65 6e 74 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 76 69 65 77 70 6f 72 74 2d Data Ascii: 7ff3<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>Fax Document</title><meta name="app-name" content="design_viewer" /><meta name="viewport" content="width=device-width, initial-scale=1, viewport-
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 30 64 36 2c 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a Data Ascii: 0d6,u+00d8-00f6,u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 4b 63 38 74 4c 55 61 61 64 65 59 71 57 79 47 67 63 74 66 53 6b 73 77 42 79 73 76 63 5a 6b 62 50 67 77 6f 41 54 51 34 55 72 74 49 72 73 6f 34 38 65 39 74 2b 2f 72 37 4f 59 66 62 6d 6c 56 35 74 54 48 56 64 52 4d 79 44 43 37 79 39 58 58 2f 7a 5a 6d 42 71 7a 51 3d 3d 22 20 6e 6f 6e 63 65 3d 22 59 41 61 6f 63 55 6c 75 6f 54 4c 6b 78 4e 4e 5a 46 46 4b 35 6d 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 36 36 35 66 37 65 61 64 39 37 65 34 61 33 35 36 2e 76 65 6e 64 6f 72 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 Data Ascii: ="anonymous" integrity="sha512-Kc8tLUaadeYqWyGgctfSkswBysvcZkbPgwoATQ4UrtIrso48e9t+/r7OYfbmlV5tTHVdRMyDC7y9XX/zZmBqzQ==" nonce="YAaocUluoTLkxNNZFFK5mw"><link href="https://static.canva.com/web/665f7ead97e4a356.vendor.js" rel="preload" as="script" crossori
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3d 22 37 39 31 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 41 74 58 41 4a 75 66 4d 2f 34 78 6d 61 66 39 35 71 52 35 6d 34 77 4a 59 77 34 5f 66 51 78 67 2f 76 69 65 77 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 Data Ascii: content="791" /><meta property="og:url" content="https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view"><meta property="og:type" content="website"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:site" content="@
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 70 6c 61 63 65 28 27 61 64 61 70 74 69 76 65 27 2c 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 27 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 27 29 2e 6d 61 74 63 68 65 73 20 3f 20 27 64 61 72 6b 27 20 3a 20 27 6c 69 67 68 74 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 41 61 6f 63 55 6c 75 6f 54 4c 6b 78 4e 4e 5a 46 46 4b 35 6d 77 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 Data Ascii: .documentElement.classList.replace('adaptive', window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');</script><div id="root"></div><script nonce="YAaocUluoTLkxNNZFFK5mw">(function() {window['__canva_public_path__'] = 'https:\/\/sta
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 32 36 2d 31 30 39 61 2d 34 33 36 30 2d 39 66 63 39 2d 61 62 35 37 65 64 32 39 39 32 33 38 22 7d 2c 22 45 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 42 22 2c 22 4d 32 49 49 41 22 3a 22 42 22 2c 22 4d 32 45 41 55 22 3a 22 42 22 2c 22 45 4e 48 50 4c 22 3a 22 42 22 2c 22 45 48 50 4c 49 22 3a 22 42 22 2c 22 44 57 43 54 41 22 3a 22 42 22 2c 22 44 45 50 4c 4f 22 3a 22 42 22 2c 22 41 56 45 4f 53 22 3a 22 42 22 2c 22 41 48 42 54 43 22 3a 22 42 22 7d 2c 22 49 22 3a 22 77 65 62 22 2c 22 50 22 3a 5b 2d 35 38 33 36 39 2c 37 38 35 35 37 Data Ascii: 26-109a-4360-9fc9-ab57ed299238"},"E":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"B","M2IIA":"B","M2EAU":"B","ENHPL":"B","EHPLI":"B","DWCTA":"B","DEPLO":"B","AVEOS":"B","AHBTC":"B"},"I":"web","P":[-58369,78557
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 6e 22 7d 5d 2c 22 42 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 22 42 22 3a 22 62 6f 6c 64 22 7d 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 63 65 6e 74 65 72 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 38 2e 36 36 37 33 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 32 37 7d 2c 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 66 6f 6e 74 2d 73 74 79 6c 65 22 3a 7b 22 42 22 3a 22 6e 6f 72 6d 61 6c 22 7d 2c 22 63 6f 6c 6f 72 22 3a 7b 22 42 22 3a 22 23 30 30 30 30 30 30 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 31 7d 2c 7b 22 41 3f 22 Data Ascii: n"}],"B":[{"A?":"A","A":{"font-weight":{"B":"bold"},"text-align":{"B":"center"},"font-family":{"B":"YAFdJjTk5UU,0"},"font-size":{"B":"18.6673"}}},{"A?":"B","A":27},{"A?":"A","A":{"font-style":{"B":"normal"},"color":{"B":"#000000"}}},{"A?":"B","A":1},{"A?"
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 6e 22 3a 7b 22 41 22 3a 22 63 65 6e 74 65 72 22 7d 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 22 42 22 3a 22 62 6f 6c 64 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 41 22 3a 22 31 33 2e 33 33 33 36 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 41 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 32 37 7d 2c 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 33 2e 33 33 33 36 22 7d 2c 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 63 65 6e 74 65 72 22 7d 7d 7d 2c 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 31 7d 2c Data Ascii: n":{"A":"center"},"font-weight":{"B":"bold"},"font-size":{"A":"13.3336"},"font-family":{"A":"YAFdJjTk5UU,0"}}},{"A?":"B","A":27},{"A?":"A","A":{"font-family":{"B":"YAFdJjTk5UU,0"},"font-size":{"B":"13.3336"},"text-align":{"B":"center"}}},{"A?":"B","A":1},
2024-03-27 20:19:59 UTC	1369	IN	Data Raw: 41 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 22 e2 86 92 20 43 6c 69 63 6b 20 74 6f 20 52 65 76 69 65 77 20 44 6f 63 75 6d 65 6e 74 5c 5c 6e 22 7d 5d 2c 22 42 22 3a 5b 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 7b 22 74 65 78 74 2d 61 6c 69 67 6e 22 3a 7b 22 42 22 3a 22 63 65 6e 74 65 72 22 7d 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 7b 22 42 22 3a 22 62 6f 6c 64 22 7d 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 7b 22 42 22 3a 22 31 38 2e 36 36 37 33 22 7d 2c 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 7b 22 42 22 3a 22 59 41 46 64 4a 6a 54 6b 35 55 55 2c 30 22 7d 2c 22 64 65 63 6f 72 61 74 69 6f 6e 22 3a 7b 22 42 22 3a 22 75 6e 64 65 72 6c 69 6e 65 22 7d 2c 22 6c 69 6e 6b 22 3a 7b 22 42 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6b 6b 61 64 61 69 6e 64 65 Data Ascii: A":[{"A?":"A","A":" Click to Review Document\\n"}],"B":[{"A?":"A","A":{"text-align":{"B":"center"},"font-weight":{"B":"bold"},"font-size":{"B":"18.6673"},"font-family":{"B":"YAFdJjTk5UU,0"},"decoration":{"B":"underline"},"link":{"B":"https://akkadainde

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:59 UTC	582	OUT	GET /web/de918408abfb519f.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1349	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/css Content-Length: 7262 Connection: close CF-Ray: 86b2141c9aba82c3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 497102 Cache-Control: public, max-age=31556926 ETag: "059d9cb8485f941d2bd36e604587bc4a" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Fri, 22 Mar 2024 02:09:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: DMpK975Ck0Lx4oRd1X3LmweRuvA0NHTanSGCENKSsRpZGrj5XPN+ZImivekwSaynm2qKGO+amFM= x-amz-replication-status: COMPLETED x-amz-request-id: T8T2JP38F98PART7 x-amz-server-side-encryption: AES256 x-amz-version-id: 8i.g7.QuG.7DIKAjB507yUvCU6J7wC29 X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 66 53 46 6b 46 66 54 4f 59 36 54 4e 55 64 49 57 43 52 65 4e 68 65 70 4a 38 61 4d 46 74 56 68 73 53 78 31 47 4c 41 6c 54 2e 53 38 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 50 65 79 41 53 4c 67 33 72 63 56 6f 4e 7a 39 62 4b 69 74 64 51 35 57 4a 52 56 4f 6d 78 6f 64 31 72 6e 64 76 6c 38 4f 59 35 55 61 58 5f 64 34 75 31 38 6d 4f 6b 68 31 61 37 68 37 47 4d 4e 54 45 4c 34 34 39 5a 6d 73 54 43 49 57 62 61 44 30 68 4a 59 4c 70 59 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=fSFkFfTOY6TNUdIWCReNhepJ8aMFtVhsSx1GLAlT.S8-1711570800-1.0.1.1-PeyASLg3rcVoNz9bKitdQ5WJRVOmxod1rndvl8OY5UaX_d4u18mOkh1a7h7GMNTEL449ZmsTCIWbaD0hJYLpYQ; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	608	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 54 57 46 34 72 77 29 7d 2e 6c 69 67 68 74 7b 2d 2d 54 57 46 34 72 77 3a 6c 69 67 68 74 3b 2d 2d 74 4e 31 4d 4d 41 3a 23 30 30 63 34 63 63 3b 2d 2d 5f 6d 48 4c 72 41 3a 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 Data Ascii: .theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QY
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 2c 30 29 3b 2d 2d 66 67 41 4c 55 77 3a 23 30 64 31 32 31 36 3b 2d 2d 6e 34 4c 31 73 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 6e 65 4a 71 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 56 44 43 55 4e 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 45 30 35 59 41 51 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 73 61 6e 6c 43 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 63 39 6b 61 51 51 3a 23 30 64 31 32 31 36 3b 2d 2d 47 56 36 72 75 51 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5f 7a 4b 42 51 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 66 50 4e 5f 77 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 Data Ascii: ,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 31 59 4c 45 67 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 2e 37 29 3b 2d 2d 66 46 55 41 65 41 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 30 29 3b 2d 2d 71 4b 33 6e 38 77 3a 23 66 36 66 37 66 38 3b 2d 2d 6a 69 70 57 78 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 4f 72 47 68 4a 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 62 44 62 6c 59 77 3a 23 66 66 66 3b 2d 2d 59 6c 42 4a 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 59 35 68 69 65 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 54 6c 55 75 64 51 3a 23 66 66 66 3b 2d 2d 6d 4d 65 5f 55 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 34 53 76 70 39 51 3a 68 73 6c Data Ascii: 1YLEg:rgba(235,236,240,.7);--fFUAeA:rgba(235,236,240,0);--qK3n8w:#f6f7f8;--jipWxQ:rgba(246,247,248,.7);--OrGhJg:rgba(246,247,248,0);--bDblYw:#fff;--YlBJZQ:hsla(0,0%,100%,.7);--Y5hieQ:hsla(0,0%,100%,0);--TlUudQ:#fff;--mMe_UA:hsla(0,0%,100%,.7);--4Svp9Q:hsl
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 28 30 2c Data Ascii: 3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:hsla(0,0%,100%,.07);--4Yobmg:#fff;--9QR_hg:hsla(0,0%,100%,.4);--K12xjw:hsla(0,0%,100%,.07);--B2THfg:hsla(0,0%,100%,.15);--QYA_-A:hsla(0,0%,100%,.2);--ctGD3w:hsla(0,0%,100%,.07);--_T63JA:#fff;--oXjekw:hsla(0,
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 66 3b 2d 2d 37 4a 73 6a 33 41 3a 23 66 66 66 3b 2d 2d 52 64 32 35 6c 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 44 50 36 71 71 51 3a 23 31 61 36 32 66 66 3b 2d 2d 57 4a 39 78 78 51 3a 23 33 64 38 62 66 66 3b 2d 2d 6b 4a 46 69 7a 51 3a 23 31 38 35 35 64 38 3b 2d 2d 59 4f 79 31 6b 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 61 78 63 6b 56 67 3a 23 31 64 33 62 37 63 3b 2d 2d 54 6a 5a 34 67 67 3a 23 66 66 66 3b 2d 2d 79 70 41 76 62 51 3a 23 66 66 66 3b 2d 2d 79 75 44 57 31 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 78 51 4f 6d 41 77 3a 23 61 64 35 61 30 30 3b 2d 2d 53 50 4b 6f 42 51 3a 23 64 31 37 36 30 30 3b 2d 2d 66 4e 4e 46 66 51 3a 23 39 34 34 66 30 35 3b 2d 2d 7a 62 62 65 38 Data Ascii: f;--7Jsj3A:#fff;--Rd25lA:hsla(0,0%,100%,.4);--DP6qqQ:#1a62ff;--WJ9xxQ:#3d8bff;--kJFizQ:#1855d8;--YOy1kQ:hsla(0,0%,100%,.07);--axckVg:#1d3b7c;--TjZ4gg:#fff;--ypAvbQ:#fff;--yuDW1w:hsla(0,0%,100%,.4);--xQOmAw:#ad5a00;--SPKoBQ:#d17600;--fNNFfQ:#944f05;--zbbe8
2024-03-27 20:20:00 UTC	1178	IN	Data Raw: 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 68 6a 56 73 72 77 3a 23 34 61 32 65 37 66 3b 2d 2d 6f 6e 32 31 61 77 3a 23 34 61 32 65 37 66 3b 2d 2d 46 4e 55 51 34 67 3a 23 33 36 32 35 35 62 3b 2d 2d 36 52 64 37 55 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 6e 66 75 5f 6f 67 3a 23 66 31 65 62 66 66 3b 2d 2d 75 78 33 64 6f 51 3a 68 73 6c 61 28 30 2c 30 25 Data Ascii: 0,0%,100%,0);--B2THfg:hsla(0,0%,100%,.15);--QYA_-A:hsla(0,0%,100%,.07);--ctGD3w:hsla(0,0%,100%,0);--_T63JA:#fff;--oXjekw:hsla(0,0%,100%,.4);--hjVsrw:#4a2e7f;--on21aw:#4a2e7f;--FNUQ4g:#36255b;--6Rd7UQ:hsla(0,0%,100%,.15);--nfu_og:#f1ebff;--ux3doQ:hsla(0,0%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:59 UTC	571	OUT	GET /web/b4b909f3e50309b8.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 15828 Connection: close CF-Ray: 86b2141cdebd8027-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 151664 Cache-Control: public, max-age=31556926 ETag: "25cee2ceafe17b285670ef10477c6db4" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Tue, 26 Mar 2024 02:06:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Ed64M5V7ynlo765dCV4Tvp46PjIxl7H2/nrcULf71F4fqInLTeayHn2FEJzk9e0moB1VQzBivKo= x-amz-replication-status: COMPLETED x-amz-request-id: JGQXXVF5N2084WVS x-amz-server-side-encryption: AES256 x-amz-version-id: _LqEOg.QUkFdzo0_n5TZIWXyg4nVmQdR X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 2e 7a 75 63 45 46 34 38 6c 31 6d 34 4d 4a 5f 65 79 4a 42 2e 57 6d 64 62 45 66 76 75 2e 6c 7a 56 6c 68 49 58 59 32 58 36 6b 79 4d 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 43 73 69 73 6d 4f 7a 44 44 62 77 4b 56 58 67 72 66 31 6a 53 39 5f 32 62 30 5a 77 71 53 6a 79 74 45 50 75 41 76 59 33 55 65 72 68 75 77 36 59 52 41 74 71 72 53 72 64 33 4f 62 52 67 43 34 5f 49 56 70 67 39 79 43 63 34 65 35 4b 31 6b 42 77 52 45 64 67 6b 57 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=.zucEF48l1m4MJ_eyJB.WmdbEfvu.lzVlhIXY2X6kyM-1711570800-1.0.1.1-CsismOzDDbwKVXgrf1jS9_2b0ZwqSjytEPuAvY3Uerhuw6YRAtqrSrd3ObRgC4_IVpg9yCc4e5K1kBwREdgkWQ; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	596	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 65 71 34 50 67 41 5c 22 3a 5c 22 44 69 64 6e e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 63 6f 64 65 5c 22 2c 5c 22 69 47 41 44 73 67 5c 22 3a 5c 22 53 6b 69 70 20 74 6f 20 73 65 61 72 63 68 5c 22 2c 5c 22 50 46 4f 55 65 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 46 76 59 75 37 51 5c 22 3a 5c 22 54 68 69 73 20 70 61 73 73 77 6f 72 64 20 69 73 20 63 6f 6d 6d 6f 6e 20 61 6e 64 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 30 38 69 6e 4c 51 5c 22 3a 5c 22 50 61 67 65 20 7b 30 7d 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c 22 3a 5c 22 43 68 61 6e 67 65 20 65 6d 61 69 Data Ascii: (function() { const messages = JSON.parse("{\"eq4PgA\":\"Didnt get the code? Resend code\",\"iGADsg\":\"Skip to search\",\"PFOUew\":\"Continue\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"08inLQ\":\"Page {0}\",\"nGBlYg\":\"Change emai
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 53 51 5c 22 3a 5c 22 50 61 73 73 77 6f 72 64 5c 22 2c 5c 22 2f 66 4c 4e 48 67 5c 22 3a 5c 22 57 68 65 6e 20 79 6f 75 20 73 65 74 20 75 70 20 74 77 6f 20 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 77 65 20 67 61 76 65 20 79 6f 75 20 73 6f 6d 65 20 62 61 63 6b 75 70 20 63 6f 64 65 73 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 6d 20 68 65 72 65 20 74 6f 20 72 65 67 61 69 6e 20 61 63 63 65 73 73 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 5c 22 2c 5c 22 79 41 58 76 66 67 5c 22 3a 5c 22 43 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 64 65 73 69 67 6e 20 77 69 74 68 20 43 61 6e 76 61 5c 22 2c 5c 22 42 58 6a 49 61 41 5c 22 3a 5c 22 50 65 72 66 6f 72 6d 20 f0 9f 91 8d 20 72 65 61 63 74 69 6f 6e 5c 22 2c Data Ascii: SQ\":\"Password\",\"/fLNHg\":\"When you set up two factor authentication we gave you some backup codes. You can use one of them here to regain access to your account.\",\"yAXvfg\":\"Create your own design with Canva\",\"BXjIaA\":\"Perform reaction\",
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 43 59 4d 72 39 41 5c 22 3a 5c 22 45 6e 74 65 72 20 62 61 63 6b 75 70 20 63 6f 64 65 20 69 6e 73 74 65 61 64 5c 22 2c 5c 22 51 63 79 50 6f 67 5c 22 3a 5c 22 4e 61 6d 65 5c 22 2c 5c 22 4d 4a 73 4d 35 67 5c 22 3a 5c 22 59 6f 75 e2 80 99 72 65 20 63 72 65 61 74 69 6e 67 20 61 20 43 61 6e 76 61 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 7b 30 7d 5c 22 2c 5c 22 78 57 7a 74 37 41 5c 22 3a 5c 22 53 68 6f 77 20 63 61 70 74 69 6f 6e 73 5c 22 2c 5c 22 54 49 76 6d 4c 67 5c 22 3a 5c 22 46 61 69 6c 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 61 70 74 69 6f 6e 73 5c 22 2c 5c 22 6a 6d 6d 37 53 41 5c 22 3a 5c 22 53 68 61 72 65 5c 22 2c 5c 22 35 4f 64 57 48 51 5c 22 3a 5c 22 4e 65 78 74 20 70 61 67 65 5c 22 2c 5c 22 4d 53 38 33 6c Data Ascii: ":\"More\",\"CYMr9A\":\"Enter backup code instead\",\"QcyPog\":\"Name\",\"MJsM5g\":\"Youre creating a Canva account with {0}\",\"xWzt7A\":\"Show captions\",\"TIvmLg\":\"Failed to generate captions\",\"jmm7SA\":\"Share\",\"5OdWHQ\":\"Next page\",\"MS83l
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 38 77 5c 22 3a 5c 22 55 73 65 20 62 61 63 6b 75 70 20 63 6f 64 65 5c 22 2c 5c 22 2b 6f 6c 59 66 77 5c 22 3a 5c 22 53 6f 75 72 63 65 5c 22 2c 5c 22 4f 31 33 68 41 51 5c 22 3a 5c 22 47 6f 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 6d 6f 6e 74 68 5c 22 2c 5c 22 31 71 54 70 45 67 5c 22 3a 5c 22 46 65 62 5c 22 2c 5c 22 30 37 49 2b 30 67 5c 22 3a 5c 22 6d 6d 5c 22 2c 5c 22 33 6d 7a 65 58 41 5c 22 3a 5c 22 43 6f 6e 66 69 72 6d 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 39 71 69 7a 4e 67 5c 22 3a 5c 22 57 68 61 74 20 64 6f 65 73 20 74 68 69 73 20 6d 65 61 6e 20 66 6f 72 20 79 6f 75 3f 5c 22 2c 5c 22 65 59 57 54 36 67 5c 22 3a 5c 22 43 6c 65 61 72 5c 22 2c 5c 22 53 70 50 78 63 41 5c 22 3a 5c 22 44 61 74 65 73 20 61 72 65 20 6f 66 74 65 6e 20 65 61 73 79 20 74 Data Ascii: 8w\":\"Use backup code\",\"+olYfw\":\"Source\",\"O13hAQ\":\"Go to the current month\",\"1qTpEg\":\"Feb\",\"07I+0g\":\"mm\",\"3mzeXA\":\"Confirm password\",\"9qizNg\":\"What does this mean for you?\",\"eYWT6g\":\"Clear\",\"SpPxcA\":\"Dates are often easy t
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 5c 22 35 4a 39 43 32 67 5c 22 3a 5c 22 50 6c 61 79 5c 22 2c 5c 22 4d 72 67 46 34 77 5c 22 3a 5c 22 4e 65 78 74 20 70 61 67 65 5c 22 2c 5c 22 31 32 30 53 6e 41 5c 22 3a 5c 22 43 72 65 61 74 65 64 20 62 79 20 7b 30 7d 5c 22 2c 5c 22 74 66 38 57 50 77 5c 22 3a 5c 22 53 6c 69 64 65 5c 22 2c 5c 22 57 30 6a 67 46 41 5c 22 3a 5c 22 4d 65 64 69 75 6d 5c 22 2c 5c 22 31 34 57 46 67 41 5c 22 3a 5c 22 57 65 20 64 69 64 6e e2 80 99 74 20 66 69 6e 64 20 61 20 43 61 6e 76 61 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 7b 30 7d 20 73 6f 20 77 65 e2 80 99 6c 6c 20 6d 61 6b 65 20 6f 6e 65 20 66 6f 72 20 79 6f 75 2e 20 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 73 65 6e 74 20 74 6f 20 66 69 6e 69 73 68 20 73 69 67 6e 69 6e 67 20 75 70 2e 5c 22 2c 5c 22 6b 43 44 49 42 Data Ascii: \"5J9C2g\":\"Play\",\"MrgF4w\":\"Next page\",\"120SnA\":\"Created by {0}\",\"tf8WPw\":\"Slide\",\"W0jgFA\":\"Medium\",\"14WFgA\":\"We didnt find a Canva account for {0} so well make one for you. Enter the code we sent to finish signing up.\",\"kCDIB
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 20 69 73 73 75 65 20 6f 6e 20 6f 75 72 20 65 6e 64 2e 5c 22 2c 5c 22 6a 5a 76 48 4b 67 5c 22 3a 5c 22 45 6e 74 65 72 20 63 6f 64 65 5c 22 2c 5c 22 77 38 6e 6b 6d 51 5c 22 3a 5c 22 47 6f 20 74 6f 20 74 68 65 20 64 61 74 65 20 70 69 63 6b 65 72 5c 22 2c 5c 22 67 48 6c 37 48 67 5c 22 3a 5c 22 4c 6f 61 64 69 6e 67 20 61 75 64 69 6f 5c 22 2c 5c 22 4b 55 38 72 70 67 5c 22 3a 5c 22 53 65 6c 65 63 74 20 74 69 6d 65 5c 22 2c 5c 22 56 6d 4e 57 71 67 5c 22 3a 5c 22 43 61 6e 63 65 6c 5c 22 2c 5c 22 7a 73 2b 30 75 41 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 73 75 72 65 20 79 6f 75 20 68 61 76 65 20 65 6e 74 65 72 65 64 20 61 20 76 61 6c 69 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 2e 5c 22 2c 5c 22 50 59 62 76 6a 51 5c 22 3a 5c 22 4c 49 56 45 5c 22 2c Data Ascii: issue on our end.\",\"jZvHKg\":\"Enter code\",\"w8nkmQ\":\"Go to the date picker\",\"gHl7Hg\":\"Loading audio\",\"KU8rpg\":\"Select time\",\"VmNWqg\":\"Cancel\",\"zs+0uA\":\"Please ensure you have entered a valid verification code.\",\"PYbvjQ\":\"LIVE\",
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 72 20 61 70 70 20 66 6f 72 20 43 61 6e 76 61 2e 5c 22 2c 5c 22 6f 69 63 6d 64 41 5c 22 3a 5c 22 49 20 77 61 73 20 63 68 61 72 67 65 64 20 66 6f 72 20 61 6e 20 61 63 63 6f 75 6e 74 20 74 68 61 74 20 49 20 63 61 6e 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 73 73 5c 22 2c 5c 22 6f 37 2f 71 42 67 5c 22 3a 5c 22 2f 20 7b 30 2c 20 6e 75 6d 62 65 72 7d 5c 22 2c 5c 22 45 63 4a 30 47 41 5c 22 3a 5c 22 52 65 73 74 6f 72 65 5c 22 2c 5c 22 36 43 35 68 6c 67 5c 22 3a 5c 22 54 69 6d 65 6c 69 6e 65 5c 22 2c 5c 22 70 42 72 73 61 77 5c 22 3a 5c 22 7b 30 2c 20 6e 75 6d 62 65 72 7d 20 6f 75 74 20 6f 66 20 7b 31 2c 20 6e 75 6d 62 65 72 7d 20 77 6f 72 64 73 20 75 73 65 64 5c 22 2c 5c 22 4b 31 6e 63 45 77 5c 22 3a 5c 22 47 6f 20 74 6f 20 70 61 67 65 20 7b 30 2c 20 6e 75 6d Data Ascii: r app for Canva.\",\"oicmdA\":\"I was charged for an account that I can no longer access\",\"o7/qBg\":\"/ {0, number}\",\"EcJ0GA\":\"Restore\",\"6C5hlg\":\"Timeline\",\"pBrsaw\":\"{0, number} out of {1, number} words used\",\"K1ncEw\":\"Go to page {0, num
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3a 5c 22 43 61 6e e2 80 99 74 20 66 69 6e 64 20 79 6f 75 72 20 62 61 63 6b 75 70 20 63 6f 64 65 73 3f 5c 22 2c 5c 22 57 6e 79 77 32 51 5c 22 3a 5c 22 49 74 e2 80 99 73 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 75 70 64 61 74 65 5c 22 2c 5c 22 42 66 6f 77 6a 77 5c 22 3a 5c 22 7b 30 2c 20 6e 75 6d 62 65 72 7d 5c 22 2c 5c 22 4e 58 6a 59 34 51 5c 22 3a 5c 22 45 6e 74 65 72 20 74 68 65 20 36 2d 64 69 67 69 74 20 63 6f 64 65 20 77 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 72 20 6d 6f 62 69 6c 65 2e 5c 22 2c 5c 22 57 41 38 78 43 51 5c 22 3a 5c 22 54 6f 64 61 79 5c 22 2c 5c 22 31 52 45 39 69 51 5c 22 3a 5c 22 45 6e 74 65 72 20 63 6f 64 65 5c 22 2c 5c 22 32 49 2b 6f 43 51 5c 22 3a 5c 22 4c 6f 61 64 69 6e 67 5c 22 2c 5c 22 37 79 55 62 45 41 5c 22 3a 5c 22 44 6f 77 6e 5c Data Ascii: :\"Cant find your backup codes?\",\"Wnyw2Q\":\"Its time for an update\",\"Bfowjw\":\"{0, number}\",\"NXjY4Q\":\"Enter the 6-digit code we sent to your mobile.\",\"WA8xCQ\":\"Today\",\"1RE9iQ\":\"Enter code\",\"2I+oCQ\":\"Loading\",\"7yUbEA\":\"Down\
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 68 65 72 65 e2 80 99 73 20 61 6e 20 69 73 73 75 65 20 6f 6e 20 6f 75 72 20 65 6e 64 2e 20 54 6f 20 68 65 6c 70 20 79 6f 75 20 71 75 69 63 6b 6c 79 2c 20 70 6c 65 61 73 65 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 65 6c 70 2f 67 65 74 2d 69 6e 2d 74 6f 75 63 68 2f 63 6f 6e 74 61 63 74 2d 73 75 70 70 6f 72 74 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 43 6f 6e 74 61 63 74 20 53 75 70 70 6f 72 74 3c 2f 61 3e 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 65 72 72 6f 72 20 63 6f 64 65 20 7b 30 7d 20 69 6e 20 74 68 65 20 e2 80 9c 44 65 73 63 72 69 62 65 20 74 68 65 20 69 73 73 75 65 e2 80 9d 20 73 65 63 Data Ascii: heres an issue on our end. To help you quickly, please <a href=\\\"https://www.canva.com/help/get-in-touch/contact-support\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Contact Support</a> and include error code {0} in the Describe the issue sec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:59 UTC	566	OUT	GET /web/7f2712c7be9143f9.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1353	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 641 Connection: close CF-Ray: 86b2141cefbb874c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 151664 Cache-Control: public, max-age=31556926 ETag: "9740877b607828f5a27ed9847ebbdfd5" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Tue, 26 Mar 2024 02:06:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: GpM3ViBqErEdpFUn2W6vtD8/YOH1CQqb2Zr+Ej/SbzWsDLgo45tbVZWOXaQKqlhGTdZaMLQevO4= x-amz-replication-status: PENDING x-amz-request-id: JGQYBV53YK2YW70N x-amz-server-side-encryption: AES256 x-amz-version-id: zE6TRc395BT58ry1IqnZJtG9pPRUUEVs X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	771	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 43 55 61 45 45 35 67 75 66 55 6c 4f 4d 39 64 35 52 77 47 54 62 58 32 71 43 63 79 57 4f 30 49 36 32 42 52 5f 78 78 62 72 4f 52 30 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 46 56 4b 66 75 48 72 53 6a 2e 6a 72 55 65 41 58 67 6d 71 4a 55 69 72 38 48 6d 77 31 42 31 34 6f 6b 6f 38 6b 52 77 69 66 51 47 44 47 6a 77 79 6e 5a 36 47 6c 65 5f 78 34 4e 4e 6a 70 4f 59 41 37 30 54 31 51 72 49 73 30 37 79 4a 78 52 70 56 4b 57 44 4a 63 75 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=CUaEE5gufUlOM9d5RwGTbX2qCcyWO0I62BR_xxbrOR0-1711570800-1.0.1.1-FVKfuHrSj.jrUeAXgmqJUir8Hmw1B14oko8kRwifQGDGjwynZ6Gle_x4NNjpOYA70T1QrIs07yJxRpVKWDJcuA; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	614	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 33 32 31 31 22 3a 7b 22 6a 73 22 3a 5b 22 63 61 62 31 36 65 66 33 33 66 65 66 62 33 61 63 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"3211":{"js":["cab16ef33fefb3ac.strings.js"],"css":[]},"
2024-03-27 20:20:00 UTC	27	IN	Data Raw: 62 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 7d 29 3b Data Ascii: b.strings.js"],"css":[]}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:19:59 UTC	571	OUT	GET /web/549c0d12f1f1d3ca.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1356	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 35590 Connection: close CF-Ray: 86b2141ceea31730-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 63810 Cache-Control: public, max-age=31556926 ETag: "8b875b81fe2acc0b9d0c57f25508d4cc" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Wed, 27 Mar 2024 02:26:26 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: pl5fgthSMbiK1gu+vUhfNemHvnl8w7ju90ZF8fuSRqB/kmTylQGpntGoevzaMv3irGD+vAeJjkc= x-amz-replication-status: COMPLETED x-amz-request-id: JN4E1MR5AX67TEAR x-amz-server-side-encryption: AES256 x-amz-version-id: S1j09ok.B4qv.N3rA3nyjmBJyn6RW4rV X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 52 47 73 52 58 42 55 4c 4c 38 6a 2e 79 4c 6e 75 47 31 54 7a 55 75 74 67 66 37 72 45 73 53 49 2e 32 61 64 6c 76 59 56 54 34 32 55 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 44 5a 47 49 6f 6e 5a 72 6d 54 46 37 74 6b 43 46 4c 66 6e 32 6e 78 57 61 74 76 49 51 2e 78 78 31 62 4c 56 31 67 69 37 4c 75 59 2e 44 47 32 71 39 47 72 74 66 69 4f 78 36 46 72 4f 53 35 39 66 6e 66 73 2e 4d 4f 68 61 52 6f 70 46 57 7a 74 52 69 52 52 4d 4d 42 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=RGsRXBULL8j.yLnuG1TzUutgf7rEsSI.2adlvYVT42U-1711570800-1.0.1.1-DZGIonZrmTF7tkCFLfn2nxWatvIQ.xx1bLV1gi7LuY.DG2q9GrtfiOx6FrOS59fnfs.MOhaRopFWztRiRRMMBg; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	595	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 66 2c 73 2c 6e 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 72 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 63 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6e 2c 69 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,f,s,n={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return n[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=n,i.amdD=function(){throw new Error("define canno
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 73 3b 75 2d 2d 29 65 5b 75 5d 3d 65 5b 75 2d 31 5d 3b 65 5b 75 5d 3d 5b 74 2c 66 2c 73 5d 7d 7d 2c 69 2e 6e 3d 65 3d 3e 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 65 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 65 3b 72 65 74 75 72 6e 20 69 2e 64 28 72 2c 7b 61 3a 72 7d 29 2c 72 7d 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 31 26 66 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 66 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 Data Ascii: s;u--)e[u]=e[u-1];e[u]=[t,f,s]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,f){if(1&f)e=this(e);if(8&f)return e;if("object"==typeof e&&e){if(4&
2024-03-27 20:20:00 UTC	943	IN	Data Raw: 6a 73 22 3b 69 66 28 34 32 30 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 30 66 64 32 62 37 63 66 35 64 65 36 34 36 64 2e 6a 73 22 3b 69 66 28 34 35 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 33 37 62 33 66 34 36 31 34 38 31 35 33 39 30 2e 6a 73 22 3b 69 66 28 34 34 36 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 32 31 64 35 38 34 31 31 36 38 39 63 36 61 61 2e 6a 73 22 3b 69 66 28 37 34 33 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 64 38 37 63 36 38 39 38 65 30 63 64 64 66 32 2e 6a 73 22 3b 69 66 28 38 36 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 38 31 39 66 65 38 34 64 36 61 33 63 62 62 64 2e 6a 73 22 3b 69 66 28 34 30 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 32 65 64 65 66 38 61 31 34 31 66 36 35 33 36 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 31 37 Data Ascii: js";if(4202===e)return"40fd2b7cf5de646d.js";if(4582===e)return"b37b3f4614815390.js";if(4464===e)return"321d58411689c6aa.js";if(7434===e)return"2d87c6898e0cddf2.js";if(869===e)return"5819fe84d6a3cbbd.js";if(4043===e)return"02edef8a141f6536.vendor.js";if(17
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 35 35 33 2e 6a 73 22 3b 69 66 28 33 36 30 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 64 64 38 30 65 38 62 36 36 63 33 34 61 66 65 2e 6a 73 22 3b 69 66 28 34 33 39 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 63 36 63 35 31 36 66 30 63 65 35 66 30 34 34 2e 6a 73 22 3b 69 66 28 33 31 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 63 37 66 61 34 32 37 65 62 61 36 34 39 63 30 2e 6a 73 22 3b 69 66 28 33 37 39 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 65 65 36 37 64 35 36 63 36 30 66 62 61 64 2e 6a 73 22 3b 69 66 28 36 31 30 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 65 35 66 38 39 62 36 33 38 32 66 37 35 63 37 2e 6a 73 22 3b 69 66 28 37 34 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 38 31 63 36 38 38 64 36 35 30 37 37 33 30 37 2e 6a 73 22 3b 69 66 28 33 32 38 30 3d 3d Data Ascii: 553.js";if(3604===e)return"9dd80e8b66c34afe.js";if(4390===e)return"3c6c516f0ce5f044.js";if(316===e)return"bc7fa427eba649c0.js";if(3790===e)return"c1ee67d56c60fbad.js";if(6101===e)return"2e5f89b6382f75c7.js";if(741===e)return"981c688d65077307.js";if(3280==
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3b 69 66 28 31 38 32 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 34 31 39 61 62 39 66 65 32 61 65 65 39 62 35 2e 6a 73 22 3b 69 66 28 36 35 36 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 62 64 31 37 33 31 33 61 64 32 66 64 61 31 30 2e 6a 73 22 3b 69 66 28 36 38 35 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 34 36 39 36 30 63 34 39 35 31 35 35 63 30 64 2e 6a 73 22 3b 69 66 28 35 35 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 39 32 33 66 32 38 62 30 61 37 33 35 30 66 36 2e 6a 73 22 3b 69 66 28 33 32 39 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 61 30 62 62 64 31 30 63 65 36 64 32 64 34 33 2e 6a 73 22 3b 69 66 28 36 33 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 34 63 39 34 63 64 36 62 33 31 36 37 32 39 31 2e 6a 73 22 3b 69 66 28 31 35 34 32 3d 3d 3d 65 29 72 65 74 Data Ascii: ;if(1821===e)return"b419ab9fe2aee9b5.js";if(6564===e)return"fbd17313ad2fda10.js";if(6855===e)return"446960c495155c0d.js";if(556===e)return"8923f28b0a7350f6.js";if(3294===e)return"3a0bbd10ce6d2d43.js";if(6331===e)return"54c94cd6b3167291.js";if(1542===e)ret
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 38 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 33 65 61 33 31 62 38 62 32 63 65 36 31 66 31 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 38 37 31 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 64 66 61 38 37 34 37 35 30 63 64 37 38 64 33 2e 6a 73 22 3b 69 66 28 31 33 30 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 34 33 36 64 31 36 30 66 64 39 65 66 36 34 35 2e 6a 73 22 3b 69 66 28 36 31 32 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 37 38 66 65 39 65 38 66 62 37 39 33 30 38 65 2e 6a 73 22 3b 69 66 28 32 35 31 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 62 33 32 39 32 35 31 37 64 31 33 65 36 32 33 2e 6a 73 22 3b 69 66 28 34 34 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 36 31 65 37 63 38 36 66 35 35 30 66 61 36 33 2e 6a 73 22 3b 69 66 28 32 33 39 35 3d 3d 3d 65 29 72 Data Ascii: 80===e)return"e3ea31b8b2ce61f1.vendor.js";if(8711===e)return"6dfa874750cd78d3.js";if(1301===e)return"6436d160fd9ef645.js";if(6125===e)return"b78fe9e8fb79308e.js";if(2515===e)return"3b3292517d13e623.js";if(4450===e)return"261e7c86f550fa63.js";if(2395===e)r
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 63 2e 6a 73 22 3b 69 66 28 36 32 37 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 34 62 36 33 34 66 33 64 32 61 34 37 64 63 66 2e 6a 73 22 3b 69 66 28 31 38 32 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 37 38 35 33 33 35 38 36 66 63 38 64 31 63 62 2e 6a 73 22 3b 69 66 28 31 33 39 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 66 66 35 61 35 31 65 37 66 66 36 31 63 61 65 2e 6a 73 22 3b 69 66 28 32 38 34 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 31 30 34 61 65 35 36 34 36 31 34 30 30 34 38 2e 6a 73 22 3b 69 66 28 33 30 39 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 31 36 38 37 36 35 66 32 32 30 38 33 64 35 30 2e 6a 73 22 3b 69 66 28 31 31 39 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 35 31 63 32 66 33 65 36 33 64 39 35 37 38 34 2e 6a 73 22 3b 69 66 28 36 35 35 34 3d 3d Data Ascii: c.js";if(6277===e)return"64b634f3d2a47dcf.js";if(1824===e)return"278533586fc8d1cb.js";if(1396===e)return"9ff5a51e7ff61cae.js";if(2848===e)return"e104ae5646140048.js";if(3093===e)return"0168765f22083d50.js";if(1198===e)return"251c2f3e63d95784.js";if(6554==
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 65 74 75 72 6e 22 33 32 64 36 33 65 38 38 35 64 37 66 61 39 38 35 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 32 33 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 32 31 31 61 66 66 36 33 62 33 38 31 38 39 65 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 32 31 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 32 64 34 36 34 63 32 66 35 39 61 37 33 33 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 32 30 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 31 35 37 62 63 31 62 34 32 35 65 32 64 32 61 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 35 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 35 62 33 64 61 31 61 38 34 65 37 31 63 38 31 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 34 36 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 62 30 65 66 63 65 34 64 63 66 61 36 36 32 61 2e 6c 74 72 2e 63 73 73 Data Ascii: eturn"32d63e885d7fa985.ltr.css";if(5233===e)return"e211aff63b38189e.ltr.css";if(3211===e)return"5b2d464c2f59a733.ltr.css";if(4202===e)return"b157bc1b425e2d2a.ltr.css";if(4582===e)return"95b3da1a84e71c81.ltr.css";if(4464===e)return"8b0efce4dcfa662a.ltr.css
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 34 39 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 38 36 37 38 66 35 64 32 61 34 39 36 38 39 36 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 39 30 32 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 65 64 36 31 61 34 39 66 64 66 63 35 31 33 62 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 36 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 32 32 34 31 64 38 38 35 39 31 39 63 30 37 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 35 38 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 66 39 36 30 38 64 38 39 30 38 62 30 66 38 39 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 33 34 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 31 38 30 35 32 61 66 31 36 31 31 30 61 36 61 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 37 39 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 62 Data Ascii: ltr.css";if(5499===e)return"f8678f5d2a496896.ltr.css";if(9025===e)return"aed61a49fdfc513b.ltr.css";if(1613===e)return"5b2241d885919c07.ltr.css";if(5585===e)return"1f9608d8908b0f89.ltr.css";if(5341===e)return"118052af16110a6a.ltr.css";if(3795===e)return"5b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	795	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:00 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 86b2141d0c0a0648-IAD CF-Cache-Status: HIT Age: 782058 Cache-Control: public, max-age=31556926 ETag: W/"ba9c619e1ba6a9272c44084a93375283" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Wed, 01 Nov 2023 23:04:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: w0+Z5O5Px+ZE6oHyOfteJbcAd8aLVAIKZRaFcKAkgBG4PfZgU5TPU1rul1RP9J3x+aDjeJ29M0w= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: KYRGWCA4J46TP2TD x-amz-server-side-encryption: AES256 x-amz-version-id: kFCDbB.azfiZLQfhBYb8Gboqeqt3J2PO X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LGwybZbLsyKvKS6gVpuS0jEMSolbrBgFoCl4DdEgFcaHYDyVF6F1HT9PnrwiDwY4hTcr%2FeqTiRvAocXMa%2BuXwwEozUgp7E3kFCb6%2Fx2UHmvch9pu5n6Tx0Mj2nyWQk27zE4%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:00 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 7ffa/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 4a 28 6e 29 2c 75 72 6c 3a 4b 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 79 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 73 74 6f 72 79 22 3a 21 66 Data Ascii: Data:{method:J(n),url:K(n)},startTimestamp:Date.now()};return W("fetch",{...e}),t.apply(y,n).then((t=>(W("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw W("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}))}();break;case"history":!f
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 79 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 47 3b 6c 65 74 20 56 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 51 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 6e 7c 7c 21 6e 2e 74 61 67 4e 61 Data Ascii: GET"}function K(t=[]){return"string"==typeof t[0]?t[0]:"Request"in y&&h(t[0],Request)?t[0].url:String(t[0])}let G;let V,Q;function Y(t,n=!1){return e=>{if(!e\|\|Q===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n=t.target;if(!n\|\|!n.tagNa
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 65 3d 65 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 4f 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 22 2c 21 30 29 7d 63 61 74 63 68 28 74 Data Ascii: e=et(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ot(t){if(t&&t.__sentry_captured__)return!0;try{O(t,"__sentry_captured__",!0)}catch(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49739	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	570	OUT	GET /web/665f7ead97e4a356.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1358	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 419791 Connection: close CF-Ray: 86b2141d0c4105d3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 753126 Cache-Control: public, max-age=31556926 ETag: "0caeff77fb92538b035e89b918e04c62" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Tue, 19 Mar 2024 03:04:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: xe3u6SntMZk/ZxEq6stZhNwFnQXCOmmsgpKqXH0qe/JBCmEC56L44ebnDqrNGG95syb6VdLuR9Q= x-amz-replication-status: COMPLETED x-amz-request-id: 0NEH3TYQBFTP8R3A x-amz-server-side-encryption: AES256 x-amz-version-id: lnMcv3VFUblBiFXDo4UfSKJdlmUTlXlS X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 6e 4d 73 46 72 68 49 73 6c 75 47 57 6d 78 6e 6c 72 5f 4d 36 6f 46 59 4a 48 34 6b 5f 33 37 6b 47 79 47 30 73 31 30 54 43 44 48 67 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 6d 41 5a 79 75 37 36 5f 36 65 53 67 68 61 5f 74 6b 76 7a 6b 34 63 79 31 4d 30 6b 78 31 7a 63 7a 61 42 53 78 62 74 57 56 4e 77 68 48 67 42 70 70 33 54 4a 70 44 6a 56 41 35 6d 67 77 6f 61 48 34 76 66 72 32 41 63 49 42 67 71 49 52 37 70 48 5f 30 31 57 73 63 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=nMsFrhIsluGWmxnlr_M6oFYJH4k_37kGyG0s10TCDHg-1711570800-1.0.1.1-mAZyu76_6eSgha_tkvzk4cy1M0kx1zczaBSxbtWVNwhHgBpp3TJpDjVA5mgwoaH4vfr2AcIBgqIR7pH_01Wscw; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	605	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 36 36 35 66 37 65 61 64 39 37 65 34 61 33 35 36 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 37 31 30 36 36 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 6e 2e 67 2c 72 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 66 75 6e 63 74 69 6f Data Ascii: /! For license information please see 665f7ead97e4a356.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{710665:(e,t,n)=>{!function(){var e="undefined"!=typeof window?window:n.g,r={};for(var i in functio
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 5d 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 72 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 69 66 28 69 26 26 69 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 69 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 74 29 65 3a 7b 76 61 72 20 6e 3d 73 3b 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 69 66 28 21 28 69 Data Ascii: ct"==typeof self&&self,"object"==typeof t&&t];for(var r=0;r<n.length;++r){var i=n[r];if(i&&i.Math==Math)return i}throw Error("Cannot find global object")}(this);function u(e,t){if(t)e:{var n=s;e=e.split(".");for(var r=0;r<e.length-1;r++){var i=e[r];if(!(i
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 65 7d 29 29 3b 76 61 72 20 66 2c 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2c 6e 65 77 20 74 7d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 70 3b 65 3a 7b 76 61 72 20 67 3d 7b 7d 3b 74 Data Ascii: :!0,value:function(){return c(a(this))}})}return e}));var f,d="function"==typeof Object.create?Object.create:function(e){function t(){}return t.prototype=e,new t};if("function"==typeof Object.setPrototypeOf)f=Object.setPrototypeOf;else{var p;e:{var g={};t
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 69 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 69 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 65 2e 67 2e 6f 3d 21 31 2c 69 3b 76 61 72 20 61 3d 69 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 65 2e 67 2e 6c 3d 6e 75 6c 6c 2c 77 28 65 2e 67 2c 6f 29 2c 4d 28 65 29 7d 72 65 74 75 72 6e 20 65 2e 67 2e 6c 3d 6e 75 6c 6c 2c 72 2e 63 61 6c 6c 28 65 2e 67 2c 61 29 2c 4d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 66 6f 72 28 3b 65 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 74 3d 65 2e 68 28 65 2e 67 29 3b 69 66 28 74 29 72 65 74 75 72 6e 20 65 2e 67 2e 6f 3d 21 31 2c 7b 76 61 6c 75 65 3a 74 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d Data Ascii: r("Iterator result "+i+" is not an object");if(!i.done)return e.g.o=!1,i;var a=i.value}catch(o){return e.g.l=null,w(e.g,o),M(e)}return e.g.l=null,r.call(e.g,a),M(e)}function M(e){for(;e.g.g;)try{var t=e.h(e.g);if(t)return e.g.o=!1,{value:t.value,done:!1}}
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 6e 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 6e 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b Data Ascii: :void 0}}function O(e,t,n){if(null==e)throw new TypeError("The 'this' value for String.prototype."+n+" must not be null or undefined");if(t instanceof RegExp)throw new TypeError("First argument to String.prototype."+n+" must not be a regular expression");
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6f 6c 76 65 3a 65 28 74 68 69 73 2e 44 29 2c 72 65 6a 65 63 74 3a 65 28 74 68 69 73 2e 6c 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6c 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 74 68 69 73 2e 49 28 65 29 3b 65 6c 73 65 7b 65 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 65 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 6e 3d 21 30 3b 62 72 65 61 6b 20 65 3b 64 65 66 Data Ascii: olve:e(this.D),reject:e(this.l)}},t.prototype.D=function(e){if(e===this)this.l(new TypeError("A Promise cannot resolve to itself"));else if(e instanceof t)this.I(e);else{e:switch(typeof e){case"object":var n=null!=e;break e;case"function":n=!0;break e;def
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6e 3d 74 68 69 73 2e 6a 28 29 3b 74 72 79 7b 65 2e 63 61 6c 6c 28 74 2c 6e 2e 72 65 73 6f 6c 76 65 2c 6e 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 72 29 7b 6e 2e 72 65 6a 65 63 74 28 72 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 28 65 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 61 28 6e 29 7d 7d 3a 74 7d 76 61 72 20 69 2c 61 2c 6f 3d 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 3d 65 2c 61 3d 74 7d 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 7a 63 28 72 28 65 2c 69 29 2c 72 28 6e 2c 61 29 29 2c Data Ascii: n=this.j();try{e.call(t,n.resolve,n.reject)}catch(r){n.reject(r)}},t.prototype.then=function(e,n){function r(e,t){return"function"==typeof e?function(t){try{i(e(t))}catch(n){a(n)}}:t}var i,a,o=new t((function(e,t){i=e,a=t}));return this.zc(r(e,i),r(n,a)),
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 72 3d 6e 65 77 20 65 28 5b 5b 74 2c 32 5d 2c 5b 6e 2c 33 5d 5d 29 3b 72 65 74 75 72 6e 20 32 3d 3d 72 2e 67 65 74 28 74 29 26 26 33 3d 3d 72 2e 67 65 74 28 6e 29 26 26 28 72 2e 64 65 6c 65 74 65 28 74 29 2c 72 2e 73 65 74 28 6e 2c 34 29 2c 21 72 2e 68 61 73 28 74 29 26 26 34 3d 3d 72 2e 67 65 74 28 6e 29 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 73 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 61 28 22 66 72 65 65 7a 65 22 29 2c 61 28 22 Data Ascii: \|!Object.seal)return!1;try{var t=Object.seal({}),n=Object.seal({}),r=new e([[t,2],[n,3]]);return 2==r.get(t)&&3==r.get(n)&&(r.delete(t),r.set(n,4),!r.has(t)&&4==r.get(n))}catch(i){return!1}}())return e;var s="$jscomp_hidden_"+Math.random();a("freeze"),a("
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6e 3d 6e 65 77 20 65 28 6c 28 5b 5b 74 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6e 2e 67 65 74 28 74 29 7c 7c 31 21 3d 6e 2e 73 69 7a 65 7c 7c 6e 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6e 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6e 7c 7c 32 21 3d 6e 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 6e 2e 65 6e 74 72 69 65 73 28 29 2c 69 3d 72 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 21 69 2e 64 6f 6e 65 26 26 69 2e Data Ascii: "!=typeof e\|\|!e.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var t=Object.seal({x:4}),n=new e(l([[t,"s"]]));if("s"!=n.get(t)\|\|1!=n.size\|\|n.get({x:4})\|\|n.set({x:4},"t")!=n\|\|2!=n.size)return!1;var r=n.entries(),i=r.next();return!i.done&&i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.16.80.73	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	614	OUT	GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	374	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19986 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2023.10.0" Last-Modified: Tue, 10 Oct 2023 21:38:13 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 86b2141d0b793ade-IAD
2024-03-27 20:20:00 UTC	995	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 29 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 Data Ascii: );if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=ar
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3b 69 66 28 67 29 74 72 79 7b 6d 3d 72 28 72 28 7b 7d 2c 6d 29 2c 4a 53 4f 4e 2e 70 61 72 73 65 28 67 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 7b 76 61 72 20 79 3d 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 68 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 79 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 54 3d 68 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 54 26 26 28 6d 2e 74 6f 6b 65 6e 3d 54 29 3b 76 61 72 20 77 3d 68 2e 67 65 74 28 22 73 70 61 22 29 3b 6d 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 77 7c 7c 22 74 72 75 65 22 3d 3d 3d 77 7d 7d Data Ascii: ;if(g)try{m=r(r({},m),JSON.parse(g))}catch(e){}else{var y=l.getAttribute("src");if(y&&"function"==typeof URLSearchParams){var h=new URLSearchParams(y.replace(/^[^\?]+\??/,"")),T=h.get("token");T&&(m.token=T);var w=h.get("spa");m.spa=null===w\|\|"true"===w}}
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 65 72 72 65 72 3a 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 22 22 2c 63 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 2c 4c 26 26 53 26 26 63 3f 63 2e 75 72 6c 3a 61 29 2c 65 76 65 6e 74 54 79 70 65 3a 69 2e 45 76 65 6e 74 54 79 70 65 2e 4c 6f 61 64 2c 66 69 72 73 74 50 61 69 6e 74 3a 30 2c 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3a 30 2c 73 74 61 72 74 54 69 6d 65 3a 78 28 29 2c 76 65 72 73 69 6f 6e 73 3a 7b 66 6c 3a 6d 3f 6d 2e 76 65 72 73 69 6f 6e 3a 22 22 2c 6a 73 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 74 69 6d 69 6e 67 73 3a 31 7d 2c 70 61 67 65 6c 6f 61 64 49 64 3a 76 2c 6c 6f 63 61 74 69 6f 6e 3a 6c 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 75 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 Data Ascii: errer:(a=document.referrer\|\|"",c=p[p.length-1],L&&S&&c?c.url:a),eventType:i.EventType.Load,firstPaint:0,firstContentfulPaint:0,startTime:x(),versions:{fl:m?m.version:"",js:"2023.10.0",timings:1},pageloadId:v,location:l};if(null==u){if("function"==typeof f
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 29 2e 6c 65 6e 67 74 68 3e 3d 36 34 65 33 26 26 28 67 2e 72 65 73 6f 75 72 63 65 73 3d 5b 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 75 26 26 28 64 65 6c 65 74 65 20 67 2e 74 69 6d 69 6e 67 73 2c 64 65 6c 65 74 65 20 67 2e 6d 65 6d 6f 72 79 29 2c 67 7d 28 72 29 3b 69 66 28 63 26 26 6d 29 7b 76 61 72 20 73 3d 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 3b 69 66 28 64 65 6c 65 74 65 20 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 2c 4c 26 26 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 61 28 5b 5d 2c 30 29 2c 21 73 29 72 65 74 75 72 6e 3b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 28 65 2c 74 29 7d 29 29 7d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 Data Ascii: N.stringify(g).length>=64e3&&(g.resources=[]),void 0!==u&&(delete g.timings,delete g.memory),g}(r);if(c&&m){var s=c.tempResources;if(delete c.tempResources,L&&s&&0===s.length&&a([],0),!s)return;s.forEach((function(e,t){a(e,t)}))}},R=function(){var t=funct
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 67 74 68 3e 33 26 26 70 2e 73 68 69 66 74 28 29 7d 3b 4c 26 26 28 73 3d 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 70 75 73 68 53 74 61 74 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 3d 63 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 3b 74 2e 70 75 73 68 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 2c 61 29 7b 75 3d 65 28 61 29 3b 76 61 72 20 63 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 75 3d 3d 63 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 53 3f 76 6f 69 64 20 30 3a 53 2e 75 Data Ascii: gth>3&&p.shift()};L&&(s=e(),function(t){var n=t.pushState;if(n){var r=function(){v=c(),"function"==typeof f.clearResourceTimings&&f.clearResourceTimings()};t.pushState=function(i,o,a){u=e(a);var c=e(),s=!0;return u==c&&(s=!1),s&&(A()&&((null==S?void 0:S.u
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 3a 28 6e 75 6c 6c 3d 3d 62 2e 69 6e 70 7c 7c 4e 75 6d 62 65 72 28 62 2e 69 6e 70 2e 76 61 6c 75 65 29 3c 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 29 26 26 28 62 2e 69 6e 70 3d 7b 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 2c 70 61 74 68 3a 75 7d 2c 28 63 3d 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 29 26 26 62 2e 69 6e 70 26 26 28 62 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 62 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 66 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 69 66 Data Ascii: ("fetchpriority"));break;case"INP":(null==b.inp\|\|Number(b.inp.value)<Number(e.value))&&(b.inp={value:Number(e.value),path:u},(c=e.attribution)&&b.inp&&(b.inp.element=c.eventTarget,b.inp.name=c.eventType))}}function x(){return f.timeOrigin}function k(e){if
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3d 3d 73 7c 7c 73 28 6f 2c 6e 65 77 20 42 6c 6f 62 28 5b 75 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 29 7d 65 6c 73 65 7b 74 2e 73 74 3d 32 2c 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 3b 76 61 72 20 66 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 6e 26 26 28 66 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 32 30 34 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 6e 28 29 7d 29 2c 66 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 6f 2c 21 30 29 2c 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: ==s\|\|s(o,new Blob([u],{type:"application/json"}))}else{t.st=2,u=JSON.stringify(t);var f=new XMLHttpRequest;n&&(f.onreadystatechange=function(){4==this.readyState&&204==this.status&&n()}),f.open("POST",o,!0),f.setRequestHeader("content-type","application/j
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 2c 66 3d 2d 31 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 66 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 28 29 2c 72 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 64 28 29 Data Ascii: tNode}}catch(e){}return n},f=-1,d=function(){return f},l=function(e){addEventListener("pageshow",(function(t){t.persisted&&(f=t.timeStamp,e(t))}),!0)},v=function(){var e=a();return e&&e.activationStart\|\|0},p=function(e,t){var n=a(),r="navigate";return d()
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 3d 2d 31 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 31 2f 30 3a 30 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 77 3e 2d 31 26 26 28 77 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 74 69 6d 65 53 74 61 6d 70 3a 30 2c 4c 28 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 45 2c 21 30 29 2c 61 64 64 Data Ascii: =-1,S=function(){return"hidden"!==document.visibilityState\|\|document.prerendering?1/0:0},E=function(e){"hidden"===document.visibilityState&&w>-1&&(w="visibilitychange"===e.type?e.timeStamp:0,L())},b=function(){addEventListener("visibilitychange",E,!0),add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49741	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	570	OUT	GET /web/10e70838bb909c0c.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1358	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 207271 Connection: close CF-Ray: 86b2141d0c6805ca-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 782056 Cache-Control: public, max-age=31556926 ETag: "fffa6ce58572c2b43701705adb3c0e12" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Tue, 16 Jan 2024 01:51:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 16 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: qPh+f8WarVg8wOewK3oxP34WHxGb2VMB0f3NScOltzmAt48rHmugrm4/bJUmout1xINgwnkQM9k= x-amz-replication-status: COMPLETED x-amz-request-id: GYHJQEK09YHAXDBB x-amz-server-side-encryption: AES256 x-amz-version-id: sDz_1Jv5UAMEC9MAcRtSmuttE6keTdZO X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 6a 59 50 78 50 48 6f 4c 75 44 6b 65 51 46 72 47 52 46 68 7a 61 5f 71 31 74 51 75 71 45 68 4c 67 41 73 65 44 76 47 54 39 33 68 63 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 55 31 2e 78 49 72 72 61 66 41 53 4d 76 4c 57 4a 69 41 76 37 54 33 35 65 35 39 4d 51 55 69 69 59 51 52 47 6a 35 30 64 55 6d 7a 51 6a 32 48 62 78 56 53 67 72 41 71 69 51 62 72 45 69 42 63 65 63 46 54 47 52 69 64 52 71 62 4c 32 65 76 77 49 72 2e 45 6c 49 6b 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=jYPxPHoLuDkeQFrGRFhza_q1tQuqEhLgAseDvGT93hc-1711570800-1.0.1.1-U1.xIrrafASMvLWJiAv7T35e59MQUiiYQRGj50dUmzQj2HbxVSgrAqiQbrEiBcecFTGRidRqbL2evwIr.ElIkQ; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	603	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 30 65 37 30 38 33 38 62 62 39 30 39 63 30 63 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 36 38 37 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 51 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 36 37 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 72 65 Data Ascii: /! For license information please see 10e70838bb909c0c.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.re
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 31 33 36 37 29 2c 69 3d 6e 28 33 38 36 37 32 29 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 2c 6c 3d 6f 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 66 6f 72 77 61 72 64 52 65 66 26 26 28 30 2c 72 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 29 2e 24 24 74 79 70 65 6f 66 2c 75 3d 6f 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 6d 65 6d 6f 26 26 28 30 2c 72 2e 6d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f Data Ascii: 1367),i=n(38672),o="function"==typeof Symbol&&Symbol.for,l=o?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=o?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((functio
2024-03-27 20:20:00 UTC	933	IN	Data Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 2c 61 2c 69 3d 6e 2e 63 61 6c 6c 28 65 29 2c 6f 3d 5b 5d 3b 74 72 79 7b 66 6f 72 28 3b 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2d 2d 20 3e 30 29 26 26 21 28 72 3d 69 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6f 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 6c 29 7b 61 3d 7b 65 72 72 6f 72 3a 6c 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 26 26 21 72 2e 64 6f 6e 65 26 26 28 6e 3d 69 2e 72 65 74 75 72 6e 29 26 26 6e 2e 63 61 6c 6c 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 69 28 28 30 2c 61 Data Ascii: mbol.iterator];if(!n)return e;var r,a,i=n.call(e),o=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=i.next()).done;)o.push(r.value)}catch(l){a={error:l}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(a)throw a.error}}return o};function o(e){var t=i((0,a
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 61 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 73 65 72 76 65 72 22 2e 63 6f 6e 63 61 74 28 65 29 7d 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 6f 62 73 65 72 76 65 64 22 29 2c 28 30 2c 6c 2e 46 29 28 29 29 72 65 74 75 72 6e 20 65 28 29 3b 76 61 72 20 6e 3d 75 28 61 2e 75 73 65 53 74 61 74 65 28 66 29 2c 31 29 5b 30 5d 2c 63 3d 75 28 61 2e 75 73 65 53 74 61 74 65 28 29 2c 32 29 5b 31 5d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 5b 5d 29 7d 2c 70 3d 61 2e 75 Data Ascii: a.error}}return o};function s(e){return"observer".concat(e)}var c=function(){};function f(){return new c}function d(e,t){if(void 0===t&&(t="observed"),(0,l.F)())return e();var n=u(a.useState(f),1)[0],c=u(a.useState(),2)[1],d=function(){return c([])},p=a.u
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 65 29 2c 65 2e 63 75 72 72 65 6e 74 3d 28 30 2c 72 2e 55 79 29 28 69 29 2c 65 2e 63 75 72 72 65 6e 74 2e 66 69 6e 61 6c 69 7a 61 74 69 6f 6e 52 65 67 69 73 74 72 79 43 6c 65 61 6e 75 70 54 6f 6b 65 6e 3d 6c 2c 74 2e 73 65 74 28 6c 2c 65 2e 63 75 72 72 65 6e 74 29 2c 65 2e 63 75 72 72 65 6e 74 7d 2c 72 65 63 6f 72 64 52 65 61 63 74 69 6f 6e 41 73 43 6f 6d 6d 69 74 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 75 6e 72 65 67 69 73 74 65 72 28 65 29 2c 65 2e 63 75 72 72 65 6e 74 26 26 65 2e 63 75 72 72 65 6e 74 2e 66 69 6e 61 6c 69 7a 61 74 69 6f 6e 52 65 67 69 73 74 72 79 43 6c 65 61 6e 75 70 54 6f 6b 65 6e 26 26 74 2e 64 65 6c 65 74 65 28 65 2e 63 75 72 72 65 6e 74 2e 66 69 6e 61 6c 69 7a 61 74 69 6f 6e 52 65 67 69 73 74 72 79 43 6c 65 61 6e 75 70 Data Ascii: e),e.current=(0,r.Uy)(i),e.current.finalizationRegistryCleanupToken=l,t.set(l,e.current),e.current},recordReactionAsCommitted:function(e){a.unregister(e),e.current&&e.current.finalizationRegistryCleanupToken&&t.delete(e.current.finalizationRegistryCleanup
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6f 26 26 21 6f 2e 64 6f 6e 65 26 26 28 72 3d 69 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 7d 74 2e 63 6c 65 61 72 28 29 7d 65 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 2c 65 3d 76 6f 69 64 20 30 29 7d 7d 7d 7d 2c 33 35 36 31 35 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 7a 30 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 31 36 38 39 34 39 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 65 7c 7c 28 65 3d 61 29 2c 28 30 2c 72 2e 6a 51 29 28 7b 72 65 61 63 74 69 6f 6e 53 63 68 65 64 75 6c 65 72 3a 65 7d 29 7d 7d 2c 39 30 33 38 32 31 3a Data Ascii: }}finally{try{o&&!o.done&&(r=i.return)&&r.call(i)}finally{if(n)throw n.error}}t.clear()}e&&(clearTimeout(e),e=void 0)}}}},356158:(e,t,n)=>{n.d(t,{z0:()=>i});var r=n(168949);function a(e){e()}function i(e){e\|\|(e=a),(0,r.jQ)({reactionScheduler:e})}},903821:
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 21 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 3f 65 5b 74 5d 3d 6e 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 7d 76 61 72 20 64 3d 75 28 22 70 61 74 63 68 4d 69 78 69 6e 73 22 29 2c 70 3d 75 28 22 70 61 74 63 68 65 64 44 65 66 69 6e 69 74 69 6f 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 72 3e 32 3f 72 Data Ascii: !=t}function f(e,t,n){Object.hasOwnProperty.call(e,t)?e[t]=n:Object.defineProperty(e,t,{enumerable:!1,configurable:!0,writable:!0,value:n})}var d=u("patchMixins"),p=u("patchedDefinition");function h(e,t){for(var n=this,r=arguments.length,a=new Array(r>2?r
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 6d 70 6f 6e 65 6e 74 2e 22 29 7d 65 6c 73 65 20 65 5b 62 5d 3d 21 30 3b 69 66 28 74 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 61 63 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 61 63 74 20 6c 69 66 65 2d 63 79 63 6c 65 20 65 76 65 6e 74 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 22 29 3b 69 66 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 61 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 29 69 66 28 74 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 29 7b 69 66 28 74 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 21 3d 3d 4f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 74 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 Data Ascii: mponent.")}else e[b]=!0;if(t.componentWillReact)throw new Error("The componentWillReact life-cycle event is no longer supported");if(e.__proto__!==a.PureComponent)if(t.shouldComponentUpdate){if(t.shouldComponentUpdate!==O)throw new Error("It is not allowe
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 29 7c 7c 22 3c 63 6f 6d 70 6f 6e 65 6e 74 3e 22 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 66 28 74 68 69 73 2c 77 2c 21 31 29 2c 66 28 74 68 69 73 2c 6b 2c 21 31 29 3b 76 61 72 20 6e 3d 78 28 74 68 69 73 29 2c 69 3d 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 6f 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 6c 3b 6f 3d 21 31 3b 76 61 72 20 75 3d 6e 75 6c 6c 21 3d 28 6c 3d 65 5b 67 5d 29 3f 6c 3a 65 5b 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 72 2e 6c 65 28 6e 2b 22 2e 72 65 6e 64 65 72 28 29 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6f 26 26 28 6f 3d 21 30 2c 21 30 21 3d 3d 74 5b 5f 5d 29 29 7b 76 61 72 20 6e 3d 21 30 3b 74 72 79 7b 66 28 74 2c Data Ascii: )\|\|"<component>"}function E(e){var t=this;f(this,w,!1),f(this,k,!1);var n=x(this),i=e.bind(this),o=!1;return function e(){var l;o=!1;var u=null!=(l=e[g])?l:e[g]=function(){var e=new r.le(n+".render()",(function(){if(!o&&(o=!0,!0!==t[_])){var n=!0;try{f(t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49747	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	563	OUT	GET /web/1a7346c99afafd79.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:00 GMT Content-Type: text/javascript Content-Length: 139722 Connection: close CF-Ray: 86b2141f6b3b056d-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 63810 Cache-Control: public, max-age=31556926 ETag: "5ee061b200d91372054ff0198c10f509" Expires: Fri, 28 Mar 2025 02:08:46 GMT Last-Modified: Wed, 27 Mar 2024 02:26:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kfDr/3eQ3UFtYz3Sg0W7M0FR9c1Zd7zxh2/qWI7h9vm657NlfASE4IFMLEcMiK8pMNKMOxNOen4= x-amz-replication-status: COMPLETED x-amz-request-id: JN44AFV2JH56MPZY x-amz-server-side-encryption: AES256 x-amz-version-id: cqx0hTiI_yG09Xg.YFtUmfQn4tDzyLgh X-Content-Type-Options: nosniff
2024-03-27 20:20:00 UTC	771	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 41 64 2e 36 55 58 31 5f 43 4f 33 61 62 43 6b 56 58 6e 62 2e 5a 54 6d 57 61 72 78 5f 4e 67 63 73 4f 51 53 77 39 79 75 4b 51 72 30 2d 31 37 31 31 35 37 30 38 30 30 2d 31 2e 30 2e 31 2e 31 2d 32 64 30 38 50 53 75 53 4b 32 71 6e 7a 65 4b 59 49 70 6b 4a 4f 5a 6a 53 49 57 42 61 5a 45 30 6a 44 44 72 73 57 6d 65 6d 4d 39 32 41 39 4e 45 43 61 61 38 34 41 54 6c 6c 4d 38 4b 47 72 59 5f 4d 35 7a 73 33 42 59 7a 66 4a 6f 30 32 74 66 50 79 65 30 54 7a 44 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=Ad.6UX1_CO3abCkVXnb.ZTmWarx_NgcsOQSw9yuKQr0-1711570800-1.0.1.1-2d08PSuSK2qnzeKYIpkJOZjSIWBaZE0jDDrsWmemM92A9NECaa84ATllM8KGrY_M5zs3BYzfJo02tfPye0TzDQ; path=/; expires=Wed, 27-Mar-24 20:50:00 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:00 UTC	610	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._45f7853dc7660378a0389
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 4b 3b 76 61 72 20 59 63 3b 76 61 72 20 48 3b 76 61 72 20 43 64 3b 76 61 72 20 4f 61 3b 76 61 72 20 4e 61 3b 76 61 72 20 51 3b 76 61 72 20 46 3b 76 61 72 20 47 3b 76 61 72 20 63 61 3b 76 61 72 20 6b 64 3b 76 61 72 20 46 63 3b 76 61 72 20 44 63 3b 76 61 72 20 77 63 3b 76 61 72 20 6f 63 3b 76 61 72 20 6c 62 3b 76 61 72 20 77 3b 76 61 72 20 63 62 3b 76 61 72 20 4a 61 3b 76 61 72 20 79 3b 76 61 72 20 74 3b 0a 76 61 72 20 61 61 61 2c 66 61 2c 69 61 2c 6b 61 2c 73 61 2c 63 61 61 2c 66 61 61 2c 65 61 61 2c 64 61 61 2c 67 61 61 2c 68 61 61 2c 69 61 61 2c 47 61 2c 48 61 2c 4b 61 2c 51 61 2c 59 61 2c 57 61 2c 52 61 2c 53 61 2c 54 61 2c 56 61 2c 58 61 2c 5a 61 2c 6c 61 61 2c 6d 62 2c 70 62 2c 73 62 2c 6f 61 61 2c 43 62 2c 72 61 61 2c 77 61 61 2c 76 61 61 2c 78 61 61 Data Ascii: K;var Yc;var H;var Cd;var Oa;var Na;var Q;var F;var G;var ca;var kd;var Fc;var Dc;var wc;var oc;var lb;var w;var cb;var Ja;var y;var t;var aaa,fa,ia,ka,sa,caa,faa,eaa,daa,gaa,haa,iaa,Ga,Ha,Ka,Qa,Ya,Wa,Ra,Sa,Ta,Va,Xa,Za,laa,mb,pb,sb,oaa,Cb,raa,waa,vaa,xaa
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 73 74 61 74 65 22 3a 5f 5f 63 2e 6c 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 77 3d 5f 5f 63 2e 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 61 72 67 75 6d 65 6e 74 20 69 73 20 6e 75 6c 6c 22 3a 5f 5f 63 2e 6c 61 28 62 2c 2e 2e 2e 63 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 5f 63 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 61 2e 74 79 70 65 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 Data Ascii: unction(a,b,...c){if(!a)throw Error(null==b?"invalid state":__c.la(b,...c));};w=__c.w=function(a,b,...c){if(null==a)throw Error(null==b?"argument is null":__c.la(b,...c));return a};__c.oa=function(a,b){return null!=b&&typeof b===a.type};sa=function(a,b,c
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 65 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 78 61 2e 67 65 74 28 61 29 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 74 28 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 29 29 2c 22 66 69 6e 69 74 65 20 6e 75 6d 65 72 61 6c 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 4e 75 6d 62 65 72 28 61 29 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 72 65 74 75 72 6e 20 74 28 79 61 2e 68 61 73 28 61 29 2c 22 6f 62 6a 65 63 74 20 76 61 6c 75 65 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 79 61 2e 67 65 74 28 61 29 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 62 3d 77 61 2e 65 78 65 63 28 61 29 2c 6e 75 6c 6c 21 3d 62 3f 0a 62 Data Ascii: e expected: {}",a),xa.get(a);case "number":return t(""!==a.trim()&&Number.isFinite(Number(a)),"finite numeral expected: {}",a),Number(a);case "object":return t(ya.has(a),"object value expected: {}",a),ya.get(a);case "string":return b=wa.exec(a),null!=b?b
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 2c 68 64 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 43 3d 5f 5f 63 2e 43 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 72 65 3a 65 2c 68 71 3a 66 7d 3d 4a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 66 6d 3a 33 2c 72 65 3a 65 2c 6f 62 6a 3a 66 2c 68 64 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 4d 61 3d 5f 5f 63 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 72 65 3a 65 2c 68 71 3a 66 7d 3d 4a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 66 6d 3a 34 2c 72 65 3a 65 2c 6f 62 6a 3a 66 2c 68 64 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 0a 4e 61 3d 5f 5f 63 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 Data Ascii: ,hd:"object"}};C=__c.C=function(a,b,c){const {tag:d,re:e,hq:f}=Ja(a,b,c);return{tag:d,fm:3,re:e,obj:f,hd:"object"}};Ma=__c.Ma=function(a,b,c){const {tag:d,re:e,hq:f}=Ja(a,b,c);return{tag:d,fm:4,re:e,obj:f,hd:"object"}};Na=__c.Na=function(a,b,c){const {ta
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 20 76 3d 75 2e 63 6f 6e 66 69 67 2c 78 3d 75 2e 6e 61 6d 65 3b 76 61 72 20 6b 3d 75 2e 79 6b 2c 6c 3d 75 2e 6c 73 2c 6d 3d 6b 3b 67 3d 65 5b 6d 5d 3b 6e 75 6c 6c 3d 3d 67 26 26 6e 75 6c 6c 21 3d 6c 26 26 6e 75 6c 6c 21 3d 65 5b 6c 5d 26 26 28 6d 3d 6c 2c 67 3d 65 5b 6d 5d 29 3b 73 77 69 74 63 68 28 76 2e 66 6d 29 7b 63 61 73 65 20 33 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 68 5b 78 5d 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 21 3d 3d 76 2e 68 64 29 74 68 72 6f 77 20 52 61 28 7b 79 6b 3a 6b 2c 0a 6c 73 3a 6c 7d 2c 67 2c 76 2e 68 64 2c 66 29 3b 66 2e 70 75 73 68 28 6d 29 3b 68 5b 78 5d 3d 76 2e 6f 62 6a 3f 76 2e 6f 62 6a 2e 71 41 28 67 2c 66 29 3a 67 3b 66 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: v=u.config,x=u.name;var k=u.yk,l=u.ls,m=k;g=e[m];null==g&&null!=l&&null!=e[l]&&(m=l,g=e[m]);switch(v.fm){case 3:if(null==g){h[x]=void 0;break}else if(typeof g!==v.hd)throw Ra({yk:k,ls:l},g,v.hd,f);f.push(m);h[x]=v.obj?v.obj.qA(g,f):g;f.pop();break;case
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 20 5b 41 2c 42 5d 3d 6c 5b 71 5d 3b 69 66 28 6b 29 7b 69 66 28 72 3d 4e 75 6d 62 65 72 28 41 29 2c 69 73 4e 61 4e 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 6e 75 6d 62 65 72 20 6d 61 70 20 6b 65 79 2c 20 66 6f 75 6e 64 3a 20 4e 61 4e 20 24 7b 56 61 28 5b 2e 2e 2e 66 2c 6d 5d 29 7d 60 29 3b 7d 65 6c 73 65 20 72 3d 41 3b 69 66 28 74 79 70 65 6f 66 20 42 21 3d 3d 76 2e 68 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 76 2e 68 64 7d 20 6d 61 70 20 76 61 6c 75 65 20 66 6f 72 20 6d 61 70 20 6b 65 79 20 22 24 7b 72 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 58 61 28 42 29 7d 20 24 7b 56 61 28 5b 2e 2e 2e 66 2c 6d 5d 29 7d 60 29 3b 66 2e Data Ascii: const [A,B]=l[q];if(k){if(r=Number(A),isNaN(r))throw new TypeError(`Expected number map key, found: NaN ${Va([...f,m])}`);}else r=A;if(typeof B!==v.hd)throw new TypeError(`Expected ${v.hd} map value for map key "${r}", found: ${Xa(B)} ${Va([...f,m])}`);f.
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 2e 70 6f 70 28 29 3b 69 66 28 74 79 70 65 6f 66 20 78 21 3d 3d 6b 2e 68 64 29 74 68 72 6f 77 20 53 61 28 7b 79 6b 3a 6d 7d 2c 0a 78 2c 6b 2e 68 64 2c 5b 2e 2e 2e 66 2c 72 5d 2c 76 29 3b 75 5b 76 5d 3d 78 7d 6c 5b 72 5d 3d 75 7d 65 6c 73 65 7b 66 6f 72 28 70 3d 30 3b 70 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 70 29 69 66 28 74 79 70 65 6f 66 20 6e 5b 70 5d 21 3d 3d 6b 2e 68 64 29 74 68 72 6f 77 20 53 61 28 7b 79 6b 3a 6d 7d 2c 6e 5b 70 5d 2c 6b 2e 68 64 2c 5b 2e 2e 2e 66 2c 72 5d 2c 70 29 3b 6c 5b 72 5d 3d 6e 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 69 66 28 21 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 4d 61 70 20 66 6f 72 20 6b 65 79 20 22 24 7b 6d 7d 22 Data Ascii: .pop();if(typeof x!==k.hd)throw Sa({yk:m},x,k.hd,[...f,r],v);u[v]=x}l[r]=u}else{for(p=0;p<n.length;++p)if(typeof n[p]!==k.hd)throw Sa({yk:m},n[p],k.hd,[...f,r],p);l[r]=n}break;case 5:if(!(n instanceof Map))throw new TypeError(`Expected Map for key "${m}"
2024-03-27 20:20:00 UTC	1369	IN	Data Raw: 4a 53 4f 4e 20 6b 65 79 73 20 61 72 65 20 6e 6f 74 20 63 6f 6e 73 69 73 74 65 6e 74 2e 20 24 7b 6b 2e 6c 73 7d 20 24 7b 72 2e 42 6b 7d 60 29 3b 71 3d 78 2e 74 61 67 3b 6b 3d 7b 79 6b 3a 72 2e 70 72 69 6d 61 72 79 2c 6c 73 3a 72 2e 42 6b 7d 7d 69 66 28 6e 75 6c 6c 3d 3d 6b 7c 7c 6e 75 6c 6c 3d 3d 71 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 6e 65 4f 66 20 68 61 73 20 6e 6f 20 63 61 73 65 73 2e 22 29 3b 67 3d 62 28 29 3b 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 67 29 3b 70 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 75 20 6f 66 20 72 29 70 5b 67 5b 75 5d 2e 74 61 67 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 67 5b 75 5d 2c 7b 6e 61 6d 65 3a 75 7d 29 3b 75 3d 6e 75 6c 6c 21 3d 63 2e 4c 51 61 3f 63 2e 4c 51 61 28 29 3a 76 6f Data Ascii: JSON keys are not consistent. ${k.ls} ${r.Bk}`);q=x.tag;k={yk:r.primary,ls:r.Bk}}if(null==k\|\|null==q)throw new TypeError("OneOf has no cases.");g=b();r=Object.keys(g);p={};for(var u of r)p[g[u].tag]=Object.assign({},g[u],{name:u});u=null!=c.LQa?c.LQa():vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49748	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:00 UTC	740	OUT	POST /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:00 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 30 2e 32 38 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 39 64 37 38 64 61 31 39 32 39 39 34 34 62 63 36 39 62 38 33 33 32 63 31 62 65 36 63 64 39 64 64 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 30 2e 32 38 35 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 30 2e 32 38 36 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:20:00.287Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"9d78da1929944bc69b8332c1be6cd9dd","init":true,"started":"2024-03-27T20:20:00.285Z","timestamp":"2024-03-27T20:20:00.286Z","stat
2024-03-27 20:20:01 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/8327c2251c0ec474.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 3306 Connection: close CF-Ray: 86b21424ba2407d3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 497210 Cache-Control: public, max-age=31556926 ETag: "0331847384e3f07b222b8684c65558da" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Fri, 22 Mar 2024 02:08:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: GqjrEa/JmqvndD/uT6mY1sY703SZCU9AxhlDt7UkRErfUolOoQGvRrUSPAxDVqYlYhfh99Cg+tc= x-amz-replication-status: COMPLETED x-amz-request-id: SFX6SG9RHEXRG1FK x-amz-server-side-encryption: AES256 x-amz-version-id: pip4sLsJ3ytCaV8.kEhdZ78ywWJPuFpP X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 59 49 56 35 31 45 71 49 39 73 32 5a 37 4a 69 6a 38 6e 76 36 68 31 31 78 45 68 46 77 58 78 62 73 25 32 42 52 4d 58 36 55 30 37 6a 42 47 7a 53 58 33 70 64 77 44 58 6e 75 37 57 45 42 30 41 36 58 68 52 65 4d 4c 45 55 42 43 6c 73 7a 69 4a 75 71 5a 65 68 45 47 4c 35 50 34 56 58 6e 70 37 75 4f 33 72 30 71 7a 74 68 25 32 46 64 64 76 38 76 47 6b 34 58 4d 68 77 77 79 65 43 73 68 31 75 45 70 36 79 25 32 42 45 6e 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aYIV51EqI9s2Z7Jij8nv6h11xEhFwXxbs%2BRMX6U07jBGzSX3pdwDXnu7WEB0A6XhReMLEUBClsziJuqZehEGL5P4VXnp7uO3r0qzth%2Fddv8vGk4XMhwwyeCsh1uEp6y%2BEng%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:01 UTC	1205	IN	Data Raw: 2e 6c 69 67 68 74 7b 2d 2d 34 43 6c 47 43 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 36 70 78 20 32 30 70 78 20 2d 34 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d 53 47 6a 6a 7a 41 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 31 32 70 78 20 34 30 70 78 20 2d 38 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d 37 46 52 51 47 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 2c 30 70 78 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 33 29 3b 2d 2d Data Ascii: .light{--4ClGCw:0px 0px 0px 1px rgba(64,87,109,.04),0px 6px 20px -4px rgba(64,87,109,.3);--SGjjzA:0px 0px 0px 1px rgba(64,87,109,.04),0px 12px 40px -8px rgba(64,87,109,.3);--7FRQGw:0px 0px 0px 1px rgba(64,87,109,.04),0px 2px 4px -1px rgba(64,87,109,.3);--
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 29 29 7b 68 74 6d 6c 7b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 3a 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 3b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 3a 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 29 3b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 3a 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 29 3b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 3a 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 7d 7d 2e 50 69 5f 72 70 51 2c 2e 54 32 36 5f 36 51 2c 2e 5f 32 41 59 37 54 41 20 61 2c 2e 5f 35 4a 67 53 49 51 20 61 2c 2e 5f 36 70 45 5f 64 51 Data Ascii: )){html{--safe-area-inset-top:env(safe-area-inset-top);--safe-area-inset-bottom:env(safe-area-inset-bottom);--safe-area-inset-left:env(safe-area-inset-left);--safe-area-inset-right:env(safe-area-inset-right)}}.Pi_rpQ,.T26_6Q,._2AY7TA a,._5JgSIQ a,._6pE_dQ
2024-03-27 20:20:01 UTC	732	IN	Data Raw: 20 61 2c 2e 45 6b 6c 32 46 41 20 2e 77 4c 36 76 71 51 20 61 3a 61 63 74 69 76 65 2c 2e 45 6b 6c 32 46 41 20 2e 77 4c 36 76 71 51 20 61 3a 68 6f 76 65 72 2c 2e 45 6b 6c 32 46 41 20 2e 7a 32 6f 5a 46 77 20 61 2c 2e 45 6b 6c 32 46 41 20 2e 7a 32 6f 5a 46 77 20 61 3a 61 63 74 69 76 65 2c 2e 45 6b 6c 32 46 41 20 2e 7a 32 6f 5a 46 77 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 4f 68 76 4c 43 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 53 66 68 33 41 29 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 66 77 4d 38 71 41 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 6a 6a 32 67 45 51 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f Data Ascii: a,.Ekl2FA .wL6vqQ a:active,.Ekl2FA .wL6vqQ a:hover,.Ekl2FA .z2oZFw a,.Ekl2FA .z2oZFw a:active,.Ekl2FA .z2oZFw a:hover{color:inherit}.OhvLCw{color:var(--fSfh3A);cursor:not-allowed}.fwM8qA{margin-left:4px;white-space:nowrap}.jj2gEQ{border:none;border-botto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/47dda877a1f6911e.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 344 Connection: close CF-Ray: 86b214250ba705db-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 788700 Cache-Control: public, max-age=31556926 ETag: "03d8c29cf035e3bcbd16fbdc13d58fcd" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Thu, 11 Jan 2024 02:03:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 11 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vGb8XukVsae2hQXcU1eksvXEVtgP7vpfbMRrhrqQqGEflvU1UB/CL7ikLXKUwHFKW4qHgAkC1ic= x-amz-replication-status: COMPLETED x-amz-request-id: JWXA6GB6GYT5SZ5K x-amz-server-side-encryption: AES256 x-amz-version-id: w_4dA4oYHq_px6m.HvkcClSyTkbUKvJb X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4a 63 65 38 38 75 73 6e 62 61 46 30 37 68 49 58 4a 30 30 78 30 7a 32 74 61 6b 32 78 61 41 6f 56 6d 39 47 71 30 55 7a 4e 7a 4e 75 34 25 32 42 49 31 54 79 70 6e 25 32 42 37 79 43 5a 52 34 56 48 61 6f 42 4f 25 32 46 31 6d 37 37 6d 54 4d 75 48 6b 6a 72 6b 54 6f 65 6d 62 4a 42 6a 35 51 50 6a 4d 76 65 4f 36 79 32 68 41 45 74 46 6e 6c 4b 43 56 66 30 70 70 55 4c 6b 64 38 50 58 6f 4d 73 58 48 49 64 57 52 36 64 25 32 46 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jce88usnbaF07hIXJ00x0z2tak2xaAoVm9Gq0UzNzNu4%2BI1Typn%2B7yCZR4VHaoBO%2F1m77mTMuHkjrkToembJBj5QPjMveO6y2hAEtFnlKCVf0ppULkd8PXoMsXHIdWR6d%2Fs%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:01 UTC	344	IN	Data Raw: 2e 79 67 47 4b 54 51 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 7d 2e 79 67 47 4b 54 51 2e 5f 36 31 56 52 71 51 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 31 32 70 78 7d 2e 79 67 47 4b 54 51 2e 61 62 75 6c 62 67 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 79 67 47 4b 54 51 2e 64 52 38 4d 37 67 7b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 7d 2e 79 67 47 4b 54 51 2e 5f 31 61 43 6b 66 41 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 79 67 47 4b 54 51 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f Data Ascii: .ygGKTQ{box-sizing:border-box;display:inline-block;vertical-align:text-bottom}.ygGKTQ._61VRqQ{height:12px;width:12px}.ygGKTQ.abulbg{height:16px;width:16px}.ygGKTQ.dR8M7g{height:24px;width:24px}.ygGKTQ._1aCkfA{height:32px;width:32px}.ygGKTQ>svg{display:blo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/c37d32c9d9aa798c.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1184	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 10428 Connection: close CF-Ray: 86b21424f8ef05d9-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782056 Cache-Control: public, max-age=31556926 ETag: "b39828d5a64ca4b0b94c2f82e29e97f9" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Thu, 29 Feb 2024 01:50:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 01 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 22LTa2McItqXUju8dAODkQZaM9HpMvvIkRaFzTJZ5CNPhscwGZZTesZXTM9JAmU5c0Y6d4Dpe2o= x-amz-replication-status: COMPLETED x-amz-request-id: T6P6X2TBTZE9PDVJ x-amz-server-side-encryption: AES256 x-amz-version-id: s30ZLI7TQVh1gkdC10TPO5p8D8swy4br X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 67 36 4e 35 64 58 6b 79 63 71 64 54 67 41 52 4c 31 64 4a 72 56 31 25 32 42 62 44 67 55 74 48 6b 42 77 44 74 42 50 32 72 65 25 32 46 50 77 41 61 78 51 75 4e 65 73 65 79 6b 51 78 43 67 67 53 35 65 58 7a 43 66 32 61 42 50 55 54 43 41 72 31 6c 68 73 6a 56 4d 46 6b 72 73 70 79 6b 79 4f 48 74 61 42 50 71 75 79 30 54 31 72 37 59 4f 63 53 54 73 25 32 42 43 68 73 38 33 41 43 42 6c 76 6e 79 6f 63 35 36 47 73 46 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0g6N5dXkycqdTgARL1dJrV1%2BbDgUtHkBwDtBP2re%2FPwAaxQuNeseykQxCggS5eXzCf2aBPUTCAr1lhsjVMFkrspykyOHtaBPquy0T1r7YOcSTs%2BChs83ACBlvnyoc56GsFg%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:01 UTC	1204	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 20 56 61 72 69 61 62 6c 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 32 35 20 39 35 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 36 32 31 36 37 35 65 36 62 65 38 33 66 36 37 35 64 33 33 35 36 32 64 32 66 66 37 61 30 66 36 33 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 36 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 20 56 61 72 69 61 62 6c 65 3b 66 6f 6e 74 2d Data Ascii: @font-face{font-display:swap;font-family:Noto Sans Variable;font-style:normal;font-weight:125 950;src:url(images/621675e6be83f675d33562d2ff7a0f63.woff2) format("woff2");unicode-range:u+06??}@font-face{font-display:swap;font-family:Noto Sans Variable;font-
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 32 64 66 66 2c 75 2b 61 36 34 30 2d 61 36 39 66 2c 75 2b 66 65 32 65 2d 66 65 32 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 34 37 37 61 61 64 32 36 64 39 61 35 61 36 34 36 30 39 34 38 33 39 33 31 61 61 30 61 37 61 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 30 65 32 62 65 37 62 66 36 37 65 33 32 37 35 35 66 64 37 33 61 36 30 35 61 32 61 66 64 31 33 62 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f Data Ascii: 2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:600;src:url(images/477aad26d9a5a64609483931aa0a7a05.woff2) format("woff2"),url(images/0e2be7bf67e32755fd73a605a2afd13b.woff) format("woff");unico
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 34 35 64 64 61 33 32 36 61 66 65 65 34 62 31 30 66 62 38 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 36 63 39 62 39 66 34 62 32 38 33 32 32 63 37 34 37 33 36 36 37 65 30 66 63 31 36 39 30 36 37 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 Data Ascii: 45dda326afee4b10fb8.woff) format("woff");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-display:swap;font-family:Noto Sans;font-style:normal;font-weight:400;src:url(images/6c9b9f4b28322c7473667e0fc1690675.woff2) format("woff2"),u
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 69 6d 61 67 65 73 2f 64 61 66 62 37 66 65 65 31 64 62 36 62 37 61 65 39 62 31 31 38 34 32 33 39 62 31 31 61 63 66 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 69 6d 61 67 65 73 2f 64 36 63 62 62 35 63 34 32 61 31 31 34 39 65 33 38 65 31 66 62 37 61 32 33 38 30 33 32 62 63 38 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 Data Ascii: font-style:normal;font-weight:700;src:url(images/dafb7fee1db6b7ae9b1184239b11acf5.woff2) format("woff2"),url(images/d6cbb5c42a1149e38e1fb7a238032bc8.woff) format("woff");unicode-range:u+0370-03ff}@font-face{font-display:swap;font-family:Noto Sans;font-sty
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 30 2c 75 2b 30 30 61 37 2c 75 2b 30 30 61 39 2c 75 2b 30 30 63 30 2d 30 30 63 33 2c 75 2b 30 30 63 38 2d 30 30 63 61 2c 75 2b 30 30 63 63 2d 30 30 63 64 2c 75 2b 30 30 64 32 2d 30 30 64 35 2c 75 2b 30 30 64 39 2d 30 30 64 61 2c 75 2b 30 30 64 64 2c 75 2b 30 30 65 30 2d 30 30 65 33 2c 75 2b 30 30 65 38 2d 30 30 65 61 2c 75 2b 30 30 65 63 2d 30 30 65 64 2c 75 2b 30 30 66 32 2d 30 30 66 35 2c 75 2b 30 30 66 39 2d 30 30 66 61 2c 75 2b 30 30 66 64 2c 75 2b 30 31 30 32 2d 30 31 30 33 2c 75 2b 30 31 31 30 2d 30 31 31 31 2c 75 2b 30 31 32 38 2d 30 31 32 39 2c 75 2b 30 31 36 38 2d 30 31 36 39 2c 75 2b 30 31 61 30 2d 30 31 61 31 2c 75 2b 30 31 61 66 2d 30 31 62 30 2c 75 2b 30 33 30 30 2d 30 33 30 33 2c 75 2b 30 33 30 36 2c 75 2b 30 33 30 39 2c 75 2b 30 33 31 62 2c Data Ascii: 0,u+00a7,u+00a9,u+00c0-00c3,u+00c8-00ca,u+00cc-00cd,u+00d2-00d5,u+00d9-00da,u+00dd,u+00e0-00e3,u+00e8-00ea,u+00ec-00ed,u+00f2-00f5,u+00f9-00fa,u+00fd,u+0102-0103,u+0110-0111,u+0128-0129,u+0168-0169,u+01a0-01a1,u+01af-01b0,u+0300-0303,u+0306,u+0309,u+031b,
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 75 2b 30 30 65 38 2d 30 30 65 61 2c 75 2b 30 30 65 63 2d 30 30 65 64 2c 75 2b 30 30 66 32 2d 30 30 66 35 2c 75 2b 30 30 66 39 2d 30 30 66 61 2c 75 2b 30 30 66 64 2c 75 2b 30 31 30 32 2d 30 31 30 33 2c 75 2b 30 31 31 30 2d 30 31 31 31 2c 75 2b 30 31 32 38 2d 30 31 32 39 2c 75 2b 30 31 36 38 2d 30 31 36 39 2c 75 2b 30 31 61 30 2d 30 31 61 31 2c 75 2b 30 31 61 66 2d 30 31 62 30 2c 75 2b 30 33 30 30 2d 30 33 30 33 2c 75 2b 30 33 30 36 2c 75 2b 30 33 30 39 2c 75 2b 30 33 31 62 2c 75 2b 30 33 32 33 2c 75 2b 31 65 61 30 2d 31 65 66 39 2c 75 2b 32 30 31 30 2d 32 30 31 31 2c 75 2b 32 30 31 33 2d 32 30 31 34 2c 75 2b 32 30 31 38 2d 32 30 31 39 2c 75 2b 32 30 31 63 2d 32 30 31 64 2c 75 2b 32 30 32 30 2d 32 30 32 31 2c 75 2b 32 30 32 36 2c 75 2b 32 30 33 30 2c 75 2b Data Ascii: u+00e8-00ea,u+00ec-00ed,u+00f2-00f5,u+00f9-00fa,u+00fd,u+0102-0103,u+0110-0111,u+0128-0129,u+0168-0169,u+01a0-01a1,u+01af-01b0,u+0300-0303,u+0306,u+0309,u+031b,u+0323,u+1ea0-1ef9,u+2010-2011,u+2013-2014,u+2018-2019,u+201c-201d,u+2020-2021,u+2026,u+2030,u+
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 6c 61 6e 67 7c 3d 76 69 5d 20 2e 5f 35 62 5f 36 6b 77 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 5f 37 6a 58 62 56 51 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 5f 74 33 44 6c 51 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 64 5a 5f 63 46 67 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 66 46 4f 69 4c 51 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 66 54 33 41 50 51 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 66 58 4f 44 4d 67 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 6c 6e 43 50 6f 41 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 6f 68 75 48 72 51 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 72 4e 75 71 52 41 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 74 59 49 30 56 77 2c 5b 6c 61 6e 67 7c 3d 76 69 5d 20 2e 77 70 36 5f 79 67 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4e 6f 74 6f 20 53 61 6e 73 20 56 69 65 74 Data Ascii: lang\|=vi] ._5b_6kw,[lang\|=vi] ._7jXbVQ,[lang\|=vi] ._t3DlQ,[lang\|=vi] .dZ_cFg,[lang\|=vi] .fFOiLQ,[lang\|=vi] .fT3APQ,[lang\|=vi] .fXODMg,[lang\|=vi] .lnCPoA,[lang\|=vi] .ohuHrQ,[lang\|=vi] .rNuqRA,[lang\|=vi] .tYI0Vw,[lang\|=vi] .wp6_yg{font-family:Noto Sans Viet
2024-03-27 20:20:01 UTC	1010	IN	Data Raw: 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 72 65 6d 7d 2e 43 57 41 78 68 51 2c 2e 66 58 4f 44 4d 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 72 65 6d 7d 2e 66 46 4f 69 4c 51 20 62 2c 2e 66 46 4f 69 4c 51 20 73 74 72 6f 6e 67 2c 2e 66 54 33 41 50 51 2c 2e 72 4e 75 71 52 41 20 62 2c 2e 72 4e 75 71 52 41 20 73 74 72 6f 6e 67 2c 2e 74 59 49 30 56 77 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 74 59 49 30 56 77 20 62 2c 2e 74 59 49 30 56 77 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 5f 35 4e 48 58 54 41 2c 2e 5f 35 52 53 71 49 67 20 62 2c 2e 5f 35 52 Data Ascii: em;line-height:2rem}.CWAxhQ,.fXODMg{font-size:1rem;font-weight:600;letter-spacing:.01rem;line-height:1.6rem}.fFOiLQ b,.fFOiLQ strong,.fT3APQ,.rNuqRA b,.rNuqRA strong,.tYI0Vw{font-weight:600}.tYI0Vw b,.tYI0Vw strong{font-weight:700}._5NHXTA,._5RSqIg b,._5R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/b157bc1b425e2d2a.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 1073 Connection: close CF-Ray: 86b21425192487b0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151665 Cache-Control: public, max-age=31556926 ETag: "0d6ee7a905222e37948763e67827f437" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Tue, 26 Mar 2024 02:06:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: a3fCTPZTSkN6sOD7GbdRnRMZEFmd1fRFyuDr3Mb8K95POW0zxo34TOc0a/yIIS9JKAQBu6dgUQc= x-amz-replication-status: COMPLETED x-amz-request-id: JGQQ0SBF7D0NS96S x-amz-server-side-encryption: AES256 x-amz-version-id: OAeYAZ3AX3OQS2eWkrQJ0oE03sJs.sPw X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 58 66 6a 4d 6a 4f 5a 4b 4d 25 32 46 6a 6a 43 43 38 51 25 32 46 69 41 46 73 79 64 6b 38 52 35 34 65 30 56 73 55 64 6c 77 78 6a 43 50 71 44 46 43 74 65 63 71 50 30 70 41 56 6d 77 49 79 72 62 73 64 41 65 59 64 44 45 25 32 46 4a 71 32 74 32 4e 53 56 36 4f 69 68 4f 6b 6e 6f 65 38 38 71 6b 4a 44 58 4e 4d 37 4b 7a 6d 50 78 76 59 32 53 79 62 63 77 77 33 44 6e 77 55 6e 47 33 38 6a 4d 6b 73 72 43 59 54 68 56 65 55 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XfjMjOZKM%2FjjCC8Q%2FiAFsydk8R54e0VsUdlwxjCPqDFCtecqP0pAVmwIyrbsdAeYdDE%2FJq2t2NSV6OihOknoe88qkJDXNM7KzmPxvY2Sybcww3DnwUnG38jMksrCYThVeU4%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:01 UTC	1073	IN	Data Raw: 2e 6c 69 67 68 74 7b 2d 2d 63 54 33 6a 62 41 3a 30 2e 30 37 3b 2d 2d 48 74 43 68 6f 67 3a 30 2e 30 32 35 7d 2e 64 61 72 6b 7b 2d 2d 63 54 33 6a 62 41 3a 30 2e 31 35 3b 2d 2d 48 74 43 68 6f 67 3a 30 2e 31 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 48 72 70 6f 57 41 7b 30 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 32 35 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 48 74 43 68 6f 67 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 7d 2e 6e 37 76 53 66 77 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 70 55 56 37 68 41 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 63 54 33 6a 62 41 29 7d 2e 53 5f 5a 6b 78 51 7b 61 Data Ascii: .light{--cT3jbA:0.07;--HtChog:0.025}.dark{--cT3jbA:0.15;--HtChog:0.10}@keyframes HrpoWA{0%{opacity:var(--cT3jbA)}25%{opacity:var(--HtChog)}50%{opacity:var(--cT3jbA)}to{opacity:var(--cT3jbA)}}.n7vSfw{background:var(--pUV7hA);opacity:var(--cT3jbA)}.S_ZkxQ{a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	1212	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	725	IN	HTTP/1.1 302 Found Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48%2FY7fb8KwH7RPgc81%2FjC8iaFhZu0xS4OFcywOcnjYU7d8A%2FzbCna%2FwfAXhZw1CWlwzf0LN69QtCWjhUASVgA5kJ8FG%2FcbK5BZGxccMZQKkOCqGy5XlZQoPAZdbwSRc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b214251a063b68-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/b3ad105788169a6a.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 8700 Connection: close CF-Ray: 86b214252a1305a0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 753126 Cache-Control: public, max-age=31556926 ETag: "773e2012df644ba3358ff592b1188a99" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Tue, 19 Mar 2024 03:04:13 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lrRWwlLnDSF8OIY23vQddUMJ4M6AJ74V5pVs7Y2uu/Hnm7MYQx4y/NOlCZjfVk9VQvq86OTUuNA= x-amz-replication-status: COMPLETED x-amz-request-id: ND0V6JNYF42AGTKF x-amz-server-side-encryption: AES256 x-amz-version-id: zmojrsCwj7ozEvSKnyaA6bP0wUPxp02d X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 42 47 25 32 46 39 63 25 32 46 4d 43 67 56 63 36 79 49 67 65 78 66 4f 6c 39 78 75 69 6b 31 49 55 66 44 76 30 53 5a 72 50 56 38 7a 25 32 46 45 25 32 42 64 32 66 31 72 72 6a 58 6c 68 6f 72 42 49 65 69 50 6a 6b 76 48 6c 52 38 52 6a 41 33 44 48 47 70 7a 71 52 67 34 38 70 51 51 33 64 6f 5a 4a 70 77 4e 65 30 56 46 54 59 33 6e 6a 53 25 32 46 43 68 41 4e 77 4c 42 42 61 77 78 74 69 4d 4f 71 6d 70 71 78 70 67 6f 72 59 73 6b 32 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BG%2F9c%2FMCgVc6yIgexfOl9xuik1IUfDv0SZrPV8z%2FE%2Bd2f1rrjXlhorBIeiPjkvHlR8RjA3DHGpzqRg48pQQ3doZJpwNe0VFTY3njS%2FChANwLBBawxtiMOqmpqxpgorYsk20%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:01 UTC	1199	IN	Data Raw: 2e 5f 70 46 73 66 41 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 31 70 78 7d 2e 64 6b 57 79 70 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 64 6b 57 79 70 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: ._pFsfA{clip:rect(1px,1px,1px,1px);border:0;font-size:0;height:1px;left:0;margin:-1px;overflow:hidden;padding:0;position:absolute;top:0;white-space:nowrap;width:1px}.dkWypw{align-items:center;box-sizing:border-box;display:inline-flex}.dkWypw:before{conten
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 44 6d 4c 47 4b 41 29 2a 2d 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 76 33 2d 76 75 77 29 2a 2d 31 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 55 4b 73 4c 77 67 7b 2d 2d 70 41 39 6b 30 51 3a 76 61 72 28 2d 2d 64 38 31 74 75 41 29 3b 2d 2d 5f 65 76 50 53 41 3a 76 61 72 28 2d 2d 70 41 39 6b 30 51 29 3b 2d 2d 4a 78 71 42 4b 51 3a 76 61 72 28 2d 2d 5f 66 32 52 5a 41 29 3b 2d 2d 75 4e 35 4f 6c 77 3a 76 61 72 28 2d 2d 4a 78 71 42 4b 51 29 3b 2d 2d 63 65 78 6e 58 41 3a 76 61 72 28 2d 2d 2d 58 4a 64 50 67 29 3b 2d 2d 63 6d 4a 43 47 77 3a 76 61 72 28 2d 2d 63 65 78 6e 58 41 29 3b 2d 2d 53 79 6f 4b 38 41 3a 76 61 72 28 2d 2d 6d 34 70 32 46 67 29 3b 2d 2d 6e 75 6b 79 64 77 3a 76 61 72 28 2d 2d 53 79 6f 4b 38 41 29 3b 2d 2d 41 Data Ascii: DmLGKA)-1) calc(var(--v3-vuw)-1)}@media (min-width:600px){.UKsLwg{--pA9k0Q:var(--d81tuA);--_evPSA:var(--pA9k0Q);--JxqBKQ:var(--_f2RZA);--uN5Olw:var(--JxqBKQ);--cexnXA:var(---XJdPg);--cmJCGw:var(--cexnXA);--SyoK8A:var(--m4p2Fg);--nukydw:var(--SyoK8A);--A
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 76 61 72 28 2d 2d 56 52 66 35 55 51 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 4f 70 77 31 55 51 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 50 74 47 34 49 77 29 2a 2d 31 29 7d 2e 4a 79 42 5f 76 77 3e 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 4a 79 42 5f 76 77 7b 2d 2d 62 6e 77 66 63 51 3a 76 61 72 28 2d 2d 4f 32 5a 41 4a 41 29 3b 2d 2d 4f 70 77 31 55 51 3a 76 61 72 28 2d 2d 62 6e 77 66 63 51 29 3b 2d 2d 48 47 48 6a 33 51 3a 76 61 72 28 2d 2d 6c 54 41 35 56 41 29 3b 2d 2d 56 52 66 35 55 51 3a 76 61 72 28 2d 2d 48 47 48 6a 33 51 29 3b Data Ascii: n-items:var(--VRf5UQ);justify-content:var(--Opw1UQ);margin-left:calc(var(--PtG4Iw)*-1)}.JyB_vw>.yYw_FA{padding-left:var(--PtG4Iw)}@media (min-width:600px){.JyB_vw{--bnwfcQ:var(--O2ZAJA);--Opw1UQ:var(--bnwfcQ);--HGHj3Q:var(--lTA5VA);--VRf5UQ:var(--HGHj3Q);
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2d 74 6f 70 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 39 70 78 29 7b 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 3e 2e 79 59 77 5f 46 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 4f 70 77 31 55 51 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4a 79 42 5f 76 77 2e 68 54 6e 51 31 67 3e 2e 79 59 77 5f 46 41 2b 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 7d 2e 4a 30 42 4d 6c 41 7b Data Ascii: -top:var(--PtG4Iw)}}@media (max-width:1199px){.JyB_vw.hTnQ1g{flex-direction:column;margin-left:0}.JyB_vw.hTnQ1g>.yYw_FA{display:flex;justify-content:var(--Opw1UQ);padding-left:0;width:100%}.JyB_vw.hTnQ1g>.yYw_FA+.yYw_FA{padding-top:var(--PtG4Iw)}}.J0BMlA{
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 5a 6a 4a 75 67 29 3b 2d 2d 59 79 51 49 43 67 3a 76 61 72 28 2d 2d 42 5a 4b 4b 45 41 29 3b 2d 2d 39 71 46 6f 70 41 3a 76 61 72 28 2d 2d 75 4b 37 4b 50 67 29 3b 2d 2d 59 51 6f 71 2d 41 3a 76 61 72 28 2d 2d 39 71 46 6f 70 41 29 3b 2d 2d 34 31 32 65 6d 51 3a 76 61 72 28 2d 2d 44 75 31 48 4a 77 29 3b 2d 2d 36 76 76 57 68 77 3a 76 61 72 28 2d 2d 34 31 32 65 6d 51 29 3b 2d 2d 45 35 39 4f 49 51 3a 76 61 72 28 2d 2d 63 31 32 59 6f 67 29 3b 2d 2d 58 4a 76 49 2d 67 3a 76 61 72 28 2d 2d 45 35 39 4f 49 51 29 3b 2d 2d 39 78 51 58 5a 67 3a 76 61 72 28 2d 2d 43 58 32 75 73 67 29 3b 2d 2d 65 59 47 37 48 51 3a 76 61 72 28 2d 2d 39 78 51 58 5a 67 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 45 79 37 53 37 77 7b 2d 2d 4a 33 47 78 Data Ascii: ZjJug);--YyQICg:var(--BZKKEA);--9qFopA:var(--uK7KPg);--YQoq-A:var(--9qFopA);--412emQ:var(--Du1HJw);--6vvWhw:var(--412emQ);--E59OIQ:var(--c12Yog);--XJvI-g:var(--E59OIQ);--9xQXZg:var(--CX2usg);--eYG7HQ:var(--9xQXZg)}}@media (min-width:1200px){.Ey7S7w{--J3Gx
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 49 4f 79 47 51 3a 76 61 72 28 2d 2d 70 57 6d 7a 55 67 29 3b 2d 2d 70 78 48 44 4b 67 3a 76 61 72 28 2d 2d 5a 6a 78 56 36 51 29 3b 2d 2d 6f 31 57 30 7a 51 3a 76 61 72 28 2d 2d 70 78 48 44 4b 67 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 59 54 52 70 44 51 7b 2d 2d 4b 45 42 41 72 51 3a 76 61 72 28 2d 2d 64 70 7a 56 4b 51 29 3b 2d 2d 4b 49 36 4d 79 77 3a 76 61 72 28 2d 2d 4b 45 42 41 72 51 29 3b 2d 2d 68 4b 6d 54 7a 67 3a 76 61 72 28 2d 2d 70 57 6d 7a 55 67 29 3b 2d 2d 78 49 4f 79 47 51 3a 76 61 72 28 2d 2d 68 4b 6d 54 7a 67 29 3b 2d 2d 70 41 32 66 78 51 3a 76 61 72 28 2d 2d 70 78 48 44 4b 67 29 3b 2d 2d 6f 31 57 30 7a 51 3a 76 61 72 28 2d 2d 70 41 32 66 78 51 29 7d 7d 2e 59 54 52 70 44 51 2e 7a 4e 6a 6a 33 77 7b Data Ascii: IOyGQ:var(--pWmzUg);--pxHDKg:var(--ZjxV6Q);--o1W0zQ:var(--pxHDKg)}}@media (min-width:1200px){.YTRpDQ{--KEBArQ:var(--dpzVKQ);--KI6Myw:var(--KEBArQ);--hKmTzg:var(--pWmzUg);--xIOyGQ:var(--hKmTzg);--pA2fxQ:var(--pxHDKg);--o1W0zQ:var(--pA2fxQ)}}.YTRpDQ.zNjj3w{
2024-03-27 20:20:01 UTC	656	IN	Data Raw: 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 78 36 58 43 43 67 7b 2d 2d 55 73 55 63 4b 77 3a 76 61 72 28 2d 2d 74 35 61 51 31 41 29 3b 2d 2d 59 67 71 45 71 41 3a 76 61 72 28 2d 2d 55 73 55 63 4b 77 29 3b 2d 2d 44 66 48 37 53 41 3a 76 61 72 28 2d 2d 52 46 32 50 4f 41 29 3b 2d 2d 4f 78 65 4f 77 41 3a 76 61 72 28 2d 2d 44 66 48 37 53 41 29 7d 7d 2e 6d 79 41 36 51 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 2e 6d 79 41 36 51 51 2e 5f 48 76 56 51 41 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 6d 79 41 36 51 51 2e 5f 37 57 56 58 68 41 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 Data Ascii: }}@media (min-width:1200px){.x6XCCg{--UsUcKw:var(--t5aQ1A);--YgqEqA:var(--UsUcKw);--DfH7SA:var(--RF2POA);--OxeOwA:var(--DfH7SA)}}.myA6QQ{display:block;flex-shrink:0}.myA6QQ._HvVQA{display:inline-block;height:auto;min-height:1px}.myA6QQ._7WVXhA{min-width:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49752	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/e211aff63b38189e.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1181	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 5881 Connection: close CF-Ray: 86b214252ea73ad5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151665 Cache-Control: public, max-age=31556926 ETag: "892207f5ef789aed212e325e5cd54633" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Tue, 26 Mar 2024 02:07:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: oOeBv8lkX7lrmTAd8Uza8wPQlU0Uk3AU0oixf/eOf0pSCEMBlsHGaz5QM0YQ4BKHoVTXwIRzxU4= x-amz-replication-status: PENDING x-amz-request-id: JGQHHVQ2XV99ZWSW x-amz-server-side-encryption: AES256 x-amz-version-id: eOMB8nvndIan9FpIvi4F4rt0.C8dSpG6 X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 4a 6d 38 42 63 31 66 55 25 32 46 65 53 33 25 32 42 59 72 50 25 32 42 4f 6b 35 65 37 70 6a 77 4d 37 4a 6f 55 51 38 48 67 49 53 56 30 47 6d 59 32 63 37 6c 57 6f 52 6c 4b 79 48 4d 25 32 46 4d 48 6c 34 48 37 35 74 6f 25 32 42 68 46 77 34 54 70 6d 6a 30 4a 42 6f 55 51 32 41 61 45 36 77 31 47 77 6b 6a 73 54 73 47 78 58 37 75 71 32 53 51 56 72 75 64 69 4a 62 43 68 64 56 67 68 32 43 70 6d 6f 33 71 34 5a 34 72 4e 34 30 62 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJm8Bc1fU%2FeS3%2BYrP%2BOk5e7pjwM7JoUQ8HgISV0GmY2c7lWoRlKyHM%2FMHl4H75to%2BhFw4Tpmj0JBoUQ2AaE6w1GwkjsTsGxX7uq2SQVrudiJbChdVgh2Cpmo3q4Z4rN40b4%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:01 UTC	1203	IN	Data Raw: 2e 5f 39 4d 62 5f 5f 41 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 54 73 71 54 4d 67 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 72 6d 61 6c 7d 2e 56 70 49 36 70 41 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 5f 4e 4c 75 34 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 2e 57 6b 48 73 58 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 4b 57 48 52 6d 67 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 2e 5f 36 57 75 5f 77 51 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a Data Ascii: ._9Mb__A{border:0;box-sizing:border-box;list-style:none;margin:0;padding:0}.TsqTMg{justify-content:normal}.VpI6pA{justify-content:center}._NLu4Q{justify-content:start}.WkHsXQ{justify-content:flex-start}.KWHRmg{justify-content:end}._6Wu_wQ{justify-content:
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 5f 7a 4b 42 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 51 45 72 68 6c 67 29 7d 2e 77 42 6f 35 52 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 79 6f 43 59 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 47 5a 77 51 46 77 29 7d 2e 75 34 61 54 52 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 39 46 4a 52 35 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6a 33 6c 66 7a 67 29 7d 2e 49 31 68 33 30 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 71 6b 57 5f 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 50 33 62 65 6d 67 29 7d 2e 68 65 78 55 6b 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 44 50 36 71 71 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d Data Ascii: _zKBQ);color:var(--QErhlg)}.wBo5Rg{background-color:var(--pyoCYg);color:var(--GZwQFw)}.u4aTRw{background-color:var(--9FJR5Q);color:var(--j3lfzg)}.I1h30A{background-color:var(--cqkW_A);color:var(--P3bemg)}.hexUkw{background-color:var(--DP6qqQ);color:var(--
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 43 67 4f 6d 71 67 29 7d 2e 4b 72 41 30 69 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 7d 2e 52 55 38 38 4b 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 2e 78 5a 34 37 45 41 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 37 68 6e 73 49 67 29 7d 2e 55 61 48 4d 30 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 43 67 4f 6d 71 67 29 7d 2e 63 47 4f 77 38 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 7d 2e 5f 36 34 30 4c 32 67 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 7d 2e 7a Data Ascii: x solid var(--CgOmqg)}.KrA0iw{border-bottom:1px solid var(--OHlWbw)}.RU88Kw{border-bottom:none}.xZ47EA{border-left:1px solid var(--7hnsIg)}.UaHM0g{border-left:1px solid var(--CgOmqg)}.cGOw8g{border-left:1px solid var(--OHlWbw)}._640L2g{border-left:none}.z
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 28 2d 2d 72 54 78 72 55 41 29 3b 2d 2d 6b 78 50 59 7a 41 3a 76 61 72 28 2d 2d 68 72 44 46 76 77 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 4a 32 44 75 55 41 29 20 76 61 72 28 2d 2d 6b 78 50 59 7a 41 29 20 76 61 72 28 2d 2d 34 66 4b 6c 64 77 29 20 76 61 72 28 2d 2d 61 5f 42 6e 45 51 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 69 42 72 7a 37 51 7b 2d 2d 48 63 62 42 47 51 3a 76 61 72 28 2d 2d 49 44 52 4d 72 41 29 3b 2d 2d 44 6c 6d 66 4a 51 3a 76 61 72 28 2d 2d 48 63 62 42 47 51 29 3b 2d 2d 64 54 37 49 7a 67 3a 76 61 72 28 2d 2d 57 31 55 4e 49 67 29 3b 2d 2d 72 54 78 72 55 41 3a 76 61 72 28 2d 2d 64 54 37 49 7a 67 29 3b 2d 2d 6c 61 5a 57 6f 41 3a 76 61 72 28 2d 2d 57 4d 31 54 70 51 29 3b 2d 2d 48 64 7a 77 57 67 3a Data Ascii: (--rTxrUA);--kxPYzA:var(--hrDFvw);padding:var(--J2DuUA) var(--kxPYzA) var(--4fKldw) var(--a_BnEQ)}@media (min-width:600px){.iBrz7Q{--HcbBGQ:var(--IDRMrA);--DlmfJQ:var(--HcbBGQ);--dT7Izg:var(--W1UNIg);--rTxrUA:var(--dT7Izg);--laZWoA:var(--WM1TpQ);--HdzwWg:
2024-03-27 20:20:01 UTC	571	IN	Data Raw: 30 7d 2e 43 32 53 76 4c 51 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 2e 5f 38 61 73 6c 56 41 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 38 61 73 6c 56 41 3e 69 6d 67 2c 2e 5f 38 61 73 6c 56 41 3e 73 76 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6e 6b 36 71 4f 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 4a 37 63 59 47 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 68 65 69 67 68 74 3a 2d 77 65 62 6b 69 74 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 Data Ascii: 0}.C2SvLQ{min-height:44px}._8aslVA{display:block}._8aslVA>img,._8aslVA>svg{display:block;height:100%;width:100%}.nk6qOQ{align-items:stretch;display:flex}.J7cYGg{align-items:center;display:flex;flex:0 0 auto;height:-webkit-fit-content;height:-moz-fit-conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	973	OUT	GET /chunk-batch/8b0efce4dcfa662a.ltr.css+edb83b7fb0f55858.ltr.css+03c124a95e7ed5c8.ltr.css+00787dffd4c1a100.ltr.css+b718cbbc9087429d.ltr.css+d2208eebbe189dbc.ltr.css+4d059dc08c82efef.ltr.css HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1141	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 27928 Connection: close CF-Ray: 86b21425bc45209f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63675 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Wed, 27 Mar 2024 02:26:29 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: UWk1Qk6OKOVxSJk7PBGZHOhme+sH3tK1FEM4OLZ0cqJ5OKt83z2oKqbSDfoJW23LY9nlZ953o8s= x-amz-replication-status: COMPLETED x-amz-request-id: VNA28F4FK6TVW48P x-amz-server-side-encryption: AES256 x-amz-version-id: hCHfTYd8ls6Kj0ORPc927EequAqu9yiV X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	370	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 56 38 4d 35 67 64 6b 45 35 59 32 25 32 46 30 4f 6b 48 4d 41 31 71 6c 62 58 33 43 38 48 38 43 59 48 4f 6c 57 62 58 71 47 43 61 54 4e 76 50 61 43 75 4a 6c 72 6a 57 51 64 6a 33 38 39 25 32 46 46 79 53 39 65 32 53 4a 4e 63 58 52 32 79 30 78 25 32 42 55 4f 30 72 55 25 32 42 61 58 63 78 55 73 30 54 77 4b 36 57 25 32 46 32 50 4a 71 73 32 32 48 6a 59 74 61 71 77 6a 78 64 4f 51 61 70 31 38 6e 32 59 69 4b 57 49 6f 38 72 4a 6c 45 48 66 25 32 42 56 25 32 46 36 65 5a 36 4c 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iV8M5gdkE5Y2%2F0OkHMA1qlbX3C8H8CYHOlWbXqGCaTNvPaCuJlrjWQdj389%2FFyS9e2SJNcXR2y0x%2BUO0rU%2BaXcxUs0TwK6W%2F2PJqs22HjYtaqwjxdOQap18n2YiKWIo8rJlEHf%2BV%2F6eZ6LY%3D"}],"group":"cf-n
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 38 62 30 65 66 63 65 34 64 63 66 61 36 36 32 61 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 6c 69 67 68 74 7b 2d 2d 65 30 52 46 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 7d 2e 64 61 72 6b 7b 2d 2d 65 30 52 46 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 7d 2e 7a 6b 39 69 4b 51 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 41 45 75 72 74 77 2c 2e 57 67 55 66 71 67 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 41 45 75 72 74 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 Data Ascii: /* __FILE_CONTENT_FOR__:8b0efce4dcfa662a.ltr.css */.light{--e0RFhg:hsla(0,0%,100%,.5)}.dark{--e0RFhg:hsla(0,0%,100%,.4)}.zk9iKQ{height:100%;left:0;pointer-events:none;position:fixed;top:0;width:100%}.AEurtw,.WgUfqg{pointer-events:auto}.AEurtw{position:ab
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 7b 74 6f 70 3a 31 30 30 25 7d 2e 4f 6f 58 73 4f 51 7b 6c 65 66 74 3a 2d 31 30 30 25 7d 2e 64 37 6d 6c 44 77 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 62 38 33 77 35 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 6c 75 42 6f 6f 51 2c 31 32 70 78 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 62 38 33 77 35 41 2c 2e 6d 4e 30 39 51 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6d 4e 30 39 51 77 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 6d Data Ascii: {top:100%}.OoXsOQ{left:-100%}.d7mlDw{left:100%}.b83w5A{background-color:inherit;border-radius:var(--luBooQ,12px);display:flex;outline:none;transition:opacity .15s ease-in-out}.b83w5A,.mN09Qw{position:absolute}.mN09Qw{overflow:hidden;pointer-events:none}.m
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 74 73 3a 6e 6f 6e 65 7d 2e 4a 61 75 5f 4e 77 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 5f 34 64 77 33 66 51 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 6c 69 67 68 74 7b 2d 2d 53 6a 4b 43 39 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 34 29 7d 2e 64 61 72 6b 7b 2d 2d 53 6a 4b 43 39 51 3a 23 33 62 33 63 33 64 7d 2e 6f 52 45 67 6d 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 77 70 66 4e 78 77 7b 66 69 6c 6c 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 7d 2e 5f 33 61 5f 30 4b 41 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 7d 2e 6c 32 56 4b 43 67 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 53 6a 4b 43 39 51 29 7d 2e 48 Data Ascii: ts:none}.Jau_Nw{opacity:1;pointer-events:auto}._4dw3fQ{opacity:0}.light{--SjKC9Q:rgba(64,87,109,.04)}.dark{--SjKC9Q:#3b3c3d}.oREgmQ{display:block;margin-bottom:-1px}.wpfNxw{fill:rgba(64,87,109,.07)}._3a_0KA{fill:var(--TlUudQ)}.l2VKCg{fill:var(--SjKC9Q)}.H
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 73 65 74 2d 74 6f 70 29 20 2b 20 76 61 72 28 2d 2d 76 69 65 77 70 6f 72 74 2d 64 69 66 66 65 72 65 6e 63 65 2d 68 65 69 67 68 74 2c 20 30 70 78 29 29 7d 2e 42 33 30 48 4b 67 2c 2e 59 47 78 45 5a 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 42 33 30 48 4b 67 7b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 29 2a 2d 31 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 68 65 65 74 2d 73 6e 61 70 2d 68 65 69 67 68 74 2c 20 31 30 30 25 29 20 2b 20 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 29 29 3b 68 65 69 67 68 Data Ascii: set-top) + var(--viewport-difference-height, 0px))}.B30HKg,.YGxEZw{position:absolute}.B30HKg{bottom:calc(var(--safe-area-inset-bottom)*-1);display:flex;flex-direction:column;height:calc(var(--sheet-snap-height, 100%) + var(--safe-area-inset-bottom));heigh
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 30 70 78 7d 2e 73 39 78 36 33 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 68 65 69 67 68 74 3a 36 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 63 36 57 37 6c 67 2c 2e 73 39 78 36 33 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 34 43 6c 47 43 77 29 7d 2e 63 36 57 37 6c 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 6c 75 42 6f 6f 51 2c 31 32 70 78 29 20 76 61 72 28 2d 2d 6c 75 42 6f 6f 51 2c 31 32 70 78 29 20 30 20 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 Data Ascii: 0px}.s9x63g{border-radius:9999px;height:6px;width:32px}.c6W7lg,.s9x63g{background:var(--TlUudQ);box-shadow:var(--4ClGCw)}.c6W7lg{border-radius:var(--luBooQ,12px) var(--luBooQ,12px) 0 0;flex-basis:0;flex-grow:1;flex-shrink:0;overflow-y:auto;overscroll-beha
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 4a 41 37 70 66 41 2e 7a 57 37 45 6b 51 2c 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 7a 57 37 45 6b 51 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 5a 61 6b 48 67 41 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 4a 41 37 70 66 41 2e 63 65 59 37 7a 51 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 4a 41 37 70 66 41 2e 7a 57 37 45 6b 51 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 7a 57 37 45 6b 51 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 5a 61 6b 48 67 41 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 4a 41 37 70 66 41 2e 67 79 59 6c 43 67 2c 2e 67 79 59 6c 43 67 20 Data Ascii: ._0YG5ng:focus-within .JA7pfA.zW7EkQ,.CAFSwg._0YG5ng:focus-within .zW7EkQ .JA7pfA:not(.ZakHgA):not(.gyYlCg),.CAFSwg:hover .JA7pfA.ceY7zQ,.CAFSwg:hover .JA7pfA.zW7EkQ,.CAFSwg:hover .zW7EkQ .JA7pfA:not(.ZakHgA):not(.gyYlCg){opacity:1}.JA7pfA.gyYlCg,.gyYlCg
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 70 66 41 2e 5a 61 6b 48 67 41 2e 5f 34 35 72 63 55 51 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 56 54 68 48 44 41 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 5a 61 6b 48 67 41 2e 56 54 68 48 44 41 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 7a 57 37 45 6b 51 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 5a 61 6b 48 67 41 2e 5f 34 35 72 63 55 51 20 2e 4a 41 37 70 66 41 3a 6e 6f 74 28 2e 7a 57 37 45 6b 51 29 3a 6e 6f 74 28 2e 67 79 59 6c 43 67 29 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 5f 34 35 72 63 55 51 20 2e 4a 41 37 70 66 41 2e 5a 61 6b 48 67 41 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c Data Ascii: pfA.ZakHgA._45rcUQ,.CAFSwg:hover .VThHDA .JA7pfA.ZakHgA,.CAFSwg:hover .ZakHgA.VThHDA .JA7pfA:not(.zW7EkQ):not(.gyYlCg),.CAFSwg:hover .ZakHgA._45rcUQ .JA7pfA:not(.zW7EkQ):not(.gyYlCg),.CAFSwg:hover ._45rcUQ .JA7pfA.ZakHgA{opacity:1;transform:translate3d(0,
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 4d 53 51 74 68 41 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 4d 53 51 74 68 41 2c 2e 64 7a 35 47 73 77 7b 68 65 69 67 68 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 30 7d 2e 43 41 46 53 77 67 2e 5f 30 59 47 35 6e 67 3a 66 6f 63 75 73 2d 77 69 74 68 69 6e 20 2e 64 7a 35 47 73 77 2c 2e 43 41 46 53 77 67 3a 68 6f 76 65 72 20 2e 64 7a 35 47 73 77 2c 2e 4d 53 51 74 68 41 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 47 43 4f 6f 67 51 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 Data Ascii: .CAFSwg._0YG5ng:focus-within .MSQthA,.CAFSwg:hover .MSQthA,.dz5Gsw{height:0;opacity:0;overflow:hidden;width:0}.CAFSwg._0YG5ng:focus-within .dz5Gsw,.CAFSwg:hover .dz5Gsw,.MSQthA{height:auto;opacity:1;overflow:visible;width:auto}.GCOogQ{display:flex;flex-di
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2d 2d 43 4f 58 67 73 67 29 3b 2d 2d 6b 30 48 4e 39 41 3a 76 61 72 28 2d 2d 45 75 44 4c 59 41 29 7d 2e 64 61 72 6b 7b 2d 2d 61 56 4b 49 4d 51 3a 76 61 72 28 2d 2d 43 4f 58 67 73 67 29 3b 2d 2d 72 57 4a 55 37 67 3a 76 61 72 28 2d 2d 45 75 44 4c 59 41 29 3b 2d 2d 4b 5f 36 77 56 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 6b 30 48 4e 39 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 7d 2e 5a 58 4f 58 38 77 20 2e 5f 36 6d 62 6e 48 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 56 4b 49 4d 51 29 7d 2e 73 61 6a 31 6c 41 3a 68 6f 76 65 72 20 2e 5a 58 4f 58 38 77 20 2e 5f 36 6d 62 6e 48 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 57 4a 55 37 67 29 7d 2e 4f 52 6a Data Ascii: --COXgsg);--k0HN9A:var(--EuDLYA)}.dark{--aVKIMQ:var(--COXgsg);--rWJU7g:var(--EuDLYA);--K_6wVA:hsla(0,0%,100%,.4);--k0HN9A:hsla(0,0%,100%,.5)}.ZXOX8w ._6mbnHA{background-color:var(--aVKIMQ)}.saj1lA:hover .ZXOX8w ._6mbnHA{background-color:var(--rWJU7g)}.ORj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	1367	OUT	GET /chunk-batch/c927fafc430af699.js+43c2b12a71836a31.js+55d58a0dd0244d82.js+ce3ed327872430ea.js+b7ce392740e42522.js+40fd2b7cf5de646d.js+bc7fa427eba649c0.js+a17e921acc56f1b5.js+cd665fd5d353300f.js+b96aa482cbb3c1e5.js+7ad4fc904aa15e71.vendor.js+8a07c72546b9d56d.js+1540b5eb47c8a553.js+9dd80e8b66c34afe.js+cab16ef33fefb3ac.strings.js+4162489deec53281.js+3c6c516f0ce5f044.js+5ceb8e766e8fb32d.js+d2ee4f89ec442cc8.js+8d89a659626a2d7c.vendor.js+5f6b8f4ae6e318db.vendor.js+242d7abc99de7308.vendor.js+181145ef3fe5aeb3.vendor.js+bb7250827f4c803c.js+96798f4e59647945.js+5d34ae310ea4ada8.js+090dd9ca9f54954c.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1149	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/javascript Content-Length: 512994 Connection: close CF-Ray: 86b214251efe1729-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63675 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Wed, 27 Mar 2024 02:26:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: uU/34BHh1GhBizmhhCJTzmgu2vOAQgQk+Sr4Syd0Hw82OrlIM8mUeoal0rHkP1xy/hb9yhDsAdY= x-amz-replication-status: COMPLETED x-amz-request-id: T4HF6EJ3RJTFDTW0 x-amz-server-side-encryption: AES256 x-amz-version-id: rTRp4EFDCw2M2R9M1Ef5L_Ms3Kn2ia5c X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	366	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 52 31 58 73 58 32 71 72 69 49 4e 4c 64 31 63 48 6a 74 4b 6f 71 4e 64 4c 6d 7a 56 61 25 32 46 63 34 65 54 49 67 32 6b 36 48 49 35 4a 5a 70 74 34 71 6c 4c 56 55 67 32 50 46 25 32 42 5a 65 69 38 77 36 4e 67 47 58 25 32 42 48 66 6b 50 6c 48 6e 51 62 79 63 4c 57 63 59 69 25 32 46 4b 70 63 78 35 68 65 6f 6d 66 62 57 6d 66 43 71 43 30 4e 32 7a 63 61 73 51 45 7a 7a 5a 45 59 66 5a 76 56 72 71 41 70 4d 69 55 77 38 67 6e 25 32 46 70 7a 73 34 4d 53 42 43 48 36 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oR1XsX2qriINLd1cHjtKoqNdLmzVa%2Fc4eTIg2k6HI5JZpt4qlLVUg2PF%2BZei8w6NgGX%2BHfkPlHnQbycLWcYi%2FKpcx5heomfbWmfCqC0N2zcasQEzzZEYfZvVrqApMiUw8gn%2Fpzs4MSBCH6o%3D"}],"group":"cf-nel",
2024-03-27 20:20:01 UTC	1223	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 63 39 32 37 66 61 66 63 34 33 30 61 66 36 39 39 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 38 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 36 30 30 35 34 33 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:c927fafc430af699.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9188],{/***/ 600543:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 65 6c 6f 61 64 29 3b 69 41 28 61 2c 22 6d 75 74 65 64 22 2c 62 2e 6d 75 74 65 64 29 3b 69 41 28 61 2c 22 63 6f 6e 74 72 6f 6c 73 22 2c 62 2e 63 6f 6e 74 72 6f 6c 73 29 3b 69 41 28 61 2c 22 70 6c 61 79 62 61 63 6b 52 61 74 65 22 2c 62 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 29 3b 69 41 28 61 2c 22 70 6c 61 79 73 49 6e 6c 69 6e 65 22 2c 62 2e 70 6c 61 79 73 49 6e 6c 69 6e 65 29 3b 69 41 28 61 2c 22 64 69 73 61 62 6c 65 50 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 22 2c 62 2e 64 69 73 61 62 6c 65 50 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 29 3b 69 41 28 61 2c 22 6f 6e 70 6c 61 79 69 6e 67 22 2c 62 2e 6f 6e 50 6c 61 79 69 6e 67 29 3b 69 41 28 61 2c 22 6f 6e 70 6c 61 79 22 2c 62 2e 6f 6e 50 6c 61 79 29 3b 69 41 28 61 2c 22 6f 6e 70 61 75 73 65 22 2c 62 Data Ascii: eload);iA(a,"muted",b.muted);iA(a,"controls",b.controls);iA(a,"playbackRate",b.playbackRate);iA(a,"playsInline",b.playsInline);iA(a,"disablePictureInPicture",b.disablePictureInPicture);iA(a,"onplaying",b.onPlaying);iA(a,"onplay",b.onPlay);iA(a,"onpause",b
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 5f 63 2e 6f 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 74 43 61 3a 61 3b 63 6f 6e 73 74 20 62 3d 67 41 28 28 63 2c 64 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 76 43 61 28 6e 75 6c 6c 29 3b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 29 3b 63 6f 6e 73 74 20 67 3d 76 6f 69 64 20 30 3d 3d 3d 63 2e 6d 75 74 65 64 3f 21 31 3a 63 2e 6d 75 74 65 64 2c 68 3d 76 6f 69 64 20 30 3d 3d 3d 63 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 3f 31 3a 63 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 2c 6b 3d 63 2e 61 72 69 61 4c 61 62 65 6c 3b 63 3d 63 2e 61 72 69 61 48 69 64 64 65 6e 3b 66 3d 28 64 65 6c 65 74 65 20 66 2e 6d 75 74 65 64 2c 64 65 6c 65 74 65 20 66 2e 70 6c 61 79 62 61 63 6b 52 61 74 65 2c 64 65 6c 65 74 65 20 Data Ascii: _c.oA=function(a){a=void 0===a?tCa:a;const b=gA((c,d)=>{const e=vCa(null);var f=Object.assign({},c);const g=void 0===c.muted?!1:c.muted,h=void 0===c.playbackRate?1:c.playbackRate,k=c.ariaLabel;c=c.ariaHidden;f=(delete f.muted,delete f.playbackRate,delete
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 73 69 7a 65 3d 36 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 3d 41 72 72 61 79 2e 66 72 6f 6d 28 7b 6c 65 6e 67 74 68 3a 74 68 69 73 2e 73 69 7a 65 7d 2c 28 29 3d 3e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 76 69 64 65 6f 22 29 29 3b 74 68 69 73 2e 55 51 3d 5b 5d 7d 67 65 74 20 58 58 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 55 51 2e 6c 65 6e 67 74 68 3d 3d 3d 74 68 69 73 2e 73 69 7a 65 7d 72 65 74 75 72 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 74 68 69 73 2e 55 51 2e 66 69 6e 64 49 6e 64 65 78 28 63 3d 3e 7b 5b 2c 63 5d 3d 63 3b 72 65 74 75 72 6e 20 63 3d 3d 3d 61 7d 29 3b 5f 5f 63 2e 6d 61 28 2d 31 3c 62 29 3b 74 68 69 73 2e 55 51 2e 73 70 6c 69 63 65 28 62 2c 31 29 7d 7d 3b 0a 70 43 61 3d 63 6c 61 73 73 20 65 78 74 65 Data Ascii: size=6;this.elements=Array.from({length:this.size},()=>document.createElement("video"));this.UQ=[]}get XXa(){return this.UQ.length===this.size}return(a){const b=this.UQ.findIndex(c=>{[,c]=c;return c===a});__c.ma(-1<b);this.UQ.splice(b,1)}};pCa=class exte
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 6f 64 65 2c 62 29 3b 72 65 74 75 72 6e 20 68 41 28 22 64 69 76 22 2c 7b 72 65 66 3a 74 68 69 73 2e 58 35 61 7d 29 7d 7d 3b 70 41 3d 67 41 28 28 61 2c 62 29 3d 3e 7b 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 29 3b 61 3d 28 64 65 6c 65 74 65 20 61 2e 56 45 2c 61 29 3b 72 65 74 75 72 6e 20 68 41 28 5f 5f 63 2e 6f 41 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 72 65 66 3a 62 7d 2c 61 29 29 7d 29 3b 71 41 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 43 43 61 3d 71 41 2e 6d 61 74 63 68 28 2f 41 70 70 6c 65 57 65 62 4b 69 74 5c 2f 2f 29 26 26 21 71 41 2e 6d 61 74 63 68 28 2f 28 43 68 72 6f 6d 65 7c 43 68 72 6f 6d 69 75 6d 29 5c 2f 2f 29 26 26 28 71 41 2e 6d 61 74 63 68 28 2f 69 70 68 6f 6e 65 7c 69 70 61 64 2f 69 Data Ascii: ode,b);return hA("div",{ref:this.X5a})}};pA=gA((a,b)=>{a=Object.assign({},a);a=(delete a.VE,a);return hA(__c.oA,Object.assign({},{ref:b},a))});qA=navigator.userAgent;CCa=qA.match(/AppleWebKit\//)&&!qA.match(/(Chrome\|Chromium)\//)&&(qA.match(/iphone\|ipad/i
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 73 64 3d 5f 5f 63 2e 73 64 3b 76 61 72 20 4f 3d 5f 5f 63 2e 4f 3b 76 61 72 20 61 62 3d 5f 5f 63 2e 61 62 3b 76 61 72 20 51 3d 5f 5f 63 2e 51 3b 76 61 72 20 4d 61 3d 5f 5f 63 2e 4d 61 3b 76 61 72 20 43 3d 5f 5f 63 2e 43 3b 76 61 72 20 7a 3d 5f 5f 63 2e 7a 3b 76 61 72 20 74 64 3d 5f 5f 63 2e 74 64 3b 76 61 72 20 4d 3d 5f 5f 63 2e 4d 3b 76 61 72 20 46 3d 5f 5f 63 2e 46 3b 76 61 72 20 59 44 61 2c 5a 44 61 2c 79 43 2c 24 44 61 2c 41 43 2c 64 45 61 2c 65 45 61 2c 66 45 61 2c 67 45 61 2c 68 45 61 2c 69 45 61 2c 6b 45 61 2c 6c 45 61 2c 6d 45 61 2c 6e 45 61 2c 6f 45 61 2c 70 45 61 2c 71 45 61 2c 72 45 61 2c 73 45 61 2c 74 45 61 2c 76 45 61 2c 78 45 61 2c 79 45 61 2c 7a 45 61 2c 42 45 61 2c 43 45 61 2c 44 45 61 2c 45 45 61 2c 46 45 61 2c 47 45 61 2c 48 45 61 2c 49 Data Ascii: sd=__c.sd;var O=__c.O;var ab=__c.ab;var Q=__c.Q;var Ma=__c.Ma;var C=__c.C;var z=__c.z;var td=__c.td;var M=__c.M;var F=__c.F;var YDa,ZDa,yC,$Da,AC,dEa,eEa,fEa,gEa,hEa,iEa,kEa,lEa,mEa,nEa,oEa,pEa,qEa,rEa,sEa,tEa,vEa,xEa,yEa,zEa,BEa,CEa,DEa,EEa,FEa,GEa,HEa,I
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 63 29 7b 63 3d 7b 61 74 74 72 69 62 75 74 65 73 3a 5a 44 61 28 6e 65 77 20 4d 61 70 28 4a 53 4f 4e 2e 70 61 72 73 65 28 64 29 29 29 2c 64 72 6f 70 70 65 64 41 74 74 72 69 62 75 74 65 73 43 6f 75 6e 74 3a 30 7d 3b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 67 2c 68 5d 6f 66 20 65 29 30 3c 68 2e 6c 65 6e 67 74 68 26 26 66 2e 70 75 73 68 28 7b 73 63 6f 70 65 3a 7b 6e 61 6d 65 3a 67 7d 2c 73 70 61 6e 73 3a 68 2e 6d 61 70 28 6b 3d 3e 7b 76 61 72 20 6c 2c 6d 3d 6b 2e 63 6f 6e 74 65 78 74 3b 63 6f 6e 73 74 20 6e 3d 41 43 28 6b 2e 73 74 61 72 74 54 69 6d 65 2c 62 29 2c 70 3d 41 43 28 6e 75 6c 6c 21 3d 3d 28 6c 3d 6b 2e 65 6e 64 54 69 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c Data Ascii: ;for(const [d,e]of c){c={attributes:ZDa(new Map(JSON.parse(d))),droppedAttributesCount:0};const f=[];for(const [g,h]of e)0<h.length&&f.push({scope:{name:g},spans:h.map(k=>{var l,m=k.context;const n=AC(k.startTime,b),p=AC(null!==(l=k.endTime)&&void 0!==l?l
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 4f 52 22 3a 72 65 74 75 72 6e 5b 63 2e 6d 65 73 73 61 67 65 7c 7c 22 22 2c 63 2e 44 65 5d 3b 63 61 73 65 20 22 53 55 43 43 45 53 53 22 3a 72 65 74 75 72 6e 5b 60 5b 53 55 43 43 45 53 53 5d 20 24 7b 63 2e 63 71 7d 60 2c 31 5d 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 5f 5f 63 2e 79 28 63 29 3b 7d 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 5b 53 74 72 69 6e 67 28 61 29 2c 31 5d 7d 7d 3b 66 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 61 3d 6e 65 77 20 5f 5f 63 2e 41 65 28 7b 74 79 70 65 3a 31 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 62 2c 6d 65 73 73 61 67 65 3a 60 43 6f 72 Data Ascii: OR":return[c.message\|\|"",c.De];case "SUCCESS":return[`[SUCCESS] ${c.cq}`,1];default:throw new __c.y(c);}}catch(b){return[String(a),1]}};fEa=function(a,b){try{return encodeURI(JSON.stringify(a))}catch(c){throw a=new __c.Ae({type:1,methodName:b,message:`Cor
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 7d 2c 7b 74 79 70 65 3a 7a 28 22 41 3f 22 2c 32 2c 22 50 52 4f 44 55 43 54 5f 53 49 5a 45 22 29 2c 67 4f 61 3a 4d 28 31 29 7d 29 29 3b 6e 45 61 3d 46 28 28 29 3d 3e 28 7b 6c 72 62 3a 4d 28 31 29 2c 6b 72 62 3a 5f 5f 63 2e 41 64 28 32 29 7d 29 29 3b 6f 45 61 3d 46 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 7d 2c 7b 74 79 70 65 3a 7a 28 22 41 3f 22 2c 33 2c 22 50 41 47 45 5f 53 45 4c 45 43 54 22 29 2c 59 61 3a 4d 61 28 31 2c 6e 45 61 29 7d 29 29 3b 70 45 61 3d 46 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 7d 2c 7b 74 79 70 65 3a 7a 28 22 41 3f 22 2c 34 2c 22 53 49 4e 47 4c 45 5f 53 45 4c 45 43 54 22 29 2c 67 4f 61 3a 4d 28 31 29 7d 29 29 3b 71 45 61 3d 46 28 28 29 3d 3e Data Ascii: .assign({},{},{type:z("A?",2,"PRODUCT_SIZE"),gOa:M(1)}));nEa=F(()=>({lrb:M(1),krb:__c.Ad(2)}));oEa=F(()=>Object.assign({},{},{type:z("A?",3,"PAGE_SELECT"),Ya:Ma(1,nEa)}));pEa=F(()=>Object.assign({},{},{type:z("A?",4,"SINGLE_SELECT"),gOa:M(1)}));qEa=F(()=>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49757	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	1011	OUT	GET /chunk-batch/a3d7911ebd1f0a2b.js+17450c9d444078d8.vendor.js+b37b3f4614815390.js+703faf9f1070ed07.js+321d58411689c6aa.js+eb52eb55ba627d30.js+dd4288106d664a45.js+981c688d65077307.js+d6ff7cdeac78319b.js+4bc971d3b683b3b4.js+c1ee67d56c60fbad.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1149	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/javascript Content-Length: 907297 Connection: close CF-Ray: 86b21425a9db584e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63675 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Wed, 27 Mar 2024 02:26:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: LMSM5GM4EkE69kbL72rWre3g+AN5o4kNuMyWVjIU/mLtE6qUVsXQoaGR/OHB2M0lhlfg26hXrKI= x-amz-replication-status: COMPLETED x-amz-request-id: T4H7ETAY77AAGYNP x-amz-server-side-encryption: AES256 x-amz-version-id: hO9eGHHo6DV9y_PATaelUtmtpyb_y2DY X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	368	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 79 66 42 72 56 25 32 42 61 65 38 38 52 6d 47 45 4e 6b 39 4d 78 43 34 4f 6c 39 58 79 38 58 6b 4a 42 47 6f 48 56 64 68 48 44 6d 79 42 79 35 4b 65 54 70 6c 51 50 48 6a 6f 50 41 61 33 45 52 30 53 42 79 36 78 7a 77 44 48 39 66 6b 4c 56 75 34 25 32 46 6e 59 25 32 42 72 35 4e 67 42 57 44 49 78 74 41 25 32 42 59 6e 6d 49 4b 36 6c 47 67 33 30 33 36 32 70 25 32 46 4c 4c 67 56 77 43 72 46 53 33 6d 34 78 4f 62 6b 6d 38 51 54 52 73 4b 78 42 75 77 25 32 46 73 30 35 62 74 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yfBrV%2Bae88RmGENk9MxC4Ol9Xy8XkJBGoHVdhHDmyBy5KeTplQPHjoPAa3ER0SBy6xzwDH9fkLVu4%2FnY%2Br5NgBWDIxtA%2BYnmIK6lGg30362p%2FLLgVwCrFS3m4xObkm8QTRsKxBuw%2Fs05btw%3D"}],"group":"cf-nel
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 61 33 64 37 39 31 31 65 62 64 31 66 30 61 32 62 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 30 33 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 31 33 37 32 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:a3d7911ebd1f0a2b.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9003],{/***/ 913728:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 3d 5f 5f 63 2e 42 78 3b 0a 76 61 72 20 73 44 3d 5f 5f 63 2e 73 44 3b 76 61 72 20 43 79 3d 5f 5f 63 2e 43 79 3b 76 61 72 20 64 42 3d 5f 5f 63 2e 64 42 3b 76 61 72 20 42 79 3d 5f 5f 63 2e 42 79 3b 76 61 72 20 6e 7a 3d 5f 5f 63 2e 6e 7a 3b 76 61 72 20 41 79 3d 5f 5f 63 2e 41 79 3b 76 61 72 20 45 75 3d 5f 5f 63 2e 45 75 3b 76 61 72 20 7a 79 3d 5f 5f 63 2e 7a 79 3b 76 61 72 20 45 79 3d 5f 5f 63 2e 45 79 3b 76 61 72 20 65 44 3d 5f 5f 63 2e 65 44 3b 76 61 72 20 48 3d 5f 5f 63 2e 48 3b 76 61 72 20 64 44 3d 5f 5f 63 2e 64 44 3b 76 61 72 20 75 43 3d 5f 5f 63 2e 75 43 3b 76 61 72 20 74 7a 3d 5f 5f 63 2e 74 7a 3b 76 61 72 20 73 7a 3d 5f 5f 63 2e 73 7a 3b 76 61 72 20 78 79 3d 5f 5f 63 2e 78 79 3b 76 61 72 20 4e 78 3d 5f 5f 63 2e 4e 78 3b 76 61 72 20 4d 78 3d 5f 5f 63 Data Ascii: =__c.Bx;var sD=__c.sD;var Cy=__c.Cy;var dB=__c.dB;var By=__c.By;var nz=__c.nz;var Ay=__c.Ay;var Eu=__c.Eu;var zy=__c.zy;var Ey=__c.Ey;var eD=__c.eD;var H=__c.H;var dD=__c.dD;var uC=__c.uC;var tz=__c.tz;var sz=__c.sz;var xy=__c.xy;var Nx=__c.Nx;var Mx=__c
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 6c 45 2c 6d 45 2c 78 4c 61 2c 79 4c 61 2c 7a 4c 61 2c 41 4c 61 2c 42 4c 61 2c 43 4c 61 2c 6e 45 2c 44 4c 61 2c 45 4c 61 2c 6f 45 2c 70 45 2c 46 4c 61 2c 72 45 2c 47 4c 61 2c 49 4c 61 2c 4b 4c 61 2c 4c 4c 61 2c 4d 4c 61 2c 4e 4c 61 2c 48 4c 61 2c 73 45 2c 55 4c 61 2c 4f 4c 61 2c 50 4c 61 2c 51 4c 61 2c 52 4c 61 2c 53 4c 61 2c 54 4c 61 2c 4a 4c 61 2c 56 4c 61 2c 57 4c 61 2c 24 4c 61 2c 62 4d 61 2c 64 4d 61 2c 65 4d 61 2c 66 4d 61 2c 67 4d 61 2c 6a 4d 61 2c 6b 4d 61 2c 6d 4d 61 2c 6e 4d 61 2c 6f 4d 61 2c 70 4d 61 2c 71 4d 61 2c 72 4d 61 2c 45 45 2c 75 4d 61 2c 76 4d 61 2c 78 4d 61 2c 7a 4d 61 2c 77 4d 61 2c 47 45 2c 79 4d 61 2c 43 4d 61 2c 44 4d 61 2c 45 4d 61 2c 46 4d 61 2c 49 45 2c 47 4d 61 2c 4a 45 2c 49 4d 61 2c 4a 4d 61 2c 4b 4d 61 2c 4c 4d 61 2c 4c 45 Data Ascii: lE,mE,xLa,yLa,zLa,ALa,BLa,CLa,nE,DLa,ELa,oE,pE,FLa,rE,GLa,ILa,KLa,LLa,MLa,NLa,HLa,sE,ULa,OLa,PLa,QLa,RLa,SLa,TLa,JLa,VLa,WLa,$La,bMa,dMa,eMa,fMa,gMa,jMa,kMa,mMa,nMa,oMa,pMa,qMa,rMa,EE,uMa,vMa,xMa,zMa,wMa,GE,yMa,CMa,DMa,EMa,FMa,IE,GMa,JE,IMa,JMa,KMa,LMa,LE
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 61 2c 59 54 61 2c 5a 54 61 2c 6b 55 61 2c 67 55 61 2c 6f 55 61 2c 6e 55 61 2c 6d 55 61 2c 70 55 61 2c 71 55 61 2c 72 55 61 2c 74 55 61 2c 75 55 61 2c 76 55 61 2c 71 48 2c 79 55 61 2c 7a 55 61 2c 42 55 61 2c 77 55 61 2c 43 55 61 2c 44 55 61 2c 78 55 61 2c 4a 55 61 2c 4c 55 61 2c 4d 55 61 2c 51 55 61 2c 53 55 61 2c 72 48 2c 56 55 61 2c 55 55 61 2c 74 48 2c 54 55 61 2c 52 55 61 2c 58 55 61 2c 59 55 61 2c 73 48 2c 57 55 61 2c 61 56 61 2c 63 56 61 2c 66 56 61 2c 65 56 61 2c 64 56 61 2c 67 56 61 2c 69 56 61 2c 6a 56 61 2c 68 56 61 2c 77 48 2c 78 48 2c 79 48 2c 41 48 2c 6b 56 61 2c 6c 56 61 2c 42 48 2c 6d 56 61 2c 6e 56 61 2c 45 48 2c 46 48 2c 6f 56 61 2c 43 48 2c 44 48 2c 72 56 61 2c 73 56 61 2c 74 56 61 2c 7a 48 2c 47 48 2c 75 56 61 2c 49 48 2c 4a 48 2c 76 56 Data Ascii: a,YTa,ZTa,kUa,gUa,oUa,nUa,mUa,pUa,qUa,rUa,tUa,uUa,vUa,qH,yUa,zUa,BUa,wUa,CUa,DUa,xUa,JUa,LUa,MUa,QUa,SUa,rH,VUa,UUa,tH,TUa,RUa,XUa,YUa,sH,WUa,aVa,cVa,fVa,eVa,dVa,gVa,iVa,jVa,hVa,wH,xH,yH,AH,kVa,lVa,BH,mVa,nVa,EH,FH,oVa,CH,DH,rVa,sVa,tVa,zH,GH,uVa,IH,JH,vV
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 30 61 2c 4f 4b 2c 52 4b 2c 73 30 61 2c 71 30 61 2c 72 30 61 2c 56 4b 2c 74 30 61 2c 57 4b 2c 58 4b 2c 59 4b 2c 5a 4b 2c 24 4b 2c 61 4c 2c 62 4c 2c 78 30 61 2c 79 30 61 2c 63 4c 2c 7a 30 61 2c 67 4c 2c 41 30 61 2c 69 4c 2c 6a 4c 2c 6b 4c 2c 6c 4c 2c 42 30 61 2c 43 30 61 2c 44 30 61 2c 45 30 61 2c 46 30 61 2c 71 4c 2c 48 30 61 2c 75 4c 2c 4a 30 61 2c 49 30 61 2c 77 4c 2c 4d 30 61 2c 4b 30 61 2c 4c 30 61 2c 0a 78 4c 2c 4e 30 61 2c 79 4c 2c 4f 30 61 2c 50 30 61 2c 7a 4c 2c 41 4c 2c 42 4c 2c 53 30 61 2c 51 30 61 2c 55 30 61 2c 54 30 61 2c 47 4c 2c 56 30 61 2c 48 4c 2c 58 30 61 2c 59 30 61 2c 5a 30 61 2c 24 30 61 2c 63 31 61 2c 62 31 61 2c 61 31 61 2c 64 31 61 2c 65 31 61 2c 66 31 61 2c 6b 31 61 2c 69 31 61 2c 6a 31 61 2c 67 31 61 2c 68 31 61 2c 4d 4c 2c 6c 31 Data Ascii: 0a,OK,RK,s0a,q0a,r0a,VK,t0a,WK,XK,YK,ZK,$K,aL,bL,x0a,y0a,cL,z0a,gL,A0a,iL,jL,kL,lL,B0a,C0a,D0a,E0a,F0a,qL,H0a,uL,J0a,I0a,wL,M0a,K0a,L0a,xL,N0a,yL,O0a,P0a,zL,AL,BL,S0a,Q0a,U0a,T0a,GL,V0a,HL,X0a,Y0a,Z0a,$0a,c1a,b1a,a1a,d1a,e1a,f1a,k1a,i1a,j1a,g1a,h1a,ML,l1
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 4e 31 61 2c 75 4d 2c 6c 4d 2c 77 4d 2c 72 4d 2c 4f 31 61 2c 62 4d 2c 50 31 61 2c 63 4d 2c 70 4d 2c 4b 34 61 2c 4c 34 61 2c 4d 34 61 2c 4e 34 61 2c 4f 34 61 2c 50 34 61 2c 4a 34 61 2c 51 34 61 2c 52 34 61 2c 53 34 61 2c 54 34 61 2c 55 34 61 2c 56 34 61 2c 4f 5a 61 2c 50 5a 61 2c 51 5a 61 2c 57 34 61 2c 58 34 61 2c 59 34 61 2c 5a 34 61 2c 24 34 61 2c 61 35 61 2c 62 35 61 2c 63 35 61 2c 64 35 61 2c 66 35 61 2c 65 35 61 2c 67 35 61 2c 68 35 61 2c 69 35 61 2c 6a 35 61 2c 6b 35 61 2c 6c 35 61 2c 6d 35 61 2c 6e 35 61 2c 6f 35 61 2c 71 36 61 2c 47 59 61 2c 6d 37 61 2c 6e 37 61 2c 50 49 2c 65 4f 2c 4b 50 61 2c 4a 50 61 2c 76 54 61 2c 6c 53 61 2c 58 4c 61 2c 59 4c 61 2c 5a 4c 61 2c 66 4f 2c 6f 37 61 2c 61 4d 61 2c 70 37 61 2c 75 45 2c 71 37 61 2c 74 45 2c 72 37 61 Data Ascii: N1a,uM,lM,wM,rM,O1a,bM,P1a,cM,pM,K4a,L4a,M4a,N4a,O4a,P4a,J4a,Q4a,R4a,S4a,T4a,U4a,V4a,OZa,PZa,QZa,W4a,X4a,Y4a,Z4a,$4a,a5a,b5a,c5a,d5a,f5a,e5a,g5a,h5a,i5a,j5a,k5a,l5a,m5a,n5a,o5a,q6a,GYa,m7a,n7a,PI,eO,KPa,JPa,vTa,lSa,XLa,YLa,ZLa,fO,o7a,aMa,p7a,uE,q7a,tE,r7a
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 74 20 66 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 29 61 2e 46 79 28 66 29 26 26 65 28 66 29 26 26 64 28 66 2c 62 5b 66 5d 2c 63 5b 66 5d 29 7d 3b 58 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 64 3d 62 5b 63 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 3f 64 3a 61 2e 61 74 74 72 69 62 75 74 65 73 5b 63 5d 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 3b 0a 5a 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 49 31 2e 61 73 29 2c 64 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2e 49 31 2e 73 73 29 3b 57 44 28 61 2c 62 2e 61 73 2c 62 2e 73 73 2c 28 65 2c 66 2c 67 29 3d 3e 7b 6e 75 6c 6c Data Ascii: t f of Object.keys(b))a.Fy(f)&&e(f)&&d(f,b[f],c[f])};XD=function(a,b,c){var d;return null!==(d=b[c])&&void 0!==d?d:a.attributes[c].defaultValue};ZKa=function(a,b){const c=Object.assign({},a.I1.as),d=Object.assign({},a.I1.ss);WD(a,b.as,b.ss,(e,f,g)=>{null
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 7d 3b 61 2e 66 6f 72 45 61 63 68 28 28 64 2c 65 29 3d 3e 7b 62 2e 46 79 28 65 29 26 26 28 63 5b 65 5d 3d 5f 5f 63 2e 6f 74 28 62 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 2c 64 29 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 68 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 5f 63 2e 76 7a 3b 6d 61 28 21 62 2e 68 61 6e 64 6c 65 72 7c 7c 61 3d 3d 3d 62 2e 68 61 6e 64 6c 65 72 29 3b 62 2e 68 61 6e 64 6c 65 72 3d 61 7d 3b 62 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 78 3a 63 2c 79 3a 64 7d 3d 57 41 28 62 2c 61 29 3b 72 65 74 75 72 6e 20 63 2a 63 2b 64 2a 64 7d 3b 0a 5f 5f 63 2e 63 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 58 41 2e 74 72 61 6e 73 6c 61 74 65 28 2d 61 2e 78 2c 2d 61 2e 79 29 Data Ascii: };a.forEach((d,e)=>{b.Fy(e)&&(c[e]=__c.ot(b.attributes[e],d))});return c};hLa=function(a){var b=__c.vz;ma(!b.handler\|\|a===b.handler);b.handler=a};bE=function(a,b){const {x:c,y:d}=WA(b,a);return cc+dd};__c.cE=function(a,b){return XA.translate(-a.x,-a.y)
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 69 64 20 30 21 3d 3d 62 3f 62 3a 22 6c 69 67 68 74 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 63 7d 7d 3b 0a 72 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 29 3b 61 3d 61 2e 61 70 70 65 61 72 61 6e 63 65 3b 62 3d 28 64 65 6c 65 74 65 20 62 2e 61 70 70 65 61 72 61 6e 63 65 2c 62 29 3b 61 3d 6f 4c 61 28 7b 74 68 65 6d 65 3a 5f 5f 63 2e 67 62 28 29 2e 74 68 65 6d 65 2c 41 76 3a 5f 5f 63 2e 67 62 28 29 2e 41 76 7d 2c 61 29 3b 63 6f 6e 73 74 20 63 3d 5f 5f 63 2e 76 62 28 62 29 3b 62 3d 6e 4c 61 28 7b 65 6e 61 62 6c 65 64 3a 71 4c 61 2e 69 6e 63 6c 75 64 65 73 28 61 29 7d 29 3b 63 6f 6e 73 74 20 64 3d 70 4c 61 28 7b 63 6f 6c 6f 72 53 63 68 65 6d 65 3a 62 2c 61 70 70 65 61 72 61 6e Data Ascii: id 0!==b?b:"light";default:return c}};rLa=function(a){var b=Object.assign({},a);a=a.appearance;b=(delete b.appearance,b);a=oLa({theme:__c.gb().theme,Av:__c.gb().Av},a);const c=__c.vb(b);b=nLa({enabled:qLa.includes(a)});const d=pLa({colorScheme:b,appearan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49758	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	892	OUT	GET /chunk-batch/b7679cc71734357e.js+937696ae4a62b6f0.js+2e5f89b6382f75c7.js+6c0ea36590d49674.strings.js+deb64776b9445b23.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1147	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/javascript Content-Length: 178930 Connection: close CF-Ray: 86b21425af3b5884-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63675 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Wed, 27 Mar 2024 02:26:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 7Ap+MEomtg4KGTHFh2xG7os0LDhKuyMpROmfZp8ACEwR7ClxGwEqwkC5Ad7il0TgSbpQDPVbrjE= x-amz-replication-status: PENDING x-amz-request-id: VNA9SB7RPGD4HQJE x-amz-server-side-encryption: AES256 x-amz-version-id: ULEkdrepsW38GCa6hBMUZjDWlOSXzgoA X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6e 65 75 62 55 64 4a 31 35 7a 63 6b 77 30 50 4a 44 79 46 7a 75 4b 58 58 66 6f 44 68 41 75 4a 61 72 63 64 44 48 6e 36 50 52 75 48 62 66 65 76 42 65 58 36 55 42 34 78 56 39 70 6f 6b 53 31 74 75 47 77 6f 73 4d 61 6e 47 47 51 58 36 4b 50 68 53 71 43 55 37 39 55 52 68 79 62 41 76 32 4f 49 78 70 6c 50 70 76 34 65 43 6a 59 63 32 63 65 30 78 67 36 4f 38 50 72 6d 59 32 57 78 52 76 4f 48 6a 75 41 7a 46 6a 69 75 50 32 5a 77 6d 25 32 46 46 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=neubUdJ15zckw0PJDyFzuKXXfoDhAuJarcdDHn6PRuHbfevBeX6UB4xV9pokS1tuGwosManGGQX6KPhSqCU79URhybAv2OIxplPpv4eCjYc2ce0xg6O8PrmY2WxRvOHjuAzFjiuP2Zwm%2FFg%3D"}],"group":"cf-nel","max_age
2024-03-27 20:20:01 UTC	1233	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 62 37 36 37 39 63 63 37 31 37 33 34 33 35 37 65 2e 6a 73 0a 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 34 30 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 30 38 38 35 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f Data Ascii: ;// __FILE_CONTENT_FOR__:b7679cc71734357e.js(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2940],{/***/ 708854:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 28 5a 2d 31 2c 56 2b 31 29 3b 6e 75 6c 6c 3d 3d 3d 6b 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6b 3f 76 6f 69 64 20 30 3a 6b 28 54 2c 56 29 3b 22 63 79 63 6c 65 22 3d 3d 3d 64 26 26 68 61 3d 3d 3d 56 3f 68 61 3d 30 3a 68 61 3d 3d 3d 5a 2d 31 26 26 28 6e 75 6c 6c 3d 3d 3d 6d 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 76 6f 69 64 20 30 3a 6d 28 54 2c 56 29 29 3b 41 28 68 61 29 3b 5f 5f 63 2e 49 6c 2e 46 77 28 22 6b 65 79 62 6f 61 72 64 22 29 7d 7d 2c 5b 6b 2c 64 2c 41 2c 6d 5d 29 2c 4a 3d 5a 51 28 54 3d 3e 7b 54 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 6e 75 6c 6c 3d 3d 3d 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 28 54 2c 76 2e 63 75 72 72 65 6e 74 29 3b 42 28 29 3b 5f 5f 63 2e 49 6c 2e 46 77 28 22 6b 65 Data Ascii: =Math.min(Z-1,V+1);null===k\|\|void 0===k?void 0:k(T,V);"cycle"===d&&ha===V?ha=0:ha===Z-1&&(null===m\|\|void 0===m?void 0:m(T,V));A(ha);__c.Il.Fw("keyboard")}},[k,d,A,m]),J=ZQ(T=>{T.preventDefault();null===l\|\|void 0===l?void 0:l(T,v.current);B();__c.Il.Fw("ke
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 2e 42 53 2c 64 65 6c 65 74 65 20 62 2e 72 6f 6c 65 2c 62 29 3b 62 3d 5a 51 28 68 3d 3e 7b 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 72 65 74 75 72 6e 20 5f 5f 63 2e 77 28 66 2e 6f 6e 53 75 62 6d 69 74 29 28 68 29 7d 2c 5b 66 2e 6f 6e 53 75 62 6d 69 74 5d 29 3b 63 6f 6e 73 74 20 67 3d 6b 65 62 28 7b 6f 6e 53 75 62 6d 69 74 3a 66 2e 6f 6e 53 75 62 6d 69 74 7d 29 3b 72 65 74 75 72 6e 20 24 51 28 22 66 6f 72 6d 22 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 3a 63 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 64 2c 22 61 72 69 61 2d 6f 77 6e 73 22 3a 65 2c 72 6f 6c 65 3a 61 2c 72 65 66 3a 67 7d 2c 66 2c 7b 6e 6f 56 61 6c 69 64 61 74 65 3a 21 30 2c 6d 65 74 68 6f 64 3a 22 70 6f Data Ascii: .BS,delete b.role,b);b=ZQ(h=>{h.preventDefault();return __c.w(f.onSubmit)(h)},[f.onSubmit]);const g=keb({onSubmit:f.onSubmit});return $Q("form",Object.assign({},{"aria-expanded":c,"aria-labelledby":d,"aria-owns":e,role:a,ref:g},f,{noValidate:!0,method:"po
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 36 36 37 32 39 34 29 2c 68 65 62 3d 67 52 2e 75 73 65 4d 65 6d 6f 2c 70 65 62 3d 67 52 2e 66 6f 72 77 61 72 64 52 65 66 2c 59 51 3d 67 52 2e 75 73 65 52 65 66 2c 71 65 62 3d 67 52 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 2c 72 65 62 3d 67 52 2e 43 6f 6d 70 6f 6e 65 6e 74 2c 66 65 62 3d 67 52 2e 75 73 65 53 74 61 74 65 2c 5a 51 3d 67 52 2e 75 73 65 43 61 6c 6c 62 61 63 6b 2c 67 65 62 3d 67 52 2e 75 73 65 45 66 66 65 63 74 2c 73 65 62 3d 67 52 2e 43 68 69 6c 64 72 65 6e 3b 76 61 72 20 68 52 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 31 36 38 39 34 39 29 2c 69 52 3d 68 52 2e 4c 4f 2c 6a 52 3d 68 52 2e 46 6c 2c 6b 52 3d 68 52 2e 61 44 2c 74 65 62 3d 68 52 2e 55 35 3b 76 61 72 20 75 65 62 3d 5f 5f 77 65 62 70 61 63 6b 5f Data Ascii: 667294),heb=gR.useMemo,peb=gR.forwardRef,YQ=gR.useRef,qeb=gR.useImperativeHandle,reb=gR.Component,feb=gR.useState,ZQ=gR.useCallback,geb=gR.useEffect,seb=gR.Children;var hR=__webpack_require__(168949),iR=hR.LO,jR=hR.Fl,kR=hR.aD,teb=hR.U5;var ueb=__webpack_
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 64 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 2c 65 3d 66 52 28 22 46 73 37 4f 66 41 20 5f 35 52 53 71 49 67 22 2c 45 65 62 5b 61 5d 2c 7b 6c 71 48 79 71 51 3a 64 7d 29 3b 61 3d 22 63 72 69 74 69 63 61 6c 22 3d 3d 3d 61 3f 22 61 6c 65 72 74 22 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 64 3f 24 51 28 22 64 69 76 22 2c 7b 69 64 3a 63 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 41 43 68 71 45 41 22 2c 72 6f 6c 65 3a 61 2c 22 61 72 69 61 2d 61 74 6f 6d 69 63 22 3a 21 31 2c 63 68 69 6c 64 72 65 6e 3a 73 65 62 2e 6d 61 70 28 62 2c 28 66 2c 67 29 3d 3e 24 51 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 66 7d 2c 67 29 29 7d 29 3a 24 51 28 22 70 22 2c 7b 69 Data Ascii: l==b)return null;const d=Array.isArray(b),e=fR("Fs7OfA _5RSqIg",Eeb[a],{lqHyqQ:d});a="critical"===a?"alert":void 0;return d?$Q("div",{id:c,className:"AChqEA",role:a,"aria-atomic":!1,children:seb.map(b,(f,g)=>$Q("p",{className:e,children:f},g))}):$Q("p",{i
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 62 2c 63 3d 74 68 69 73 2e 64 65 66 69 6e 69 74 69 6f 6e 2e 52 6b 2c 64 3d 74 68 69 73 2e 64 65 66 69 6e 69 74 69 6f 6e 2e 6f 6e 43 6f 6d 70 6c 65 74 65 3b 74 68 69 73 2e 75 78 2b 3d 61 3b 74 68 69 73 2e 75 78 3e 3d 62 2b 63 26 26 28 74 68 69 73 2e 75 78 3d 62 2b 63 2c 74 68 69 73 2e 70 61 75 73 65 28 29 2c 6e 75 6c 6c 3d 3d 3d 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 28 29 29 7d 75 70 64 61 74 65 28 7b 65 6e 64 3a 61 2c 57 62 3a 62 2c 52 6b 3a 63 2c 65 61 73 69 6e 67 3a 64 2c 6f 6e 43 6f 6d 70 6c 65 74 65 3a 65 7d 29 7b 63 6f 6e 73 74 20 66 3d 74 68 69 73 2e 73 74 61 74 65 2e 67 65 74 28 29 3b 74 68 69 73 2e 64 65 66 69 6e 69 74 69 6f 6e 3d 7b 73 74 61 72 74 3a 66 2c 65 6e 64 3a 61 2c 57 62 3a 62 2c 52 6b 3a 63 2c 65 61 73 69 6e Data Ascii: b,c=this.definition.Rk,d=this.definition.onComplete;this.ux+=a;this.ux>=b+c&&(this.ux=b+c,this.pause(),null===d\|\|void 0===d?void 0:d())}update({end:a,Wb:b,Rk:c,easing:d,onComplete:e}){const f=this.state.get();this.definition={start:f,end:a,Wb:b,Rk:c,easin
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 73 63 61 6c 65 46 61 63 74 6f 72 3d 62 3b 74 68 69 73 2e 72 56 61 3d 63 3b 74 68 69 73 2e 66 34 3d 64 3b 74 68 69 73 2e 4c 7a 3d 21 31 3b 74 68 69 73 2e 6b 65 79 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 74 78 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 3b 74 68 69 73 2e 63 6f 6e 74 65 6e 74 3d 22 22 3b 74 68 69 73 2e 70 6c 61 63 65 6d 65 6e 74 3d 22 62 6f 74 74 6f 6d 22 3b 74 68 69 73 2e 61 72 72 6f 77 3d 21 30 3b 74 68 69 73 2e 58 68 3d 30 7d 67 65 74 20 6f 70 65 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4c 7a 26 26 74 68 69 73 2e 72 56 61 28 29 7d 73 65 74 20 6f 70 65 6e 28 61 29 7b 74 68 69 73 2e 4c 7a 3d 61 7d 73 65 74 20 70 6f 73 69 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 74 78 3d 61 7d 67 65 74 Data Ascii: scaleFactor=b;this.rVa=c;this.f4=d;this.Lz=!1;this.key=void 0;this.tx={top:0,left:0,width:0,height:0};this.content="";this.placement="bottom";this.arrow=!0;this.Xh=0}get open(){return this.Lz&&this.rVa()}set open(a){this.Lz=a}set position(a){this.tx=a}get
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 64 22 5d 2c 5b 22 62 6f 74 74 6f 6d 2d 65 6e 64 22 2c 22 62 6f 74 74 6f 6d 2d 73 74 61 72 74 22 5d 2c 5b 22 62 6f 74 74 6f 6d 2d 73 74 61 72 74 22 2c 22 62 6f 74 74 6f 6d 2d 65 6e 64 22 5d 2c 5b 22 6c 65 66 74 2d 65 6e 64 22 2c 22 72 69 67 68 74 2d 65 6e 64 22 5d 2c 5b 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 5d 2c 5b 22 6c 65 66 74 2d 73 74 61 72 74 22 2c 22 72 69 67 68 74 2d 73 74 61 72 74 22 5d 5d 29 3b 0a 70 52 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 72 65 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 3b 74 68 69 73 2e 46 68 3d 30 3b 74 68 69 73 2e 57 4a 3d 61 3d 3e 7b 76 61 72 20 62 2c 63 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 70 65 6e 3b 63 6f 6e 73 74 20 64 3d 74 68 69 73 2e 70 72 6f Data Ascii: d"],["bottom-end","bottom-start"],["bottom-start","bottom-end"],["left-end","right-end"],["left","right"],["left-start","right-start"]]);pR=class extends reb{constructor(){super(...arguments);this.Fh=0;this.WJ=a=>{var b,c=this.props.open;const d=this.pro
2024-03-27 20:20:01 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 52 28 6d 65 62 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 64 26 26 24 51 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 66 52 28 7b 5f 38 56 6f 4c 5f 67 3a 6b 2c 48 4a 50 76 63 67 3a 68 7d 29 2c 72 65 66 3a 74 68 69 73 2e 6d 39 61 2c 63 68 69 6c 64 72 65 6e 3a 64 7d 29 2c 24 51 28 67 2c 7b 73 68 6f 77 3a 62 2c 4b 62 61 3a 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 21 3d 3d 28 61 3d 74 68 69 73 2e 74 6a 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 6e 75 6c 6c 7d 2c 63 68 69 6c 64 72 65 6e 3a 28 7b 73 74 79 6c 65 3a 76 2c 51 45 61 3a 78 7d 29 3d 3e 65 52 28 5f 5f 63 2e 6a 65 2c 7b 6f 70 65 6e 3a 78 2c 6c 65 76 65 6c 3a 63 2c 79 66 3a 6e 2c 57 4a 3a 75 2c 63 68 69 6c 64 72 65 6e 3a 5b 70 26 26 62 26 26 24 51 28 22 64 69 76 22 2c 7b 63 6c Data Ascii: eturn eR(meb,{children:[d&&$Q("div",{className:fR({_8VoL_g:k,HJPvcg:h}),ref:this.m9a,children:d}),$Q(g,{show:b,Kba:{current:null!==(a=this.tj)&&void 0!==a?a:null},children:({style:v,QEa:x})=>eR(__c.je,{open:x,level:c,yf:n,WJ:u,children:[p&&b&&$Q("div",{cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49762	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	478	OUT	GET /api/1767683/envelope/?sentry_key=944d224d45b943ba9f96396432dfd868&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:01 UTC	550	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49761	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-27 20:20:01 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=38627 Date: Wed, 27 Mar 2024 20:20:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49763	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/5b2d464c2f59a733.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 226 Connection: close CF-Ray: 86b21427ae2920ca-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782036 Cache-Control: public, max-age=31556926 ETag: "823314f0820505213fb53a70dc7cc636" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Fri, 15 Mar 2024 02:41:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: tAoQhkHxyZXIWpbcUopVpYHMcU8jKp7ayw1TOJTVOJsPzoo+717MK8lkq2E1aPKw1yF0bLFjp4k= x-amz-replication-status: COMPLETED x-amz-request-id: HY9WZPSTH1RN9T92 x-amz-server-side-encryption: AES256 x-amz-version-id: IcGEd8_YP8F0w6c_24z49WyP9Hz90gFi X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 53 69 25 32 46 72 54 68 32 73 4e 51 64 57 71 41 77 74 56 32 50 42 52 45 79 76 6a 72 78 6d 6f 74 66 61 61 78 6f 51 77 54 59 65 4f 4f 71 6e 6d 64 78 64 71 56 35 49 65 5a 54 25 32 46 70 78 64 73 33 39 53 25 32 46 76 38 65 64 6f 4b 61 69 6d 37 73 4b 61 5a 51 69 61 6f 4f 25 32 46 62 74 6b 45 37 54 45 48 52 69 54 44 33 44 6c 54 6c 61 33 58 6b 65 49 34 34 75 4f 30 37 48 69 4c 71 4f 44 75 59 25 32 42 4b 6a 38 4e 6b 4e 72 31 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Si%2FrTh2sNQdWqAwtV2PBREyvjrxmotfaaxoQwTYeOOqnmdxdqV5IeZT%2Fpxds39S%2Fv8edoKaim7sKaZQiaoO%2FbtkE7TEHRiTD3DlTla3XkeI44uO07HiLqODuY%2BKj8NkNr1s%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:01 UTC	226	IN	Data Raw: 2e 5f 36 38 32 67 70 77 7b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 35 62 32 64 34 36 34 63 32 66 35 39 61 37 33 33 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: ._682gpw{-webkit-touch-callout:none;-webkit-user-drag:none;-webkit-tap-highlight-color:transparent;-webkit-user-select:none;-moz-user-select:none;user-select:none}/# sourceMappingURL=sourcemaps/5b2d464c2f59a733.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49764	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/2475682c8d5b76fa.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:01 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 438 Connection: close CF-Ray: 86b21427e90105a8-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777332 Cache-Control: public, max-age=31556926 ETag: "45cc8e9a449b686b4300684398c187b6" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Mon, 18 Mar 2024 13:05:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 19 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ODuJxGBuRbYhvrFTBxg1WKTAP4rhzbCJj2RXG9Y2w6a3sdAwl9+8PZ3Gn/spMXbMHY4soN/JyZ8= x-amz-replication-status: COMPLETED x-amz-request-id: TNXBRFPAETD6P24B x-amz-server-side-encryption: AES256 x-amz-version-id: 1NWsNDVsHNsz.5WhU.cmZ6xp3nVijDLD X-Content-Type-Options: nosniff
2024-03-27 20:20:01 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 35 79 62 73 57 47 4f 4d 66 44 58 54 36 66 73 66 50 45 73 59 46 25 32 42 39 51 54 57 6c 52 62 31 38 78 72 45 39 6c 37 67 6a 63 7a 76 62 63 4b 4e 42 34 53 68 47 43 54 54 25 32 42 34 51 44 37 73 45 52 45 4b 46 6a 4d 68 30 66 78 47 70 76 68 32 72 66 73 72 6a 38 25 32 42 74 49 25 32 42 42 49 64 63 4c 58 5a 52 72 79 35 65 5a 5a 57 75 35 4d 34 6a 41 6d 55 25 32 42 4d 52 78 33 25 32 46 77 57 44 58 6e 4f 74 79 32 39 39 44 59 65 63 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ybsWGOMfDXT6fsfPEsYF%2B9QTWlRb18xrE9l7gjczvbcKNB4ShGCTT%2B4QD7sEREKFjMh0fxGpvh2rfsrj8%2BtI%2BBIdcLXZRry5eZZWu5M4jAmU%2BMRx3%2FwWDXnOty299DYecA%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:01 UTC	438	IN	Data Raw: 2e 44 46 5f 75 74 51 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 44 46 5f 75 74 51 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 75 6e 73 65 74 7d 2e 55 59 6b 49 33 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 4c 6a 38 5a 71 51 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 6c 7a 58 42 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 4c 70 71 45 77 51 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 30 78 6b 61 65 51 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 65 59 6e 31 41 51 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 Data Ascii: .DF_utQ{cursor:auto;outline:none;position:absolute}.DF_utQ:hover{cursor:unset}.UYkI3g{will-change:transform}.Lj8ZqQ{display:none}._lzXBg{overflow:hidden}.LpqEwQ{position:absolute}._0xkaeQ{pointer-events:auto}.eYn1AQ{overflow:hidden;pointer-events:none;pos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49765	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/2aa80d3e88fb64ec.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 2592 Connection: close CF-Ray: 86b21427f9fb389a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792654 Cache-Control: public, max-age=31556926 ETag: "6b3539dba386dd177612d6169608cd52" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Fri, 15 Mar 2024 02:41:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: BTXMKRNzhmlSDA74hDQH1hwlwFDjLuuTbrlj+q3fy4KbGbkdeZjvoqCCaW/T0XHNazMHin5nnlU= x-amz-replication-status: COMPLETED x-amz-request-id: X0D5Z89HHA8K77WR x-amz-server-side-encryption: AES256 x-amz-version-id: qiZPrn3QXUaxY45Wt3KOSpONyZd9AeHW X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 64 58 68 69 38 43 42 76 50 76 47 4d 25 32 42 49 38 50 46 6b 31 39 51 35 41 4e 78 74 5a 36 52 4e 74 63 63 4f 79 38 38 75 34 6b 4d 6e 57 75 39 64 53 72 58 59 59 76 76 71 6b 54 59 49 49 75 54 35 25 32 46 31 64 7a 36 25 32 46 42 4a 62 25 32 46 68 37 48 58 65 63 70 37 34 46 55 52 43 62 4d 46 53 33 52 68 59 51 73 69 46 70 31 62 6b 66 46 33 6a 66 52 34 69 64 43 67 45 45 78 74 66 6a 43 77 45 71 4a 43 49 4e 56 31 55 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PdXhi8CBvPvGM%2BI8PFk19Q5ANxtZ6RNtccOy88u4kMnWu9dSrXYYvvqkTYIIuT5%2F1dz6%2FBJb%2Fh7HXecp74FURCbMFS3RhYQsiFp1bkfF3jfR4idCgEExtfjCwEqJCINV1Uo%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:02 UTC	1203	IN	Data Raw: 2e 5f 30 79 5a 36 51 67 7b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 67 65 6f 6d 65 74 72 69 63 50 72 65 63 69 73 69 6f 6e 7d 2e 61 46 39 6f 36 51 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 58 66 42 71 77 77 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 7d 2e 4e 35 75 35 75 77 7b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 66 6f 72 77 61 72 64 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 5f 30 71 49 73 61 41 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 30 71 49 73 61 41 7b 74 6f Data Ascii: ._0yZ6Qg{text-rendering:geometricPrecision}.aF9o6Q{height:100%;pointer-events:auto}.XfBqww{-webkit-user-select:text;-moz-user-select:text;user-select:text}.N5u5uw{animation-fill-mode:forwards;animation-name:_0qIsaA;transform:scale(0)}@keyframes _0qIsaA{to
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 6c 6f 77 2d 79 3a 61 75 74 6f 7d 2e 61 58 5a 34 41 51 2e 5f 34 55 4f 71 32 77 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 59 74 66 71 79 67 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 2d 78 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 59 74 66 71 79 67 2e 5f 34 55 4f 71 32 77 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 73 63 72 6f 6c 6c 7d 2e 5f 37 4c 66 48 61 77 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 56 56 36 6b 57 67 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 56 56 36 6b 57 67 2e 6d 59 36 48 69 67 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 Data Ascii: low-y:auto}.aXZ4AQ._4UOq2w{overflow-y:scroll}.Ytfqyg{overflow-x:auto;overscroll-behavior-x:none;width:100%}.Ytfqyg._4UOq2w{overflow-x:scroll}._7LfHaw{height:100%;width:100%}.VV6kWg{display:flex;position:relative}.VV6kWg.mY6Hig{flex-direction:column;height
2024-03-27 20:20:02 UTC	20	IN	Data Raw: 66 62 36 34 65 63 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: fb64ec.ltr.css.map*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49766	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/32d63e885d7fa985.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 8245 Connection: close CF-Ray: 86b214281e4c3958-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777332 Cache-Control: public, max-age=31556926 ETag: "0ef57aead48f2770baf9c14c80e20556" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Fri, 15 Mar 2024 02:41:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: LlSqLUDttEONQjV0h1XgAOWrXbsnJGvHcV1nvM5E+HNO8ViCgzwptvYNKG90YkmNFc3cxm43oC0= x-amz-replication-status: COMPLETED x-amz-request-id: TNX9JHFRXDFPRV8P x-amz-server-side-encryption: AES256 x-amz-version-id: AxAQA0CpkF6AmRKCQo_Ydpkw6I4hcjNA X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 71 41 47 35 35 68 6b 59 61 43 72 54 4b 73 7a 6e 37 71 31 62 38 4a 77 53 4d 4c 47 7a 4d 47 44 51 73 4f 5a 73 25 32 46 36 53 79 71 47 4b 48 6c 51 49 50 79 74 6e 66 48 4b 4c 46 75 37 55 55 55 54 34 44 6c 5a 63 4b 67 66 48 73 70 6b 6f 46 7a 68 4a 6e 58 51 49 52 62 39 54 66 33 50 4c 52 49 7a 25 32 46 6d 35 4d 54 35 25 32 46 68 75 45 38 55 6c 42 41 64 76 6f 73 32 55 39 39 79 72 36 67 6f 30 4a 4a 35 67 54 71 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqAG55hkYaCrTKszn7q1b8JwSMLGzMGDQsOZs%2F6SyqGKHlQIPytnfHKLFu7UUUT4DlZcKgfHspkoFzhJnXQIRb9Tf3PLRIz%2Fm5MT5%2FhuE8UlBAdvos2U99yr6go0JJ5gTqM%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:02 UTC	1205	IN	Data Raw: 2e 44 63 79 42 44 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6c 61 63 65 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 69 67 68 74 7b 2d 2d 2d 32 43 35 74 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 7d 2e 64 61 72 6b 7b 2d 2d 2d 32 43 35 74 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 7d 2e 4f 6e 6f 6f 53 77 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 4f 6e 6f 6f 53 77 20 2e 63 5f 38 4a 4d 77 7b 6d 61 72 67 69 6e 3a 30 20 32 70 78 7d 2e 4f 6e 6f 6f 53 77 20 2e 63 5f 38 4a 4d 77 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 4f 6e 6f 6f 53 77 20 Data Ascii: .DcyBDA{display:flex;height:100%;place-items:center;width:100%}.light{---2C5tw:rgba(64,87,109,.07)}.dark{---2C5tw:hsla(0,0%,100%,.15)}.OnooSw{direction:ltr;display:inline-flex}.OnooSw .c_8JMw{margin:0 2px}.OnooSw .c_8JMw:first-child{margin-left:0}.OnooSw
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 38 70 78 7d 2e 75 4c 74 30 75 77 20 5b 64 69 73 61 62 6c 65 64 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 75 4c 74 30 75 77 2e 47 70 6f 32 72 51 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 30 57 71 56 34 67 2c 2e 5f 34 47 4d 33 6f 51 7b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 61 6e 79 77 68 65 72 65 7d 2e 55 72 34 6b 4f 51 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 6c 67 7a 67 50 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 7d 2e 65 44 64 5f 66 41 7b 66 69 6c 6c 3a 23 32 35 32 36 32 37 7d 2e 55 31 71 43 5a 77 7b 66 69 6c 6c 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 7d 2e 49 67 66 49 78 77 2c 2e 50 75 4a 54 53 67 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 Data Ascii: 8px}.uLt0uw [disabled]{pointer-events:none}.uLt0uw.Gpo2rQ{height:100%}._0WqV4g,._4GM3oQ{overflow-wrap:anywhere}.Ur4kOQ{pointer-events:none}.lgzgPw{display:block;margin:-1px}.eDd_fA{fill:#252627}.U1qCZw{fill:hsla(0,0%,100%,.15)}.IgfIxw,.PuJTSg{margin:4px 0
2024-03-27 20:20:02 UTC	514	IN	Data Raw: 44 75 77 78 41 51 29 7d 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 50 68 43 49 69 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 49 4a 2d 43 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 46 6f 4c 77 38 67 29 7d 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 2e 7a 51 6c 75 73 51 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 4e 76 56 6d 41 29 7d 2e 51 6b 64 36 36 41 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 41 76 76 56 67 29 7d 2e 51 6b 64 36 36 41 2e 51 6b 64 36 36 41 2e 6b 64 7a 52 4c 77 2e 5a 69 76 4c 6f 67 7b 62 61 63 6b 67 72 Data Ascii: DuwxAQ)}.Qkd66A.kdzRLw{background-color:var(--PhCIig);border-color:var(--5IJ-CA);color:var(--FoLw8g)}.Qkd66A.kdzRLw.zQlusQ:hover{background-color:var(--5NvVmA)}.Qkd66A.Qkd66A.kdzRLw:active{background-color:var(--TAvvVg)}.Qkd66A.Qkd66A.kdzRLw.ZivLog{backgr
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 64 4f 59 41 29 3b 2d 2d 50 4b 33 33 34 67 3a 76 61 72 28 2d 2d 74 2d 69 38 68 77 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 76 61 72 28 2d 2d 36 38 39 39 73 51 29 3b 2d 2d 44 75 77 78 41 51 3a 76 61 72 28 2d 2d 39 51 52 5f 68 67 29 7d 2e 4e 54 32 79 43 67 7b 2d 2d 49 45 4d 45 39 51 3a 76 61 72 28 2d 2d 4b 31 32 78 6a 77 29 3b 2d 2d 47 4c 76 49 46 77 3a 76 61 72 28 2d 2d 5f 54 36 33 4a 41 29 3b 2d 2d 4b 58 54 4f 77 51 3a 76 61 72 28 2d 2d 42 32 54 48 66 67 29 3b 2d 2d 50 4b 33 33 34 67 3a 76 61 72 28 2d 2d 51 59 41 5f 2d 41 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 76 61 72 28 2d 2d 63 74 47 44 33 77 29 3b 2d 2d 44 75 77 78 41 51 3a 76 61 72 28 2d 2d 6f 58 6a 65 6b 77 29 3b 2d 2d 50 68 43 49 69 67 3a 76 61 72 28 2d 2d 68 6a 56 73 72 77 29 3b 2d 2d 46 6f 4c 77 38 67 3a 76 61 Data Ascii: dOYA);--PK334g:var(--t-i8hw);--dKLL4A:var(--6899sQ);--DuwxAQ:var(--9QR_hg)}.NT2yCg{--IEME9Q:var(--K12xjw);--GLvIFw:var(--_T63JA);--KXTOwQ:var(--B2THfg);--PK334g:var(--QYA_-A);--dKLL4A:var(--ctGD3w);--DuwxAQ:var(--oXjekw);--PhCIig:var(--hjVsrw);--FoLw8g:va
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 66 3b 2d 2d 4b 58 54 4f 77 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 50 4b 33 33 34 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 44 75 77 78 41 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 7d 2e 73 64 70 5f 76 51 7b 2d 2d 49 45 4d 45 39 51 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 47 4c 76 49 46 77 3a 23 66 66 66 3b 2d 2d 4b 58 54 4f 77 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 50 4b 33 33 34 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 64 4b 4c 4c 34 41 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 44 75 77 78 41 51 3a 68 73 6c 61 28 30 2c 30 Data Ascii: f;--KXTOwQ:hsla(0,0%,100%,.15);--PK334g:hsla(0,0%,100%,.2);--dKLL4A:hsla(0,0%,100%,.15);--DuwxAQ:hsla(0,0%,100%,.7)}.sdp_vQ{--IEME9Q:transparent;--GLvIFw:#fff;--KXTOwQ:hsla(0,0%,100%,.15);--PK334g:hsla(0,0%,100%,.15);--dKLL4A:transparent;--DuwxAQ:hsla(0,0
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 71 33 6f 31 51 77 3e 2e 5f 33 38 6f 57 76 51 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 79 53 6a 68 41 3e 2e 5f 33 38 6f 57 76 51 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 62 6f 34 56 73 67 3e 2e 5f 33 38 6f 57 76 51 7b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 7d 2e 63 77 4f 5a 4d 67 3e 2e 5f 33 38 6f 57 76 51 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 63 77 4f 5a 4d 67 2e 45 70 68 38 48 67 3e 2e 5f 33 38 6f 57 76 51 2c 2e 63 77 4f 5a 4d 67 2e 6a 51 42 72 36 41 3e 2e 5f 33 38 6f 57 76 51 7b 66 6c 65 78 3a 69 6e 69 74 69 61 6c 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 75 62 57 36 71 77 3e 2e 5f 33 38 6f 57 76 51 Data Ascii: te-space:nowrap}.q3o1Qw>._38oWvQ{line-height:1;padding:0}.HySjhA>._38oWvQ{padding:0 4px}.bo4Vsg>._38oWvQ{padding:0 10px}.cwOZMg>._38oWvQ{margin:auto}.cwOZMg.Eph8Hg>._38oWvQ,.cwOZMg.jQBr6A>._38oWvQ{flex:initial;margin-left:0;margin-right:0}.ubW6qw>._38oWvQ
2024-03-27 20:20:02 UTC	1050	IN	Data Raw: 2d 2d 70 55 56 37 68 41 29 7d 2e 51 5f 56 59 5f 67 2e 5a 69 76 4c 6f 67 2e 5a 69 76 4c 6f 67 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 53 66 68 33 41 29 7d 2e 51 5f 56 59 5f 67 2e 76 54 70 6a 53 67 2e 76 54 70 6a 53 67 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 55 56 37 68 41 29 7d 2e 51 6b 64 36 36 41 2e 51 5f 56 59 5f 67 3e 2e 5f 33 38 6f 57 76 51 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 75 78 7a 47 77 77 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 38 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 36 34 70 78 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 38 70 78 20 2d 20 76 61 72 28 2d 2d 34 6f 63 55 43 67 29 29 7d 2e 75 78 7a 47 77 77 20 2e 5f 33 38 6f 57 76 51 7b 66 6f 6e 74 Data Ascii: --pUV7hA)}.Q_VY_g.ZivLog.ZivLog{color:var(--fSfh3A)}.Q_VY_g.vTpjSg.vTpjSg{color:var(--pUV7hA)}.Qkd66A.Q_VY_g>._38oWvQ{padding:0}.uxzGww{flex-direction:column;height:auto;max-width:88px;min-width:64px;padding:calc(8px - var(--4ocUCg))}.uxzGww ._38oWvQ{font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49767	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/2289fb2c6b2e265e.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1180	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 215 Connection: close CF-Ray: 86b2142829d9056f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151665 Cache-Control: public, max-age=31556926 ETag: "24a6c7b02a77d83656e7c5b5ac1d2a9a" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Tue, 26 Mar 2024 02:06:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 1neqSOGPVhioo2V2mPD3xLLK80ubzzpqstP85BkPkMeykpoI5OJsODQg2jFF2g34YnGPtCt9QqU= x-amz-replication-status: PENDING x-amz-request-id: JGQHD0QJ5P89XZ9B x-amz-server-side-encryption: AES256 x-amz-version-id: oG6YqTOli9_2iNG65ld9amTq7hXWP0F0 X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 54 71 70 55 41 36 4c 6f 52 36 46 5a 74 62 4d 5a 6e 65 78 62 45 38 66 4a 76 42 44 51 77 57 42 62 61 55 36 48 63 6a 47 6f 6b 44 61 30 68 42 4f 36 67 70 49 6d 57 4a 44 25 32 46 74 30 6f 45 5a 68 57 37 31 6c 6e 48 33 6d 6c 43 33 25 32 46 49 6a 53 56 36 45 65 45 6c 71 74 77 6d 51 46 45 63 6b 53 43 35 58 47 4a 6d 55 4f 77 78 44 70 5a 48 4b 36 74 57 4a 51 33 56 6e 7a 70 36 6e 52 71 36 72 58 63 46 42 4e 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTqpUA6LoR6FZtbMZnexbE8fJvBDQwWBbaU6HcjGokDa0hBO6gpImWJD%2Ft0oEZhW71lnH3mlC3%2FIjSV6EeElqtwmQFEckSC5XGJmUOwxDpZHK6tWJQ3Vnzp6nRq6rXcFBNI%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:02 UTC	215	IN	Data Raw: 2e 45 33 45 73 68 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 45 33 45 73 68 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 2e 58 76 75 5a 78 67 2c 2e 5f 76 58 76 65 51 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 76 53 45 45 4c 51 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 61 6c 6c 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 32 32 38 39 66 62 32 63 36 62 32 65 32 36 35 65 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .E3Eshw{transform:scaleX(-1) rotate(45deg)}[dir=rtl] .E3Eshw{transform:rotate(45deg)}.XvuZxg,._vXveQ{word-break:break-word}.vSEELQ{word-break:break-all}/# sourceMappingURL=sourcemaps/2289fb2c6b2e265e.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49768	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:01 UTC	806	OUT	GET /web/5bdac62b91201b5d.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1181	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:01 GMT Content-Type: text/css Content-Length: 2208 Connection: close CF-Ray: 86b214282ed63b17-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151665 Cache-Control: public, max-age=31556926 ETag: "22eb93743380b6da5208eed643f8d337" Expires: Fri, 28 Mar 2025 02:08:47 GMT Last-Modified: Tue, 26 Mar 2024 02:06:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: jek58BgOqdkKoixPsyK5+MqqnoxQHEu/CbNbNoQmfxGuONkx9KQvndWWwipTxpJOsc8ilGVA/DQ= x-amz-replication-status: PENDING x-amz-request-id: JGQRWZK4NKE2Z1JD x-amz-server-side-encryption: AES256 x-amz-version-id: SCGGn7TNRG.J4b3XL_Q5bRqYubIRqAHn X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 4d 6d 66 25 32 42 64 31 46 6d 57 33 47 25 32 42 4a 43 46 61 55 4c 69 71 53 37 64 6b 65 52 64 79 6d 73 6f 36 6b 56 77 4d 4a 39 31 78 52 35 6d 47 53 78 35 7a 78 6d 52 38 56 75 69 30 4c 32 54 55 68 4b 70 53 4d 4b 4a 4b 4b 65 6c 43 59 33 6e 33 4b 7a 67 6b 64 43 6c 6c 62 6d 63 67 5a 52 6e 4f 68 4c 51 36 55 68 4c 77 77 6f 50 69 65 32 47 42 71 71 48 48 70 43 63 44 7a 55 63 53 71 74 38 38 67 6a 61 78 30 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Mmf%2Bd1FmW3G%2BJCFaULiqS7dkeRdymso6kVwMJ91xR5mGSx5zxmR8Vui0L2TUhKpSMKJKKelCY3n3KzgkdCllbmcgZRnOhLQ6UhLwwoPie2GBqqHHpCcDzUcSqt88gjax0c%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:02 UTC	1209	IN	Data Raw: 2e 5f 32 45 39 59 38 41 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 2d 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 75 6e 73 65 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 2e 5f 38 76 6c 62 49 67 20 2e 5f 32 45 39 59 38 41 7b 6d 61 72 67 69 6e 3a 2d 38 70 78 7d 2e 57 6f 45 35 4e 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 6c 69 67 68 74 7b 2d 2d 51 6a 6f 41 61 51 3a 23 66 36 66 37 66 38 7d 2e 64 61 72 6b 7b 2d 2d 51 6a 6f 41 61 51 3a 23 32 35 32 36 32 37 7d 2e 57 72 6b 30 33 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 44 62 6c 59 77 29 3b 62 6f 72 64 65 Data Ascii: ._2E9Y8A{color:inherit;font-size:inherit;margin:-4px;max-width:unset;vertical-align:baseline}._8vlbIg ._2E9Y8A{margin:-8px}.WoE5Nw{display:flex}.light{--QjoAaQ:#f6f7f8}.dark{--QjoAaQ:#252627}.Wrk03w{align-items:stretch;background-color:var(--bDblYw);borde
2024-03-27 20:20:02 UTC	999	IN	Data Raw: 67 3a 3a 2d 77 65 62 6b 69 74 2d 63 6f 6e 74 61 63 74 73 2d 61 75 74 6f 2d 66 69 6c 6c 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 73 5f 4a 47 63 67 3a 70 6c 61 63 65 68 6f 6c 64 65 72 2d 73 68 6f 77 6e 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 73 5f 4a 47 63 67 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 7a 58 50 44 41 29 7d 2e 73 5f 4a 47 63 67 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 53 66 68 33 41 29 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 72 72 38 47 6a 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: g::-webkit-contacts-auto-fill-button{position:absolute;right:0;visibility:hidden}[dir=rtl] .s_JGcg:placeholder-shown{direction:rtl}.s_JGcg::placeholder{color:var(--fzXPDA)}.s_JGcg:disabled{color:var(--fSfh3A);cursor:not-allowed}.rr8GjQ{align-items:center;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49769	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-27 20:20:02 UTC	804	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=38573 Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-27 20:20:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49770	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	806	OUT	GET /web/7c36a23bcd1e46cc.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1184	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/css Content-Length: 27539 Connection: close CF-Ray: 86b2142a8f34082d-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792651 Cache-Control: public, max-age=31556926 ETag: "7ced6bc2350b09156dc369b92c363b19" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Fri, 15 Mar 2024 02:41:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: rqdf2O5ac6nX7ah+jGuaIjTn1/GRuoquJunqTTEYOYcvQGBGA5RecwM3u/gj2g0IxHRYOQhvhe0= x-amz-replication-status: COMPLETED x-amz-request-id: EW2AKVG2KFS0YQGZ x-amz-server-side-encryption: AES256 x-amz-version-id: MZ5Ju11UT8.ySmTWQEusIaOpnQq.DFUH X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 72 71 59 75 77 6b 5a 4e 4b 7a 52 37 4c 4d 4b 42 6e 52 5a 44 44 57 4f 47 47 71 32 74 53 48 75 53 45 51 6c 5a 51 7a 25 32 46 6d 34 41 48 69 4a 6b 38 52 39 53 37 61 54 57 50 70 41 46 25 32 46 77 47 6c 6c 59 44 33 61 66 36 79 50 6a 6f 55 53 6c 38 4f 64 6f 61 33 31 48 6d 49 63 79 43 44 4e 44 42 51 43 55 30 46 69 46 4b 71 64 77 6b 66 47 6c 78 42 70 6b 73 54 32 4f 39 66 56 45 61 46 4c 77 72 61 74 79 44 76 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rqYuwkZNKzR7LMKBnRZDDWOGGq2tSHuSEQlZQz%2Fm4AHiJk8R9S7aTWPpAF%2FwGllYD3af6yPjoUSl8Odoa31HmIcyCDNDBQCU0FiFKqdwkfGlxBpksT2O9fVEaFLwratyDvk%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:02 UTC	1206	IN	Data Raw: 2e 51 70 77 57 6d 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 57 37 66 78 65 41 2c 2e 5f 31 63 68 69 71 41 2c 2e 62 4d 49 53 65 51 7b 66 69 6c 6c 3a 23 30 64 31 32 31 36 3b 73 74 72 6f 6b 65 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 70 78 3b 70 61 69 6e 74 2d 6f 72 64 65 72 3a 73 74 72 6f 6b 65 7d 2e 52 74 31 48 5f 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 37 31 25 2c 2e 32 32 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 Data Ascii: .QpwWmA{height:100%;left:0;overflow:hidden;position:absolute;top:0;width:100%}.W7fxeA,._1chiqA,.bMISeQ{fill:#0d1216;stroke:hsla(0,0%,100%,.3);stroke-width:2px;paint-order:stroke}.Rt1H_w{background-color:hsla(0,0%,71%,.22);height:100%;left:0;top:0;width:10
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 34 63 32 72 44 67 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 47 78 55 73 66 77 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 65 61 73 65 7d 2e 61 32 36 58 75 77 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 32 36 58 75 77 20 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 61 32 36 58 75 77 20 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 66 62 7a 4b 69 77 7b Data Ascii: 4c2rDg{height:100%;width:100%}.GxUsfw{transition:transform .3s ease}.a26Xuw{height:100%;width:100%}.a26Xuw ::-moz-selection{-moz-user-select:none;user-select:none}.a26Xuw ::selection{-webkit-user-select:none;-moz-user-select:none;user-select:none}.fbzKiw{
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 74 79 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 70 75 55 51 43 77 7b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 4d 69 69 42 36 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 35 33 2c 37 31 2c 39 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 4d 69 69 42 36 67 2c 2e 50 4f 45 4f 45 41 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 53 6e 73 4b 67 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 38 70 78 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 65 61 73 65 2d 69 6e 7d 2e 75 6c 4b 70 71 77 7b 70 6f 73 69 74 69 6f Data Ascii: ty .15s ease-in-out}.puUQCw{opacity:0;pointer-events:none}.MiiB6g{background-color:rgba(53,71,90,.2);border-radius:4px;padding:4px}.MiiB6g,.POEOEA{position:absolute}._SnsKg{color:#fff;margin:8px;right:0;top:0;transition:opacity .1s ease-in}.ulKpqw{positio
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 55 41 51 41 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 74 58 70 48 73 67 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 63 58 34 46 41 77 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 7a 56 59 70 33 77 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 7d 2e 56 68 49 4c 79 67 7b 62 6f 74 74 6f 6d 3a 30 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 Data Ascii: ight:0;top:0}.lPUAQA{direction:ltr;position:relative}.tXpHsg{bottom:0;left:0;pointer-events:none;position:absolute;right:0;top:0}.cX4FAw{overflow:hidden}.zVYp3w{transform-origin:0 0}.VhILyg{bottom:0;direction:ltr;left:0;pointer-events:none;position:absolu
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 70 3a 30 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 33 7d 2e 41 64 42 62 68 51 7b 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 22 6b 65 72 6e 22 20 30 2c 22 63 61 6c 74 22 20 30 2c 22 6c 69 67 61 22 20 30 2c 22 63 6c 69 67 22 20 30 2c 22 64 6c 69 67 22 20 30 2c 22 68 6c 69 67 22 20 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 Data Ascii: p:0;-webkit-user-select:text;-moz-user-select:text;user-select:text;visibility:visible;width:100%;z-index:3}.AdBbhQ{font-feature-settings:"kern" 0,"calt" 0,"liga" 0,"clig" 0,"dlig" 0,"hlig" 0;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:gray
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 7d 2e 63 67 48 67 62 41 20 2e 52 50 7a 63 64 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 68 47 62 63 59 41 20 2e 63 67 48 67 62 41 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 76 65 72 74 69 63 61 6c 2d 6d 65 74 72 69 63 73 2d 61 64 6a 75 73 74 6d 65 6e 74 29 2a 31 65 6d 29 7d 2e 68 47 62 63 59 41 20 2e 63 67 48 67 62 41 2e 5f 62 73 44 68 77 20 2e 63 67 48 67 62 41 2e 5f 62 73 44 68 77 7b 74 6f 70 3a 30 7d 2e 68 47 62 63 59 41 20 2e 63 67 48 67 62 41 2c 2e 68 47 62 63 59 41 20 2e 65 62 4c 68 4d 51 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 70 61 72 61 2d 73 70 61 63 69 6e 67 29 2a 31 65 6d 29 7d 2e 68 47 62 63 59 41 20 2e 50 61 Data Ascii: absolute;white-space:pre}.cgHgbA .RPzcdw{display:inline-block}.hGbcYA .cgHgbA{top:calc(var(--vertical-metrics-adjustment)1em)}.hGbcYA .cgHgbA._bsDhw .cgHgbA._bsDhw{top:0}.hGbcYA .cgHgbA,.hGbcYA .ebLhMQ{margin-top:calc(var(--para-spacing)1em)}.hGbcYA .Pa
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 59 41 20 2e 6b 56 55 6f 7a 51 20 2e 55 74 61 64 44 77 7b 72 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 2d 69 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 7d 2e 48 4d 43 4e 38 67 20 2e 58 70 32 34 4e 77 20 2e 55 74 61 64 44 77 2c 2e 68 6e 36 4c 76 67 20 2e 58 70 32 34 4e 77 20 2e 55 74 61 64 44 77 7b 74 6f 70 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 2d 69 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 7d 2e 48 4d 43 4e 38 67 20 2e 6b 56 55 6f 7a 51 20 2e 55 74 61 64 44 77 2c 2e 68 6e 36 4c 76 67 20 2e 6b 56 55 6f 7a 51 20 2e 55 74 61 64 44 77 7b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 2d 69 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 7d 2e 68 47 62 63 59 41 20 2e 58 70 32 34 4e 77 20 2e 55 74 61 64 44 77 3e 2e 55 74 Data Ascii: YA .kVUozQ .UtadDw{right:calc(var(--head-indent)1em-1)}.HMCN8g .Xp24Nw .UtadDw,.hn6Lvg .Xp24Nw .UtadDw{top:calc(var(--head-indent)1em-1)}.HMCN8g .kVUozQ .UtadDw,.hn6Lvg .kVUozQ .UtadDw{bottom:calc(var(--head-indent)1em-1)}.hGbcYA .Xp24Nw .UtadDw>.Ut
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 7b 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 76 61 72 28 2d 2d 68 65 61 64 2d 69 6e 64 65 6e 74 29 2a 31 65 6d 2a 2d 31 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 31 65 6d 7d 2e 68 47 62 63 59 41 20 2e 55 74 61 64 44 77 20 2e 5f 33 6b 6f 51 45 41 2e 58 70 32 34 4e 77 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 30 7d 2e 68 47 62 63 59 41 20 2e 55 74 61 64 44 77 20 2e 5f 33 6b 6f 51 45 41 2e 6b 56 55 6f 7a 51 3a 62 65 66 6f 72 65 7b 72 69 67 68 74 3a 30 7d 2e 48 4d 43 4e 38 67 20 2e 55 74 61 64 44 77 20 2e 5f 33 6b 6f 51 45 41 2e 58 70 32 34 4e 77 3a 62 65 66 6f 72 65 2c 2e 68 6e 36 4c 76 67 20 2e 55 74 61 64 44 77 20 2e 5f 33 6b 6f 51 45 41 2e 58 70 32 34 4e 77 3a 62 65 66 6f 72 65 7b 74 6f 70 3a 30 7d 2e 48 4d 43 4e 38 67 20 2e 55 74 61 64 44 77 20 2e 5f 33 6b 6f Data Ascii: {bottom:calc(var(--head-indent)1em-1);padding-top:.1em}.hGbcYA .UtadDw ._3koQEA.Xp24Nw:before{left:0}.hGbcYA .UtadDw ._3koQEA.kVUozQ:before{right:0}.HMCN8g .UtadDw ._3koQEA.Xp24Nw:before,.hn6Lvg .UtadDw ._3koQEA.Xp24Nw:before{top:0}.HMCN8g .UtadDw ._3ko
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 7d 2e 5f 32 6a 69 6f 67 67 2e 5f 34 63 34 34 4e 67 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 32 20 6c 69 73 74 2d 33 20 6c 69 73 74 2d 34 20 6c 69 73 74 2d 35 20 6c 69 73 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 7d 2e 5f 32 6a 69 6f 67 67 2e 50 64 69 62 62 77 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 33 20 6c 69 73 74 2d 34 20 6c 69 73 74 2d 35 20 6c 69 73 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 7d 2e 5f 32 6a 69 6f 67 67 2e 77 79 36 30 39 67 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6c 69 73 74 2d 34 20 6c 69 73 74 2d 35 20 6c 69 73 74 2d 36 20 6c 69 73 74 2d 37 20 6c 69 73 74 2d 38 7d 2e 5f 32 6a 69 6f 67 67 2e 75 54 75 6d 70 67 7b 63 6f 75 6e Data Ascii: t-6 list-7 list-8}._2jiogg._4c44Ng{counter-reset:list-2 list-3 list-4 list-5 list-6 list-7 list-8}._2jiogg.Pdibbw{counter-reset:list-3 list-4 list-5 list-6 list-7 list-8}._2jiogg.wy609g{counter-reset:list-4 list-5 list-6 list-7 list-8}._2jiogg.uTumpg{coun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49771	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	806	OUT	GET /web/95b3da1a84e71c81.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/css Content-Length: 13330 Connection: close CF-Ray: 86b2142aca0120ca-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151666 Cache-Control: public, max-age=31556926 ETag: "8fffc4ae918545148c514c3e3678ba51" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Tue, 26 Mar 2024 02:06:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: sIAsDOvEagGoABmr3Gngr0RIw82bAbkPHbazsCFFLndG4hGnTgFrxTCZvu/Kx2JW0JxiyfQraso= x-amz-replication-status: PENDING x-amz-request-id: JGQJ0CWCEW651QNS x-amz-server-side-encryption: AES256 x-amz-version-id: fS1rXlcLa7ixppfMeVaeehzsxOCGfS2t X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 65 69 4a 78 25 32 42 51 4b 44 39 42 53 4a 66 50 30 4b 59 25 32 42 47 49 6d 73 73 25 32 42 31 48 6d 63 48 47 4a 64 73 42 4f 49 6b 6a 59 5a 55 77 70 32 6e 45 34 51 4c 42 63 47 25 32 42 70 66 4f 54 45 45 69 45 54 38 77 5a 6a 49 57 43 30 66 4a 4b 30 61 39 36 5a 57 4b 54 6f 38 6b 58 70 7a 72 49 30 64 6f 50 69 7a 56 37 69 6a 4b 4c 25 32 42 25 32 46 54 30 4a 31 63 47 71 73 33 79 6a 34 63 7a 74 4e 30 58 62 4a 67 71 51 62 42 35 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ieiJx%2BQKD9BSJfP0KY%2BGImss%2B1HmcHGJdsBOIkjYZUwp2nE4QLBcG%2BpfOTEEiET8wZjIWC0fJK0a96ZWKTo8kXpzrI0doPizV7ijKL%2B%2FT0J1cGqs3yj4cztN0XbJgqQbB54%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:02 UTC	1200	IN	Data Raw: 2e 5f 31 49 35 78 35 67 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 62 56 34 55 31 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 7d 2e 58 73 51 4e 56 67 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 53 50 58 7a 69 67 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 77 69 64 74 68 3a 30 7d 2e 5a 4a 6f 6e 37 51 7b 61 6c 69 67 6e 2d Data Ascii: ._1I5x5g{-webkit-tap-highlight-color:transparent;cursor:pointer;display:flex}.bV4U1g{align-items:center;padding:4px 0}.XsQNVg{cursor:not-allowed}.SPXzig{-webkit-appearance:none;-moz-appearance:none;appearance:none;margin:0;opacity:0;width:0}.ZJon7Q{align-
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2b 2e 74 64 5a 44 39 41 3a 6e 6f 74 28 2e 45 50 45 75 7a 67 2c 2e 74 65 36 78 42 77 29 3e 2e 41 71 66 5a 5a 51 2c 2e 5f 31 49 35 78 35 67 2e 6e 61 33 56 70 77 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2b 2e 74 64 5a 44 39 41 3a 6e 6f 74 28 2e 45 50 45 75 7a 67 2c 2e 74 65 36 78 42 77 29 3e 2e 49 62 76 4d 52 67 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 58 67 69 74 51 29 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 5f 31 49 35 78 35 67 2e 6e 61 33 56 70 77 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 3a 68 6f 76 65 72 20 2e 53 50 58 7a 69 67 3a 6e 6f 74 28 3a 61 63 74 69 76 65 Data Ascii: :not(.XsQNVg):hover .SPXzig:not(:active)+.tdZD9A:not(.EPEuzg,.te6xBw)>.AqfZZQ,._1I5x5g.na3Vpw:not(.XsQNVg):hover .SPXzig:not(:active)+.tdZD9A:not(.EPEuzg,.te6xBw)>.IbvMRg{color:var(--sXgitQ);opacity:1}._1I5x5g.na3Vpw:not(.XsQNVg):hover .SPXzig:not(:active
2024-03-27 20:20:02 UTC	520	IN	Data Raw: 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 2c 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 74 65 36 78 42 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 36 70 78 2c 30 20 30 20 30 20 34 70 78 20 76 61 72 28 2d 2d 48 38 6e 45 71 77 29 7d 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 3e 2e 41 71 66 5a 5a 51 2c 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 61 63 74 69 76 65 2b 2e 74 64 5a 44 39 41 2e 45 50 45 75 7a 67 3e 2e 49 62 76 4d 52 67 2c 2e 5f 31 49 35 78 35 67 3a 6e Data Ascii: ctive+.tdZD9A.EPEuzg,._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.te6xBw{box-shadow:inset 0 0 0 16px,0 0 0 4px var(--H8nEqw)}._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.EPEuzg>.AqfZZQ,._1I5x5g:not(.XsQNVg) .SPXzig:active+.tdZD9A.EPEuzg>.IbvMRg,._1I5x5g:n
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 65 74 3a 32 70 78 7d 2e 5f 31 49 35 78 35 67 3a 6e 6f 74 28 2e 58 73 51 4e 56 67 29 20 2e 53 50 58 7a 69 67 3a 66 6f 63 75 73 2b 2e 74 64 5a 44 39 41 2e 69 6f 6b 61 39 51 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 5f 72 6b 6c 6b 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 70 78 7d 2e 64 55 44 78 47 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 55 55 5a 6c 58 77 7b 66 6c 65 78 3a 31 7d 2e 72 73 30 4a 69 51 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 51 38 4c 44 75 77 7b 6d 61 72 67 69 6e 3a 2d 34 70 78 7d 2e 55 53 45 32 52 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: et:2px}._1I5x5g:not(.XsQNVg) .SPXzig:focus+.tdZD9A.ioka9Q{outline:none}._rklkw{margin-right:4px}.dUDxGw{display:flex;flex-direction:column;flex-grow:1}.UUZlXw{flex:1}.rs0JiQ{min-height:32px}.Q8LDuw{margin:-4px}.USE2Rg{border-radius:9999px;display:inline-f
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 5f 33 5f 36 63 77 51 2e 6a 77 48 67 43 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 56 47 78 65 68 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 36 6b 44 4e 6c 41 29 7d 2e 4c 30 58 6f 6a 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 43 4f 58 67 73 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 44 6f 34 4c 63 41 29 7d 2e 4c 30 58 6f 6a 51 2e 5f 31 41 5f 45 56 77 3a 68 6f 76 65 72 3a 6e 6f 74 28 2e 6a 77 48 67 43 51 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 45 75 44 4c 59 41 29 7d 2e 4c 30 58 6f 6a 51 2e 41 5f 75 30 34 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 35 4b 43 37 6c 77 29 7d 2e 4c 30 58 6f 6a 51 2e 6a 77 48 67 43 51 7b 62 61 63 Data Ascii: _3_6cwQ.jwHgCQ{background-color:var(--VGxehA);color:var(--6kDNlA)}.L0XojQ{background-color:var(--COXgsg);color:var(--Do4LcA)}.L0XojQ._1A_EVw:hover:not(.jwHgCQ){background-color:var(--EuDLYA)}.L0XojQ.A_u04w{background-color:var(--5KC7lw)}.L0XojQ.jwHgCQ{bac
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 20 36 2e 37 35 70 78 29 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 70 78 20 34 70 78 3b 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 70 78 20 34 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 7d 2e 6a 39 50 44 43 67 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 2d 34 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 2d 34 70 78 7d 2e 68 64 51 38 59 51 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 34 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 34 70 78 7d 2e 5f 34 51 61 68 67 51 20 2e 53 47 32 70 76 77 7b 2d 2d 6d 61 73 6b 2d 65 6e 64 3a 38 70 78 3b 2d 2d 6d 61 73 6b 2d 74 6f 70 3a 38 70 78 7d 7d 2e 6d 37 76 33 5f 41 2e 5f 32 41 56 5f 78 77 7b 61 6e 69 6d 61 74 69 6f 6e 3a 55 5f 78 5f 4f 51 20 32 73 20 65 61 Data Ascii: 6.75px);-webkit-mask-position:-4px 4px;mask-position:-4px 4px;padding:4px}.j9PDCg .SG2pvw{--mask-end:-4px;--mask-top:-4px}.hdQ8YQ .SG2pvw{--mask-end:4px;--mask-top:4px}._4QahgQ .SG2pvw{--mask-end:8px;--mask-top:8px}}.m7v3_A._2AV_xw{animation:U_x_OQ 2s ea
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 25 32 33 61 29 27 20 64 3d 27 4d 30 20 30 68 33 32 76 33 32 48 30 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 5f 32 5a 7a 75 74 41 2e 4a 73 46 6f 77 67 20 2e 5f 34 55 67 42 6f 51 20 73 76 67 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 77 69 64 74 68 3d 27 33 32 27 20 68 65 69 67 68 74 3d 27 33 32 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 64 65 66 73 25 33 45 25 33 43 6d 61 73 6b 20 69 64 3d 27 61 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 20 64 3d Data Ascii: %23a)' d='M0 0h32v32H0z'/%3E%3C/svg%3E")}[dir=rtl] ._2ZzutA.JsFowg ._4UgBoQ svg{-webkit-mask-image:url("data:image/svg+xml;charset=utf-8,%3Csvg width='32' height='32' xmlns='http://www.w3.org/2000/svg'%3E%3Cdefs%3E%3Cmask id='a'%3E%3Cpath fill='%23fff' d=
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 25 33 43 72 65 63 74 20 78 3d 27 31 34 27 20 79 3d 27 2d 31 30 27 20 77 69 64 74 68 3d 27 34 30 27 20 68 65 69 67 68 74 3d 27 32 30 27 20 72 78 3d 27 31 30 27 2f 25 33 45 25 33 43 2f 6d 61 73 6b 25 33 45 25 33 43 2f 64 65 66 73 25 33 45 25 33 43 70 61 74 68 20 6d 61 73 6b 3d 27 75 72 6c 28 25 32 33 61 29 27 20 64 3d 27 4d 30 20 30 68 33 32 76 33 32 48 30 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 29 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 5f 32 5a 7a 75 74 41 2e 77 32 65 6d 46 77 20 2e 5f 34 55 67 42 6f 51 20 73 76 67 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 20 77 69 64 74 68 3d 27 33 32 27 20 68 65 69 Data Ascii: %3Crect x='14' y='-10' width='40' height='20' rx='10'/%3E%3C/mask%3E%3C/defs%3E%3Cpath mask='url(%23a)' d='M0 0h32v32H0z'/%3E%3C/svg%3E")}[dir=rtl] ._2ZzutA.w2emFw ._4UgBoQ svg{-webkit-mask-image:url("data:image/svg+xml;charset=utf-8,%3Csvg width='32' hei
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 65 66 74 3a 33 32 70 78 7d 2e 5f 31 38 6e 74 5f 41 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 31 38 6e 74 5f 41 20 2e 59 78 72 4d 67 41 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 7d 2e 59 78 72 4d 67 41 20 2e 5f 31 38 6e 74 5f 41 20 2e 59 78 72 4d 67 41 2e 42 6e 7a 33 70 41 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 59 78 72 4d 67 41 20 2e 5f 31 38 6e 74 5f 41 20 2e 59 78 72 4d 67 41 2e 5f 32 35 76 4e 57 51 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 70 78 7d 2e 78 32 72 54 36 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4b 65 5f 50 5f 77 7b 6c 65 66 74 3a 2d 38 70 78 7d 2e 4b 65 5f 50 5f 77 2c 2e 68 4c 38 36 37 77 7b 70 Data Ascii: eft:32px}._18nt_A{position:relative}._18nt_A .YxrMgA{padding-left:16px}.YxrMgA ._18nt_A .YxrMgA.Bnz3pA{padding-top:4px}.YxrMgA ._18nt_A .YxrMgA._25vNWQ{padding-top:8px}.x2rT6Q{display:block;height:16px;position:relative}.Ke_P_w{left:-8px}.Ke_P_w,.hL867w{p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49772	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	1229	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dc6b543c1346/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	699	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: max-age=14400, public x-content-type-options: nosniff vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kni75fIJBj%2Fx4wbkoCPay278dY9npp%2BIAnNlTCd5BI99opSViPLAqH%2FSbtnnt7SR8zL497eciLlb4TF3Spw7uScDMN%2Fxwqs73GxJ7yC3tqoWW4BbkHTCHVJXxow4sJ0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b2142bb9908f16-IAD
2024-03-27 20:20:02 UTC	670	IN	Data Raw: 31 65 62 39 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 32 39 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 31 36 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 39 38 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 34 36 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 32 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 55 28 32 33 32 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 33 36 29 29 2f 37 Data Ascii: 1eb9window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(299))/1*(-parseInt(U(216))/2)+parseInt(U(298))/3+-parseInt(U(246))/4+-parseInt(U(224))/5+parseInt(U(232))/6+-parseInt(U(236))/7
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 30 28 32 39 30 29 5d 5b 61 30 28 32 34 32 29 5d 26 26 43 5b 61 30 28 32 36 34 29 5d 3f 43 5b 61 30 28 32 39 30 29 5d 5b 61 30 28 32 34 32 29 5d 28 6e 65 77 20 43 5b 28 61 30 28 32 36 34 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 32 32 37 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 32 35 31 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 32 33 39 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 32 36 30 29 5d 5b 61 30 28 32 38 39 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 32 35 31 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6c 28 43 Data Ascii: 0(290)][a0(242)]&&C[a0(264)]?C[a0(290)][a0(242)](new C[(a0(264))](H)):function(N,a1,O){for(a1=a0,N[a1(227)](),O=0;O<N[a1(251)];N[O]===N[O+1]?N[a1(239)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(260)][a0(289)](I),J=0;J<H[a0(251)];K=H[J],L=l(C
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 30 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 2e 38 39 7c 54 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 30 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 32 38 36 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 31 2e 39 33 26 54 7c 4f 3c 3c 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 30 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 33 31 31 29 5d 28 32 2c 4d 29 2c Data Ascii: P==E-1?(P=0,N[a6(308)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1.89\|T,E-1==P?(P=0,N[a6(308)](F(O)),O=0):P++,T=0,G++);for(T=J[a6(286)](0),G=0;16>G;O=1.93&T\|O<<1,E-1==P?(P=0,N[a6(308)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[a6(311)](2,M),
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 31 31 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 31 31 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 31 31 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b Data Ascii: r(Q=0,R=Math[a9(311)](2,2),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[a9(311)](2,8),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[a9(311)](2,16),M=1;
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 7b 61 63 3d 56 2c 66 3d 7b 27 77 70 27 3a 76 5b 61 63 28 32 37 31 29 5d 28 4a 53 4f 4e 5b 61 63 28 32 35 38 29 5d 28 65 29 29 2c 27 73 27 3a 61 63 28 32 34 35 29 7d 2c 43 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2c 43 5b 61 63 28 32 33 37 29 5d 28 61 63 28 33 30 37 29 2c 61 63 28 32 38 32 29 2b 67 5b 61 63 28 32 37 38 29 5d 5b 61 63 28 32 31 32 29 5d 2b 61 63 28 32 37 39 29 2b 64 29 2c 43 5b 61 63 28 32 37 30 29 5d 28 61 63 28 32 31 38 29 2c 61 63 28 32 36 36 29 29 2c 43 5b 61 63 28 32 33 35 29 5d 28 4a 53 4f 4e 5b 61 63 28 32 35 38 29 5d 28 66 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 65 2c 64 2c 65 2c 66 2c 43 29 7b 69 66 28 61 65 3d 56 2c 64 3d 67 5b 61 65 28 32 31 35 29 5d 2c 21 64 29 72 65 74 75 72 6e 3b 69 66 28 21 79 28 29 Data Ascii: {ac=V,f={'wp':v[ac(271)](JSON[ac(258)](e)),'s':ac(245)},C=new XMLHttpRequest(),C[ac(237)](ac(307),ac(282)+g[ac(278)][ac(212)]+ac(279)+d),C[ac(270)](ac(218),ac(266)),C[ac(235)](JSON[ac(258)](f))}function B(ae,d,e,f,C){if(ae=V,d=g[ae(215)],!d)return;if(!y()
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 32 31 30 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 64 2c 65 2c 57 29 7b 72 65 74 75 72 6e 20 57 3d 56 2c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 5b 57 28 32 37 34 29 5d 26 26 30 3c 64 5b 57 28 32 37 34 29 5d 5b 57 28 32 33 34 29 5d 5b 57 28 32 35 35 29 5d 5b 57 28 32 33 30 29 5d 28 65 29 5b 57 28 32 36 31 29 5d 28 57 28 32 31 34 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 73 65 6e 64 2c 31 33 37 39 6d 66 6d 6f 7a 75 2c 6f 70 65 6e 2c 69 73 41 72 72 61 79 2c 73 70 6c 69 63 65 2c 74 69 6d 65 6f 75 74 2c 73 79 6d 62 6f 6c 2c 66 72 6f 6d 2c 39 36 35 30 37 59 4e 65 55 76 74 2c 65 72 72 6f 72 Data Ascii: function(f,g,h){return f=f-210,h=e[f],h},b(c,d)}function k(d,e,W){return W=V,e instanceof d[W(274)]&&0<d[W(274)][W(234)][W(255)][W(230)](e)[W(261)](W(214))}function a(ah){return ah='send,1379mfmozu,open,isArray,splice,timeout,symbol,from,96507YNeUvt,error
2024-03-27 20:20:02 UTC	358	IN	Data Raw: 3b 73 57 47 67 6e 32 3b 68 74 6c 73 68 38 3b 50 4d 4a 78 30 3b 4e 79 48 73 73 4c 31 3b 5a 48 6f 53 66 32 3b 51 78 74 49 76 47 31 3b 5a 5a 6d 75 36 2c 64 6f 63 75 6d 65 6e 74 2c 32 38 37 33 36 38 30 4c 4d 78 6d 66 76 2c 69 66 72 61 6d 65 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 73 6f 72 74 2c 73 74 72 69 6e 67 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 63 61 6c 6c 2c 25 32 62 2c 34 35 34 35 33 31 38 69 6c 46 43 6e 61 2c 63 6f 6e 63 61 74 2c 70 72 6f 74 6f 74 79 70 65 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 68 7d 2c 61 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 62 2c 64 2c 65 2c 66 2c 43 29 7b 69 66 28 28 61 62 3d 56 2c 64 3d 67 5b 61 62 28 32 31 35 29 5d 2c 65 3d 33 36 30 30 2c 64 2e Data Ascii: ;sWGgn2;htlsh8;PMJx0;NyHssL1;ZHoSf2;QxtIvG1;ZZmu6,document,2873680LMxmfv,iframe,hasOwnProperty,sort,string,display: none,call,%2b,4545318ilFCna,concat,prototype'.split(','),a=function(){return ah},a()}function y(ab,d,e,f,C){if((ab=V,d=g[ab(215)],e=3600,d.
2024-03-27 20:20:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49773	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	806	OUT	GET /web/b3a01de3e1e9ec62.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/css Content-Length: 7359 Connection: close CF-Ray: 86b2142bc85e68f6-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782034 Cache-Control: public, max-age=31556926 ETag: "3c0f2193830453ba8e90a81dbbb30915" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Fri, 15 Mar 2024 02:41:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9ISifOyFGPQqb0otugwqmaexcBx5UC9i5rtsrqJ1AgmG7scLm2fcO89kEFK9esYjPQab5HGOOj4= x-amz-replication-status: COMPLETED x-amz-request-id: CAZ7BM4GXW3XZ07R x-amz-server-side-encryption: AES256 x-amz-version-id: BHrKJWpF1FGpISYWCPo6Ed.ZxQIgejzD X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 36 55 47 6e 54 6f 56 72 55 38 7a 35 53 5a 44 54 77 77 4e 76 4b 46 62 49 37 5a 4c 37 46 25 32 42 47 46 72 38 4f 62 61 52 5a 6d 70 63 52 25 32 42 73 52 54 33 6a 66 5a 47 62 4d 7a 58 55 78 78 4a 43 30 5a 4a 39 6c 46 78 52 57 7a 39 44 69 7a 66 6d 6a 51 71 63 52 74 48 55 42 5a 74 25 32 42 37 61 66 59 36 57 6b 76 5a 58 6d 52 61 67 71 4e 58 6e 48 37 7a 66 41 43 6b 4e 69 4d 72 6d 6c 56 6a 6d 51 53 37 79 6e 59 39 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6UGnToVrU8z5SZDTwwNvKFbI7ZL7F%2BGFr8ObaRZmpcR%2BsRT3jfZGbMzXUxxJC0ZJ9lFxRWz9DizfmjQqcRtHUBZt%2B7afY6WkvZXmRagqNXnH7zfACkNiMrmlVjmQS7ynY9Q%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:02 UTC	1205	IN	Data Raw: 2e 76 69 78 39 69 41 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 69 67 68 74 7b 2d 2d 55 73 76 37 44 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 65 54 4c 55 61 77 3a 23 30 64 31 32 31 36 3b 2d 2d 58 61 78 6b 34 51 3a 72 67 62 61 28 32 38 2c 33 39 2c 34 38 2c 2e 35 29 7d 2e 64 61 72 6b 7b 2d 2d 55 73 76 37 44 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 65 54 4c 55 61 77 3a 23 66 66 66 3b 2d 2d 58 61 78 6b 34 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 7d 2e 75 36 6a 46 66 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 Data Ascii: .vix9iA{box-sizing:border-box;cursor:pointer;height:28px;position:relative}.light{--Usv7DA:rgba(57,76,96,.15);--eTLUaw:#0d1216;--Xaxk4Q:rgba(28,39,48,.5)}.dark{--Usv7DA:hsla(0,0%,100%,.4);--eTLUaw:#fff;--Xaxk4Q:hsla(0,0%,100%,.7)}.u6jFfQ{align-items:cente
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 2e 49 45 6f 51 76 51 7b 62 6f 72 64 65 72 2d 65 6e 64 2d 73 74 61 72 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 61 72 74 2d 73 74 61 72 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 46 76 51 46 43 41 2e 4c 6b 4b 61 4d 41 2c 2e 6e 50 37 62 61 51 2e 4c 6b 4b 61 4d 41 7b 62 6f 72 64 65 72 2d 65 6e 64 2d 65 6e 64 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 73 74 61 72 74 2d 65 6e 64 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 43 42 45 47 39 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 7d 2e 43 42 45 47 39 67 2e 43 49 7a 5a 41 41 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 7d 2e 65 49 54 58 5f 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 2e 35 29 7d 2e 43 6f 71 33 71 67 7b Data Ascii: .IEoQvQ{border-end-start-radius:3px;border-start-start-radius:3px}.FvQFCA.LkKaMA,.nP7baQ.LkKaMA{border-end-end-radius:3px;border-start-end-radius:3px}.CBEG9g{transform:scaleY(1)}.CBEG9g.CIzZAA{transition-duration:.2s}.eITX_g{transform:scaleY(1.5)}.Coq3qg{
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 25 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 5f 37 5f 6e 57 39 41 2e 56 35 5a 65 44 51 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 36 70 78 20 32 34 70 78 7d 2e 5f 37 5f 6e 57 39 41 2e 61 57 4d 33 48 51 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 70 78 7d 2e 5f 37 5f 6e 57 39 41 3e 2e 4a 6c 36 65 73 51 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 29 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 29 7d 2e 5f 38 4b 33 36 74 41 7b 62 61 63 6b Data Ascii: %);justify-content:flex-start}._7_nW9A.V5ZeDQ{padding:16px 16px 24px}._7_nW9A.aWM3HQ{padding:16px 8px}._7_nW9A>.Jl6esQ{padding-left:var(--safe-area-inset-left);padding-right:var(--safe-area-inset-right);padding-top:var(--safe-area-inset-top)}._8K36tA{back
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 69 67 68 74 3d 27 33 33 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 67 20 66 69 6c 74 65 72 3d 27 75 72 6c 28 25 32 33 61 29 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 32 33 2e 34 39 36 20 31 32 2e 37 35 34 68 2d 39 2e 37 38 35 6c 33 2e 30 39 36 2d 33 2e 30 39 37 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 2d 32 2e 31 32 31 2d 32 2e 31 32 6c 2d 34 2e 39 35 20 34 2e 39 34 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 30 20 30 20 33 2e 35 33 35 6c 34 2e 39 35 20 34 2e 39 35 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 20 32 2e 31 32 31 2d 32 2e 31 32 31 6c 2d 33 2e 30 39 36 2d 33 2e 30 39 36 68 39 2e 37 38 35 61 31 2e 35 20 31 2e 35 20 30 20 30 Data Ascii: ight='33' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cg filter='url(%23a)'%3E%3Cpath d='M23.496 12.754h-9.785l3.096-3.097a1.5 1.5 0 1 0-2.121-2.12l-4.95 4.949a2.5 2.5 0 0 0 0 3.535l4.95 4.95a1.5 1.5 0 1 0 2.121-2.121l-3.096-3.096h9.785a1.5 1.5 0 0
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 3d 27 33 34 27 20 68 65 69 67 68 74 3d 27 33 33 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 33 45 25 33 43 67 20 66 69 6c 74 65 72 3d 27 75 72 6c 28 25 32 33 61 29 27 25 33 45 25 33 43 70 61 74 68 20 64 3d 27 4d 31 30 2e 35 30 34 20 31 32 2e 37 35 34 68 39 2e 37 38 35 6c 2d 33 2e 30 39 36 2d 33 2e 30 39 37 61 31 2e 35 20 31 2e 35 20 30 20 31 20 31 20 32 2e 31 32 31 2d 32 2e 31 32 6c 34 2e 39 35 20 34 2e 39 34 39 61 32 2e 35 20 32 2e 35 20 30 20 30 20 31 20 30 20 33 2e 35 33 35 6c 2d 34 2e 39 35 20 34 2e 39 35 61 31 2e 35 20 31 2e 35 20 30 20 31 20 31 2d 32 2e 31 32 31 2d 32 2e 31 32 31 6c 33 2e 30 39 36 2d 33 2e 30 39 36 68 2d 39 2e 37 38 35 61 31 2e 35 Data Ascii: ='34' height='33' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cg filter='url(%23a)'%3E%3Cpath d='M10.504 12.754h9.785l-3.096-3.097a1.5 1.5 0 1 1 2.121-2.12l4.95 4.949a2.5 2.5 0 0 1 0 3.535l-4.95 4.95a1.5 1.5 0 1 1-2.121-2.121l3.096-3.096h-9.785a1.5
2024-03-27 20:20:02 UTC	678	IN	Data Raw: 74 3a 74 65 78 74 7d 2e 78 49 37 58 6a 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 67 41 4c 55 77 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 36 34 70 78 7d 2e 64 70 73 69 64 41 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 42 46 69 71 6e 77 2c 2e 78 61 78 67 62 41 7b 62 6f 74 74 6f 6d 3a 30 3b 64 69 73 Data Ascii: t:text}.xI7Xjw{align-items:center;background-color:var(--TlUudQ);border-radius:50%;color:var(--fgALUw);display:flex;height:64px;justify-content:center;width:64px}.dpsidA{height:100%;overflow:hidden;position:relative;width:100%}.BFiqnw,.xaxgbA{bottom:0;dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49774	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/c2aba0ace5513e3b.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/javascript Content-Length: 411 Connection: close CF-Ray: 86b2142bd952884c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 497211 Cache-Control: public, max-age=31556926 ETag: "053a8a9b0e21e83550c191f2832f490d" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Fri, 22 Mar 2024 02:09:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: VG2Zr2OCfJnHv8RymuaMHeTC74FCbW7tkyIGCVezgVFcTLnCCscNi/mknOmB8Z/DvAYBZYeQOCQ= x-amz-replication-status: COMPLETED x-amz-request-id: SFXEYG1WXSWNHZFH x-amz-server-side-encryption: AES256 x-amz-version-id: F5gK6esg9BSmACPv70OUHEa.Di_tdB1D X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 35 4e 4b 74 6c 6d 55 33 75 25 32 42 38 4a 49 6c 4e 70 56 6c 48 6f 69 52 67 50 67 4c 72 78 65 66 39 70 31 55 55 72 44 57 41 65 25 32 46 4b 62 4e 4a 71 41 32 38 5a 79 6e 4d 44 64 77 35 54 33 6d 34 4a 6e 64 68 67 55 72 4d 54 25 32 42 50 25 32 42 6b 25 32 46 6b 37 42 4a 4c 71 6b 4d 54 4b 58 62 65 73 6f 59 63 7a 33 55 66 56 4e 4c 6e 50 44 65 42 37 44 75 46 25 32 42 25 32 42 36 31 57 4b 55 71 62 6b 76 78 44 4c 45 6c 47 73 41 58 6d 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=75NKtlmU3u%2B8JIlNpVlHoiRgPgLrxef9p1UUrDWAe%2FKbNJqA28ZynMDdw5T3m4JndhgUrMT%2BP%2Bk%2Fk7BJLqkMTKXbesoYcz3UfVNLnPDeB7DuF%2B%2B61WKUqbkvxDLElGsAXmU%3D"}],"group":"cf-nel","max_age
2024-03-27 20:20:02 UTC	411	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 33 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 33 37 32 32 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5234],{/***/ 237221:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49775	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/8bbce396e583673b.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/javascript Content-Length: 999 Connection: close CF-Ray: 86b2142bdfb2174f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63807 Cache-Control: public, max-age=31556926 ETag: "29af3c00043e7495cda33aacbcbe0e0d" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Wed, 27 Mar 2024 02:26:29 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: XzcZUf7v+l/woccojcQXyw1mriLxZeYcPSKgktbm/SrQEgAlgephY3hmjKStTKWTCyuRjbcLeXc= x-amz-replication-status: COMPLETED x-amz-request-id: T4H71KDZV7417CM0 x-amz-server-side-encryption: AES256 x-amz-version-id: pu4T99LwyEwctj_Xe.17UEbQw0QydSh6 X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 68 58 41 38 4f 25 32 42 55 56 79 38 51 6c 73 46 69 39 46 4d 77 69 54 7a 5a 67 6e 33 66 5a 52 4b 54 4d 55 48 67 4a 61 4b 70 5a 62 4e 77 6c 66 4e 6a 6d 6b 43 49 25 32 46 62 77 6e 54 6e 44 4c 6b 73 44 44 56 57 6e 5a 4e 52 45 52 6b 6e 64 45 6a 51 55 4f 35 62 74 77 35 66 50 67 58 4b 74 32 53 68 45 4e 72 75 5a 79 6f 45 50 56 57 78 4a 33 35 41 77 79 74 32 43 6b 6a 31 6e 63 50 4f 42 33 45 4e 76 36 63 77 71 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXA8O%2BUVy8QlsFi9FMwiTzZgn3fZRKTMUHgJaKpZbNwlfNjmkCI%2FbwnTnDLksDDVWnZNRERkndEjQUO5btw5fPgXKt2ShENruZyoEPVWxJ35Awyt2Ckj1ncPOB3ENv6cwqM%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:02 UTC	999	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 36 33 31 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 34 32 30 31 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7631],{/***/ 542011:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49776	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	794	OUT	GET /web/1be900779a582cef.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1191	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/javascript Content-Length: 28651 Connection: close CF-Ray: 86b2142bef6a20c0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777323 Cache-Control: public, max-age=31556926 ETag: "051f2ade56db8ca8e3be28f90674cf38" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Tue, 05 Mar 2024 02:19:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 06 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: WhUk98NO+If9SwKHP0B/4isRx1uoRJHUEMj8kQ1m0donxwQqe2kqN7JQsU/DMGn4dDse11lcfcA= x-amz-replication-status: COMPLETED x-amz-request-id: J7J6FQ9R3FR8ZAPY x-amz-server-side-encryption: AES256 x-amz-version-id: tcZnlMoDI2oQeLUYUIatg5FJ79E3kZgO X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4e 6f 77 34 73 52 25 32 42 45 71 58 49 4c 79 4f 66 6e 42 25 32 46 6f 39 7a 47 32 56 74 57 58 36 71 76 64 37 46 7a 61 25 32 42 70 73 6a 6a 49 69 34 52 55 52 50 41 51 38 34 68 4b 50 6c 45 46 68 45 58 64 4f 39 4d 61 52 4b 4c 59 39 50 36 50 41 77 57 35 25 32 42 78 7a 4d 39 71 6a 77 76 33 75 33 7a 38 4f 49 68 7a 50 6b 75 45 46 55 36 6e 42 39 47 51 53 68 56 4e 37 4c 37 4e 66 58 35 67 57 4f 58 50 54 66 53 55 6a 32 4f 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Now4sR%2BEqXILyOfnB%2Fo9zG2VtWX6qvd7Fza%2BpsjjIi4RURPAQ84hKPlEFhEXdO9MaRKLY9P6PAwW5%2BxzM9qjwv3u3z8OIhzPkuEFU6nB9GQShVN7L7NfX5gWOXPTfSUj2O8%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:02 UTC	1195	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 31 62 65 39 30 30 37 37 39 61 35 38 32 63 65 66 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 36 39 5d 2c 7b 31 36 37 38 32 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 65 3d 3e 21 28 21 65 7c 7c 65 2e 6c 65 6e 67 74 68 3c 33 29 26 26 28 32 35 35 3d 3d 3d 65 5b 30 5d 26 26 32 31 36 3d 3d 3d 65 5b 31 5d 26 26 32 35 35 3d 3d 3d 65 5b 32 5d 29 7d 2c 36 36 32 30 Data Ascii: /! For license information please see 1be900779a582cef.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[6269],{167824:e=>{e.exports=e=>!(!e\|\|e.length<3)&&(255===e[0]&&216===e[1]&&255===e[2])},6620
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 63 74 73 20 75 70 20 74 6f 20 74 77 6f 20 61 72 67 75 6d 65 6e 74 73 22 29 2c 69 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 68 65 6e 2c 22 50 6c 65 61 73 65 20 70 61 73 73 20 61 20 70 72 6f 6d 69 73 65 20 6f 72 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 66 72 6f 6d 50 72 6f 6d 69 73 65 22 29 2c 21 30 3d 3d 3d 65 2e 69 73 50 72 6f 6d 69 73 65 42 61 73 65 64 4f 62 73 65 72 76 61 62 6c 65 29 72 65 74 75 72 6e 20 65 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 65 29 29 3b 76 61 72 20 72 3d 65 3b 65 2e 74 68 65 6e 28 28 30 2c 6e 2e 61 44 Data Ascii: cts up to two arguments"),i("function"==typeof e\|\|"object"==typeof e&&e&&"function"==typeof e.then,"Please pass a promise or function to fromPromise"),!0===e.isPromiseBasedObservable)return e;"function"==typeof e&&(e=new Promise(e));var r=e;e.then((0,n.aD
2024-03-27 20:20:02 UTC	516	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 69 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6e 3f 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3a 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 73 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6e 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 75 3e 3d 30 3b 75 2d 2d 29 28 6f 3d 65 5b 75 5d 29 26 26 28 73 3d 28 69 3c 33 3f 6f 28 73 29 3a 69 3e 33 3f 6f 28 74 Data Ascii: tion(e,t,r,n){var o,i=arguments.length,s=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(e,t,r,n);else for(var u=e.length-1;u>=0;u--)(o=e[u])&&(s=(i<3?o(s):i>3?o(t
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6e 65 78 74 3f 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 28 30 2c 6e 2e 4e 37 29 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 6e 65 77 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 28 72 29 7d 29 2c 74 29 7d 3a 7b 75 6e 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 7d 7d 29 5b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 6f 62 73 65 72 76 61 62 6c 65 7c 7c 22 40 40 6f 62 73 65 72 76 61 62 6c 65 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 72 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 Data Ascii: ject"==typeof e&&e.next?{unsubscribe:(0,n.N7)(o,(function(t){var r=t.newValue;return e.next(r)}),t)}:{unsubscribe:function(){}}}})["function"==typeof Symbol&&Symbol.observable\|\|"@@observable"]=function(){return this},r}!function(){function e(e,t){var r=th
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 28 65 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 79 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 69 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6e 3f 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3a 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 73 3d 52 Data Ascii: .prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},y.apply(this,arguments)},v=function(e,t,r,n){var o,i=arguments.length,s=i<3?t:null===n?n=Object.getOwnPropertyDescriptor(t,r):n;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=R
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 74 65 64 56 61 6c 75 65 73 2e 73 65 74 28 6f 2c 28 30 2c 6e 2e 46 6c 29 28 61 2c 7b 73 65 74 3a 63 7d 29 29 7d 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6f 29 2c 70 3d 6c 3f 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 6c 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 7b 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6f 2c 79 28 79 28 7b 7d 2c 70 29 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 65 4a 29 28 65 2c 6f 29 3f 74 2e 6c 6f 63 61 6c 43 6f 6d 70 75 74 65 64 56 61 6c 75 65 73 2e 67 65 74 28 6f 29 2e 67 65 74 28 29 3a 74 2e 69 73 50 72 6f 70 65 72 74 79 44 69 72 74 79 28 6f Data Ascii: tedValues.set(o,(0,n.Fl)(a,{set:c}))}var l=Object.getOwnPropertyDescriptor(e,o),p=l?{enumerable:l.enumerable}:{};Object.defineProperty(t,o,y(y({},p),{configurable:!0,get:function(){return(0,n.eJ)(e,o)?t.localComputedValues.get(o).get():t.isPropertyDirty(o
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 75 62 6d 69 74 22 2c 6e 75 6c 6c 29 2c 76 28 5b 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 73 65 74 22 2c 6e 75 6c 6c 29 2c 76 28 5b 6e 2e 61 44 2e 62 6f 75 6e 64 5d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 73 65 74 50 72 6f 70 65 72 74 79 22 2c 6e 75 6c 6c 29 7d 28 29 3b 76 61 72 20 6d 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 65 33 29 2c 28 30 2c 6e 2e 53 57 29 28 29 3f 28 6d 5b 65 5d 7c 7c 28 6d 5b 65 5d 3d 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 62 28 28 66 75 Data Ascii: n.aD.bound],e.prototype,"submit",null),v([n.aD.bound],e.prototype,"reset",null),v([n.aD.bound],e.prototype,"resetProperty",null)}();var m={};function w(e){return void 0===e&&(e=1e3),(0,n.SW)()?(m[e]\|\|(m[e]="number"==typeof e?function(e){var t;return b((fu
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 6f 62 78 2d 75 74 69 6c 73 5d 20 74 72 61 6e 73 66 6f 72 6d 20 65 78 70 65 63 74 65 64 20 61 6e 20 6f 62 6a 65 63 74 2c 20 66 75 6e 63 74 69 6f 6e 2c 20 73 74 72 69 6e 67 20 6f 72 20 6e 75 6d 62 65 72 2c 20 67 6f 74 3a 20 22 2b 53 74 72 69 6e 67 28 65 29 29 3b 76 61 72 20 72 3d 65 2e 24 74 72 61 6e 73 66 6f 72 6d 49 64 3b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 7d 28 65 2c 22 24 74 72 61 6e 73 66 6f 72 6d 49 64 22 2c 72 3d 22 6d 65 6d 6f 69 7a 61 74 69 6f 6e 49 64 3a 22 2b 20 2b 2b Data Ascii: obx-utils] transform expected an object, function, string or number, got: "+String(e));var r=e.$transformId;void 0===r&&function(e,t,r){Object.defineProperty(e,t,{enumerable:!1,writable:!0,configurable:!0,value:r})}(e,"$transformId",r="memoizationId:"+ ++
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 70 65 72 74 79 28 6c 2c 22 5f 62 61 73 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6c 2c 22 5f 6f 67 6d 49 6e 66 6f 4b 65 79 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6c 2c 22 5f 67 72 6f 75 70 42 79 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 Data Ascii: perty(l,"_base",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(l,"_ogmInfoKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(l,"_groupBy",{enumerable:!0,configurable:!0,writable:!0,value:v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49778	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/d4fc4d85d9537011.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/javascript Content-Length: 3604 Connection: close CF-Ray: 86b2142dac5320be-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63807 Cache-Control: public, max-age=31556926 ETag: "fceed28e1c671d269e82dd7d4b19da43" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Wed, 27 Mar 2024 02:26:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ASCDZMKvkgOyslSN8p5sIHTtU9M1FAbD3CfW+ThBhve1bBrQSLFvcdi0+5CRopVxp4LRxuVT+Hc= x-amz-replication-status: COMPLETED x-amz-request-id: T4H6HVNKXK22Y016 x-amz-server-side-encryption: AES256 x-amz-version-id: 0cg8PPP4gpmWaiRnyoZlVBVM.qqGaXbD X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 72 4a 42 45 34 33 31 6b 39 79 31 69 45 6b 25 32 42 48 38 4a 48 6b 48 4b 56 51 6b 25 32 42 33 6b 73 6e 35 31 44 49 78 4b 6d 57 34 4a 36 4f 7a 25 32 46 4f 64 76 71 63 62 76 64 4e 35 69 45 59 25 32 46 46 50 35 39 69 30 52 65 49 52 6d 7a 48 75 71 30 48 54 69 47 78 34 38 4f 46 61 43 73 45 25 32 46 57 50 4c 4f 55 70 44 72 44 50 57 49 62 47 5a 36 4c 38 43 7a 48 65 4d 32 32 39 53 33 34 6f 67 78 62 32 6c 6e 66 37 54 63 55 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rJBE431k9y1iEk%2BH8JHkHKVQk%2B3ksn51DIxKmW4J6Oz%2FOdvqcbvdN5iEY%2FFP59i0ReIRmzHuq0HTiGx48OFaCsE%2FWPLOUpDrDPWIbGZ6L8CzHeM229S34ogxb2lnf7TcUk%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:02 UTC	1195	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 33 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 33 39 31 32 31 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[8634],{/***/ 391214:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4
2024-03-27 20:20:02 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 65 77 20 5f 5f 63 2e 41 61 28 61 28 74 68 69 73 2e 65 72 72 6f 72 29 29 7d 29 3b 5f 5f 63 2e 54 68 61 3d 6e 65 77 20 53 65 74 28 5b 31 37 35 37 2c 32 32 37 34 5d 29 3b 5f 5f 63 2e 55 68 61 3d 6e 65 77 20 53 65 74 28 5b 31 31 2c 31 32 2c 31 37 33 2c 31 35 36 34 2c 36 31 35 38 2c 38 32 30 33 2c 38 32 30 36 2c 38 32 30 37 2c 36 35 32 37 39 5d 29 3b 0a 5f 5f 63 2e 56 68 61 3d 6e 65 77 20 53 65 74 28 5b 31 34 37 31 2c 31 34 37 33 2c 31 34 37 34 2c 31 34 37 36 2c 31 34 37 37 2c 31 34 37 39 2c 31 36 34 38 2c 31 37 36 37 2c 31 37 36 38 2c 32 33 36 32 2c 32 33 36 34 2c 32 33 38 31 2c 32 34 30 32 2c 32 34 30 33 2c 32 34 33 33 2c 32 34 39 32 2c 32 34 39 34 2c 32 35 30 39 2c 32 35 31 39 2c 32 35 33 30 2c 32 35 33 31 2c 32 35 35 38 2c 32 35 36 31 Data Ascii: eturn new __c.Aa(a(this.error))});__c.Tha=new Set([1757,2274]);__c.Uha=new Set([11,12,173,1564,6158,8203,8206,8207,65279]);__c.Vha=new Set([1471,1473,1474,1476,1477,1479,1648,1767,1768,2362,2364,2381,2402,2403,2433,2492,2494,2509,2519,2530,2531,2558,2561
2024-03-27 20:20:02 UTC	1040	IN	Data Raw: 6e 73 74 20 65 20 6f 66 20 63 29 7b 63 6f 6e 73 74 20 66 3d 65 28 64 29 3b 69 66 28 22 69 6e 76 61 6c 69 64 22 3d 3d 3d 66 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 66 7d 72 65 74 75 72 6e 20 61 2e 76 61 6c 69 64 28 29 7d 3b 61 2e 62 4d 61 3d 63 3d 3e 64 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 63 29 7b 63 6f 6e 73 74 20 66 3d 65 28 64 29 3b 69 66 28 22 76 61 6c 69 64 22 3d 3d 3d 66 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 66 7d 72 65 74 75 72 6e 20 61 2e 69 6e 76 61 6c 69 64 28 29 7d 3b 61 2e 57 4f 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 64 3d 3e 7b 64 3d 63 28 64 29 3b 72 65 74 75 72 6e 22 69 6e 76 61 6c 69 64 22 3d 3d 3d 64 2e 73 74 61 74 65 3f 62 28 28 76 6f 69 64 20 30 29 28 64 2e 65 72 72 6f 72 29 29 3a 64 7d 7d 3b Data Ascii: nst e of c){const f=e(d);if("invalid"===f.state)return f}return a.valid()};a.bMa=c=>d=>{for(const e of c){const f=e(d);if("valid"===f.state)return f}return a.invalid()};a.WO=function(c){return d=>{d=c(d);return"invalid"===d.state?b((void 0)(d.error)):d}};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49777	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/94b8e45285102a32.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:02 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:02 GMT Content-Type: text/javascript Content-Length: 1711 Connection: close CF-Ray: 86b2142d7cdf68f3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63807 Cache-Control: public, max-age=31556926 ETag: "182627d1d72635ef04c78d6ce52bd3b4" Expires: Fri, 28 Mar 2025 02:08:48 GMT Last-Modified: Wed, 27 Mar 2024 02:26:29 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: WGSLWFj00yhCXzVJhxZP4YjEY1VW1pqGVNdc5JRFE/+CkXyqMKzD8LZjLM26NqlyfBHTYxrwuaQ= x-amz-replication-status: PENDING x-amz-request-id: T4HCJDHJG0VPM2ER x-amz-server-side-encryption: AES256 x-amz-version-id: jwhZyW9NJp0pqsK65oX242hp04IzBuBC X-Content-Type-Options: nosniff
2024-03-27 20:20:02 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 73 6e 68 64 4d 57 6c 4a 62 77 42 25 32 46 61 6b 36 43 6a 4a 6e 77 51 4e 46 5a 56 58 49 36 54 4e 25 32 42 36 66 44 59 58 37 4b 62 57 59 77 6c 39 64 35 4f 5a 64 46 6f 69 51 41 6e 6b 39 72 35 59 36 79 52 78 53 6c 56 4b 4c 53 6b 79 77 6a 76 51 50 4d 31 67 36 7a 48 6b 6d 6c 34 4b 74 53 65 78 46 6d 37 4d 61 37 50 37 6c 6b 38 6a 71 69 48 73 4b 30 41 76 75 47 25 32 42 70 4b 49 33 38 31 70 36 45 76 6d 53 6f 69 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsnhdMWlJbwB%2Fak6CjJnwQNFZVXI6TN%2B6fDYX7KbWYwl9d5OZdFoiQAnk9r5Y6yRxSlVKLSkywjvQPM1g6zHkml4KtSexFm7Ma7P7lk8jqiHsK0AvuG%2BpKI381p6EvmSoi4%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:02 UTC	1201	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 37 31 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 32 31 34 38 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[8771],{/***/ 521481:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._4
2024-03-27 20:20:02 UTC	510	IN	Data Raw: 28 64 29 3f 64 2e 6d 61 70 28 65 3d 3e 60 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 7d 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7d 60 29 2e 6a 6f 69 6e 28 22 26 22 29 3a 60 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 7d 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 7d 60 29 2e 6a 6f 69 6e 28 22 26 22 29 3b 72 65 74 75 72 6e 60 24 7b 61 2e 70 61 74 68 7d 3f 24 7b 62 7d 60 7d 3b 5f 5f 63 2e 48 6c 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 5f 5f 63 2e 42 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 3d 7b 7d 29 7b 73 75 70 65 72 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 2c 7b 73 74 61 74 75 73 43 6f 64 65 3a 34 30 33 7d 29 29 3b 74 68 Data Ascii: (d)?d.map(e=>`${encodeURIComponent(c)}=${encodeURIComponent(e)}`).join("&"):`${encodeURIComponent(c)}=${encodeURIComponent(d)}`).join("&");return`${a.path}?${b}`};__c.Hl=class extends __c.Be{constructor(a={}){super(Object.assign({},a,{statusCode:403}));th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49780	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/e647c3f88a50ee5c.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/javascript Content-Length: 20702 Connection: close CF-Ray: 86b2142f6e9d8848-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63808 Cache-Control: public, max-age=31556926 ETag: "215c3cd67125380d17a1e13186d4f6e3" Expires: Fri, 28 Mar 2025 02:08:49 GMT Last-Modified: Wed, 27 Mar 2024 02:26:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: mjiQqehYKXre+VB2SXM0wdwgmMLe9CWJSD1IXdwXlKnyrj/bzMb+QiWYykSG16RA9OXf3TSfu24= x-amz-replication-status: COMPLETED x-amz-request-id: T4HENV7YB94FR77M x-amz-server-side-encryption: AES256 x-amz-version-id: Js2aI1kACQLKoCBCU6mNLiXy0AY1jOwo X-Content-Type-Options: nosniff
2024-03-27 20:20:03 UTC	346	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 50 70 6d 37 41 75 31 45 73 57 76 72 77 45 46 49 6f 4c 37 71 79 52 6a 32 59 59 56 36 47 47 51 4d 53 42 57 47 4a 6d 46 41 25 32 46 54 74 57 47 6a 63 4b 4e 30 48 73 47 70 63 4b 77 7a 6c 57 6f 63 30 77 71 57 6c 6c 70 65 4e 75 58 37 67 6a 6f 62 79 55 42 36 51 34 55 49 54 61 39 57 69 4a 36 52 72 43 4b 55 6f 63 38 6e 48 45 67 68 76 32 6a 6b 61 4b 73 4c 77 52 62 66 57 75 4a 59 53 52 77 66 6e 6f 44 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPpm7Au1EsWvrwEFIoL7qyRj2YYV6GGQMSBWGJmFA%2FTtWGjcKN0HsGpcKwzlWoc0wqWllpeNuX7gjobyUB6Q4UITa9WiJ6RrCKUoc8nHEghv2jkaKsLwRbfWuJYSRwfnoD4%3D"}],"group":"cf-nel","max_age":604800}N
2024-03-27 20:20:03 UTC	1202	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 31 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 33 32 33 30 32 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5319],{/***/ 323028:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 33 3a 61 2e 75 6e 69 66 6f 72 6d 33 69 76 28 65 2c 62 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 61 2e 75 6e 69 66 6f 72 6d 34 69 76 28 65 2c 62 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 47 72 28 60 43 6f 75 6c 64 20 6e 6f 74 20 73 65 74 20 74 68 65 20 76 61 6c 75 65 20 66 6f 72 20 75 6e 69 66 6f 72 6d 20 27 24 7b 64 7d 27 2e 20 4d 61 6b 65 20 73 75 72 65 20 69 74 73 20 6c 65 6e 67 74 68 20 69 73 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 34 20 28 69 6e 63 6c 75 73 69 76 65 29 2e 60 29 3b 7d 65 6c 73 65 20 69 66 28 22 66 6c 6f 61 74 22 3d 3d 3d 63 2e 74 79 70 65 29 73 77 69 74 63 68 28 63 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 31 3a 61 2e 75 6e 69 66 6f 72 6d 31 66 76 28 65 2c 62 29 Data Ascii: reak;case 3:a.uniform3iv(e,b);break;case 4:a.uniform4iv(e,b);break;default:throw new Gr(`Could not set the value for uniform '${d}'. Make sure its length is between 1 and 4 (inclusive).`);}else if("float"===c.type)switch(c.length){case 1:a.uniform1fv(e,b)
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 2e 68 65 69 67 68 74 7c 7c 61 3a 28 62 2e 68 65 69 67 68 74 7c 7c 31 29 2a 61 7d 7d 3b 0a 62 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 57 65 62 47 4c 52 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 78 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 65 62 47 4c 52 65 6e 64 65 72 69 6e 67 43 6f 6e 74 65 78 74 26 26 22 66 33 32 22 3d 3d 3d 62 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 26 26 21 61 2e 67 65 74 45 78 74 65 6e 73 69 6f 6e 28 22 4f 45 53 5f 74 65 78 74 75 72 65 5f 66 6c 6f 61 74 22 29 29 74 68 72 6f 77 20 6e 65 77 20 61 72 61 28 22 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 66 6c 6f 61 74 69 6e 67 20 70 6f 69 6e 74 20 74 65 78 74 75 72 65 73 22 29 3b 63 3d 63 7c 7c Data Ascii: .height\|\|a:(b.height\|\|1)*a}};bra=function(a,b,c){if("undefined"!==typeof WebGLRenderingContext&&a instanceof WebGLRenderingContext&&"f32"===b.numberFormat&&!a.getExtension("OES_texture_float"))throw new ara("No support for floating point textures");c=c\|\|
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 43 4c 41 4d 50 5f 54 4f 5f 45 44 47 45 29 3b 61 2e 74 65 78 50 61 72 61 6d 65 74 65 72 69 28 61 2e 54 45 58 54 55 52 45 5f 32 44 2c 61 2e 54 45 58 54 55 52 45 5f 57 52 41 50 5f 54 2c 61 2e 43 4c 41 4d 50 5f 54 4f 5f 45 44 47 45 29 3b 61 2e 62 69 6e 64 54 65 78 74 75 72 65 28 61 2e 54 45 58 54 55 52 45 5f 32 44 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 63 7d 3b 0a 5f 5f 63 2e 64 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 65 6e 76 3a 7b 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3a 31 7d 7d 2c 63 2c 64 3b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 3b 61 2e 61 70 70 65 6e 64 28 65 29 3b 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 3b 65 2e Data Ascii: CLAMP_TO_EDGE);a.texParameteri(a.TEXTURE_2D,a.TEXTURE_WRAP_T,a.CLAMP_TO_EDGE);a.bindTexture(a.TEXTURE_2D,null);return c};__c.dra=function(a){var b={env:{devicePixelRatio:1}},c,d;const e=document.createElement("canvas");a.append(e);e.style.width="100%";e.
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 66 65 72 28 63 2e 69 6e 64 69 63 65 73 29 7d 61 2e 43 49 2e 64 65 6c 65 74 65 28 62 29 7d 65 6c 73 65 20 65 3d 61 2e 4f 77 2e 67 65 74 28 62 29 2c 64 2e 64 65 6c 65 74 65 54 65 78 74 75 72 65 28 65 7c 7c 6e 75 6c 6c 29 2c 0a 61 2e 4f 77 2e 64 65 6c 65 74 65 28 62 29 7d 3b 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 60 0a 61 74 74 72 69 62 75 74 65 20 76 65 63 32 20 61 50 6f 73 69 74 69 6f 6e 3b 0a 76 61 72 79 69 6e 67 20 76 65 63 32 20 76 54 65 78 43 6f 6f 72 64 3b 0a 0a 76 6f 69 64 20 6d 61 69 6e 28 29 0a 7b 0a 20 20 20 20 67 6c 5f 50 6f 73 69 74 69 6f 6e 20 3d 20 76 65 63 34 28 61 50 6f 73 69 74 69 6f 6e 2c 20 30 2e 30 2c 20 31 2e 30 29 3b 0a 20 20 20 20 76 54 65 78 43 6f 6f 72 64 20 3d 20 61 50 6f 73 69 74 69 6f 6e 20 2a 20 30 2e Data Ascii: fer(c.indices)}a.CI.delete(b)}else e=a.Ow.get(b),d.deleteTexture(e\|\|null),a.Ow.delete(b)};era=function(a){return`attribute vec2 aPosition;varying vec2 vTexCoord;void main(){ gl_Position = vec4(aPosition, 0.0, 1.0); vTexCoord = aPosition * 0.
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 64 3b 5c 6e 5c 6e 76 6f 69 64 20 6d 61 69 6e 28 29 5c 6e 7b 5c 6e 20 20 20 20 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 20 3d 20 74 65 78 74 75 72 65 32 44 28 75 50 72 65 76 52 65 73 75 6c 74 2c 20 76 54 65 78 43 6f 6f 72 64 29 3b 5c 6e 20 20 20 20 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 2e 72 67 62 20 2a 3d 20 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 2e 61 3b 5c 6e 7d 5c 6e 20 20 22 7d 29 2c 61 74 74 72 69 62 75 74 65 73 3a 69 72 61 2c 4e 6e 3a 7b 75 50 72 65 76 52 65 73 75 6c 74 3a 4e 72 28 61 2e 5a 73 29 7d 2c 47 6b 3a 61 2e 47 6b 7d 29 2c 0a 61 3d 61 2e 6a 65 61 3d 62 29 3b 64 2e 63 61 6c 6c 28 63 2c 61 29 7d 7d 3b 50 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 2e 66 6f 72 45 61 63 68 28 28 63 2c 64 29 3d 3e 7b 69 66 28 64 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d Data Ascii: d;\n\nvoid main()\n{\n gl_FragColor = texture2D(uPrevResult, vTexCoord);\n gl_FragColor.rgb *= gl_FragColor.a;\n}\n "}),attributes:ira,Nn:{uPrevResult:Nr(a.Zs)},Gk:a.Gk}),a=a.jea=b);d.call(c,a)}};Pr=function(a,b){b.forEach((c,d)=>{if(d===b.length-
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 4e 6e 3d 61 2e 4e 6e 3b 74 68 69 73 2e 47 6b 3d 61 2e 47 6b 3b 74 68 69 73 2e 6e 68 3d 61 2e 6e 68 3b 74 68 69 73 2e 69 75 61 3d 61 2e 69 75 61 7d 7d 3b 5f 5f 63 2e 70 72 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 72 65 73 6f 75 72 63 65 73 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 63 72 65 61 74 65 3d 61 3b 74 68 69 73 2e 45 70 3d 58 71 61 28 74 68 69 73 29 7d 6c 6f 61 64 28 61 29 7b 74 68 69 73 2e 45 70 2e 6c 6f 61 64 28 61 29 3b 61 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 3a 61 2e 72 65 73 6f 75 72 63 65 73 3b 66 6f 72 28 63 6f 6e 73 74 20 62 20 6f 66 20 61 29 74 68 69 73 2e 72 65 73 6f 75 72 63 65 73 2e 73 65 74 28 62 2e 69 64 2c 62 29 7d 75 70 64 61 74 65 28 61 29 7b 74 68 69 73 2e 45 70 2e 75 Data Ascii: Nn=a.Nn;this.Gk=a.Gk;this.nh=a.nh;this.iua=a.iua}};__c.pra=class{constructor(a){this.resources=new Map;this.create=a;this.Ep=Xqa(this)}load(a){this.Ep.load(a);a=Array.isArray(a)?a:a.resources;for(const b of a)this.resources.set(b.id,b)}update(a){this.Ep.u
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 78 74 75 72 65 22 3b 74 68 69 73 2e 61 6e 61 3d 22 72 65 6e 64 65 72 22 3b 74 68 69 73 2e 73 6f 75 72 63 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 3b 74 68 69 73 2e 61 6c 70 68 61 3d 61 2e 61 6c 70 68 61 7c 7c 22 70 72 65 73 65 72 76 65 22 3b 74 68 69 73 2e 73 69 7a 65 3d 61 2e 73 69 7a 65 7c 7c 22 66 69 78 65 64 22 3b 74 68 69 73 2e 77 69 64 74 68 3d 61 2e 77 69 64 74 68 7c 7c 28 22 66 69 78 65 64 22 3d 3d 3d 74 68 69 73 2e 73 69 7a 65 3f 30 3a 31 29 3b 74 68 69 73 2e 68 65 69 67 68 74 3d 61 2e 68 65 69 67 68 74 7c 7c 28 22 66 69 78 65 64 22 3d 3d 3d 74 68 69 73 2e 73 69 7a 65 3f 30 3a 31 29 3b 74 68 69 73 2e 42 48 3d 61 2e 42 48 3b 74 68 69 73 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 3d 61 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 Data Ascii: xture";this.ana="render";this.source=null;this.name=a.name;this.alpha=a.alpha\|\|"preserve";this.size=a.size\|\|"fixed";this.width=a.width\|\|("fixed"===this.size?0:1);this.height=a.height\|\|("fixed"===this.size?0:1);this.BH=a.BH;this.numberFormat=a.numberFormat
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 73 2e 77 77 61 3d 28 29 3d 3e 7b 74 68 69 73 2e 4a 57 26 26 74 68 69 73 2e 4a 57 28 6e 65 77 20 62 73 28 22 45 72 72 6f 72 3a 20 57 65 62 47 4c 20 63 6f 6e 74 65 78 74 20 6c 6f 73 74 22 29 29 7d 3b 74 68 69 73 2e 65 6e 76 3d 28 6e 75 6c 6c 3d 3d 3d 62 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 76 6f 69 64 20 30 3a 62 2e 65 6e 76 29 7c 7c 77 69 6e 64 6f 77 7c 7c 7b 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3a 31 7d 3b 63 6f 6e 73 74 20 63 3d 61 2e 63 61 6e 76 61 73 3b 69 66 28 21 63 29 74 68 72 6f 77 20 6e 65 77 20 62 73 28 60 55 6e 65 78 70 65 63 74 65 64 20 63 61 6e 76 61 73 20 74 79 70 65 3a 20 24 7b 74 79 70 65 6f 66 20 63 7d 60 29 3b 74 68 69 73 2e 47 69 61 3d 6e 75 6c 6c 3d 3d 3d 62 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 76 6f 69 64 20 30 3a 62 2e Data Ascii: s.wwa=()=>{this.JW&&this.JW(new bs("Error: WebGL context lost"))};this.env=(null===b\|\|void 0===b?void 0:b.env)\|\|window\|\|{devicePixelRatio:1};const c=a.canvas;if(!c)throw new bs(`Unexpected canvas type: ${typeof c}`);this.Gia=null===b\|\|void 0===b?void 0:b.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49779	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/3bbec4133e6eaff3.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/javascript Content-Length: 9613 Connection: close CF-Ray: 86b2142f5b3a0848-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63808 Cache-Control: public, max-age=31556926 ETag: "b80546b5c4848abc4f374631bf54d48e" Expires: Fri, 28 Mar 2025 02:08:49 GMT Last-Modified: Wed, 27 Mar 2024 02:26:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: RSAI3J8mO8NTtLIGQqZ0tH4bZ5A+jmFpySPUuFJsQDMuE2fubkJb+p+F6dj34BXSf2EK/Kzpd68= x-amz-replication-status: COMPLETED x-amz-request-id: T4H1CVNDKP3SF3EQ x-amz-server-side-encryption: AES256 x-amz-version-id: KX9Qy0LZQQod_PpBYayBH4RDGb7tItNT X-Content-Type-Options: nosniff
2024-03-27 20:20:03 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 44 6b 61 5a 4c 46 54 51 64 65 7a 76 5a 56 43 62 76 43 30 30 64 6e 72 6e 41 4d 39 55 38 63 6f 25 32 46 53 48 35 25 32 42 4b 78 51 53 43 4d 58 42 72 7a 37 4c 30 5a 44 79 64 76 4d 5a 72 5a 25 32 46 78 65 77 30 4c 64 36 6a 78 42 71 71 74 37 61 4a 71 4e 39 7a 25 32 42 75 4c 30 54 76 56 56 57 58 4e 4b 44 59 44 78 6f 6c 64 54 25 32 46 79 52 6e 43 76 69 75 6a 44 44 78 6f 56 34 38 4e 6c 48 79 79 57 42 54 45 6f 35 48 33 71 59 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DkaZLFTQdezvZVCbvC00dnrnAM9U8co%2FSH5%2BKxQSCMXBrz7L0ZDydvMZrZ%2Fxew0Ld6jxBqqt7aJqN9z%2BuL0TvVVWXNKDYDxoldT%2FyRnCviujDDxoV48NlHyyWBTEo5H3qYo%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 39 30 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 30 36 34 30 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6690],{/***/ 206405:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 2e 56 73 61 3d 46 28 28 29 3d 3e 28 7b 73 6f 75 72 63 65 3a 4f 28 31 29 7d 29 29 3b 76 61 72 20 57 73 61 3d 5f 5f 63 2e 47 28 28 29 3d 3e 5b 31 2c 32 2c 33 5d 29 3b 5f 5f 63 2e 53 73 3d 46 28 28 29 3d 3e 28 7b 73 74 61 74 75 73 3a 5f 5f 63 2e 4e 61 28 31 2c 57 73 61 29 7d 29 29 3b 5f 5f 63 2e 58 73 61 3d 46 28 28 29 3d 3e 28 7b 6e 61 6d 65 3a 4d 28 31 29 2c 70 72 6f 70 65 72 74 69 65 73 3a 28 30 2c 5f 5f 63 2e 48 64 29 28 32 29 7d 29 29 3b 5f 5f 63 2e 59 73 61 3d 6e 65 77 20 53 65 74 28 22 32 37 36 34 2d 46 45 30 46 20 31 46 34 34 44 20 31 46 34 34 46 20 31 46 36 30 32 20 31 46 36 32 45 20 31 46 39 31 34 22 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 5f 5f 63 2e 54 73 3d 41 72 72 61 79 2e 66 72 6f 6d 28 5f 5f 63 2e 59 73 61 2e 76 61 6c 75 65 73 28 29 29 3b 76 Data Ascii: .Vsa=F(()=>({source:O(1)}));var Wsa=__c.G(()=>[1,2,3]);__c.Ss=F(()=>({status:__c.Na(1,Wsa)}));__c.Xsa=F(()=>({name:M(1),properties:(0,__c.Hd)(2)}));__c.Ysa=new Set("2764-FE0F 1F44D 1F44F 1F602 1F62E 1F914".split(" "));__c.Ts=Array.from(__c.Ysa.values());v
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 73 29 2c 73 63 72 65 65 6e 3a 43 28 36 2c 5f 5f 63 2e 24 73 29 2c 75 73 65 72 41 67 65 6e 74 3a 4f 28 37 29 7d 29 29 3b 5f 5f 63 2e 62 74 3d 46 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 7b 7d 2c 7b 74 79 70 65 3a 5f 5f 63 2e 7a 28 22 41 3f 22 2c 34 2c 22 54 52 41 43 4b 22 29 2c 53 65 3a 5f 5f 63 2e 4c 61 28 31 2c 5f 5f 63 2e 55 73 29 2c 51 70 3a 5f 5f 63 2e 4c 61 28 32 2c 5f 5f 63 2e 61 74 29 2c 50 44 3a 5f 5f 63 2e 41 64 28 36 29 2c 65 76 65 6e 74 3a 4d 28 34 29 2c 70 72 6f 70 65 72 74 69 65 73 3a 4d 28 35 29 7d 29 29 3b 5f 5f 63 2e 63 74 3d 5f 5f 63 2e 61 62 28 28 29 3d 3e 28 7b 74 79 70 65 3a 5b 34 2c 5f 5f 63 2e 62 74 5d 7d 29 2c 28 29 3d 3e 28 7b 7d 29 29 3b 5f 5f 63 2e 65 74 61 3d 46 28 28 29 3d 3e 28 7b 65 76 65 6e 74 3a 5f Data Ascii: s),screen:C(6,__c.$s),userAgent:O(7)}));__c.bt=F(()=>Object.assign({},{},{type:__c.z("A?",4,"TRACK"),Se:__c.La(1,__c.Us),Qp:__c.La(2,__c.at),PD:__c.Ad(6),event:M(4),properties:M(5)}));__c.ct=__c.ab(()=>({type:[4,__c.bt]}),()=>({}));__c.eta=F(()=>({event:_
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 29 3b 61 3d 61 77 61 69 74 20 74 68 69 73 2e 4c 6c 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 6e 65 77 20 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 69 74 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 73 74 6f 72 65 3d 61 3b 74 68 69 73 2e 4c 6c 3d 51 73 7d 69 6e 64 65 78 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 74 61 28 74 68 69 73 2e 73 74 6f 72 65 2e 69 6e 64 65 78 28 61 29 29 7d 70 75 74 28 61 2c 62 29 7b 61 3d 74 68 69 73 2e 73 74 6f 72 65 2e 70 75 74 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 4c 6c 28 61 29 7d 67 65 74 28 61 29 7b 61 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 4c 6c 28 61 29 7d 64 65 6c 65 74 65 28 61 Data Ascii: );a=await this.Ll(a);return null!=a?new et(a):void 0}};var ita=class{constructor(a){this.store=a;this.Ll=Qs}index(a){return new hta(this.store.index(a))}put(a,b){a=this.store.put(a,b);return this.Ll(a)}get(a){a=this.store.get(a);return this.Ll(a)}delete(a
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 3a 6e 65 77 20 5f 5f 63 2e 67 74 28 68 2e 72 65 73 75 6c 74 29 29 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 6f 63 6b 65 64 22 2c 28 29 3d 3e 7b 6c 3d 21 30 3b 67 28 45 72 72 6f 72 28 22 6f 70 65 72 61 74 69 6f 6e 20 62 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 29 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 63 63 65 73 73 22 2c 0a 28 29 3d 3e 7b 63 6f 6e 73 74 20 6d 3d 68 2e 72 65 73 75 6c 74 3b 6c 3f 6d 2e 63 6c 6f 73 65 28 29 3a 28 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 22 2c 6e 3d 3e 7b 28 64 2e 53 30 26 26 6e 75 6c 6c 3d 3d 6e 2e 6e 65 77 Data Ascii: :new __c.gt(h.result))});break;case 1:h.addEventListener("blocked",()=>{l=!0;g(Error("operation blocked due to open connections"))});h.addEventListener("success",()=>{const m=h.result;l?m.close():(m.addEventListener("versionchange",n=>{(d.S0&&null==n.new
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 77 61 69 74 20 63 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 68 69 73 2e 49 6c 29 2e 70 75 74 28 50 73 61 28 61 2c 74 68 69 73 2e 73 65 72 69 61 6c 69 7a 65 28 62 29 29 29 3b 61 77 61 69 74 20 63 2e 4b 75 7d 61 73 79 6e 63 20 67 65 74 28 61 29 7b 63 6f 6e 73 74 20 62 3d 74 68 69 73 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 74 68 69 73 2e 49 6c 2c 22 72 65 61 64 6f 6e 6c 79 22 29 3b 61 3d 61 77 61 69 74 20 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 68 69 73 2e 49 6c 29 2e 67 65 74 28 61 29 3b 61 77 61 69 74 20 62 2e 4b 75 3b 0a 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 64 65 73 65 72 69 61 6c 69 7a 65 28 61 2e 72 65 63 6f 72 64 29 3a 76 6f 69 64 20 30 7d 61 73 79 6e 63 20 64 65 6c 65 74 65 28 61 29 7b 63 6f 6e 73 74 20 62 3d 74 68 69 73 2e 64 62 2e Data Ascii: wait c.objectStore(this.Il).put(Psa(a,this.serialize(b)));await c.Ku}async get(a){const b=this.db.transaction(this.Il,"readonly");a=await b.objectStore(this.Il).get(a);await b.Ku;return a?this.deserialize(a.record):void 0}async delete(a){const b=this.db.
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 6e 73 74 20 66 3d 6e 65 77 20 49 6d 61 67 65 3b 21 62 26 26 5f 5f 63 2e 6b 74 61 28 61 29 26 26 28 66 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3b 66 2e 73 72 63 3d 61 3b 66 2e 63 6f 6d 70 6c 65 74 65 3f 64 28 66 29 3a 28 66 2e 6f 6e 6c 6f 61 64 3d 28 29 3d 3e 7b 66 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 66 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 64 28 66 29 7d 2c 66 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 66 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 66 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 65 28 63 29 7d 29 7d 29 7d 3b 76 61 72 20 53 73 61 3d 7b 62 61 73 65 55 6e 69 74 3a 22 38 70 78 22 2c 73 70 61 63 65 31 35 30 3a 22 31 32 70 78 22 2c 78 73 6d 61 6c 6c 53 69 7a 65 3a 22 31 32 70 78 22 2c 73 6d 61 6c 6c 53 69 7a 65 Data Ascii: nst f=new Image;!b&&__c.kta(a)&&(f.crossOrigin="anonymous");f.src=a;f.complete?d(f):(f.onload=()=>{f.onload=null;f.onerror=null;d(f)},f.onerror=()=>{f.onload=null;f.onerror=null;e(c)})})};var Ssa={baseUnit:"8px",space150:"12px",xsmallSize:"12px",smallSize
2024-03-27 20:20:03 UTC	30	IN	Data Raw: 63 65 6d 61 70 73 2f 33 62 62 65 63 34 31 33 33 65 36 65 61 66 66 33 2e 6a 73 2e 6d 61 70 Data Ascii: cemaps/3bbec4133e6eaff3.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49781	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/fa2ef1a44958c025.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/javascript Content-Length: 4179 Connection: close CF-Ray: 86b2142f784138a4-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63808 Cache-Control: public, max-age=31556926 ETag: "3ea8efffcf90628d9452de978377a91f" Expires: Fri, 28 Mar 2025 02:08:49 GMT Last-Modified: Wed, 27 Mar 2024 02:26:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: tMYEIrG3SBcVHHkMJonPpIJbaiwKDPGViyoxFiIc0Rj3T7cQYPLowRVjhcDYHaP2hlVxKqed5gw= x-amz-replication-status: COMPLETED x-amz-request-id: T4H7QC9GG7NM4RKX x-amz-server-side-encryption: AES256 x-amz-version-id: vtAUIXZ_Uw_FuKzBcjul8wsWNmSegWtH X-Content-Type-Options: nosniff
2024-03-27 20:20:03 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 6f 45 33 49 6e 6b 51 66 4a 41 72 70 76 65 54 59 78 38 61 37 6d 78 33 73 58 48 77 4f 43 59 39 46 65 4a 7a 75 4e 5a 52 76 4b 36 31 77 65 4f 48 61 70 74 41 4b 46 4e 63 5a 6b 67 47 46 77 4d 78 39 5a 37 44 25 32 42 4b 65 4f 6e 69 46 71 73 6e 33 61 39 37 4a 50 72 53 6a 59 6c 5a 73 25 32 42 75 46 41 4a 25 32 46 49 76 73 53 69 73 64 7a 66 39 4c 39 55 4e 65 35 4d 4b 67 51 44 77 57 45 5a 4c 77 4a 66 4d 41 30 4e 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CoE3InkQfJArpveTYx8a7mx3sXHwOCY9FeJzuNZRvK61weOHaptAKFNcZkgGFwMx9Z7D%2BKeOniFqsn3a97JPrSjYlZs%2BuFAJ%2FIvsSisdzf9L9UNe5MKgQDwWEZLwJfMA0NE%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:03 UTC	1199	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 35 36 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 31 36 30 33 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6456],{/***/ 716038:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 61 6c 69 7a 65 28 62 29 2c 62 3d 3e 52 38 2e 64 65 73 65 72 69 61 6c 69 7a 65 28 62 29 29 29 3b 72 65 74 75 72 6e 20 61 2e 24 47 61 7d 2c 67 64 63 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 28 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 62 2e 6d 61 70 28 61 73 79 6e 63 20 63 3d 3e 7b 74 72 79 7b 61 77 61 69 74 20 61 2e 64 65 6c 65 74 65 44 61 74 61 62 61 73 65 28 63 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 7b 49 6c 3a 63 2c 65 72 72 6f 72 3a 64 7d 7d 7d 29 29 29 2e 66 69 6c 74 65 72 28 5f 5f 63 2e 69 62 29 3b 69 66 28 30 3c 62 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 66 64 63 28 62 29 3b 0a 7d 2c 68 64 63 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 28 61 Data Ascii: alize(b),b=>R8.deserialize(b)));return a.$Ga},gdc=async function(a,b){b=(await Promise.all(b.map(async c=>{try{await a.deleteDatabase(c)}catch(d){return{Il:c,error:d}}}))).filter(__c.ib);if(0<b.length)throw new fdc(b);},hdc=async function(a,b){const c=(a
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 3d 3e 74 68 69 73 2e 73 74 6f 72 65 2e 63 6f 75 6e 74 28 29 29 7d 75 70 64 61 74 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 4b 28 28 29 3d 3e 74 68 69 73 2e 73 74 6f 72 65 2e 75 70 64 61 74 65 28 61 2c 62 29 29 7d 67 65 74 41 6c 6c 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 4b 28 28 29 3d 3e 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 41 6c 6c 28 29 29 7d 63 6c 65 61 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 2e 63 6c 65 61 72 28 29 7d 63 6c 6f 73 65 28 29 7b 74 68 69 73 2e 73 74 6f 72 65 2e 63 6c 6f 73 65 28 29 7d 7d 3b 76 61 72 20 52 38 3d 5f 5f 63 2e 46 28 28 29 3d 3e 28 7b 75 73 65 72 49 64 3a 5f 5f 63 2e 4d 28 31 29 2c 49 65 3a 5f 5f 63 2e 4d 28 32 29 7d 29 29 3b 76 61 72 20 6e 64 63 3d 63 6c 61 73 73 7b 63 6f Data Ascii: =>this.store.count())}update(a,b){return this.tK(()=>this.store.update(a,b))}getAll(){return this.tK(()=>this.store.getAll())}clear(){return this.store.clear()}close(){this.store.close()}};var R8=__c.F(()=>({userId:__c.M(1),Ie:__c.M(2)}));var ndc=class{co
2024-03-27 20:20:03 UTC	242	IN	Data Raw: 65 72 49 64 3a 61 2c 49 65 3a 62 2c 64 47 3a 66 2c 73 65 72 69 61 6c 69 7a 65 3a 67 2c 64 65 73 65 72 69 61 6c 69 7a 65 3a 65 7d 29 7d 2c 49 49 3a 65 3d 3e 64 2e 49 49 28 65 29 2c 48 69 62 28 29 7b 72 65 74 75 72 6e 20 68 64 63 28 64 2c 61 29 7d 2c 61 73 79 6e 63 20 4a 31 28 29 7b 61 77 61 69 74 20 62 64 63 28 63 29 3b 72 65 74 75 72 6e 20 64 2e 4a 31 28 29 7d 7d 7d 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 34 35 66 37 38 35 33 64 63 37 36 36 30 33 37 38 61 30 33 38 39 35 32 62 35 33 63 30 39 35 33 65 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 66 61 32 65 66 31 61 34 34 39 35 38 63 30 32 35 2e 6a 73 2e 6d 61 70 Data Ascii: erId:a,Ie:b,dG:f,serialize:g,deserialize:e})},II:e=>d.II(e),Hib(){return hdc(d,a)},async J1(){await bdc(c);return d.J1()}}}};}).call(self, self._45f7853dc7660378a038952b53c0953e);}}])//# sourceMappingURL=sourcemaps/fa2ef1a44958c025.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49782	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	787	OUT	GET /web/49800cd02344befb.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/javascript Content-Length: 5755 Connection: close CF-Ray: 86b2142f7f463b2a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63808 Cache-Control: public, max-age=31556926 ETag: "1c1ca0e1692bbe15fdd1bf07ba4e9798" Expires: Fri, 28 Mar 2025 02:08:49 GMT Last-Modified: Wed, 27 Mar 2024 02:26:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kViLm0YWDwEjqhd+xY3X/FToGOdgAnyrVetje9g7uF2aSXIjbinKHw17B4SQ9UtHb81xiRA5sfs= x-amz-replication-status: COMPLETED x-amz-request-id: T4HDNT3BY31WRQT8 x-amz-server-side-encryption: AES256 x-amz-version-id: JHdRyg6wfHRbb8AobsjuEWsHe4frdq0m X-Content-Type-Options: nosniff
2024-03-27 20:20:03 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 65 52 4f 4d 54 6a 63 55 79 38 67 54 43 30 6c 37 46 4b 7a 44 30 57 63 57 69 75 6d 73 6a 41 57 76 4a 6f 72 68 62 78 37 79 4d 78 46 54 41 52 39 52 36 78 49 42 45 45 38 54 4c 77 67 75 6b 56 71 56 34 32 54 43 69 74 75 33 67 6c 31 50 45 67 51 59 45 48 25 32 46 63 59 37 49 64 25 32 42 50 44 6d 72 75 30 52 4b 77 76 79 4c 37 75 79 46 62 6c 65 79 78 6b 49 75 4d 79 39 4d 55 75 6e 6e 6a 53 77 63 70 68 49 6a 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0eROMTjcUy8gTC0l7FKzD0WcWiumsjAWvJorhbx7yMxFTAR9R6xIBEE8TLwgukVqV42TCitu3gl1PEgQYEH%2FcY7Id%2BPDmru0RKwvyL7uyFbleyxkIuMy9MUunnjSwcphIjI%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:03 UTC	1201	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 30 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 30 36 32 36 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6405],{/***/ 506261:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 7b 6d 65 74 72 69 63 73 3a 6e 75 6c 6c 21 3d 61 2e 6a 6c 3f 5b 2e 2e 2e 61 2e 6a 6c 5d 2e 72 65 64 75 63 65 28 28 62 2c 5b 63 2c 64 5d 29 3d 3e 28 62 5b 63 5d 3d 64 2c 62 29 2c 7b 7d 29 3a 76 6f 69 64 20 30 2c 6d 65 74 72 69 63 73 5f 6f 66 66 73 65 74 3a 61 2e 75 5f 61 2c 6c 6f 6e 67 5f 74 61 73 6b 73 5f 63 6f 75 6e 74 3a 61 2e 75 5a 61 2c 6c 6f 6e 67 5f 74 61 73 6b 73 5f 64 75 72 61 74 69 6f 6e 3a 61 2e 76 5a 61 2c 6c 6f 6e 67 5f 66 72 61 6d 65 73 5f 63 6f 75 6e 74 3a 61 2e 48 6f 62 2c 6c 6f 6e 67 5f 66 72 61 6d 65 73 5f 64 75 72 61 74 69 6f 6e 3a 61 2e 49 6f 62 2c 66 72 61 6d 65 5f 63 6f 75 6e 74 3a 61 2e 45 41 2c 66 72 61 6d 65 5f 64 75 72 61 74 69 6f 6e 5f 6d 65 61 6e 3a 61 2e 54 32 2c 66 72 61 6d 65 5f 64 75 72 61 74 69 6f 6e 5f 73 74 61 6e 64 61 72 Data Ascii: {metrics:null!=a.jl?[...a.jl].reduce((b,[c,d])=>(b[c]=d,b),{}):void 0,metrics_offset:a.u_a,long_tasks_count:a.uZa,long_tasks_duration:a.vZa,long_frames_count:a.Hob,long_frames_duration:a.Iob,frame_count:a.EA,frame_duration_mean:a.T2,frame_duration_standar
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 20 61 3d 6a 6b 61 28 29 2c 5b 62 2c 63 5d 3d 28 30 2c 5f 5f 63 2e 6b 6b 61 29 28 61 2e 70 72 65 66 65 72 73 52 65 64 75 63 65 64 4d 6f 74 69 6f 6e 29 3b 28 30 2c 5f 5f 63 2e 6c 6b 61 29 28 28 29 3d 3e 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 7b 63 6f 6e 73 74 20 64 3d 65 3d 3e 63 28 65 2e 6d 61 74 63 68 65 73 29 3b 61 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 64 29 3b 72 65 74 75 72 6e 28 29 3d 3e 7b 61 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 7d 7d 7d 2c 5b 61 2c 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 6a 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 71 6f 26 26 76 6f 69 64 20 30 21 3d 3d 71 6f 3f 71 6f 3a 71 6f 3d 6e 65 77 20 6d 6b 61 7d 3b 5f 5f 63 2e 72 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: const a=jka(),[b,c]=(0,__c.kka)(a.prefersReducedMotion);(0,__c.lka)(()=>{if(null!=a){const d=e=>c(e.matches);a.addListener(d);return()=>{a.removeListener(d)}}},[a,c]);return b};jka=function(){return null!==qo&&void 0!==qo?qo:qo=new mka};__c.ro=function(){
2024-03-27 20:20:03 UTC	1369	IN	Data Raw: 79 70 65 3a 22 72 65 73 6f 75 72 63 65 5f 6c 6f 61 64 65 64 22 2c 4f 62 28 61 29 7b 72 65 74 75 72 6e 20 5f 5f 63 2e 78 6c 28 7b 73 6f 75 72 63 65 3a 61 2e 73 6f 75 72 63 65 2c 72 65 73 6f 75 72 63 65 5f 69 64 3a 61 2e 78 44 61 2c 73 75 63 63 65 73 73 3a 61 2e 73 75 63 63 65 73 73 2c 72 65 73 6f 75 72 63 65 5f 74 79 70 65 3a 61 2e 72 65 73 6f 75 72 63 65 54 79 70 65 2c 76 65 72 73 69 6f 6e 3a 61 2e 76 65 72 73 69 6f 6e 2c 75 72 6c 3a 5f 5f 63 2e 67 6b 61 28 61 2e 75 72 6c 29 2c 77 61 74 65 72 6d 61 72 6b 65 64 3a 61 2e 43 61 2c 73 70 72 69 74 65 73 68 65 65 74 3a 61 2e 58 64 2c 68 65 69 67 68 74 3a 61 2e 68 65 69 67 68 74 2c 77 69 64 74 68 3a 61 2e 77 69 64 74 68 2c 71 75 61 6c 69 74 79 3a 61 2e 71 75 61 6c 69 74 79 2c 72 65 73 74 72 69 63 74 65 64 5f 61 Data Ascii: ype:"resource_loaded",Ob(a){return __c.xl({source:a.source,resource_id:a.xDa,success:a.success,resource_type:a.resourceType,version:a.version,url:__c.gka(a.url),watermarked:a.Ca,spritesheet:a.Xd,height:a.height,width:a.width,quality:a.quality,restricted_a
2024-03-27 20:20:03 UTC	447	IN	Data Raw: 3d 62 3f 76 6f 69 64 20 30 3a 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 61 29 7d 7d 2c 71 6f 3b 5f 5f 63 2e 7a 6b 61 3d 71 6b 61 28 76 6f 69 64 20 30 29 3b 76 61 72 20 42 6f 3b 42 6f 3d 4d 61 74 68 2e 50 49 2f 35 3b 5f 5f 63 2e 43 6f 3d 4d 61 74 68 2e 63 6f 73 28 42 6f 29 3b 5f 5f 63 2e 44 6f 3d 4d 61 74 68 2e 73 69 6e 28 42 6f 29 3b 5f 5f 63 2e 41 6b 61 3d 4d 61 74 68 2e 63 6f 73 28 42 6f 2f 32 29 3b 5f 5f 63 2e 42 6b 61 3d 4d 61 74 68 2e 73 69 6e 28 42 6f 2f 32 29 3b 5f 5f 63 2e 43 6b 61 3d 4d 61 74 68 2e 61 74 61 6e 28 4d 61 74 68 2e 50 49 2f 32 2d 32 2a 42 6f 29 3b 5f 5f 63 2e 45 6f 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 78 3d 61 3b 74 68 69 73 2e 79 3d 62 7d 73 74 61 74 69 63 20 6f 66 28 7b 78 Data Ascii: =b?void 0:b.removeListener(a)}},qo;__c.zka=qka(void 0);var Bo;Bo=Math.PI/5;__c.Co=Math.cos(Bo);__c.Do=Math.sin(Bo);__c.Aka=Math.cos(Bo/2);__c.Bka=Math.sin(Bo/2);__c.Cka=Math.atan(Math.PI/2-2*Bo);__c.Eo=class{constructor(a,b){this.x=a;this.y=b}static of({x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49783	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:02 UTC	1302	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/86b21416a8f7576d HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 15946 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	15946	OUT	Data Raw: 7b 22 77 70 22 3a 22 5a 24 2b 4a 68 52 30 2d 68 37 2b 68 70 69 55 30 7a 30 33 4d 49 4a 52 6a 4d 39 74 4d 6b 54 6b 57 57 52 2d 30 44 6c 4d 77 45 6a 75 45 66 2b 4d 50 77 43 73 55 45 37 30 72 4d 70 7a 2b 78 4c 24 24 4d 39 35 57 4d 6f 4d 57 6a 57 2b 30 4d 63 57 30 51 55 67 4a 35 37 24 36 4b 64 4a 77 45 4e 24 74 39 61 72 33 69 78 62 4a 51 4e 68 47 74 48 30 61 6c 77 35 6b 4d 68 2b 2b 32 6b 50 52 36 4c 4d 42 78 4c 66 76 36 4d 76 4a 69 50 4d 52 47 2b 4d 6b 4a 52 52 4a 4e 70 4a 6b 4d 30 45 4d 49 37 65 4d 30 48 36 4d 6d 53 2d 39 78 24 43 30 39 35 4c 2b 4d 52 53 36 4d 52 55 73 49 4d 73 52 4d 30 36 63 66 59 2b 64 72 74 6a 52 78 52 30 76 51 74 24 6c 68 4e 71 38 76 77 4d 54 4a 52 6b 4f 31 24 4d 2d 65 24 45 69 66 77 79 63 78 4d 73 38 76 35 4e 54 39 4a 4d 59 35 54 66 6b Data Ascii: {"wp":"Z$+JhR0-h7+hpiU0z03MIJRjM9tMkTkWWR-0DlMwEjuEf+MPwCsUE70rMpz+xL$$M95WMoMWjW+0McW0QUgJ57$6KdJwEN$t9ar3ixbJQNhGtH0alw5kMh++2kPR6LMBxLfv6MvJiPMRG+MkJRRJNpJkM0EMI7eM0H6MmS-9x$C095L+MRS6MRUsIMsRM06cfY+drtjRxR0vQt$lhNq8vwMTJRkO1$M-e$EifwycxMs8v5NT9JMY5Tfk
2024-03-27 20:20:03 UTC	895	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; path=/; expires=Thu, 27-Mar-25 20:20:03 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AItXXapTWacf2SkFOSe9bzbLFgXVpZvxmZ9m1CVjl%2FOIyQm73rQ80CYs27kFcTL5f9z8XGLVVc4Xzwf07OHh35Q6ppYuxvCm2yDYKP1q0Ffpxl9BrmtN%2FJRwqRXiPu0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b2142f1fb65758-IAD
2024-03-27 20:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49784	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:03 UTC	794	OUT	GET /web/8f3a0efc71d77cd0.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000
2024-03-27 20:20:03 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:03 GMT Content-Type: text/javascript Content-Length: 1028 Connection: close CF-Ray: 86b2143058143b18-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151667 Cache-Control: public, max-age=31556926 ETag: "1df7c839454a392b8633005f7bd39a0a" Expires: Fri, 28 Mar 2025 02:08:49 GMT Last-Modified: Tue, 26 Mar 2024 02:06:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: u25B634kx8u0WfDqAzOOFOcIN14fn1ihHePhbvsUjHHH8ZECWIe6ffRXF1Pvdvv0rghb3aS6Qvs= x-amz-replication-status: PENDING x-amz-request-id: JGQV03SJTBXSS74V x-amz-server-side-encryption: AES256 x-amz-version-id: G5OAysi.LvT9khhgLVJtoJmpdrBoNS8H X-Content-Type-Options: nosniff
2024-03-27 20:20:03 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 51 68 37 5a 75 46 4d 47 7a 45 62 45 63 63 76 54 55 4d 57 36 75 54 63 6b 44 53 46 25 32 42 37 66 73 50 7a 53 36 47 79 49 55 52 67 72 6a 37 4e 7a 6c 46 43 63 76 76 50 31 7a 41 57 74 74 4c 48 6b 77 39 6d 57 34 46 4a 61 33 76 25 32 42 6d 6e 75 63 74 38 68 69 55 41 69 51 33 34 76 59 77 46 35 49 25 32 42 67 56 7a 6b 31 76 64 46 33 51 25 32 42 37 4e 55 35 32 61 57 53 38 79 33 42 53 67 72 72 41 72 77 58 4c 6b 42 61 58 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qh7ZuFMGzEbEccvTUMW6uTckDSF%2B7fsPzS6GyIURgrj7NzlFCcvvP1zAWttLHkw9mW4FJa3v%2Bmnuct8hiUAiQ34vYwF5I%2BgVzk1vdF3Q%2B7NU52aWS8y3BSgrrArwXLkBaXU%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:03 UTC	1028	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 33 30 5d 2c 7b 36 39 39 36 30 31 3a 28 74 2c 65 29 3d 3e 7b 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 20 32 3d 3d 3d 74 2e 6c 65 6e 67 74 68 3f 72 28 74 5b 30 5d 2c 74 5b 31 5d 29 7c 7c 6e 75 6c 6c 3a 74 2e 73 6c 69 63 65 28 31 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[1230],{699601:(t,e)=>{e.Z=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];return 2===t.length?r(t[0],t[1])\|\|null:t.slice(1).reduce((function(t,e){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49785	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1242	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/86b21416a8f7576d HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	782	IN	HTTP/1.1 400 Bad Request Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: NBWSr55EeUEANk+N7J5K9Q==$clBUSF6tWpf6TErx0nXNQg== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKznXf5csYwTyZMhl9%2FAGVIkfsYTkkJosplDbTzAJExx7a4rb1Ils9X2rFHe40YVvCmqYHeY5nRjM29BSvZJLk4ISlJORxhsKXpSaxlNUNskTfgeycZQdnY2MQyP35I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b21436aac6060e-IAD
2024-03-27 20:20:04 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-03-27 20:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49787	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 2312 Connection: close CF-Ray: 86b214382d3d0806-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792653 Cache-Control: public, max-age=31556926 ETag: "9abc2241bf1479263a0a039f3d1e5b5c" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: mlU1uOQPhguUOaiX3w0AV7hclXxnQ1vXpK96IQnbRIbBXeL0udWhwmsWNQSDsreX7S2CUIcghaY= x-amz-replication-status: COMPLETED x-amz-request-id: EW27DPNMKT05QKG2 x-amz-server-side-encryption: AES256 x-amz-version-id: RHImjd5e24cKm0xMC36PvUPBcw582F4s X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 77 70 49 73 57 64 33 73 4c 6f 57 32 79 5a 53 37 4b 4c 76 35 71 4d 73 6a 4f 6d 37 6c 36 4a 74 53 44 4f 52 42 53 44 38 71 5a 42 6d 5a 6e 30 4f 74 52 58 64 39 54 7a 43 6b 42 70 54 58 4e 73 79 45 6d 56 56 57 6b 33 56 30 58 6c 51 35 47 73 78 63 51 69 36 47 4b 25 32 42 4a 73 6e 50 25 32 46 4a 79 6c 68 79 6d 71 38 45 75 44 76 25 32 42 64 50 55 4c 50 4b 53 78 31 6a 4f 59 65 43 56 33 63 6d 61 50 78 41 6f 64 76 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iwpIsWd3sLoW2yZS7KLv5qMsjOm7l6JtSDORBSD8qZBmZn0OtRXd9TzCkBpTXNsyEmVVWk3V0XlQ5GsxcQi6GK%2BJsnP%2FJylhymq8EuDv%2BdPULPKSx1jOYeCV3cmaPxAodvg%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:04 UTC	1200	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 46 39 36 34 35 22 20 64 3d 22 4d 33 32 2e 33 30 32 20 32 34 2e 33 34 37 63 2d 2e 36 39 35 2d 31 2e 30 31 2d 2e 33 30 37 2d 32 2e 34 37 2d 2e 34 38 2d 34 2e 30 38 32 2d 2e 31 37 38 2d 32 2e 36 33 2d 31 2e 33 30 38 2d 35 2e 31 37 38 2d 33 2e 35 2d 37 2e 32 31 36 6c 2d 37 2e 34 36 36 2d 36 2e 39 34 32 73 2d 31 2e 34 37 31 2d 31 2e 33 36 39 2d 32 2e 38 34 31 2e 31 30 33 63 2d 31 2e 33 36 38 20 31 2e 34 37 31 2e 31 30 34 20 32 2e 38 34 2e 31 30 34 20 32 2e 38 34 6c 33 2e 31 35 34 20 32 2e 39 33 34 20 32 2e 37 33 34 20 32 2e 35 34 32 73 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.
2024-03-27 20:20:04 UTC	1112	IN	Data Raw: 31 20 31 20 30 20 30 20 31 2d 2e 37 30 37 2d 31 2e 37 30 38 6c 33 2e 35 35 32 2d 33 2e 35 35 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 34 20 31 2e 34 31 35 6c 2d 33 2e 35 35 32 20 33 2e 35 35 61 2e 39 39 33 2e 39 39 33 20 30 20 30 20 31 2d 2e 37 30 37 2e 32 39 33 7a 6d 2d 34 2e 31 36 34 2d 31 2e 36 39 37 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2d 31 2e 33 33 31 6c 2e 39 37 2d 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 20 31 2e 38 38 38 2e 36 36 6c 2d 2e 39 37 20 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2e 36 37 31 7a 6d 36 2e 31 34 33 20 35 2e 37 37 34 61 31 2e 30 30 31 20 31 2e 30 30 31 20 30 20 30 20 31 2d 2e 33 33 33 2d 31 2e 39 34 33 6c 32 2e 34 39 34 2d 2e 38 38 31 61 31 20 31 20 30 20 31 20 31 20 2e 36 36 36 20 31 2e 38 Data Ascii: 1 1 0 0 1-.707-1.708l3.552-3.55a1 1 0 0 1 1.414 1.415l-3.552 3.55a.993.993 0 0 1-.707.293zm-4.164-1.697a1 1 0 0 1-.944-1.331l.97-2.773a1 1 0 0 1 1.888.66l-.97 2.773a1 1 0 0 1-.944.671zm6.143 5.774a1.001 1.001 0 0 1-.333-1.943l2.494-.881a1 1 0 1 1 .666 1.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49786	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 1865 Connection: close CF-Ray: 86b21438292e0590-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792655 Cache-Control: public, max-age=31556926 ETag: "3e78ef31f2928a74c6d7ba19b91d0570" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 06:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: uuvkC9Ia5kgmINmib7bwWVrDxf2H2yGbyRsnTWh+d0kOty0IwLAT0G3M89pV+ES0oBeXtPabJ2I= x-amz-replication-status: COMPLETED x-amz-request-id: W79TRV5MEM6PAQZC x-amz-server-side-encryption: AES256 x-amz-version-id: MKvbOcPT.ZamEvvCqLIq05HsRrDkbZF8 X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 62 4f 44 75 79 79 38 32 32 70 6f 4e 31 78 6c 6e 78 33 70 39 65 39 72 69 56 77 36 52 6b 31 61 77 54 54 67 46 79 52 32 54 66 47 34 38 78 53 4e 43 69 76 25 32 42 6c 47 51 73 76 33 42 34 42 41 6b 71 77 4a 30 6c 39 54 61 58 69 49 4a 6a 6b 73 57 63 58 50 35 73 51 34 46 55 33 46 71 55 76 53 53 67 49 37 7a 76 72 42 63 77 4f 43 32 45 25 32 46 56 57 32 5a 32 76 4a 37 77 72 4f 4e 38 25 32 42 72 75 35 58 43 62 37 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CbODuyy822poN1xlnx3p9e9riVw6Rk1awTTgFyR2TfG48xSNCiv%2BlGQsv3B4BAkqwJ0l9TaXiIJjksWcXP5sQ4FU3FqUvSSgI7zvrBcwOC2E%2FVW2Z2vJ7wrON8%2Bru5XCb7Q%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:04 UTC	1200	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 2e 32 39 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 34 20 31 36 2d 31 36 20 31 36 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 20 30 2d 38 2e 38 33 36 20 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 38 2e 38 33 36 20 30 20 31 36 20 37 2e 31 36 34 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 33 39 30 30 36 36 33 33 39 34 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 31 33 31 20 31 Data Ascii: <svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 1
2024-03-27 20:20:04 UTC	665	IN	Data Raw: 3d 22 23 36 36 34 35 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 31 38 20 32 30 2e 37 30 36 73 32 2e 38 32 34 2e 39 34 20 38 2e 34 37 2e 39 34 63 35 2e 36 34 38 20 30 20 38 2e 34 37 31 2d 2e 39 34 20 38 2e 34 37 31 2d 2e 39 34 73 2d 31 2e 38 38 32 20 33 2e 37 36 35 2d 38 2e 34 37 20 33 2e 37 36 35 63 2d 36 2e 35 38 38 20 30 2d 38 2e 34 37 2d 33 2e 37 36 35 2d 38 2e 34 37 2d 33 2e 37 36 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 35 35 37 20 32 35 2e 36 32 38 61 34 2e 37 30 35 20 34 2e 37 30 35 20 30 20 30 20 31 2d 35 2e 37 32 20 33 2e 34 30 32 20 34 2e 37 30 34 20 34 2e 37 30 34 20 30 20 30 20 31 2d 33 2e 34 30 32 2d 35 2e 37 31 38 63 2e 36 34 2d 32 2e 35 32 20 35 2e 39 36 34 2d 38 2e 31 39 36 20 36 2e Data Ascii: ="#664500"/><path d="M7.818 20.706s2.824.94 8.47.94c5.648 0 8.471-.94 8.471-.94s-1.882 3.765-8.47 3.765c-6.588 0-8.47-3.765-8.47-3.765Z" fill="#fff"/><path d="M9.557 25.628a4.705 4.705 0 0 1-5.72 3.402 4.704 4.704 0 0 1-3.402-5.718c.64-2.52 5.964-8.196 6.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49788	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 842 Connection: close CF-Ray: 86b214385d465b4d-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 788560 Cache-Control: public, max-age=31556926 ETag: "3a05dbf1cdd156fcd1677a0b444cc36f" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 06:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9UKIIh/gDJYCWwBiUMLv7wXFlIxpPcZ5CTpZXAGUyzNtR99YK3RLHXobQDLjaK6eFiCmD8Ei/yM= x-amz-replication-status: COMPLETED x-amz-request-id: QR6ZJNMKENC8RGY1 x-amz-server-side-encryption: AES256 x-amz-version-id: 89eYaVxS0FFMW1yG3hfwtFrbd6sRha4y X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 50 51 4b 4b 47 42 5a 57 59 6a 4a 53 65 62 74 4a 68 4f 34 65 36 6e 74 68 6c 25 32 42 53 56 31 74 79 36 58 54 61 52 67 31 4f 56 79 71 33 44 74 69 76 67 34 6d 77 58 67 76 6c 76 76 6a 65 32 44 6a 79 50 45 43 48 51 74 63 4b 30 51 59 70 56 62 38 64 4d 50 79 63 64 7a 6d 45 61 64 70 4e 4f 77 33 25 32 46 6f 4a 68 66 4d 34 72 64 31 45 69 4b 52 48 49 76 68 25 32 46 33 73 62 4a 31 65 47 66 57 55 5a 6e 6e 46 76 44 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kPQKKGBZWYjJSebtJhO4e6nthl%2BSV1ty6XTaRg1OVyq3Dtivg4mwXgvlvvje2DjyPECHQtcK0QYpVb8dMPycdzmEadpNOw3%2FoJhfM4rd1EiKRHIvh%2F3sbJ1eGfWUZnnFvDg%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:04 UTC	842	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 53 30 20 32 34 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 30 20 31 36 20 30 73 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 31 35 36 32 34 30 39 33 36 35 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 32 33 35 20 31 32 2e 32 33 35 63 30 20 31 2e 35 36 2d 2e 39 30 33 20 32 2e 38 32 34 2d 32 2e 30 31 37 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49792	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1836	OUT	GET /_ajax/reaction/config/DAGAtXAJufM?documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: getreactionconfigapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21437dc10398b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21437dc10398b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pmqxc75ck%2BYGAeKIf2Tu6Cxl4eqkLAfTYkJ%2BVkIlvZP3zUMuN35ZRvEnUMPQnsTd5XZngS%2Fx0JYdyq4ewvRRuuGiy0hxJyemj2EF298SkUgPldOf2CdqL%2BOXbd8gEpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-03-27 20:20:04 UTC	57	IN	Data Raw: 33 33 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 42 22 3a 7b 22 41 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: 33'"])}while(1);</x>//{"A":{"A":true},"B":{"A":true}}
2024-03-27 20:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49789	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 368 Connection: close CF-Ray: 86b214385e843925-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792652 Cache-Control: public, max-age=31556926 ETag: "0483f2b648dcc986d01385062052ae1c" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Rd2GUns54fYdSzJs+PwSaV2CDQZXfRcntWwrh/okNGrmmwVxMxNNKrMEf188UiL5asgxOv9p1Lg= x-amz-replication-status: COMPLETED x-amz-request-id: 546AJTVY19PVEWWC x-amz-server-side-encryption: AES256 x-amz-version-id: E.c5zjSTfUrZJPqzwok9bwh70Qy_m2NM X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	344	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 4e 74 4e 38 36 68 39 33 62 48 46 65 48 37 7a 73 43 41 55 78 72 7a 36 79 4e 4d 4f 35 31 51 68 79 6f 48 41 43 4d 7a 67 4a 57 61 79 35 73 45 70 43 30 51 33 6c 76 71 53 6a 57 68 36 6f 6f 55 42 6b 34 33 6c 72 57 55 4d 33 30 64 57 6a 4a 45 6c 50 48 63 79 5a 65 4b 38 6d 36 58 67 62 49 34 65 51 53 58 50 71 67 45 74 66 39 4f 44 4d 6c 66 76 6c 61 44 33 59 78 6d 7a 6a 71 6b 72 44 34 4a 41 76 6b 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNtN86h93bHFeH7zsCAUxrz6yNMO51QhyoHACMzgJWay5sEpC0Q3lvqSjWh6ooUBk43lrWUM30dWjJElPHcyZeK8m6XgbI4eQSXPqgEtf9ODMlfvlaD3YxmzjqkrD4JAvkk%3D"}],"group":"cf-nel","max_age":604800}NEL
2024-03-27 20:20:04 UTC	368	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 64 3d 22 4d 33 35 2e 38 38 35 20 31 31 2e 38 33 33 63 30 2d 35 2e 34 35 2d 34 2e 34 31 38 2d 39 2e 38 36 38 2d 39 2e 38 36 37 2d 39 2e 38 36 38 2d 33 2e 33 30 38 20 30 2d 36 2e 32 32 37 20 31 2e 36 33 33 2d 38 2e 30 31 38 20 34 2e 31 32 39 2d 31 2e 37 39 31 2d 32 2e 34 39 36 2d 34 2e 37 31 2d 34 2e 31 32 39 2d 38 2e 30 31 37 2d 34 2e 31 32 39 2d 35 2e 34 35 20 30 2d 39 2e 38 36 38 20 34 2e 34 31 37 2d 39 2e 38 36 38 20 39 2e 38 36 38 20 30 20 2e 37 37 32 2e 30 39 38 20 31 2e 35 32 2e 32 36 36 20 32 2e 32 34 31 43 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49791	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 1525 Connection: close CF-Ray: 86b214388b6e592f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792652 Cache-Control: public, max-age=31556926 ETag: "8777e8ed572c4159d71b08cca2972b15" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: O30RyRSpkbo6mVrImZ/Bu/VFUBA6jpVtKr1JKCMlRhhbIjlsHSm31jtsarWSex8QqhqDt7htFg4= x-amz-replication-status: COMPLETED x-amz-request-id: 5463TKVBKDPDRXWD x-amz-server-side-encryption: AES256 x-amz-version-id: DiS.ibZVDKrCSuT3IX.Lfb6cs07gD6RZ X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 52 6e 53 7a 78 71 7a 5a 62 49 77 6b 6b 31 50 64 47 79 74 38 79 65 75 48 6d 72 4d 4d 33 51 6b 70 4c 58 55 6a 6e 42 55 41 44 64 64 47 36 76 34 77 52 66 39 4a 55 42 33 4b 64 53 4e 75 6f 4a 72 51 6d 6c 72 64 33 79 62 41 41 65 6e 4d 6b 39 4b 72 39 6c 72 41 38 25 32 46 63 6a 4a 56 62 78 6b 37 43 7a 76 32 32 53 50 25 32 42 6f 75 69 56 53 54 59 32 76 61 57 49 38 5a 78 37 6e 36 59 30 41 37 64 79 6a 71 7a 44 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnSzxqzZbIwkk1PdGyt8yeuHmrMM3QkpLXUjnBUADddG6v4wRf9JUB3KdSNuoJrQmlrd3ybAAenMk9Kr9lrA8%2FcjJVbxk7Czv22SP%2BouiVSTY2vaWI8Zx7n6Y0A7dyjqzDo%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:04 UTC	1202	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 46 46 43 42 34 43 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 30 31 38 22 20 72 3d 22 31 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 35 34 37 31 42 22 20 64 3d 22 4d 31 34 2e 35 32 34 20 32 31 2e 30 33 36 61 2e 39 31 34 2e 39 31 34 20 30 20 30 20 31 2d 2e 33 31 32 2d 2e 34 36 34 2e 37 39 39 2e 37 39 39 20 30 20 30 20 31 20 2e 35 39 2d 31 2e 30 32 31 63 34 2e 35 32 38 2d 31 2e 30 32 31 20 37 2e 35 37 37 20 31 2e 33 36 33 20 37 2e 37 30 36 20 31 2e 34 36 35 2e 33 38 34 2e 33 30 36 2e 34 35 39 2e 38 34 35 2e 31 37 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173
2024-03-27 20:20:04 UTC	323	IN	Data Raw: 2e 30 33 34 2e 34 33 33 2e 32 33 31 2e 36 30 38 2e 37 34 37 2e 33 39 31 20 31 2e 31 35 34 2d 2e 32 31 36 2e 34 30 35 2d 2e 37 34 2e 35 34 36 2d 31 2e 31 37 33 2e 33 31 38 2d 2e 31 32 33 2d 2e 30 36 33 2d 32 2e 38 33 32 2d 31 2e 34 33 32 2d 36 2e 32 37 38 2e 30 34 37 61 2e 39 31 35 2e 39 31 35 20 30 20 30 20 31 2d 2e 37 38 35 2d 2e 30 34 32 7a 6d 31 32 2e 31 33 35 20 33 2e 37 35 61 2e 39 32 34 2e 39 32 34 20 30 20 30 20 31 2d 2e 33 36 32 2d 2e 34 32 34 2e 38 2e 38 20 30 20 30 20 31 20 2e 34 36 38 2d 31 2e 30 38 34 63 34 2e 33 38 31 2d 31 2e 35 33 36 20 37 2e 36 38 35 2e 34 38 20 37 2e 38 32 33 2e 35 36 37 2e 34 31 35 2e 32 36 2e 35 35 35 2e 37 38 37 2e 33 31 32 20 31 2e 31 37 38 2d 2e 32 34 32 2e 33 39 2d 2e 37 37 36 2e 34 39 35 2d 31 2e 31 39 31 2e 32 33 Data Ascii: .034.433.231.608.747.391 1.154-.216.405-.74.546-1.173.318-.123-.063-2.832-1.432-6.278.047a.915.915 0 0 1-.785-.042zm12.135 3.75a.924.924 0 0 1-.362-.424.8.8 0 0 1 .468-1.084c4.381-1.536 7.685.48 7.823.567.415.26.555.787.312 1.178-.242.39-.776.495-1.191.23

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49790	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: image/svg+xml Content-Length: 1404 Connection: close CF-Ray: 86b214386bfc080d-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777335 Cache-Control: public, max-age=31556926 ETag: "aba10b640f15bb01b8e5f0b804eefc7f" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Fri, 15 Mar 2024 06:47:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: D0yrNmSWCpGhDT1W7cwuyR6NOLOIN5w88WwGtnF+JdM67sy/KO0z3lJVOfbojWTgAopXN3OzjjI= x-amz-replication-status: COMPLETED x-amz-request-id: TNXEADBNVAP9974B x-amz-server-side-encryption: AES256 x-amz-version-id: l1GFoHGsoh6OUfTCQ1hafnz7cucsXwRK X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	344	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 46 44 45 67 49 30 58 66 4b 74 39 31 42 77 75 43 64 4d 46 69 59 36 32 70 65 64 36 6e 46 62 76 48 56 62 32 70 75 46 76 59 62 5a 7a 7a 47 52 43 71 56 38 39 4c 68 43 70 70 43 56 59 7a 4b 4c 35 7a 70 76 65 6f 66 63 6b 59 36 65 63 69 6a 49 49 79 70 67 4a 77 69 6a 33 5a 67 4f 35 72 4f 77 72 68 35 66 68 74 39 4d 73 33 4c 34 55 58 74 56 76 32 48 33 52 4f 6f 67 31 31 58 53 6c 47 78 4b 6f 70 75 64 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDEgI0XfKt91BwuCdMFiY62ped6nFbvHVb2puFvYbZzzGRCqV89LhCppCVYzKL5zpveofckY6ecijIIypgJwij3ZgO5rOwrh5fht9Ms3L4UXtVv2H3ROog11XSlGxKopudM%3D"}],"group":"cf-nel","max_age":604800}NEL
2024-03-27 20:20:04 UTC	1206	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 44 42 35 45 22 20 64 3d 22 4d 33 34 2e 39 35 36 20 31 37 2e 39 31 36 63 30 2d 2e 35 30 33 2d 2e 31 32 2d 2e 39 37 35 2d 2e 33 32 31 2d 31 2e 34 30 34 2d 31 2e 33 34 31 2d 34 2e 33 32 36 2d 37 2e 36 31 39 2d 34 2e 30 31 2d 31 36 2e 35 34 39 2d 34 2e 32 32 31 2d 31 2e 34 39 33 2d 2e 30 33 35 2d 2e 36 33 39 2d 31 2e 37 39 38 2d 2e 31 31 35 2d 35 2e 36 36 38 2e 33 34 31 2d 32 2e 35 31 37 2d 31 2e 32 38 32 2d 36 2e 33 38 32 2d 34 2e 30 31 2d 36 2e 33 38 32 2d 34 2e 34 39 38 20 30 2d 2e 31 37 31 20 33 2e 35 34 38 2d 34 2e 31 34 38 20 31 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12
2024-03-27 20:20:04 UTC	198	IN	Data Raw: 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 32 20 31 2e 35 37 32 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 37 68 2d 37 2e 30 36 33 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 68 38 2e 30 39 31 61 33 2e 33 35 20 33 2e 33 35 20 30 20 30 20 30 20 32 2e 38 36 37 2d 31 2e 36 33 32 2e 38 37 35 2e 38 37 35 20 30 20 30 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 33 20 31 2e 35 37 33 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 36 48 32 33 2e 30 32 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 504-.894 1.572 1.572 0 0 1-1.363.777h-7.063a1.585 1.585 0 0 1 0-3.167h8.091a3.35 3.35 0 0 0 2.867-1.632.875.875 0 0 0-1.504-.894 1.573 1.573 0 0 1-1.363.776H23.02a1.585 1.585 0 0 1 0-3.167z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49793	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1929	OUT	GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGAtXAJufM&documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: findreactionsummaryapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21438adcc57e5-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21438adcc57e5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wDihlWlu0o%2Bbz5CaC5WJ8w9dH1DnqQ0XX7bZppWZUyRaTvpoDJPgKgfaz7q9MPT%2Bub3XsP2S8ECObJ1P63Ef6BcZYmaU7rDhZdazpJdTwIaYRkOhTJvB3Z2rh7T%2BozA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-03-27 20:20:04 UTC	63	IN	Data Raw: 33 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 5b 5d 2c 22 42 22 3a 5b 5d 2c 22 44 22 3a 5b 5d 7d 7d 0d 0a Data Ascii: 39'"])}while(1);</x>//{"A":{"A?":"A","A":[],"B":[],"D":[]}}
2024-03-27 20:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49794	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1163	OUT	GET /chunk-batch/1b96dc175117e75c.vendor.js+23fef8879c4d4673.js+9bbc6dba1ea0ccf2.js+58bd38f2ab220570.js+f284488f3c1f6334.js+dac4e6a1405545af.strings.js+0fb70ff258841869.js+c916589d0dc37af2.js+00cf5240164d2307.js+bb043949f5162023.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1147	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/javascript Content-Length: 246476 Connection: close CF-Ray: 86b21438b8df57c7-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63676 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Wed, 20 Mar 2024 05:42:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 21 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: HGw3UaawqUWyUguwU/NiOL69s7aX2MNt5KUoKG3e/+GOCl0f6NiTFJUSP5eYVljIiy1tHEPyXmk= x-amz-replication-status: PENDING x-amz-request-id: JGM47BPRQMSPWYQ7 x-amz-server-side-encryption: AES256 x-amz-version-id: l8LUpcm30ca_tnqavR5Ao6dcHCMTgUwI X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 79 54 64 35 59 4d 42 6a 56 6f 62 4c 4b 57 6d 4f 79 58 78 4f 41 70 68 6c 41 33 4b 51 70 6c 68 31 43 6f 37 35 4f 6b 65 6e 50 41 56 57 44 36 74 41 79 33 25 32 46 72 56 70 42 6c 71 76 45 49 31 78 4f 56 4b 59 6f 36 59 31 52 6a 31 62 65 74 78 6f 6a 63 74 32 6d 4a 79 6e 6d 70 58 46 74 6b 6c 30 4e 37 4c 66 66 32 31 7a 49 4a 36 75 25 32 46 45 33 6b 79 51 37 67 36 36 48 6e 50 34 30 70 54 4c 5a 72 74 69 64 79 65 44 72 35 44 45 4a 42 6f 59 43 31 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTd5YMBjVobLKWmOyXxOAphlA3KQplh1Co75OkenPAVWD6tAy3%2FrVpBlqvEI1xOVKYo6Y1Rj1betxojct2mJynmpXFtkl0N7Lff21zIJ6u%2FE3kyQ7g66HnP40pTLZrtidyeDr5DEJBoYC1c%3D"}],"group":"cf-nel","max_a
2024-03-27 20:20:04 UTC	1231	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 31 62 39 36 64 63 31 37 35 31 31 37 65 37 35 63 2e 76 65 6e 64 6f 72 2e 6a 73 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 33 36 5d 2c 7b 36 36 34 37 35 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 33 36 38 29 2c 6e 3d 69 28 34 31 32 37 33 30 29 2c 72 3d 69 28 36 35 37 30 37 30 29 2c 6f 3d 69 28 39 34 35 35 32 32 29 2c 61 3d 69 28 39 32 30 33 33 35 29 2c 6c 3d 69 28 38 34 33 32 36 34 29 3b 63 6f 6e 73 74 Data Ascii: ;// __FILE_CONTENT_FOR__:1b96dc175117e75c.vendor.js"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 7b 69 66 28 22 69 6e 64 65 78 65 64 44 42 22 69 6e 20 74 68 69 73 2e 74 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 64 2e 69 6e 64 65 78 65 64 44 42 7d 72 64 28 29 7b 74 72 79 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 6f 64 28 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 6f 64 28 29 2e 6f 70 65 6e 28 22 42 72 61 7a 65 20 49 6e 64 65 78 65 64 44 42 20 53 75 70 70 6f 72 74 20 54 65 73 74 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 77 69 6e 64 6f 77 2e 62 72 6f 77 73 65 72 7c 7c 77 69 6e 64 6f 77 2e 6d 73 42 72 6f 77 73 65 72 3b 69 66 28 74 26 26 74 2e 72 75 6e 74 69 6d 65 26 26 74 2e 72 75 6e 74 69 6d 65 2e 69 64 29 72 65 74 Data Ascii: {if("indexedDB"in this.td)return this.td.indexedDB}rd(){try{if(null==this.od())return!1;if(this.od().open("Braze IndexedDB Support Test"),"undefined"!=typeof window){const t=window.chrome\|\|window.browser\|\|window.msBrowser;if(t&&t.runtime&&t.runtime.id)ret
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 2e 73 64 2b 22 20 2d 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 62 6a 65 63 74 53 74 6f 72 65 22 29 2c 76 6f 69 64 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 29 3b 63 6f 6e 73 74 20 61 3d 6f 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 70 75 74 28 69 2c 65 29 3b 61 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 72 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 73 74 6f 72 65 20 6f 62 6a 65 63 74 20 22 2b 65 2b 22 20 69 6e 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 72 2e 65 64 2e 73 64 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 7d 2c 61 Data Ascii: .sd+" - "+t+" is not a valid objectStore"),void("function"==typeof n&&n());const a=o.transaction([t],"readwrite").objectStore(t).put(i,e);a.onerror=()=>{r.nd.error("Could not store object "+e+" in "+t+" on indexedDB "+r.ed.sd),"function"==typeof n&&n()},a
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 21 31 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 64 28 28 73 3d 3e 7b 73 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 3f 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 64 65 6c 65 74 65 28 65 29 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 69 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 22 2b 65 2b 22 20 66 72 6f 6d 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 69 2e 65 64 2e 73 64 29 7d 3a 69 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 22 2b 65 2b 22 Data Ascii: !1;const i=this;return this.dd((s=>{s.objectStoreNames.contains(t)?s.transaction([t],"readwrite").objectStore(t).delete(e).onerror=()=>{i.nd.error("Could not delete record "+e+" from "+t+" on indexedDB "+i.ed.sd)}:i.nd.error("Could not delete record "+e+"
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6c 65 61 72 20 6f 62 6a 65 63 74 20 73 74 6f 72 65 73 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 65 2e 65 64 2e 73 64 29 7d 7d 29 29 7d 7d 73 2e 65 70 3d 7b 46 74 3a 7b 73 64 3a 22 41 70 70 62 6f 79 53 65 72 76 69 63 65 57 6f 72 6b 65 72 41 73 79 6e 63 53 74 6f 72 61 67 65 22 2c 56 45 52 53 49 4f 4e 3a 36 2c 24 74 3a 7b 6a 6c 3a 22 64 61 74 61 22 2c 6a 72 3a 22 70 75 73 68 43 6c 69 63 6b 73 22 2c 70 75 3a 22 70 75 73 68 53 75 62 73 63 72 69 62 65 64 22 2c 75 64 3a 22 66 61 6c 6c 62 61 63 6b 44 65 76 69 63 65 22 2c 4d 74 3a 22 63 61 72 64 55 70 64 61 74 65 73 22 2c 6f 65 3a 22 6f 70 74 4f 75 74 22 2c 24 72 3a 22 70 65 6e 64 69 6e 67 44 61 74 61 Data Ascii: r=function(){e.nd.error("Could not clear object stores on indexedDB "+e.ed.sd)}}))}}s.ep={Ft:{sd:"AppboyServiceWorkerAsyncStorage",VERSION:6,$t:{jl:"data",jr:"pushClicks",pu:"pushSubscribed",ud:"fallbackDevice",Mt:"cardUpdates",oe:"optOut",$r:"pendingData
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 61 3a 22 73 65 72 76 69 63 65 57 6f 72 6b 65 72 4c 6f 63 61 74 69 6f 6e 22 2c 72 61 3a 22 73 61 66 61 72 69 57 65 62 73 69 74 65 50 75 73 68 49 64 22 2c 6a 6e 3a 22 6c 6f 63 61 6c 69 7a 61 74 69 6f 6e 22 2c 61 6f 3a 22 63 6f 6e 74 65 6e 74 53 65 63 75 72 69 74 79 4e 6f 6e 63 65 22 2c 5f 6f 3a 22 65 6e 61 62 6c 65 48 74 6d 6c 49 6e 41 70 70 4d 65 73 73 61 67 65 73 22 2c 49 6f 3a 22 61 6c 6c 6f 77 55 73 65 72 53 75 70 70 6c 69 65 64 4a 61 76 61 73 63 72 69 70 74 22 2c 6e 6f 3a 22 69 6e 41 70 70 4d 65 73 73 61 67 65 5a 49 6e 64 65 78 22 2c 6c 6f 3a 22 6f 70 65 6e 49 6e 41 70 70 4d 65 73 73 61 67 65 73 49 6e 4e 65 77 54 61 62 22 2c 65 6e 3a 22 6f 70 65 6e 4e 65 77 73 46 65 65 64 43 61 72 64 73 49 6e 4e 65 77 54 61 62 22 2c 55 69 3a 22 72 65 71 75 69 72 65 45 Data Ascii: a:"serviceWorkerLocation",ra:"safariWebsitePushId",jn:"localization",ao:"contentSecurityNonce",_o:"enableHtmlInAppMessages",Io:"allowUserSuppliedJavascript",no:"inAppMessageZIndex",lo:"openInAppMessagesInNewTab",en:"openNewsFeedCardsInNewTab",Ui:"requireE
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 33 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 55 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 73 3d 69 28 34 34 37 39 39 33 29 2c 6e 3d 69 28 36 36 34 37 35 31 29 2c 72 3d 69 28 33 32 34 33 36 35 29 2c 6f 3d 69 28 37 34 37 35 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 73 2e 5a 50 2e 72 72 28 29 29 72 65 74 75 72 6e 3b 73 2e 5a 50 2e 6d 72 28 29 2e 6f 70 65 6e 53 65 73 73 69 6f 6e 28 29 3b 63 6f 6e 73 74 20 74 3d 6e 2e 5a 2e 78 74 2e 46 74 2c 65 3d 6e 65 77 20 6e 2e 5a 2e 71 74 28 74 2c 6e 2e 5a 2e 44 29 3b 65 2e 68 72 28 74 2e 24 74 2e 6a 72 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 63 6f 6e 73 74 20 6c 3d 61 2e 6c 61 73 74 43 6c 69 63 6b 2c 68 3d 61 2e 74 72 61 63 6b 69 6e 67 53 74 72 69 6e 67 3b 6e 2e 5a 2e 44 2e 69 6e Data Ascii: 30:(t,e,i)=>{i.d(e,{U:()=>a});var s=i(447993),n=i(664751),r=i(324365),o=i(747567);function a(){if(!s.ZP.rr())return;s.ZP.mr().openSession();const t=n.Z.xt.Ft,e=new n.Z.qt(t,n.Z.D);e.hr(t.$t.jr,(function(i,a){const l=a.lastClick,h=a.trackingString;n.Z.D.in
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 65 72 5f 74 65 78 74 5f 63 6f 6c 6f 72 2c 45 3d 74 2e 66 72 61 6d 65 5f 63 6f 6c 6f 72 2c 50 3d 5b 5d 3b 6c 65 74 20 43 3d 74 2e 62 74 6e 73 3b 6e 75 6c 6c 3d 3d 43 26 26 28 43 3d 5b 5d 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 43 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 50 2e 70 75 73 68 28 61 2e 5a 2e 66 72 6f 6d 4a 73 6f 6e 28 43 5b 73 5d 29 29 3b 63 6f 6e 73 74 20 42 3d 74 2e 63 72 6f 70 5f 74 79 70 65 2c 78 3d 74 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2c 52 3d 74 2e 61 6e 69 6d 61 74 65 5f 69 6e 2c 71 3d 74 2e 61 6e 69 6d 61 74 65 5f 6f 75 74 3b 6c 65 74 20 55 2c 24 3d 74 2e 68 74 6d 6c 5f 69 64 2c 4c 3d 74 2e 63 73 73 3b 69 66 28 6e 75 6c 6c 21 3d 24 26 26 22 22 21 3d 3d 24 26 26 6e 75 6c 6c 21 3d 4c 26 26 22 22 21 3d 3d 4c 7c 7c 28 24 3d 76 6f 69 64 Data Ascii: er_text_color,E=t.frame_color,P=[];let C=t.btns;null==C&&(C=[]);for(let s=0;s<C.length;s++)P.push(a.Z.fromJson(C[s]));const B=t.crop_type,x=t.orientation,R=t.animate_in,q=t.animate_out;let U,$=t.html_id,L=t.css;if(null!=$&&""!==$&&null!=L&&""!==L\|\|($=void
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 47 65 7d 4e 65 28 74 29 7b 74 68 69 73 2e 47 65 3d 74 7d 71 65 28 74 2c 65 29 7b 69 66 28 21 28 30 2c 6d 2e 66 6b 29 28 61 2e 5a 2e 4f 65 2c 65 2c 60 24 7b 65 7d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 69 6e 2d 61 70 70 20 6d 65 73 73 61 67 65 20 64 69 73 70 6c 61 79 20 66 61 69 6c 75 72 65 60 2c 22 49 6e 41 70 70 4d 65 73 73 61 67 65 2e 44 69 73 70 6c 61 79 46 61 69 6c 75 72 65 73 22 29 29 72 65 74 75 72 6e 20 6e 65 77 20 64 2e 5a 3b 63 6f 6e 73 74 20 69 3d 7b 74 72 69 67 67 65 72 5f 69 64 73 3a 5b 74 5d 2c 65 72 72 6f 72 5f 63 6f 64 65 3a 65 7d 3b 72 65 74 75 72 6e 20 68 2e 5a 2e 47 28 66 2e 5a 2e 41 2e 50 65 2c 69 29 7d 47 28 74 2c 65 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 64 2e 5a 3b 6c 65 74 20 61 3b Data Ascii: urn this.Ge}Ne(t){this.Ge=t}qe(t,e){if(!(0,m.fk)(a.Z.Oe,e,`${e} is not a valid in-app message display failure`,"InAppMessage.DisplayFailures"))return new d.Z;const i={trigger_ids:[t],error_code:e};return h.Z.G(f.Z.A.Pe,i)}G(t,e,i,s){const n=new d.Z;let a;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49795	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	617	OUT	GET /web/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static.canva.com/web/7c36a23bcd1e46cc.ltr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:04 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: font/woff Content-Length: 1136 Connection: close CF-Ray: 86b21438c84239b0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 788709 Cache-Control: public, max-age=31556926 ETag: "b46630e470f4040eba7033cf2435edce" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Mon, 08 Jan 2024 03:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: O5TxyLBriFj8oc6PTzwp4wGecssL9clv8HeVuFMJ/RwipNOTmK/guy/n+pI5NOzXY1qLFxkZEes= x-amz-replication-status: COMPLETED x-amz-request-id: SBTE23HY1Y1T7PNH x-amz-server-side-encryption: AES256 x-amz-version-id: ff3wNg7x9OQgrhQMAfdw5LdHbyZrZJxi X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	771	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 69 76 45 38 48 70 74 36 58 31 59 41 63 4f 45 4a 38 34 56 6d 36 6c 5f 69 75 6b 65 6f 34 6c 4b 30 4d 75 79 34 62 44 58 31 5f 79 34 2d 31 37 31 31 35 37 30 38 30 34 2d 31 2e 30 2e 31 2e 31 2d 42 59 58 4c 46 4d 6e 61 43 68 5f 54 75 72 72 52 74 7a 4d 61 53 7a 33 4d 70 70 57 2e 4c 36 47 57 61 73 34 38 31 70 75 34 30 43 33 33 5a 6b 4d 6c 49 61 52 57 73 30 73 73 56 4c 47 59 48 71 68 73 68 78 6c 39 33 61 42 4a 55 2e 5f 64 4e 57 76 79 4d 37 6d 74 62 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=ivE8Hpt6X1YAcOEJ84Vm6l_iukeo4lK0Muy4bDX1_y4-1711570804-1.0.1.1-BYXLFMnaCh_TurrRtzMaSz3MppW.L6GWas481pu40C33ZkMlIaRWs0ssVLGYHqhshxl93aBJU._dNWvyM7mtbQ; path=/; expires=Wed, 27-Mar-24 20:50:04 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:04 UTC	617	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 04 70 00 0d 00 00 00 00 06 2c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 03 18 00 00 00 eb 00 00 00 f0 03 8b 26 a6 46 46 54 4d 00 00 04 28 00 00 00 1c 00 00 00 1c 8c c0 d0 84 47 44 45 46 00 00 04 04 00 00 00 1a 00 00 00 1e 00 27 00 08 4f 53 2f 32 00 00 01 8c 00 00 00 47 00 00 00 60 58 80 62 a3 63 6d 61 70 00 00 02 c8 00 00 00 37 00 00 01 42 00 0d 02 e8 68 65 61 64 00 00 01 30 00 00 00 33 00 00 00 36 13 17 ee 8d 68 68 65 61 00 00 01 64 00 00 00 1d 00 00 00 24 03 ae 01 6f 68 6d 74 78 00 00 04 20 00 00 00 08 00 00 00 08 01 48 00 48 6d 61 78 70 00 00 01 84 00 00 00 06 00 00 00 06 00 02 50 00 6e 61 6d 65 00 00 01 d4 00 00 00 f1 00 00 01 c8 9d d1 72 b4 70 6f 73 74 00 00 03 00 00 00 00 Data Ascii: wOFFOTTOp,CFF &FFTM(GDEF'OS/2G`Xbcmap7Bhead036hhead$ohmtx HHmaxpPnamerpost
2024-03-27 20:20:04 UTC	519	IN	Data Raw: f0 ec 63 1f da 73 ef 09 3b 8c 18 a8 4e 31 52 11 68 ed 50 41 18 b7 7c b7 ae 73 dd f1 96 5c ae 64 14 7e 42 43 ab 71 98 76 63 6c 83 75 95 d8 ad fd 9f 4e 76 ae 6c 4a 27 75 73 6f cf 03 f3 88 13 fb 69 2f 4b ef e4 5e fd c6 b4 13 0e 21 9e ba 71 b0 22 75 25 22 f6 8e e1 0f c6 b9 41 69 00 00 00 78 9c 63 60 60 60 66 80 60 19 06 46 06 10 b0 01 f2 18 c1 7c 16 06 05 20 cd 02 84 20 be e3 ff ff 10 f2 ff 01 a8 4a 06 46 36 06 18 93 7c 40 b1 01 03 0b 00 7d bb 06 f4 00 78 9c 63 60 66 00 83 ff cd 0c 46 40 8a 91 01 0d 00 00 28 55 01 b9 00 00 78 9c 45 8c 21 4f c3 40 1c 47 7f ff b6 5c 93 72 6c d0 a3 0d 81 c3 2c 24 24 48 14 5f a0 0a 8d 6d 32 c8 b2 2c 99 20 64 a1 82 13 f3 07 16 73 82 4c 22 97 54 20 76 9f 60 66 0a bd 6f d1 5b 3b 18 c3 c0 53 cf bc 47 08 02 10 51 74 d7 1d 0e 6e 1f ba Data Ascii: cs;N1RhPA\|s\d~BCqvcluNvlJ'usoi/K^!q"u%"Aixc```f`F\| JF6\|@}xc`fF@(UxE!O@G\rl,$$H_m2, dsL"T v`fo[;SGQtn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49796	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	989	OUT	GET /_fb/s/31ed695fc889d00593852e4078080fe8.css HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:04 UTC	1335	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/css Content-Length: 35018 Connection: close CF-Ray: 86b21438ee0a0a87-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777329 Cache-Control: max-age=31536000 ETag: "46d87b5a7661e0529b44aca65fbdef86" Expires: Thu, 27 Mar 2025 20:20:04 GMT Last-Modified: Mon, 13 Mar 2023 08:11:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: Ch828CyH/M25df6e7GTaF6Qh+pSrm3Rto/Vyxj1r5HAuMRJRAZOzLG16zZtbkeiTS7UNBpJUuPM= x-amz-replication-status: COMPLETED x-amz-request-id: SBT9W4DET32M7GSQ x-amz-server-side-encryption: AES256 x-amz-version-id: vyr5_vt3y3tjZ_s2yxmwfnXM1Qv8Xk8f X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fzmmqn%2BqODXxlhvjbD8SmQTwluVEh1FapIsdOR0%2BXzhc53geP87QVhyh9FHeTGE9x6LjbNIPP75EW8zbAHCNNndrhD2RoLQFE5dAqk5PVyXbkIWtP0AA2qI92%2FmtB1Nl997rcG0G6w%3D%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:04 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:20:04 UTC	1311	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 Data Ascii: @font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), ur
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 Data Ascii: ge: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 100; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.c
2024-03-27 20:20:04 UTC	525	IN	Data Raw: 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 Data Ascii: le: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) format("woff"), url(https://font-public.canva.com/_fb/0/05.ttf) format("truetype")}@font-face {unicode-range: U+0-fffd;
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 66 66 66 64 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 35 2e 77 6f 66 66 29 20 66 6f 72 Data Ascii: ("truetype")}@font-face {unicode-range: U+0-fffd; font-family: "_fb_"; font-display: swap; font-weight: 500; font-style: normal; src: url(https://font-public.canva.com/_fb/0/05.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/05.woff) for
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 38 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 32 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 32 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 30 32 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d Data Ascii: play: swap; font-weight: 800; font-style: normal; src: url(https://font-public.canva.com/_fb/0/02.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/02.woff) format("woff"), url(https://font-public.canva.com/_fb/0/02.ttf) format("truetype")}
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2d 71 75 61 64 72 61 74 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 45 2e 6f 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 Data Ascii: .canva.com/_fb/0/7E.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/7E.woff) format("woff"), url(https://font-public.canva.com/_fb/0/7E-quadratic.woff) format("woff"), url(https://font-public.canva.com/_fb/0/7E.otf) format("truetype")}@f
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 37 44 2e 6f 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 31 30 30 2d 31 31 66 66 2c 55 2b 32 30 30 32 2d 32 30 30 33 2c 55 2b 32 30 64 64 2d 32 30 64 65 2c 55 2b 32 31 36 30 2d 32 31 37 62 2c 55 2b 32 65 38 30 2d 39 66 64 30 2c 55 2b 61 39 36 30 2d 61 39 37 63 2c 55 2b 61 63 30 30 2d 66 61 36 64 2c 55 2b 66 65 31 30 2d 66 65 31 39 2c 55 2b 66 65 33 30 2d 66 65 36 62 2c 55 2b 66 66 30 31 2d 66 66 65 65 2c 55 2b 31 66 31 30 30 2d 32 66 39 66 34 3b 20 66 6f 6e 74 2d 66 61 6d 69 Data Ascii: ormat("woff"), url(https://font-public.canva.com/_fb/0/7D.otf) format("truetype")}@font-face {unicode-range: U+1100-11ff,U+2002-2003,U+20dd-20de,U+2160-217b,U+2e80-9fd0,U+a960-a97c,U+ac00-fa6d,U+fe10-fe19,U+fe30-fe6b,U+ff01-ffee,U+1f100-2f9f4; font-fami
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 37 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 37 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 37 2d 71 75 61 64 72 61 74 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 31 37 2e Data Ascii: src: url(https://font-public.canva.com/_fb/0/17.woff2) format("woff2"), url(https://font-public.canva.com/_fb/0/17.woff) format("woff"), url(https://font-public.canva.com/_fb/0/17-quadratic.woff) format("woff"), url(https://font-public.canva.com/_fb/0/17.
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 36 30 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 66 62 2f 30 2f 36 30 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 64 38 32 2d 64 66 34 2c 55 2b 31 31 31 65 31 2d 31 31 31 66 34 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 5f 66 62 5f 22 3b 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f Data Ascii: nva.com/_fb/0/60.woff) format("woff"), url(https://font-public.canva.com/_fb/0/60.ttf) format("truetype")}@font-face {unicode-range: U+d82-df4,U+111e1-111f4; font-family: "_fb_"; font-display: swap; font-weight: 400; font-style: italic; src: url(https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49797	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	526	OUT	OPTIONS /report/v4?s=nKznXf5csYwTyZMhl9%2FAGVIkfsYTkkJosplDbTzAJExx7a4rb1Ils9X2rFHe40YVvCmqYHeY5nRjM29BSvZJLk4ISlJORxhsKXpSaxlNUNskTfgeycZQdnY2MQyP35I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 27 Mar 2024 20:20:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49800	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	587	OUT	GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:04 UTC	1352	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: font/woff2 Content-Length: 38848 Connection: close CF-Ray: 86b2143aca322012-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 777331 Cache-Control: public, max-age=31556926 ETag: "cff149ee1e9d2be50ac77bcd86769d05" Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Mon, 18 Mar 2024 13:06:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 19 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: jlYieYrZNAZ/P7g5GPimaHg2k2D2kXRPuuVllZMZUfLUbKHjjdFFxywKlmJSnvYw+hG85zNdzjg= x-amz-replication-status: COMPLETED x-amz-request-id: 97NTTJC54WAA94BA x-amz-server-side-encryption: AES256 x-amz-version-id: NcJ6EKzIEmjDbd8y7lQGuat0s9T4uB5l X-Content-Type-Options: nosniff
2024-03-27 20:20:04 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 50 57 36 52 69 35 46 52 42 75 36 71 32 53 48 4c 34 38 7a 4c 47 64 43 39 42 66 44 61 79 78 4d 69 30 44 44 35 4c 62 62 4e 35 77 55 2d 31 37 31 31 35 37 30 38 30 34 2d 31 2e 30 2e 31 2e 31 2d 58 64 30 5a 69 69 6d 55 58 6a 76 4e 75 6a 76 4a 6f 4f 6d 54 70 66 55 51 5f 74 4b 51 47 6b 49 70 54 56 61 4f 64 51 37 62 4d 39 46 42 38 77 76 66 51 44 6b 35 76 5a 49 74 56 63 42 6a 54 37 77 38 64 57 68 42 6b 55 42 79 34 47 64 6f 54 32 49 39 55 35 6b 4f 70 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=PW6Ri5FRBu6q2SHL48zLGdC9BfDayxMi0DD5LbbN5wU-1711570804-1.0.1.1-Xd0ZiimUXjvNujvJoOmTpfUQ_tKQGkIpTVaOdQ7bM9FB8wvfQDk5vZItVcBjT7w8dWhBkUBy4GdoT2I9U5kOpw; path=/; expires=Wed, 27-Mar-24 20:50:04 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:04 UTC	611	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 97 c0 00 13 00 00 00 01 25 28 00 00 97 4c 00 01 02 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 11 1b 81 91 6a 1c 90 18 3f 48 56 41 52 88 5e 3f 4d 56 41 52 5a 06 60 3f 53 54 41 54 24 27 28 00 83 4e 2f 81 00 0a ff 44 e6 7c 30 81 fc 00 01 36 02 24 03 87 7c 0b 84 00 00 04 20 05 85 3e 07 20 5b 94 15 71 80 a1 57 1d 8c db 06 f0 73 67 74 59 7f 8d 8a b1 0b 43 cf 6d e3 c8 58 3d 65 9d 8d 88 60 e3 00 08 7e 39 cc f8 ff 3f 2d e9 90 a1 09 ee 01 68 5b 55 e7 74 bb 2d 88 5c 14 91 51 de 7a 6b 6d d4 c8 2c cf d9 6b 16 cd b1 52 50 34 da d0 b1 a3 25 5a 23 5f 31 71 08 11 19 48 a7 10 f9 41 87 50 cd 54 0e 73 23 0f b8 51 e8 11 11 3b cf d3 0f f1 84 0c d7 5b a6 dc 17 48 7c aa 85 43 08 b4 c0 ce 69 0c a1 e3 ec 41 57 ba e5 fe b9 56 Data Ascii: wOF2%(Lj?HVAR^?MVARZ`?STAT$'(N/D\|06$\| > [qWsgtYCmX=e`~9?-h[Ut-\Qzkm,kRP4%Z#_1qHAPTs#Q;[H\|CiAWV
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: b5 f6 44 ed 45 5c 56 c4 28 35 2a 81 00 89 4f 32 f3 d3 37 e7 ff 39 33 b3 3a d9 6c 36 0a 24 84 42 c5 04 b8 f7 3e f7 5f ff f8 d6 39 bb a4 46 45 1c af a4 a5 9e aa ca ff e8 56 fd c0 cc 0a 8c b8 06 d1 c4 31 09 84 84 30 41 6c 8d 35 67 3d ec 99 b4 f7 ae a8 bc 3a 2f ba ab d7 4c 08 a5 33 e9 b5 62 0f 02 13 a0 fd fc 37 e7 ff af 08 12 b4 f4 20 b7 e5 aa d9 13 fd fa 6a c8 15 ff 75 ef 11 a3 46 29 84 86 84 10 9f c8 98 65 b2 67 8f 58 66 22 43 b8 b2 65 95 0d d3 33 3d a4 9f 23 a2 7f c3 79 8b c3 ff 77 fc ef 1e 49 fb 40 86 4f 10 3e 10 4a 0b 24 18 8d ba b9 ba 88 2e f7 7b 53 df 56 02 e0 93 65 38 42 2e 1d 20 15 22 4a 39 ce 11 44 44 14 22 32 37 6b 22 56 44 ac 88 28 c2 13 d8 7d ce fa 00 4c 48 54 ed fb bb 61 e5 36 2d ac ea a4 88 ff 72 a4 89 6d 7e b2 2e c0 01 81 16 b7 f9 cb 7e ca 3f Data Ascii: DE\V(5*O2793:l6$B>_9FEV10Al5g=:/L3b7 juF)egXf"Ce3=#ywI@O>J$.{SVe8B. "J9DD"27k"VD(}LHTa6-rm~.~?
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 67 ef 7b 6d b6 29 76 3a 99 eb cf cf a4 3b b4 ba 3d 83 da 98 d4 31 5d c4 b4 8a 59 19 bb 8b 78 0b a6 e3 bd 91 7e 19 1c 90 dc 5d 24 6e 91 0c 76 c6 a6 98 b0 72 e2 9d 2e fa 9b 93 57 af 65 30 a6 11 d1 2a 9f 8e 8e e6 a4 9e cb 6c 6e 85 63 56 0b 87 3a ee 62 f1 b6 c3 c5 db 8e 76 56 f7 53 12 7b e6 72 c7 4d 76 5c ee bd 94 0a 06 49 00 a3 20 9f ad b0 d5 4a 5a df 70 d6 af b6 ef 5e ed bc f2 88 f1 ef 5b d8 ea 76 72 71 bb b0 77 bb bc 7d bb 12 0a c5 9d db 4b 5b 77 13 8f 5f a3 c6 0a 7d e7 1a b3 be cb fd 49 29 5e dc cf ac 3f 9f f9 ff 17 1c 2f c7 85 ff 7d 11 59 12 d2 12 b1 de cc f0 55 73 3f 8c ad 45 d6 35 af 4b bb ce 89 58 49 dd 18 eb 9b 13 7f ad 4f ac e9 8b c8 73 b3 10 d1 99 d7 7a ce 9e ba 37 7c be 7a fb db 95 10 10 02 00 82 75 d4 57 a3 34 a1 99 d3 04 08 00 4d 6d 06 bc d9 16 Data Ascii: g{m)v:;=1]Yx~]$nvr.We0*lncV:bvVS{rMv\I JZp^[vrqw}K[w_}I)^?/}YUs?E5KXIOsz7\|zuW4Mm
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: d5 28 2d 7b 39 3d 08 19 74 14 ac bb 8d 17 23 5b 2e 4d 38 68 ca 77 06 50 50 72 48 56 81 60 ca ee 63 bc fb 48 51 ff c5 43 b4 7b 85 1c 62 3e e7 7d 84 b2 58 fa 1b 1e e8 b6 82 5b b5 7e 57 04 70 95 74 4d 4f 9e 9d ee 9d 9a 6e d3 75 ea 43 66 0c 7f b0 cc 4e 4e 54 2f 5c f1 3b 5f 87 71 a3 81 0e 8d 03 5f 66 9a 58 53 5f 43 68 71 a5 7b de d6 eb 15 57 5a f6 92 50 64 81 ed 06 f2 0d 7f cd 38 6b 96 59 db e6 b4 1b 59 7b 73 6a ca 74 17 82 9b 35 bd 1f 38 a7 8b 5c d9 f1 23 3a 4b 81 cb 82 d2 1e 75 eb e1 49 6c 88 4b 98 80 f6 b4 e4 88 e7 cf 80 90 43 52 35 7e a1 a4 9d 94 91 71 21 4c ac 47 87 65 34 9f 7a a5 ad 90 d4 c4 1b 2f d8 21 ed 2f 37 0a ca f9 f9 0c 0f 03 b2 23 98 ee 78 40 79 95 89 81 ce 72 5f 8b 2b 36 b4 5d 1d a9 6d 8a 33 da 3c 85 6d 1c 30 ea 36 77 78 07 75 59 0e 42 9e 84 02 Data Ascii: (-{9=t#[.M8hwPPrHV`cHQC{b>}X[~WptMOnuCfNNT/\;_q_fXS_Chq{WZPd8kYY{sjt58\#:KuIlKCR5~q!LGe4z/!/7#x@yr_+6]m3<m06wxuYB
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: d3 22 96 10 d0 0e 99 52 24 77 b6 2f 99 4c 2f 6b c0 11 f3 e3 d8 1c d9 12 64 87 c1 38 42 4b 6b 65 51 60 a3 8b 9f 2e 9b 04 f4 c0 df d3 ac f6 14 7d 70 82 b1 56 90 62 16 20 99 34 47 07 fa 88 e0 b0 8e e0 e4 0e e2 60 a8 e7 d8 b1 6b 23 84 ad 7f 56 c4 b3 45 cd 4b 75 0f fd f0 90 4b a4 70 70 10 05 3f ec cc 33 58 bc 35 8f ea b1 1a 38 73 ea 19 82 f4 14 45 9a ca d2 94 00 6d 37 4f 2b 64 6b fa bf 6c 48 d9 e4 96 a0 9a d1 f2 54 01 c2 6b cd 15 62 1f 41 71 a1 65 3c 52 9b 6a 13 b7 ae 7e 4a 58 b1 45 7e 50 32 9f 39 cb ec 0e 43 8e 99 6c 60 56 01 b5 a1 b0 fc fb 45 fb c5 ab 4d 8a 07 19 72 70 a5 3e 89 b1 b7 98 be 0a 79 91 15 d9 55 cf 3c 80 80 10 b8 ee a3 ad b1 fb fb 1d dc e8 c8 92 49 85 3b b9 77 37 45 d5 48 94 7f 93 f6 6e e4 0a 43 86 1b 49 d8 ac 37 e2 8d f4 bd e7 65 a8 6c 46 8a ed Data Ascii: "R$w/L/kd8BKkeQ`.}pVb 4G`k#VEKuKpp?3X58sEm7O+dklHTkbAqe<Rj~JXE~P29Cl`VEMrp>yU<I;w7EHnCI7elF
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: f9 3a af f9 76 8c 1d e0 6f 27 2a bb f0 b7 fb 44 95 3d f6 52 b2 c1 33 11 fd be 13 93 02 98 e2 b0 db 49 29 b7 a2 e2 5a e0 e3 4d 68 c1 44 4f 5c 05 27 1c fe 04 54 9c 09 91 43 5f 19 54 c1 53 b4 71 68 4a 0b c3 3f 04 55 99 5a 88 87 de 69 dc 86 78 13 44 1b 82 2e 48 48 08 fa f0 85 c6 5d 58 28 e1 61 45 c4 43 e4 53 5b d1 f1 64 e4 b8 8a 86 88 1f 29 a5 60 1a 81 fc 04 09 30 8d 0b 9f e3 a2 8d a8 ad 89 af ce f8 da 1c 89 ae a7 e4 88 71 21 a7 20 a7 38 32 e3 3c 71 75 a4 2f 65 c9 2f b1 5f 00 4f 36 bc 77 cf 63 42 82 71 43 89 08 02 4b 59 dd ed 98 82 70 c0 25 91 a8 0f 66 cd 02 14 52 96 a3 21 c2 ad 03 15 c3 12 c4 50 0b e0 ce f8 d1 83 7a a0 02 21 79 44 cb 81 fa 16 9a 25 f4 e9 9a 37 82 11 21 d1 0b 20 17 a4 ac b3 d0 04 26 6d 5c 2e c9 dd 0b e1 6d 3d 96 73 2a 43 b3 32 00 c2 05 98 3d Data Ascii: :vo'D=R3I)ZMhDO\'TC_TSqhJ?UZixD.HH]X(aECS[d)`0q! 82<qu/e/_O6wcBqCKYp%fR!Pz!yD%7! &m\.m=sC2=
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: bf ab 84 87 15 3a e5 ac a0 81 76 bf 99 1d f4 71 98 93 9c e2 26 3f f3 87 b3 25 88 9f 60 36 16 60 85 b7 6d 80 28 c2 9a 53 94 ac 6d a2 32 1f 55 91 09 09 cf 15 91 92 bf 92 07 b7 fa 46 c8 2c 17 ed d0 20 21 11 45 5f 21 43 e2 5a 2e c1 62 e2 8d 90 4a e9 1c 86 14 0b f1 3a cb 4f 4c 12 fb 02 18 aa 21 a6 69 03 25 16 64 2d cc 8c 0c b2 32 32 b4 80 3f 28 c9 c8 d0 4a 14 9c c9 e8 bc cf 8a 6c 5d 09 1c 69 0a 0e 9c 7f b7 07 9d 64 79 8a 54 a8 bb ee 5e 9b 6e 7d 06 5d 34 6a b2 88 8a a2 e8 4b e2 74 62 7e 59 52 da 4a 63 d4 c6 78 02 5a fb 91 e0 bd 2a 0f 1a 46 d0 28 94 48 4a 48 3c bd 1c 96 d2 86 b3 58 6e 19 4d a5 d6 19 68 f3 cb 18 a1 88 f7 a3 46 47 e7 f1 d7 fa 4c bf 2a 81 b8 cd 9f c5 9b 29 28 4f 63 ab 42 d7 8a ff 48 f5 47 98 6a c4 79 64 11 0e ac b6 88 c7 48 95 67 a4 2e 10 71 8f 12 Data Ascii: :vq&?%`6`m(Sm2UF, !E_!CZ.bJ:OL!i%d-22?(Jl]idyT^n}]4jKtb~YRJcxZF(HJH<XnMhFGL)(OcBHGjydHg.q
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: ad 6d 63 7d 7b bf 7b d1 4e 1f bd 61 e3 96 e5 47 e9 3b fd 9d bb 78 f4 bd 67 d9 f7 83 bd 17 83 97 1c 89 91 97 8d c7 07 77 cc 1d bc 08 65 ef ef 88 8f 5e 1b 8f ff 21 1e ee 98 87 a3 c1 a3 ec f0 0e 0c bf 74 2d 9d 7e 73 66 f0 38 2d 09 d9 fa 29 e4 55 2c fa 36 cc 7c 50 15 1a 8d e1 2f 7f b4 52 7e bc 52 5e ae 0d bf 96 ba b2 f1 a1 73 97 36 5e 7f 6e 8b 3d b8 63 f9 fe 8e 3a b8 b3 b9 73 17 ec cb 70 a8 44 c3 7b 66 46 f7 c1 5d 9d ce 6d eb 8f 5f 20 bd f2 02 e9 f1 8b da d9 dd a5 0b 2f 96 3a b4 15 bd 7d e4 78 fa f6 d2 e9 3b 4b 97 9e 95 98 73 d3 42 cf 6b dd a9 f0 31 d7 d5 e7 ef 38 e4 53 37 1c d7 ee 71 52 ef a4 c9 da 46 f3 4e 47 bf 47 d2 5e 94 6e b2 af 13 44 e2 c0 62 80 3f e4 6e b6 fe 86 9d 7b f6 61 22 6a f4 37 5d 98 06 5e ea d9 72 05 0f f6 9b 0c a2 d1 b6 aa 73 79 6f da 6e b3 Data Ascii: mc}{{NaG;xgwe^!t-~sf8-)U,6\|P/R~R^s6^n=c:spD{fF]m_ /:}x;KsBk18S7qRFNGG^nDb?n{a"j7]^rsyon
2024-03-27 20:20:04 UTC	1369	IN	Data Raw: 1b db b9 84 14 89 26 9b d8 51 2c 87 ac c0 5a f9 18 a7 3c be 71 8d 9f dd 7e d4 9e 7c 99 58 95 a7 46 bb 1d 1b 3d fa 57 d0 a4 c6 31 6c 34 71 b4 12 5a cd a8 8e 99 74 6a 46 87 90 b4 a1 ba a8 41 50 ff 50 e1 5d fb ee c7 ea 15 cb 04 cb c0 ea ec ab b5 61 35 cc d4 a1 52 9f d4 3a 7f 20 08 49 a2 e5 e7 f1 f2 12 2f 0e be 07 2f 2c d2 12 2d b8 66 22 f8 a9 07 06 a3 6a 09 90 22 64 79 b9 80 b8 8e ea cb 22 fe d7 2d 8e 7c 9e a2 9b f9 4d 40 34 1d 60 b5 af 48 90 2f 9f 68 b2 8e e0 5f 2d b4 45 f4 4f 3e f7 f0 8f 82 f6 86 48 d1 03 95 1c 32 06 95 f7 40 89 cb 02 e5 09 a9 16 8b 25 e9 7e d2 7e e8 75 38 ed d7 9e 5f 14 5f af 7c 8a e8 18 d1 d8 53 2f 51 4f ad ae b5 09 f9 ec 1f f6 a7 31 de 1b 2c 68 d9 df 2b 0e 38 d4 e6 ff a4 aa b9 4f 17 d8 3f b3 9d ff b5 c5 ee f0 f8 57 79 1e 6a 50 d4 64 85 Data Ascii: &Q,Z<q~\|XF=W1l4qZtjFAPP]a5R: I//,-f"j"dy"-\|M@4`H/h_-EO>H2@%~~u8__\|S/QO1,h+8O?WyjPd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49802	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	636	OUT	GET /YAFdJjTk5UU/0/CanvaSans-Bold13644182954117137290.33696.33696a29f45c1b554a4c12443b998d21.woff2 HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:05 UTC	1247	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: application/octet-stream Content-Length: 41456 Connection: close CF-Ray: 86b2143aca8982cc-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 777334 Cache-Control: max-age=31536000 ETag: "4971edf7a4a0359f252d44d4647aa2c2" Expires: Thu, 27 Mar 2025 20:20:04 GMT Last-Modified: Tue, 14 Mar 2023 06:04:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: IcmeAEpY/kyX+X6P5756Hae7NaX/kdesOgRZGJLroN0CWCA/MPBI5FvDuwNSOYpEeI2e5FaMHcY= x-amz-replication-status: COMPLETED x-amz-request-id: SBTDBGACE2GQVFXA x-amz-server-side-encryption: AES256 x-amz-version-id: kCziPkbTTVdIEMasFfkM0HXtlX5VUKIa X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 51 6c 4d 48 64 30 4d 6e 31 66 4d 76 73 38 36 51 46 4c 61 74 4e 4d 6e 6c 31 53 70 4e 75 73 34 42 72 6d 61 63 39 32 55 72 56 62 49 2d 31 37 31 31 35 37 30 38 30 34 2d 31 2e 30 2e 31 2e 31 2d 5f 4c 62 42 64 64 68 73 42 74 57 52 34 54 36 43 43 30 32 63 44 7a 46 67 73 4b 67 4f 6a 38 37 79 4b 68 67 65 48 76 4b 52 64 78 77 57 2e 77 58 49 39 65 6c 41 4a 47 39 58 59 76 77 2e 47 34 5f 36 71 63 4f 5f 43 6f 37 6c 79 39 30 57 5f 41 4d 46 6c 64 41 48 58 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=QlMHd0Mn1fMvs86QFLatNMnl1SpNus4Brmac92UrVbI-1711570804-1.0.1.1-_LbBddhsBtWR4T6CC02cDzFgsKgOj87yKhgeHvKRdxwW.wXI9elAJG9XYvw.G4_6qcO_Co7ly90W_AMFldAHXg; path=/; expires=Wed, 27-Mar-24 20:50:04 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:05 UTC	702	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a1 f0 00 11 00 00 00 01 dd cc 00 00 a1 8a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 44 1b ea 44 1c a0 0c 06 60 00 af 6e 08 81 02 09 9c 15 11 08 0a 85 8e 18 84 c4 75 0b 89 3e 00 01 36 02 24 03 92 3a 04 20 05 90 4f 07 a1 7b 0c 81 4b 5b 3e b3 71 07 75 c3 a4 3a 2b 07 b9 db 06 50 59 fc 5c 6f bf df 91 30 e5 ae f5 1b 10 ce 0d 09 dd 6f b5 96 1f 70 54 31 76 32 bb 5b 51 8a 6c cd 1b cc fe ff ff ff b7 24 93 18 db 6d c0 dd c6 f3 90 28 6a 88 6a 5a 55 81 10 a1 20 14 20 94 7d 09 0c 26 eb 58 9d 88 c9 93 de 3c c9 2d 3b 53 2a fa 79 3f 82 56 07 2d 72 d2 d0 d2 d2 26 12 f2 8f ed 9c 8a 77 e6 48 6f 6c 83 1e b3 b5 e9 1d 67 b3 82 08 43 33 c8 bd d0 8b 94 2f 3a 02 ad 9c 1d 37 10 57 af 80 05 6b 8f cb 6d ad 03 06 13 c8 Data Ascii: wOF2DD`nu>6$: O{K[>qu:+PY\o0opT1v2[Ql$m(jjZU }&X<-;S*y?V-r&wHolgC3/:7Wkm
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: cf a8 ab 9e d6 6c 62 4e d3 93 06 80 76 80 4d 21 5c ff 83 aa 96 ff 99 5d 55 dd f3 dc 97 f1 c8 38 02 ac 85 82 47 88 42 5c 8c 0b 3b 4f 85 88 82 1f 3a a4 bf bb 06 d5 e9 5c 1a ec 3a 7c d5 88 8c 42 3e ff 3a fd ba 4f 7a 62 83 c8 b2 85 16 58 32 c8 40 31 c4 71 fc 82 f0 39 99 59 a0 a2 9e 2d b7 ff db 35 59 38 fd f8 a6 3f 95 92 02 4f 44 ba 73 e5 80 de b2 bd 02 81 9d f6 df de 2e 63 b7 09 7d 6a ed f5 2d f1 11 ee fd 5c 0a a8 5b 61 04 b1 4d 55 a6 42 22 e9 40 05 40 41 c4 72 15 d5 46 43 32 2b 66 39 d5 c7 93 40 64 73 65 5a b7 74 6c 9f c0 11 b5 41 c1 c7 ed d1 5c fa ca 77 80 f8 42 c0 32 79 0c 85 8c 0b d6 c9 03 97 53 82 68 f5 24 4f f5 24 6b e7 41 74 2a e4 61 69 96 2e 25 80 47 5c 7b df 5d d3 b4 fd 48 1d 00 ab 49 20 8b 71 62 68 cc ac 9e d3 38 ef 9c 5f d3 71 9a a1 da b7 07 f4 fc Data Ascii: lbNvM!\]U8GB\;O:\:\|B>:OzbX2@1q9Y-5Y8?ODs.c}j-\[aMUB"@@ArFC2+f9@dseZtlA\wB2ySh$O$kAt*ai.%G\{]HI qbh8_q
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 85 47 a7 33 04 f4 3a 47 c4 a0 0b 24 8c ba 44 61 d2 15 4a b3 ae 51 59 06 1b d4 56 59 73 7b 81 44 08 b0 ac 89 b1 3a ed 82 26 77 3d f2 ca a7 b5 fd 9f bc 14 94 a9 d3 a1 cf 98 25 3b 60 2e 17 cf a4 84 24 18 24 fe 42 44 8a 27 91 a1 20 fb be bf 54 24 3c 60 00 dd 5f 39 82 42 58 11 be 2b e8 78 1c 12 54 7c 19 45 7c 61 81 db 2c 77 e6 67 86 f5 d7 e1 9c 1b 67 af eb ed fd de c1 05 50 f4 05 ca 00 a5 fa a8 f8 a7 34 cf fd 40 3c c8 b9 d2 d2 0b 10 86 e8 30 74 a2 da e3 17 24 fa cb a2 b4 0a 02 d6 c3 53 ea 6b 73 e9 76 26 06 e0 c3 db 28 56 d9 b0 64 e3 c0 ac 53 74 e7 3e 22 1e a8 4d 84 24 75 13 21 30 3d 2b 70 ac 8d ca 61 bc 87 21 82 7d 94 83 58 9b fb 87 65 43 e2 26 0b 24 a6 b2 1f bb b5 46 c6 70 56 40 f3 f0 10 82 69 22 5b 77 3d 46 12 1d 71 42 0d e7 1d 91 a5 b1 47 84 6c 65 43 47 06 Data Ascii: G3:G$DaJQYVYs{D:&w=%;`.$$BD' T$<`_9BX+xT\|E\|a,wggP4@<0t$Sksv&(VdSt>"M$u!0=+pa!}XeC&$FpV@i"[w=FqBGleCG
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: dc 35 69 33 0f 34 c9 ee 56 0b bd ec 62 cf 69 b5 9e 0f 0e 54 66 ac d8 d8 c1 ac be 1b df a1 5a eb bc 9c 6e ea 7f f0 d4 95 cb 72 31 8b 37 99 2d 0f 25 d7 96 2b 32 f4 35 83 74 ef ea 13 24 8e d9 11 24 47 9a a8 b8 23 e8 50 4a df 68 f5 43 8b 9d e9 ca cd ac f3 ef ce 82 f5 fa da 2e 9f 00 13 f9 33 b0 8a 5d db 96 0e 9a 6a 7c d1 02 6c 06 41 4c 7f 79 ed 9b 2d 32 74 60 30 b1 91 21 ce 65 f3 c4 08 7f fa d5 21 fb 58 92 44 e5 90 1c c6 7b 55 71 ec 6f 9c ac 57 76 72 30 fe 45 a2 d4 a2 ae 62 ae 64 4c 66 e8 73 07 04 e7 d2 ae 05 06 a0 45 a7 68 f0 65 3a b0 a0 3a 1d 30 c0 d1 33 72 99 e2 53 3e c5 65 0c 3e fd 4d 5c 74 97 ee 10 c1 8d 18 3a 78 0b b3 df cc 0c 37 0e 74 6a 54 11 ac 09 04 2a 00 a9 bd dc 12 90 8b 3f dc ce 4a 57 97 f6 9b 64 9f 05 0c 6f 04 1b da e6 31 35 6c 97 d5 b7 47 52 ae Data Ascii: 5i34VbiTfZnr17-%+25t$$G#PJhC.3]j\|lALy-2t`0!e!XD{UqoWvr0EbdLfsEhe::03rS>e>M\t:x7tjT*?JWdo15lGR
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: cc a0 0c 65 2a f3 23 0d 69 4b 5a 95 ab 53 47 57 ac 6c 20 ee 69 42 e8 1c d5 d6 5f e3 68 1b ae a9 dd 33 73 01 43 af a0 bb c5 60 12 9f 3d f2 27 2d e0 40 c1 ef 9c dd 1e ae 3f 66 1b b2 98 ec 1d 8f 4a 98 34 3f 02 85 28 5c 0a 7f 9c 3b f4 ed e8 81 f4 00 8a a3 9f 91 7b 3c 8a 0d 45 ac 74 d4 bb 8d 10 b1 a3 02 24 c1 1b f1 59 73 d7 4b 80 9a 9d 4f 7a b3 3f 1e a9 1d b5 26 9e 48 e3 ee 19 60 f4 2a 15 c9 ff 27 d1 32 a9 63 95 96 4f ff 78 30 35 7c 49 f9 1b 73 00 50 89 7b 9d 87 c2 32 75 37 f7 50 2b 7f f7 03 31 75 b2 37 e8 75 6a d0 ec af 6b 1c 4d ba 60 1d 13 0f a2 4b 9c aa 23 84 3d c6 7f a1 74 2d 23 d7 34 9d 05 c4 73 89 47 83 14 63 92 cf 9e e0 0e a4 7f b3 20 ef 36 80 32 de a0 16 0d c5 97 c8 db d8 21 60 af c4 ba c2 8a 3c e5 c9 f5 bc 7c 0b 6e 65 69 7d 73 ad 7a f9 e5 0d f0 b0 73 Data Ascii: e#iKZSGWl iB_h3sC`='-@?fJ4?(\;{<Et$YsKOz?&H`'2cOx05\|IsP{2u7P+1u7ujkM`K#=t-#4sGc 62!`<\|nei}szs
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 9a e0 81 c1 ef 25 d4 7d 96 82 8d 34 f7 14 77 7b 81 20 2a 14 92 42 81 5b 09 03 4a 52 98 52 55 53 78 63 1a e5 62 47 ca 1c 29 70 a4 b4 48 5b cb cb 87 13 a6 7f fa bf 6b 6a 1a 5f d6 c8 5a 07 f3 cf 4b c9 39 a6 53 df 8d 48 ef bf 04 b9 7a f5 b7 83 eb 8f 5b fb c3 d0 19 77 35 c0 70 91 28 e5 9d 14 94 92 42 33 8a 24 fd 98 3c 05 e6 ef 1b 7d bf 3e 35 75 7f 22 ff 3f bb 41 0e 8c 92 d0 04 8b 94 28 45 9e 39 ca ad bc 58 65 90 22 5b 5d 11 94 be ed 23 ed 3e ea b6 af c6 d2 ed f9 bb f3 11 e2 17 74 6c 51 92 a4 ca 37 d7 62 ab ee d6 ce 95 ab d7 46 c3 97 49 94 2e 18 42 f0 09 a5 29 30 4f 85 d5 21 c6 75 ac d7 c6 83 41 67 d1 ba f2 c3 21 90 2c 5d a1 f9 96 58 03 e3 aa 56 bb 96 1f b3 18 6d 45 68 5d 9d 32 43 91 12 95 d6 1a e3 1a d7 6b d3 89 bf 50 b1 52 30 85 89 21 96 a9 58 a9 a5 d6 c1 b8 Data Ascii: %}4w{ *B[JRRUSxcbG)pH[kj_ZK9SHz[w5p(B3$<}>5u"?A(E9Xe"[]#>tlQ7bFI.B)0O!uAg!,]XVmEh]2CkPR0!X
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 18 2e 58 87 e0 00 2e 24 0d 00 4b b7 2b a2 0d 18 69 c5 07 27 16 30 0c 47 58 c2 00 48 bc 7e ec 27 7e a6 31 45 f4 ec e8 1d f7 5d ca b4 53 95 82 91 c8 61 6c 9f 9e 54 35 60 80 05 a6 e2 b9 db dc 28 17 e4 9e 61 20 52 59 2e a1 bd 9c 29 f0 20 3d 27 7b 93 8a 58 d3 ff 59 27 eb 2f 75 51 a8 ce e8 9c ee 98 65 04 8c 84 71 b4 de e5 1e f2 ac 4f be 38 5d bd 52 fd 5e f3 4c ec c5 51 9c c6 45 3c 8d 8f e3 4b 8d 48 93 ae 29 d7 54 69 0e 78 38 25 cd 24 4e d2 a4 48 c6 c9 57 0f ae 47 8b 96 6a 47 fb b8 f6 a9 b4 91 7a 69 94 96 e9 ad 36 42 2b f0 94 7a de b5 7c 66 f9 c1 f3 98 bc da ab 7e e7 45 2b c7 6e d1 fd 97 31 dc 78 e2 8d fb ff b4 e3 7f 82 06 41 88 c0 ea 22 55 7d 1d ad 3f 54 a1 50 9d d6 39 35 1b 0c 8f 11 31 8e d6 09 82 29 c7 7d a7 79 3a 6e c5 41 1c cb db 9b 2e d3 e4 e9 5f 3c 38 1e Data Ascii: .X.$K+i'0GXH~'~1E]SalT5`(a RY.) ='{XY'/uQeqO8]R^LQE<KH)Tix8%$NHWGjGzi6B+z\|f~E+n1xA"U}?TP951)}y:nA._<8
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: ef 79 95 7b 51 c9 5e 56 b1 d5 76 ef 55 f5 7b 5d d7 de d4 da db de d5 be f7 4d ec 43 a3 7d ec 53 63 fb dc de ad 75 61 5f 5a da 7a 97 b7 d1 d5 7d ed e6 be 75 ed f8 fe 5b 21 c5 fd 03 2d ef e7 cb 75 ff 42 6f fb 7d ff 91 79 ff c5 cb be ff a1 3b 1f ff 7f e2 0d 27 08 80 37 90 60 0c c8 c0 05 e4 c0 08 90 0b 7c 80 dc 30 16 e4 81 60 90 17 fc 01 f2 86 30 90 0f fc 0d f2 85 70 90 1f fc 03 f2 87 10 50 00 fc 09 0a 84 28 50 10 fc 0f 0a 86 68 50 08 4c 01 85 42 52 50 18 cc 05 85 43 1c 28 02 a6 83 22 21 31 28 0a 66 83 a2 21 19 28 06 e6 81 62 21 1e 14 07 33 40 f1 90 0a 94 00 8b 40 89 20 25 28 31 2c 04 25 81 34 a0 a4 b0 04 94 0c 52 83 92 c3 62 50 0a 48 0f 4a 09 cb 41 a9 20 1d 28 35 2c 03 a5 81 5c a0 b4 b0 19 94 0e 72 80 d2 c3 46 50 06 c8 0c ca 08 ab 41 99 20 27 28 33 6c 02 65 Data Ascii: y{Q^VvU{]MC}Scua_Zz}u[!-uBo}y;'7`\|0`0pP(PhPLBRPC("!1(f!(b!3@@ %(1,%4RbPHJA (5,\rFPA '(3le
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 7a e8 c7 7b 52 d1 2a 33 72 31 70 1d 6b 35 44 3b a3 15 55 2a 1c 5c 12 a2 35 49 3d ec d6 a5 ac a2 19 e9 1a 7c 6d b0 95 2d 23 6c b4 1c f2 9e ad f4 db 9f 4c f5 5a 9b 9d 1f 00 1d 31 a9 71 69 92 8e ab 53 c2 97 37 bd 35 62 b5 63 39 52 47 e6 5a db fc 47 cd d8 0c 75 78 13 d0 a8 73 f9 ea fc 8b 15 37 94 7a 0a 3e 83 ce c0 36 f0 2e 8c 48 12 2e a8 fc 3d 65 95 06 03 d2 5f 9c 69 5c 12 49 34 b1 b2 eb 33 7d ef eb 13 56 1b f9 75 22 d6 ed b7 fc ca ce da 36 d6 cb d6 15 da c8 30 b9 67 9a f3 89 48 aa a3 11 2a cf 6a ce 5d ae 6f 40 8f 90 cc 0b c8 7b 28 e7 b1 ab 92 1e 1b e9 a7 75 39 a6 f7 ad dc 39 fe 5c 31 34 c2 e5 a5 b0 6b 29 eb 1c 35 cc e4 95 33 d1 d4 44 f4 37 6d 06 5c a9 4f 42 e2 f4 97 a8 6e 93 1b 28 32 b8 f2 ae a7 99 1c 06 ac cd 2d 56 13 a9 ce 10 ed 53 42 20 a9 e7 ad c5 29 18 Data Ascii: z{R3r1pk5D;U\5I=\|m-#lLZ1qiS75bc9RGZGuxs7z>6.H.=e_i\I43}Vu"60gH*j]o@{(u99\14k)53D7m\OBn(2-VSB )

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49799	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1212	OUT	GET /chunk-batch/118052af16110a6a.ltr.css+18238f6b00219f40.ltr.css+1f9608d8908b0f89.ltr.css+0b904b0a14653f4e.ltr.css+77072c60218aa8fb.ltr.css+88a6aeb385f8aca0.ltr.css+b2f00581c1b688f5.ltr.css+44120d0e86f58fdd.ltr.css+0361d809f049c847.ltr.css+70f83d7290d33057.ltr.css HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1140	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/css Content-Length: 12295 Connection: close CF-Ray: 86b2143aee9b3b92-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151508 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Tue, 26 Mar 2024 02:06:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: NDG3bSX8r5+NnNRDzpLdIV9pg9cgL1F1u1Ljkk/bR9Q+de8nlwY9jh8j0sJnUgSYF3D3ME5auJI= x-amz-replication-status: PENDING x-amz-request-id: 3510E1Z8SWGBANZW x-amz-server-side-encryption: AES256 x-amz-version-id: hCP4diSpICgZOpmJpQHJyqLvOqAcq_w1 X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	366	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 74 64 33 33 75 6b 31 50 75 37 74 36 46 38 39 31 46 49 6b 70 37 48 32 6d 25 32 46 41 36 64 76 4a 74 69 32 58 33 4d 4b 7a 61 46 4f 78 6e 38 56 51 61 34 36 4c 6a 64 5a 31 54 6f 47 73 37 5a 35 75 42 45 70 42 74 31 70 69 73 38 75 34 65 74 4d 61 70 51 56 4b 54 76 5a 34 6a 72 55 59 4d 4d 25 32 46 46 66 6d 6d 53 34 41 36 25 32 46 38 57 76 38 71 51 45 63 76 56 48 76 4a 4a 58 46 25 32 46 53 63 34 49 6c 6a 45 55 52 4d 61 37 6c 6b 25 32 46 6f 6e 48 57 4f 62 76 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtd33uk1Pu7t6F891FIkp7H2m%2FA6dvJti2X3MKzaFOxn8VQa46LjdZ1ToGs7Z5uBEpBt1pis8u4etMapQVKTvZ4jrUYMM%2FFfmmS4A6%2F8Wv8qQEcvVHvJJXF%2FSc4IljEURMa7lk%2FonHWObvk%3D"}],"group":"cf-nel",
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 31 31 38 30 35 32 61 66 31 36 31 31 30 61 36 61 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 45 5f 79 42 77 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0a 2f 2a 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 31 38 32 33 38 66 36 62 30 30 32 31 39 66 34 30 2e 6c 74 72 2e 63 73 73 20 2a 2f 0a 2e 70 76 4d 56 45 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 52 73 5a 35 39 51 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 36 31 38 44 73 41 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 5f 36 31 38 44 73 41 2e 43 65 6f 44 75 41 7b 6d 61 78 Data Ascii: /* __FILE_CONTENT_FOR__:118052af16110a6a.ltr.css /.E_yBwg{overflow:hidden;position:relative}/ __FILE_CONTENT_FOR__:18238f6b00219f40.ltr.css */.pvMVEg{display:inline-block;max-width:100%}.RsZ59Q{display:block}._618DsA{padding:8px 0}._618DsA.CeoDuA{max
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 58 79 59 54 77 2c 2e 6d 4a 72 67 37 77 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 58 79 59 54 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 65 66 6f 72 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 73 74 61 72 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 31 6a 56 4b 71 51 7b 61 6c Data Ascii: x;justify-content:center}.cXyYTw,.mJrg7w{position:relative;width:100%}.cXyYTw{-webkit-border-before:1px solid #d9d9d9;-webkit-border-start:1px solid #d9d9d9;border-block-start:1px solid #d9d9d9;border-inline-start:1px solid #d9d9d9;height:100%}._1jVKqQ{al
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 31 5f 6c 4b 37 51 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 36 70 78 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 57 55 5f 36 5f 41 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 36 70 78 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 52 68 63 73 77 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 36 70 78 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6a 46 6b 55 Data Ascii: ateY(0)}}@keyframes _1_lK7Q{0%{transform:translateX(0)}to{transform:translateX(16px)}}@keyframes WU_6_A{0%{transform:translateX(0)}to{transform:translateX(-16px)}}@keyframes lRhcsw{0%{transform:translateY(0)}to{transform:translateY(-16px)}}@keyframes jFkU
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 69 67 68 74 3a 32 34 70 78 7d 2e 41 5f 4d 67 53 77 7b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 7d 2e 41 6f 6e 77 58 77 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 78 64 4c 48 55 41 7b 6d 61 72 67 69 6e 3a 30 20 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 78 64 4c 48 55 41 2c 2e 79 5a 6a 6e 4a 41 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 7d 2e 6e 68 73 61 66 41 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 77 73 71 37 55 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6d 6e 56 35 76 51 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 Data Ascii: ight:24px}.A_MgSw{flex:1 1 auto}.AonwXw{align-self:flex-end;display:flex;flex-direction:row-reverse;margin-top:16px}.xdLHUA{margin:0 8px;padding:0 16px}.xdLHUA,.yZjnJA{background:none}.nhsafA{padding:0 16px}.wsq7Ug{margin-bottom:12px}.mnV5vQ{margin-top:-8
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 34 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 7d 2e 44 73 6f 70 69 67 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4e 4b 62 4d 69 77 7b 62 6f 74 74 6f 6d 3a 2d 31 32 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 6d 42 7a 35 77 29 3b 68 65 69 67 68 74 3a 35 70 78 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 32 2e 35 70 78 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 35 70 78 7d 2e 53 41 49 70 48 67 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 Data Ascii: ransition-duration:.4s;transition-property:transform;transition-timing-function:ease}.Dsopig{display:inline-flex;position:relative}.NKbMiw{bottom:-12px;color:var(--hmBz5w);height:5px;left:calc(50% - 2.5px);position:absolute;width:5px}.SAIpHg{grid-template
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 49 79 77 66 50 67 2e 5f 35 61 55 72 4a 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 52 34 76 6b 43 51 20 2e 49 79 77 66 50 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 45 59 54 4b 6e 41 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 67 67 32 42 55 67 2c 31 32 70 78 29 3b 66 6c 65 78 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 45 59 54 4b 6e 41 2e 79 38 76 4b Data Ascii: ents:none;transform:scale(.8);will-change:transform}.IywfPg._5aUrJg{transform:scale(1)}.R4vkCQ .IywfPg{transition:transform .25s ease-in-out}.EYTKnA{border-radius:var(--gg2BUg,12px);flex:1;max-width:100%;outline-offset:2px;pointer-events:auto}.EYTKnA.y8vK
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 29 29 7d 2e 53 6f 69 72 55 77 7b 67 72 69 64 2d 67 61 70 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 66 72 20 2d 77 65 62 6b 69 74 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 66 72 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 6e 6f 72 6d 61 6c 7d 2e 6c 69 5f 65 66 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 Data Ascii: ar(--safe-area-inset-left))}.SoirUw{grid-gap:8px;display:grid;grid-template-columns:1fr -webkit-max-content;grid-template-columns:1fr max-content;justify-self:normal}.li_efQ{align-items:center;display:flex;flex-direction:row;flex-wrap:wrap;height:100%;jus
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 68 77 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 69 67 68 74 7b 2d 2d 62 58 6c 78 6f 51 3a 23 35 31 35 31 35 34 7d 2e 64 61 72 6b 7b 2d 2d 62 58 6c 78 6f 51 3a 23 66 66 66 7d 2e 58 53 49 55 5f 41 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 58 6c 78 6f 51 29 7d 2e 65 4a 35 62 66 51 7b 63 6f 6c 6f 72 3a 23 31 38 37 37 66 32 7d 2e 41 61 49 4c 38 41 3e 2e 5f 33 38 6f 57 76 51 2c 2e 43 4f 41 57 51 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 44 56 55 33 49 67 3e 2e 5f 33 38 6f 57 76 51 2c 2e 45 57 57 55 65 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 48 76 66 79 4f 77 3e 2e 5f 33 38 6f 57 76 51 2c 2e 4c 49 56 63 4f 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 58 38 31 66 5f 77 3e 2e 5f 33 38 6f 57 76 51 2c 2e 5f 34 4f 77 Data Ascii: hw{text-overflow:ellipsis;width:100%}.light{--bXlxoQ:#515154}.dark{--bXlxoQ:#fff}.XSIU_A{color:var(--bXlxoQ)}.eJ5bfQ{color:#1877f2}.AaIL8A>._38oWvQ,.COAWQQ>._38oWvQ,.DVU3Ig>._38oWvQ,.EWWUeQ>._38oWvQ,.HvfyOw>._38oWvQ,.LIVcOQ>._38oWvQ,.X81f_w>._38oWvQ,._4Ow
2024-03-27 20:20:05 UTC	1343	IN	Data Raw: 65 67 29 2c 76 61 72 28 2d 2d 79 2d 6f 66 66 73 65 74 2d 6e 65 67 29 2c 30 29 7d 2e 46 45 35 61 58 41 3e 2e 55 4e 53 39 58 67 2c 2e 56 6c 4f 65 67 51 3e 2e 55 4e 53 39 58 67 2c 2e 61 78 71 63 30 67 3e 2e 55 4e 53 39 58 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 44 76 6c 74 4a 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 44 76 6c 74 4a 41 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 31 4f 4a 47 70 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 68 4c 71 4c 74 67 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 68 4c 71 4c 74 67 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e Data Ascii: eg),var(--y-offset-neg),0)}.FE5aXA>.UNS9Xg,.VlOegQ>.UNS9Xg,.axqc0g>.UNS9Xg{transform:translateZ(0)}.DvltJA{display:flex}.DvltJA:hover{cursor:pointer}._1OJGpA{align-self:baseline;flex:0 0 auto;margin-right:8px}.hLqLtg{display:flex}.hLqLtg:hover{cursor:poin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49798	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1144	OUT	GET /chunk-batch/c5e1e064613196fb.strings.js+0867dd2626184c9d.js+2d87c6898e0cddf2.js+3672a18722732ffc.js+2fe1d10eddd1b988.strings.js+5a24f06d6350a5b3.js+d914c2e8572651bd.js+4b31d673aa6aae8e.js+6c00a05543cc7753.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1147	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: text/javascript Content-Length: 162200 Connection: close CF-Ray: 86b2143aef207fbe-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63592 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:50 GMT Last-Modified: Tue, 26 Mar 2024 02:07:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: MscPJm+lvj1c0dpi+QZ8dExzgihJJ2WowKuquvDwPdaWpSMj6yvUJY1JrXXcL8h2zUVH5ZI+gp8= x-amz-replication-status: PENDING x-amz-request-id: SZ4VQFX837MVJCWG x-amz-server-side-encryption: AES256 x-amz-version-id: z3XFiCIxQmzZ1zI0v5FVJxaRmqxLL2Gj X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4b 4c 47 25 32 42 7a 34 69 70 42 6c 45 69 33 76 43 35 7a 43 49 58 45 43 79 74 6c 6e 77 79 65 67 30 42 45 6e 32 54 25 32 42 75 54 46 53 76 35 52 62 58 77 63 39 39 6e 67 51 74 41 73 4f 56 51 36 39 45 7a 33 35 5a 75 6c 43 4a 34 39 45 55 32 4b 38 6f 6b 34 63 72 38 65 79 47 4c 62 44 49 46 6b 64 66 73 47 47 53 64 6c 77 4e 43 38 4b 7a 41 74 72 32 68 25 32 46 55 5a 37 75 43 4e 5a 5a 33 75 53 4c 70 6f 48 68 74 7a 4b 34 54 61 67 45 42 6e 62 61 66 54 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KLG%2Bz4ipBlEi3vC5zCIXECytlnwyeg0BEn2T%2BuTFSv5RbXwc99ngQtAsOVQ69Ez35ZulCJ49EU2K8ok4cr8eyGLbDIFkdfsGGSdlwNC8KzAtr2h%2FUZ7uCNZZ3uSLpoHhtzK4TagEBnbafTg%3D"}],"group":"cf-nel","max
2024-03-27 20:20:05 UTC	1229	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 63 35 65 31 65 30 36 34 36 31 33 31 39 36 66 62 2e 73 74 72 69 6e 67 73 2e 6a 73 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 6a 70 33 33 31 67 5c 22 3a 5c 22 57 65 e2 80 99 76 65 20 72 75 6e 20 69 6e 74 6f 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 6f 6e 20 6f 75 72 20 65 6e 64 2e 20 54 72 79 20 61 67 61 69 6e 20 69 6e 20 61 20 66 65 77 20 6d 6f 6d 65 6e 74 73 2e 5c 22 2c 5c 22 36 61 54 55 41 41 5c 22 3a 5c 22 57 65 20 63 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 61 64 20 6f 75 72 20 72 65 71 75 69 72 65 64 20 73 65 63 75 72 69 74 79 20 63 68 65 63 6b 73 20 74 6f 20 70 72 6f Data Ascii: ;// __FILE_CONTENT_FOR__:c5e1e064613196fb.strings.js(function() { const messages = JSON.parse("{\"jp331g\":\"Weve run into a technical issue on our end. Try again in a few moments.\",\"6aTUAA\":\"We couldnt load our required security checks to pro
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 65 65 64 20 77 69 74 68 20 79 6f 75 72 20 61 63 74 69 6f 6e 2e 20 54 72 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 57 69 2d 46 69 20 6e 65 74 77 6f 72 6b 2c 20 74 75 72 6e 20 6f 66 66 20 61 6e 79 20 56 50 4e 73 2c 20 6f 72 20 75 73 65 20 61 6e 6f 74 68 65 72 20 62 72 6f 77 73 65 72 2e 20 49 66 20 79 6f 75 20 73 74 69 6c 6c 20 6e 65 65 64 20 68 65 6c 70 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 75 73 2e 5c 22 2c 5c 22 7a 72 50 32 7a 77 5c 22 3a 5c 22 50 6c 65 61 73 65 20 63 6f 6d 70 6c 65 74 65 20 74 68 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 5c 22 7d 22 29 3b 0a 20 63 6f 6e 73 74 20 63 6d 73 67 20 3d 20 77 69 6e 64 6f 77 5b 22 63 6d 73 67 22 5d 20 3d 20 77 69 6e 64 6f 77 5b 22 63 6d 73 67 22 5d 20 7c Data Ascii: eed with your action. Try to connect to a different Wi-Fi network, turn off any VPNs, or use another browser. If you still need help, please contact us.\",\"zrP2zw\":\"Please complete the verification.\"}"); const cmsg = window["cmsg"] = window["cmsg"] \|
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 73 61 2c 78 73 61 2c 47 73 2c 77 73 2c 43 73 2c 42 73 3b 0a 75 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 2e 6b 69 6e 64 29 7b 63 61 73 65 20 37 3a 72 65 74 75 72 6e 22 75 6e 6b 6e 6f 77 6e 20 65 72 72 6f 72 22 3b 63 61 73 65 20 31 3a 73 77 69 74 63 68 28 62 2e 74 79 70 65 29 7b 63 61 73 65 20 22 50 48 4f 4e 45 5f 4e 55 4d 42 45 52 5f 4f 54 50 22 3a 72 65 74 75 72 6e 22 69 6e 76 61 6c 69 64 20 6f 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 22 3b 64 65 66 61 75 6c 74 3a 69 66 28 61 2e 65 6e 64 55 73 65 72 4d 65 73 73 61 67 65 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 65 6e 64 55 73 65 72 4d 65 73 73 61 67 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3b 61 3d 5f 5f 63 2e 59 6a 2e 75 33 61 28 29 2e 6d 61 70 28 Data Ascii: sa,xsa,Gs,ws,Cs,Bs;ura=function(a,b){switch(a.kind){case 7:return"unknown error";case 1:switch(b.type){case "PHONE_NUMBER_OTP":return"invalid one time password";default:if(a.endUserMessage){const c=a.endUserMessage.toLocaleLowerCase();a=__c.Yj.u3a().map(
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 6f 20 66 69 6e 64 20 61 63 63 6f 75 6e 74 20 77 68 69 6c 65 20 61 63 63 65 70 74 69 6e 67 20 64 6f 6d 61 69 6e 20 63 61 70 74 75 72 65 20 6c 69 6e 6b 69 6e 67 22 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 79 28 62 29 3b 7d 63 61 73 65 20 38 3a 72 65 74 75 72 6e 22 74 6f 6f 20 6d 61 6e 79 20 66 61 69 6c 65 64 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 73 22 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 22 69 6e 76 61 6c 64 20 6d 66 61 20 63 6f 64 65 20 6f 72 20 74 6f 6b 65 6e 22 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 22 6d 69 73 74 61 6b 65 6e 6c 79 20 72 65 67 69 73 74 65 72 65 64 20 73 6d 73 4d 66 61 52 65 71 75 69 72 65 64 20 61 73 20 61 20 74 72 75 65 20 65 72 72 6f 72 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 70 75 73 68 69 6e 67 20 74 68 Data Ascii: o find account while accepting domain capture linking";default:throw new y(b);}case 8:return"too many failed login attempts";case 9:return"invald mfa code or token";case 4:return"mistakenly registered smsMfaRequired as a true error, rather than pushing th
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 73 65 20 22 53 53 4f 5f 4c 49 4e 4b 49 4e 47 5f 44 45 43 4c 49 4e 45 44 22 3a 72 65 74 75 72 6e 22 73 73 6f 22 3b 63 61 73 65 20 22 45 4d 41 49 4c 5f 4f 54 50 5f 43 4f 44 45 22 3a 72 65 74 75 72 6e 22 73 65 63 72 65 74 5f 63 6f 64 65 22 3b 63 61 73 65 20 22 44 4f 4d 41 49 4e 5f 43 41 50 54 55 52 45 5f 44 45 43 4c 49 4e 45 44 22 3a 72 65 74 75 72 6e 22 64 6f 6d 61 69 6e 5f 63 61 70 74 75 72 65 5f 65 6d 61 69 6c 5f 63 68 61 6e 67 65 22 3b 63 61 73 65 20 22 44 4f 4d 41 49 4e 5f 43 41 50 54 55 52 45 5f 41 43 43 45 50 54 45 44 22 3a 72 65 74 75 72 6e 22 64 6f 6d 61 69 6e 5f 63 61 70 74 75 72 65 22 3b 0a 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 79 28 61 29 3b 7d 7d 3b 68 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 63 2e 6f Data Ascii: se "SSO_LINKING_DECLINED":return"sso";case "EMAIL_OTP_CODE":return"secret_code";case "DOMAIN_CAPTURE_DECLINED":return"domain_capture_email_change";case "DOMAIN_CAPTURE_ACCEPTED":return"domain_capture";default:throw new y(a);}};hs=function(a,b,c,d){if(c.o
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 6e 65 77 20 72 73 28 7b 7a 6d 61 3a 66 3f 6e 65 77 20 73 73 28 7b 4c 6a 3a 66 2c 48 3a 65 2c 6f 61 3a 6e 2c 4a 6d 3a 70 2c 57 68 3a 78 2c 4d 68 3a 76 7d 29 3a 76 6f 69 64 20 30 2c 46 62 3a 63 2c 47 62 3a 75 2c 4d 3a 41 2c 6f 61 3a 6e 2c 53 61 3a 62 7d 29 3b 70 3d 6e 65 77 20 5f 5f 63 2e 74 73 3b 71 3d 6e 65 77 20 4d 61 70 28 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 73 35 2e 44 48 2c 28 5b 42 2c 44 5d 29 3d 3e 5b 5f 5f 63 2e 59 6a 2e 64 65 73 65 72 69 61 6c 69 7a 65 28 42 29 2c 44 5d 29 29 3b 75 3d 47 72 61 28 7b 4d 3a 41 7d 29 3b 0a 72 3d 6e 65 77 20 5f 5f 63 2e 75 73 28 70 29 3b 61 3d 44 72 61 28 7b 6b 68 3a 67 2c 44 4e 3a 68 2c 48 3a 65 2c 6f 61 3a 6e 2c 46 62 3a 63 2c 44 6d 3a 64 2c 75 62 3a 6b 2e 75 62 2c 7a 66 3a 66 2c 44 48 3a 71 2c 4d 3a 41 2c 53 61 Data Ascii: new rs({zma:f?new ss({Lj:f,H:e,oa:n,Jm:p,Wh:x,Mh:v}):void 0,Fb:c,Gb:u,M:A,oa:n,Sa:b});p=new __c.ts;q=new Map(Array.from(a.s5.DH,([B,D])=>[__c.Yj.deserialize(B),D]));u=Gra({M:A});r=new __c.us(p);a=Dra({kh:g,DN:h,H:e,oa:n,Fb:c,Dm:d,ub:k.ub,zf:f,DH:q,M:A,Sa
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 62 2e 73 72 63 3d 60 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 65 6e 74 65 72 70 72 69 73 65 2e 6a 73 3f 72 65 6e 64 65 72 3d 24 7b 61 2e 6b 65 79 7d 26 6f 6e 6c 6f 61 64 3d 24 7b 22 67 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 4f 6e 6c 6f 61 64 22 7d 60 3b 61 2e 77 4e 26 26 28 62 2e 73 72 63 2b 3d 22 26 6c 6f 67 67 69 6e 67 3d 74 72 75 65 22 29 3b 72 65 74 75 72 6e 20 41 73 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 63 2c 64 29 3d 3e 7b 77 69 6e 64 6f 77 2e 67 72 65 63 61 70 74 63 68 61 45 6e 74 65 72 70 72 69 73 65 4f Data Ascii: cument.createElement("script");b.type="text/javascript";b.src=`https://www.google.com/recaptcha/enterprise.js?render=${a.key}&onload=${"grecaptchaEnterpriseOnload"}`;a.wN&&(b.src+="&logging=true");return As=new Promise((c,d)=>{window.grecaptchaEnterpriseO
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 20 61 2e 66 6c 61 67 73 2e 58 53 61 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 79 53 61 3b 63 61 73 65 20 38 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 72 53 61 3b 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 49 53 61 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 56 53 61 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 57 53 61 3b 63 61 73 65 20 31 34 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 77 53 61 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 61 2e 66 6c 61 67 73 2e 54 53 61 3b 63 61 73 65 20 31 3a 63 61 73 65 20 33 3a 63 61 73 65 20 31 36 3a 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 21 31 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 Data Ascii: a.flags.XSa;case 13:return a.flags.ySa;case 8:return a.flags.rSa;case 15:return a.flags.ISa;case 9:return a.flags.VSa;case 10:return a.flags.WSa;case 14:return a.flags.wSa;case 11:return a.flags.TSa;case 1:case 3:case 16:case 19:return!1;default:throw ne
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 20 63 6f 64 65 20 72 65 71 75 65 73 74 20 65 72 72 6f 72 22 2c 5b 33 5d 3a 22 69 6e 76 61 6c 69 64 20 72 69 73 6b 20 61 73 73 65 73 73 6d 65 6e 74 22 2c 5b 31 5d 3a 22 75 6e 6b 6e 6f 77 6e 20 61 63 63 6f 75 6e 74 20 72 65 71 75 65 73 74 65 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 22 7d 3b 68 73 61 3d 7b 5b 30 5d 3a 22 69 6e 76 61 6c 69 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 22 2c 5b 31 5d 3a 22 75 6e 6b 6e 6f 77 6e 20 63 6f 64 65 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 65 72 72 6f 72 22 7d 3b 69 73 61 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 5f 65 6c 65 6d 65 6e 74 5f 63 6c 69 63 6b 65 64 22 2c 4f 62 28 61 29 7b 72 65 74 75 72 6e 20 78 6c 28 7b 63 6f 6d 70 6f 6e 65 6e 74 5f 6e 61 Data Ascii: code request error",[3]:"invalid risk assessment",[1]:"unknown account requested verification code"};hsa={[0]:"invalid verification code",[1]:"unknown code verification error"};isa={eventType:"authenticating_element_clicked",Ob(a){return xl({component_na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49801	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	636	OUT	GET /YAFdJjTk5UU/0/CanvaSans-Regular15263162195051178836.f4.f4a4890561b3fddfd1fd9a1b27b6d4a4.woff2 HTTP/1.1 Host: font-public.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:05 UTC	1247	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:04 GMT Content-Type: application/octet-stream Content-Length: 40708 Connection: close CF-Ray: 86b2143addab3818-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 792655 Cache-Control: max-age=31536000 ETag: "ffe7cc3945dcff0497df9901158ca5c9" Expires: Thu, 27 Mar 2025 20:20:04 GMT Last-Modified: Tue, 14 Mar 2023 06:04:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_font-public Timing-Allow-Origin: https://www.canva.com x-amz-id-2: zfUw3Sg9+8wSU2yiy+YMgnnKA/OSqvApd8Wcd897hq33HR4b8FnVM1pql9l2cSfw8kdDcZawbIY= x-amz-replication-status: COMPLETED x-amz-request-id: W79TXY50FRXPA8DM x-amz-server-side-encryption: AES256 x-amz-version-id: OJ_yhNdZoGC0DW8etzFxE4iRIRAZBlGl X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	791	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 59 4b 50 36 48 66 52 32 69 37 56 66 68 50 47 73 6a 7a 6b 77 77 46 44 55 6a 69 66 71 42 42 61 34 33 73 59 32 46 44 37 55 62 45 63 2d 31 37 31 31 35 37 30 38 30 34 2d 31 2e 30 2e 31 2e 31 2d 53 73 43 6d 78 42 4e 55 67 75 65 4f 36 65 45 31 76 47 59 74 5a 44 35 53 52 4c 37 6d 70 66 69 6f 63 43 6f 44 53 55 32 76 6f 6c 30 59 54 42 56 7a 6e 73 69 47 67 57 6e 6e 5a 34 4e 4a 57 5a 61 49 4b 48 54 45 41 47 4c 4d 6b 69 72 54 4d 44 4c 39 42 77 69 63 36 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 30 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=YKP6HfR2i7VfhPGsjzkwwFDUjifqBBa43sY2FD7UbEc-1711570804-1.0.1.1-SsCmxBNUgueO6eE1vGYtZD5SRL7mpfiocCoDSU2vol0YTBVznsiGgWnnZ4NJWZaIKHTEAGLMkirTMDL9Bwic6Q; path=/; expires=Wed, 27-Mar-24 20:50:04 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9f 04 00 11 00 00 00 01 d8 84 00 00 9e 9f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 44 1b e8 3a 1c a0 0c 06 60 00 af 6e 08 81 02 09 9c 15 11 08 0a 85 85 34 84 bd 72 0b 89 3e 00 01 36 02 24 03 92 3a 04 20 05 90 73 07 a1 7b 0c 81 4b 5b d5 ae 91 02 aa b7 7e f9 21 02 d4 5d 55 07 3f df b5 11 e0 08 3a ee e3 49 81 de 2c 37 f1 73 bb ea ab 03 b8 b3 2b 06 bd 59 92 c0 f8 f7 b3 9e fd ff ff ff ff 7b 92 c5 18 f3 fe d1 7b 00 d4 69 6a a6 35 b3 b4 b5 36 10 e6 03 62 b2 5c c1 0b 2f 6a 85 e5 69 bc f6 65 26 5a 82 e6 3b 1f 18 70 ea 63 44 48 43 4a 71 ac 2c 9f 53 0a 21 da 54 4f 31 c8 8b 19 1a 64 30 60 5e b4 2b ce 5a 07 af 2d 17 d3 6e f8 2e 7a 9d 71 27 36 70 b8 68 0f f7 ef e2 9f 69 4e 41 72 56 b2 48 fb a4 59 af d2 Data Ascii: wOF2D:`n4r>6$: s{K[~!]U?:I,7s+Y{{ij56b\/jie&Z;pcDHCJq,S!TO1d0`^+Z-n.zq'6phiNArVHY
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 96 67 e6 9c 51 14 22 85 58 45 a7 4c bc 21 2a aa 6d d3 93 fd 25 47 f3 fc e7 9f 39 f6 a2 c6 4b a4 b0 83 b4 e4 78 b5 41 6c b1 02 ac 96 a0 0a 51 b5 5d 8a 9e a8 29 52 a6 cc ff 5f aa be db f7 de 80 d4 d0 a2 13 d0 fa 85 b6 53 c4 5f e9 56 ce 9e 32 21 31 a5 97 d5 ef 83 fb de e0 cd cc c3 00 e0 00 a0 51 54 28 80 92 49 42 85 c4 c8 32 05 ba 60 66 40 0a 04 29 9b 2a 2e 94 fd 4b 97 ff ef 92 7f 8e 7e a7 48 57 ca f6 b1 28 5b 39 51 4a 69 eb 9c e3 d6 7e eb 8b 4d 4a 5f ac 72 b2 72 b2 fa bb 65 16 ab 64 b7 ca 76 95 e5 26 f6 ef b2 d9 bd 3f 94 5c 42 cb 42 37 0e ef f6 cd 50 33 57 d9 53 8b e2 94 c4 bb e2 84 82 9e 9f 0b b3 19 d8 0f 59 a8 92 4f 08 51 5b 2e 27 f2 d3 5c 6f f6 cd 96 1d 20 4b 53 63 f0 25 9f 92 ec 7e c8 96 b2 5b ca 96 70 52 4c 91 79 ca d9 62 7e 09 53 00 90 8c 0a f1 ce 92 Data Ascii: gQ"XEL!m%G9KxAlQ])R_S_V2!1QT(IB2`f@).K~HW([9QJi~MJ_rredv&?\BB7P3WSYOQ[.'\o KSc%~[pRLyb~S
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: c2 b0 4a d6 9a 16 e0 30 17 6e 92 40 02 74 87 9e 83 98 51 e8 41 1d 09 62 29 ae 98 5c da 32 0e 62 4b d0 ed 54 37 f1 86 a7 74 ae e3 76 65 2e ca 61 be b8 4b 1d 04 be 6b 0c 2f 0d 59 43 ab 62 64 de 5b 6d 54 5d b4 a5 c0 c3 0e 5d 96 2b 08 ca 8f 26 e2 da 78 67 ac da 20 de 18 26 6b 76 64 c5 ed 9f 9d 99 66 16 48 0d 56 a7 c4 85 18 ba 50 f6 fe c0 d0 78 8b 7b bf 66 0b 6a a7 e8 48 ec b2 fb ee a4 f1 0b cd a4 30 31 2f 42 b0 6c 1d d4 a2 bf 8d 57 f5 e7 76 3b e3 3d 56 68 f3 d0 45 ad b0 ec cc 37 05 bb dc f4 73 e3 00 98 ac 9a 12 41 2f 82 71 ed c3 0c 66 ad d4 86 62 0a d1 a2 dc 39 55 71 80 d2 1a ae a4 da e2 3e d9 e9 80 59 11 1a 94 35 71 a6 9b ee e9 c9 08 5c 44 cc e3 88 00 c8 42 bb 50 3e b0 d8 a0 0f 1c e4 61 53 0a 9a 90 d5 6d 41 e6 2a 40 e5 5c c1 0e b3 ff 86 3f 17 3e 5f c7 40 57 Data Ascii: J0n@tQAb)\2bKT7tve.aKk/YCbd[mT]]+&xg &kvdfHVPx{fjH01/BlWv;=VhE7sA/qfb9Uq>Y5q\DBP>aSmA*@\?>_@W
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 3f 66 4d f9 54 02 c1 b5 6b 24 53 23 68 0f 76 43 fb 50 42 95 d1 ea 22 75 1e 1a 71 0e 97 ed 4d 45 ef 5f fb 58 7f 8b a6 c9 49 2f c2 14 f2 f9 5d e0 8b f8 31 dd a0 08 fd 71 cc 95 6b 21 5c a0 b4 da ba 69 e8 b1 c0 ce 76 87 c3 d3 c2 29 82 a1 48 88 47 24 41 6e 79 74 d8 64 61 0a d2 30 cf 59 ec ea b1 6f b6 48 c5 c6 f5 34 4b 49 41 5d 50 e0 4e f7 f1 81 40 99 3d aa 68 4d 6f bd 87 e6 9b 9e f7 86 ef f9 09 d5 bc 28 f2 2f f4 8e ee e1 e3 35 df 11 bc eb 76 98 bd cb 58 80 f0 65 45 39 2a b3 2a a0 b3 3e 44 4d fd 42 b0 11 35 a2 fb f5 15 06 d8 c1 d8 e1 1c 7f 6c e8 61 24 af 9a a2 22 3c 8f 24 54 0d 79 de 8a ec 0c 14 db 43 1a a9 a2 b7 4a a8 45 03 5a ed 45 46 ba de 7b 17 74 d8 e7 54 f3 46 b7 ae f9 94 3f f3 3f e7 a6 46 3f a2 5f ea 4c 24 d3 aa 6b 58 8d 41 0f 23 02 41 51 8f 68 ef 22 f1 Data Ascii: ?fMTk$S#hvCPB"uqME_XI/]1qk!\iv)HG$Anytda0YoH4KIA]PN@=hMo(/5vXeE9**>DMB5la$"<$TyCJEZEF{tTF??F?_L$kXA#AQh"
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 04 a5 b6 c1 bb 84 31 b8 f1 17 a9 bf 21 92 6d 54 e8 a0 12 15 6a 35 6a f9 39 af 42 88 52 a9 36 1c 8c 28 27 9d 81 da a8 1b b4 f2 37 0c 2e 8c 8c 74 7a e9 35 13 ff 9f e0 41 11 c1 c6 44 60 a0 c3 10 1a 12 58 00 73 8d 28 22 1c 22 8e 18 6e 24 91 e0 14 e7 38 23 89 4b 5c 10 46 16 19 0e 91 47 0e 23 8a 28 e0 a7 a8 01 38 7b 3b 46 90 fd 0d c1 39 d4 08 22 65 4d 60 a6 a2 49 bc 54 76 0a 91 a3 cd 42 39 d5 0a 9c d3 9d 46 a6 a1 06 b4 9c e9 0c 32 8d 35 a2 e5 6c e7 d0 73 b9 cb c4 b9 d2 15 a2 dc ee 36 56 9e f5 8c 63 3a eb c4 29 02 13 c0 86 f1 ea 3e ac 18 86 70 61 3a f4 a7 59 0e 81 44 20 97 68 8a 33 71 7c 24 06 7a 9b 19 69 a4 38 d2 c7 6f d3 e2 1a 57 30 0b 88 20 80 b0 e3 e0 c3 ae 0e e1 e0 e2 1c 70 d3 e4 03 58 69 d9 c6 f2 e7 3c 18 8d 83 36 ca d3 9e c2 5f 0e 88 bc b0 6d a4 5b a5 49 Data Ascii: 1!mTj5j9BR6('7.tz5AD`Xs(""n$8#K\FG#(8{;F9"eM`ITvB9F25ls6Vc:)>pa:YD h3q\|$zi8oW0 pXi<6_m[I
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 3b e1 c7 53 a6 4a 9d 66 97 dd f5 d8 2b 9f fc 08 46 6c 24 8c 2c 9a 18 40 40 aa 06 01 a4 b1 81 0e 74 9d 7e 84 8f 54 d0 81 8a 36 66 30 90 44 80 80 21 f1 0d 2c a9 91 d9 20 a0 32 b4 94 7c 87 4f 69 29 64 d7 71 5a 43 ab 68 05 65 d0 52 bb 58 79 ce c2 32 d9 9c 82 8e 53 aa a0 b2 bc 04 89 a9 6d a3 68 3b 81 9e 3b 4f 0f 68 4c 20 ad 16 2c 05 7e 08 04 47 b0 e9 1d b7 1b c6 b7 f6 01 b7 e8 15 08 3a 5f fc a7 17 28 c2 49 77 a5 ca 98 48 73 7a 05 7d 09 ef 0a 35 15 18 9b 23 ac 48 c9 bf 63 d7 41 4d 08 5d 71 15 5d 82 5b 3f 80 ef 48 1a 65 bc c7 3a 4f d1 37 eb 23 80 aa 57 f3 01 82 58 bf dd 18 f7 1e cf 7d 7a 9c a3 ba 2e 59 a9 8b 5e ab f9 5e 83 19 5e ad e1 5e fd f3 37 57 c4 26 71 00 68 68 e0 35 9b 00 d5 a7 2e c3 2a aa 50 9b 31 ab b4 2f 40 b5 fd 99 f8 e1 86 1b 08 e7 07 5e f9 6b 32 c0 Data Ascii: ;SJf+Fl$,@@t~T6f0D!, 2\|Oi)dqZCheRXy2Smh;;OhL ,~G:_(IwHsz}5#HcAM]q][?He:O7#WX}z.Y^^^^7W&qhh5.*P1/@^k2
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: a5 77 80 a7 fd bc 1d 66 70 88 d9 7f 02 1d e3 a7 5c 90 2a 26 a5 7c 1d 15 a2 06 a5 d6 49 e1 4e 89 70 5a 77 f5 2c 1a f4 70 46 94 66 bd b4 8a d6 22 c6 39 09 ae ea eb 82 fe ae 18 e8 86 bf dd 35 c4 7d 49 ee 19 e6 81 91 1e 19 a1 c3 70 0f d9 bc 30 ce 73 63 3d 33 c3 67 53 7d 90 e2 b5 e9 3e 99 e2 bd 69 3e 9a e5 9b f9 7e 5b 60 71 10 2c 8d 32 2c 09 86 65 51 01 9e 8d 46 79 6c bc ce d2 6b d0 5b ad 3e 76 d3 57 4f c5 4a 94 aa 50 a9 5c 91 4e ba ea ac 8c 39 fe 37 d3 57 b3 7d b7 90 1d 9d af b1 53 9d ab a1 fa ee d5 5e e9 1c c0 34 cc c0 2c cc c3 7c cc c5 74 cc c4 6c 64 47 af 7b 39 80 6e cd e7 12 e8 a8 37 3b 71 c0 b1 1d c8 3a 14 45 51 04 28 86 62 e4 00 8a a3 38 39 8b 12 28 41 ca 51 12 25 c9 53 94 42 29 0a 04 4a a3 34 b9 82 32 28 43 ce a1 2c ca 91 e3 28 8f f2 a4 0c 15 50 81 bc Data Ascii: wfp\*&\|INpZw,pFf"95}Ip0sc=3gS}>i>~[`q,2,eQFylk[>vWOJP\N97W}S^4,\|tldG{9n7;q:EQ(b89(AQ%SB)J42(C,(P
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: e4 6f cc 26 49 24 09 77 92 21 64 08 66 91 a1 64 28 ee 21 7f 92 6e cc 25 c3 e3 7e 32 22 16 90 91 71 1f 19 15 f3 c9 e8 b8 97 8c 89 79 64 6c 3c 4a c6 c5 32 62 8b 47 c8 f8 58 4a 92 e3 61 32 21 96 90 94 78 91 4c 8c 4d 64 52 3c 47 26 c7 7a 32 25 9e 24 53 63 15 99 b6 bd 30 89 8d 64 46 3c 4b 52 63 1d 49 8b e7 c9 cc d8 40 66 f1 c9 ec d8 46 e6 c4 db 64 6e ec 21 f3 e2 1d 92 5e ef 93 f9 a0 67 41 7d 48 16 42 3c 8b ea 03 b2 18 3c 39 da 9e 63 f5 11 a9 82 7c 7e c5 11 20 0c be 2f de 05 6a 43 3c 06 d4 c6 b8 18 d4 a6 78 12 a8 cd 71 25 a8 43 ea 67 a0 fe cc ae f3 17 bb cf df ec 36 67 da 63 ce b2 e3 9c 6d cf 39 c7 be 73 ae bd e6 bc b5 cb db fc 92 ad 55 4a 9a 43 3c 41 42 22 89 c8 64 1e 85 c2 a5 d1 c4 74 ba 1a 83 a1 81 61 32 1d 3d f9 f9 2d 24 db 72 04 da d7 92 95 40 fb 65 b2 0a Data Ascii: o&I$w!dfd(!n%~2"qydl<J2bGXJa2!xLMdR<G&z2%$Sc0dF<KRcI@fFdn!^gA}HB<<9c\|~ /jC<xq%Cg6gcm9sUJC<AB"dta2=-$r@e
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 4d a6 c5 b4 99 0e d3 65 7a 4c 9f 19 b0 a8 90 9f 00 1b 49 8b a6 83 23 eb 05 23 39 8a d1 b2 6a 64 34 26 c8 8d cd 50 d1 c2 bd 6f fa 43 ce 01 cc 10 d3 9c a4 15 69 ee 95 4f 1a ce 71 b4 60 a7 b9 62 8d 6c e3 6e 36 ce fb 45 d4 b9 89 3e 36 07 cd a5 6f 2a 9e ce af 80 17 56 af 58 e3 dc 30 ce b6 be 2c 49 d8 e1 39 36 27 82 7f 00 98 6e c9 4a 59 a9 ef e6 0d b2 01 36 30 b3 3d 45 9c 8d 62 7b b7 68 6e 6c ec db b4 a3 8b 91 14 83 ad 43 f7 28 9c 04 8e 66 c8 10 cd 9c e9 7d 93 3f db 4d a9 3f 41 cf 5c ed 1d 9a 42 dd 29 99 bb da d3 83 0f 20 82 ef da d4 29 f8 4a 69 52 c5 90 e3 b4 3a fb 3f f3 24 01 1b 79 07 e7 71 91 40 23 2b 46 e9 16 9a 99 01 bf 58 59 86 56 e7 fa 4b b0 cb b9 db fa f3 e5 86 85 7a 5b d0 88 dc 9c 9d 92 69 34 35 59 b2 46 ac 79 ac 37 4d 23 30 76 42 91 a9 33 c1 43 67 72 Data Ascii: MezLI##9jd4&PoCiOq`bln6E>6o*VX0,I96'nJY60=Eb{hnlC(f}?M?A\B) )JiR:?$yq@#+FXYVKz[i45YFy7M#0vB3Cgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49805	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	884	OUT	GET /1/image-resize/1/750_328_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAAT5krkQ8QTCmoz0tGrxy0n5zeqofv1vvtwxfksfVIVs&exp=1711586125&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAJMKrIMmsAYmnQMAqshxs6Ap2WV6GkR6g25xpRmD1Y3o HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:05 UTC	1208	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143b7fc90823-IAD CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 123749 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Tue, 26 Mar 2024 09:57:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=26221 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 86a64708db4582a8 Set-Cookie: __cf_bm=22E9xqd9S_z_K210oky9LIPn5NGshqKLcm8HIy7Kzms-1711570805-1.0.1.1-aqcF_742eyqN78O89NDH40VMGPt2E7zitpccBkX0Fpzj62X3N5dHKEByEk5afIioed.03Xn.WoO6voyN0CxSpw; path=/; expires=Wed, 27-Mar-24 20:50:05 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-03-27 20:20:05 UTC	503	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 6a 4e 31 74 71 42 58 39 73 7a 42 76 69 69 70 55 32 58 73 43 77 37 34 79 70 67 31 48 66 4f 67 79 79 67 64 74 72 31 76 5a 77 74 76 5a 6a 6d 38 53 36 44 39 4f 30 67 41 67 61 48 52 42 42 41 34 63 55 62 4c 37 6c 4e 44 58 63 54 56 68 73 70 50 4e 49 59 51 32 65 73 41 79 32 49 30 59 34 61 5a 75 51 6e 31 66 76 33 50 61 4d 4d 77 5a 75 75 38 53 59 64 74 45 4f 31 47 78 6a 4d 64 6b 51 34 41 38 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tjN1tqBX9szBviipU2XsCw74ypg1HfOgyygdtr1vZwtvZjm8S6D9O0gAgaHRBBA4cUbL7lNDXcTVhspPNIYQ2esAy2I0Y4aZuQn1fv3PaMMwZuu8SYdtEO1GxjMdkQ4A8g%3D%3D"}],"group":"cf-nel","max_age":604800}N
2024-03-27 20:20:05 UTC	1027	IN	Data Raw: 64 35 63 0d 0a 52 49 46 46 fe 42 00 00 57 45 42 50 56 50 38 4c f1 42 00 00 2f ed c2 51 00 2a 4d 0c 00 2c 97 1c 39 d5 c5 55 ef ff bf ef fb ff f7 5e 75 bb d1 6d 86 21 c3 90 3d 0c 1e 66 66 e6 19 c3 7a 98 99 99 99 d1 c3 cc 33 6e 0f 8f ed 21 d3 f0 b4 d9 1e ea 31 75 d7 7b ff ff fd df a1 cb e5 ff 55 07 66 ff 40 2b 15 b2 32 4b 15 76 60 a9 c3 0c 4b 0e a3 7d ec 70 ea b0 cc ae 4b 4b b3 cc 3d b2 96 3a bc 74 ea 30 c3 f2 6e 87 99 2a b0 e0 70 07 96 e1 97 7a 0e 81 a5 0e 27 2d 85 5e a4 39 86 bc b7 30 d8 61 86 3e b5 2a 34 ca fc 01 4b 5e 2c d9 7b 08 27 15 66 66 86 65 46 fb 58 e1 bc 4b 49 1d 4e fa d2 87 50 25 8b 43 17 87 f1 84 47 9c 63 2a 30 92 d3 52 e8 5d 02 75 79 ca 32 74 e0 85 19 96 19 2b cc e4 e3 cc 6c c8 2f d0 d2 86 e3 93 d5 5a 7a da de 03 d9 17 87 19 3a b0 10 4e 7c 9d Data Ascii: d5cRIFFBWEBPVP8LB/QM,9U^um!=ffz3n!1u{Uf@+2Kv`K}pKK=:t0npz'-^90a>4K^,{'ffeFXKINP%CGc0R]uy2t+l/Zz:N\|
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 42 a4 b2 23 0a f2 9b 84 e4 cd eb 69 49 4e df 99 a5 3a 48 32 d9 4c 56 55 cb 93 4d e4 65 9c 8a b7 96 62 c7 bc 78 a8 ef 82 25 6b a2 2b 55 aa 32 cf 5f bf b1 bc bf 69 65 33 51 e5 37 10 45 6c e3 d7 c8 0b 58 aa 46 41 99 c4 24 4d 99 e4 64 f3 06 79 fb 98 64 70 4f ba c1 90 c5 d3 34 6a 1d fb 58 d1 bf a6 40 61 66 bd 55 7f 5a 4c 68 dc 86 14 7e 33 a9 92 28 4b be f0 e6 9c ca 98 61 19 b8 c8 07 30 8e 87 64 f1 b2 1f 23 2d 3f ae 87 76 a1 0f fb 82 36 c5 47 48 65 9c 48 5c e1 98 a0 90 23 f9 22 ce d5 9d 7d e8 9b f6 38 e4 07 30 f2 9a 05 d0 c8 44 20 84 da 43 c1 08 ef 0f cc 27 07 94 64 07 81 09 2e 05 58 ad 44 c9 17 99 cc 39 0a cc 6b ca 0d 79 0e 0c 5d a3 23 d9 e2 69 0a 02 8d 04 a7 68 c9 94 e8 47 c0 ab ef 26 ef 67 70 a9 04 e7 06 7c b2 e4 2b 27 63 3f b5 6a a6 67 db e0 26 96 cd 40 ac Data Ascii: B#iIN:H2LVUMebx%k+U2_ie3Q7ElXFA$MdydpO4jX@afUZLh~3(Ka0d#-?v6GHeH\#"}80D C'd.XD9ky]#ihG&gp\|+'c?jg&@
2024-03-27 20:20:05 UTC	1031	IN	Data Raw: a8 f0 2d 79 66 bc 29 95 8f 11 e7 4c 69 54 92 59 ea 5d bd ae 0e a6 8f 65 2f b9 2c 00 80 31 59 88 78 10 fe b2 47 a2 d7 31 c3 a1 46 91 1a 50 6c a6 8e 1f ae 86 db d1 54 95 46 e1 44 cc bc df 5d 35 07 ec ea 6f b0 23 e9 10 64 01 0d 89 43 1e 58 70 96 58 f5 b5 a3 a1 c3 c9 06 88 2f 68 59 fd c7 18 3e 55 f5 06 b5 24 52 e6 34 08 6d 4b f5 a2 e1 75 b7 19 4e 4d 67 20 90 48 e9 9a a2 c5 d3 23 1d 73 bd d0 46 3c 4d 12 c9 16 8f ca b9 d2 0c e5 fc 17 33 7c a3 fa c2 1c 2f 96 56 14 98 dc 12 27 62 73 aa aa db ed f8 bc 26 56 8b 7e 27 fa 0e f4 28 d2 a7 d6 c4 9c 0a 08 08 f2 43 63 51 91 1d 34 4d 5f 23 76 f8 5e 0b 41 17 06 44 13 b5 c5 89 10 91 59 8b 6f 61 43 bc cd 8d a9 3c 23 a1 a9 12 27 59 96 55 55 c6 51 b5 97 f9 a8 d0 19 48 15 90 24 01 98 14 31 aa 55 05 46 c3 e7 da 5a 5f ce f7 62 f5 Data Ascii: -yf)LiTY]e/,1YxG1FPlTFD]5o#dCXpX/hY>U$R4mKuNMg H#sF<M3\|/V'bs&V~'(CcQ4M_#v^ADYoaC<#'YUUQH$1UFZ_b
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 33 35 61 61 0d 0a f6 fa 1c 2e b6 98 46 13 1d 88 a1 25 c7 ba 1a 52 f6 86 f1 7e 17 1b ac c7 88 0d 2b ba 63 bc 31 92 a5 4a 9c 2a 75 57 79 af 00 bb d3 28 d8 71 16 c8 a6 e9 d8 f2 37 b3 be 7d 90 1c e3 14 84 8e 6e 55 95 33 33 d5 21 d4 58 78 1d 1b d0 60 51 ab 3f fa 37 10 45 d3 5c 9e 74 16 2e 68 a8 2b ed 34 68 56 4d c1 6d ba fa 2f 8b ad 92 25 81 b9 fa 57 5b 29 fe fd 41 8c 5b 47 8f 14 f1 34 76 24 d8 d4 d1 6f 68 71 cc ce c5 51 b7 5b 2d 1d 27 e7 6e 0d 4f 85 3c 07 56 a0 64 da 73 d4 44 87 64 46 44 3d de a1 5e b3 f2 51 c1 46 1c 27 91 2c 1d dc 31 00 66 4d bf 37 0b 5e b0 26 04 d2 2c 68 14 fb 18 2b ed 09 6f f1 ea 31 72 73 39 02 67 ee be b5 74 0e d8 cd 6f c0 d2 53 2b 1e f1 34 06 ec b7 58 c2 df c9 9c 4b 99 44 1d 42 b2 64 29 91 d8 36 a6 bb fc 2f f4 cd 09 93 67 89 c7 40 74 41 Data Ascii: 35aa.F%R~+c1J*uWy(q7}nU33!Xx`Q?7E\t.h+4hVMm/%W[)A[G4v$ohqQ[-'nO<VdsDdFD=^QF',1fM7^&,h+o1rs9gtoS+4XKDBd)6/g@tA
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: ed 4e ce 91 d0 52 a5 44 78 ab ba 7b 9a 6f 8b d4 80 9b 39 b7 16 37 a1 88 16 4f 13 fa 5b 6c 68 1e b3 9a 5d f1 1b 92 84 35 51 1a f0 49 29 0b ff 1e 13 28 30 03 cf d4 2e 31 86 37 7c 08 48 ec 4d d2 fe 6a 80 31 f7 39 74 08 76 56 c4 93 38 e7 ba 92 a0 1a 95 88 82 90 5c 03 27 71 4c f2 ca 7a 42 a0 c9 f0 e1 0b 6a a9 89 5a be f6 7b d4 b2 e9 d4 42 0b 9d cf e6 25 bc b2 e2 13 f9 72 27 42 98 44 c9 c4 6e c8 db c2 a4 69 e0 10 3d ae 89 26 aa 27 4e 53 ec 0c 24 74 5c 1b 68 d9 56 5e 53 87 e3 56 85 44 49 50 22 71 ae e5 76 62 77 8e dc ff 2e e8 f2 ee f0 e0 cf f7 24 1a 8a a2 00 c3 13 5b bb 1e d3 7c 11 ab f1 7f 89 cc ec 50 f1 ea c9 06 55 54 f7 b7 9f a2 a4 3b 67 f1 db 66 d8 37 db 5a 11 25 c2 38 26 c5 bb 5e 7a 5f 80 11 2a 0f 4d 92 24 41 d8 91 8c b9 1b 5b b9 ad d4 8d f0 de 50 35 c3 62 Data Ascii: NRDx{o97O[lh]5QI)(0.17\|HMj19tvV8\'qLzBjZ{B%r'BDni=&'NS$t\hV^SVDIP"qvbw.$[\|PUT;gf7Z%8&^z_*M$A[P5b
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: ac b9 1b af 4a 79 f0 a6 2b 1d e4 ae 9e d7 1c e0 33 30 c0 21 c2 63 09 00 68 0c c5 c0 42 4f 3f aa 9e 8e 95 8f bc 01 3e ac 7d 18 0b bf 71 cb f3 5f 64 9e 39 33 72 02 73 66 ff 9a d5 c9 19 19 3a 60 47 5a 8b 55 3a 1b c9 33 b4 36 5d 47 3e 66 56 26 c8 78 b5 81 a4 87 df a8 f6 f8 de 66 6e 33 1a 61 aa 80 81 cd 12 d3 6a 5a b4 a6 69 4a a4 1b d1 46 13 3d eb 5f a3 d3 da a2 38 66 bb f1 6a e4 6a e0 28 89 ad 9a 13 f3 3c b0 74 b5 15 0b 4c 7b aa 33 d9 6d 06 7e 2b 63 0e 3e 4c 2b 49 4f 05 de a1 bb 19 3b 82 b1 0b 5a 45 82 16 05 3d 91 87 23 b5 a9 78 03 c5 ff 87 4d e2 21 35 31 72 a9 5c 57 c4 d6 db fd a4 28 fa 87 2c 58 b1 66 41 60 09 bb ec 3b b2 05 3f 2b 57 c6 48 89 52 1e 87 ba 17 7d 5f f4 0c d1 ad b0 64 2a 38 5d a6 10 05 86 22 2a 19 9d 5a 32 c0 8d bc c0 3a ac 94 da 55 47 a4 5a 09 Data Ascii: Jy+30!chBO?>}q_d93rsf:`GZU:36]G>fV&xfn3ajZiJF=_8fjj(<tL{3m~+c>L+IO;ZE=#xM!51r\W(,XfA`;?+WHR}_d8]"Z2:UGZ
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: fe bf b7 8c 97 84 18 4e 74 44 1e 2b 61 c6 c1 d9 39 bf df 81 fe 02 62 53 55 0b 68 10 12 18 74 ff 1d bb 0d bc ee df 60 28 4c 33 14 49 6b 10 45 47 74 5c c3 d6 32 13 99 6a d5 09 70 38 d6 53 46 65 31 45 63 30 e3 df c7 42 74 b2 a0 32 57 8d bc f7 99 c8 9b ae 7b e1 ab 85 ae a0 25 45 3c 48 b0 e5 be c6 8c 7e 23 d6 31 d7 d1 a7 a9 99 47 93 d6 d4 3c c6 8e b0 f1 8c cf 16 60 ea 10 dc a4 5e 1d ad 8c a6 4d d4 52 c3 aa 85 ff af cf ce fd c6 40 5c b0 4f 2e 8c fc 00 5e 34 10 16 0c ec 45 bd f9 d3 4e 7f 23 42 5b 80 ea 88 10 4f 6b 19 1a b4 51 5d e7 74 76 44 6a 19 af aa c4 46 8b a7 c2 a8 dc 23 ba 3d f6 92 86 86 cb ac 3a a8 19 08 35 69 16 6d fd 1b d4 6e 0f 6b db eb b7 e3 0d 22 dd 36 37 6e 87 1b b4 7b 87 75 f4 ff c3 f4 6e d2 d2 35 0b a6 27 43 3a 70 eb ba 65 46 a0 e9 a4 36 0a 6d 8c Data Ascii: NtD+a9bSUht`(L3IkEGt\2jp8SFe1Ec0Bt2W{%E<H~#1G<`^MR@\O.^4EN#B[OkQ]tvDjF#=:5imnk"67n{un5'C:peF6m
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 0c 06 7c c3 86 2f aa d0 8b f1 20 a1 d1 c6 78 c0 40 e0 da da 78 74 10 87 aa 06 59 7c 03 20 24 6b 40 cc 40 4e f5 89 15 d3 34 75 8a 44 bc 5a c1 94 34 5b ed 34 ec 01 ff 3c d3 e2 a9 42 8b e1 d4 bf 35 65 a6 4c a3 46 2b 11 a1 f6 75 94 11 0f a9 d4 41 24 40 34 54 74 4b 88 b0 4b 79 10 99 22 18 37 6d 85 cf 12 1b cf 24 24 93 a8 97 28 11 c5 4b 0c 57 1a 7f fd 73 37 7d 45 df 64 af e7 19 31 76 48 26 7a bc b0 3d 6c 79 1a ef c6 d8 5e 07 99 ab f6 ce e5 2b a5 92 d5 08 98 61 1b b5 92 6c b7 33 8f 19 82 29 61 af 63 e0 18 17 8c 3d 4b af 87 33 5c ae 73 3e d9 2d df de a1 e3 23 e2 1c 09 4c d8 9c 23 bc 38 07 6e 1b 4a 31 76 4d cf 1a cb 9a be 8b 6f 39 06 1a 78 d8 07 fd 45 02 44 01 29 11 21 a1 09 04 83 66 38 c2 da e9 9f 47 ae a1 08 08 03 3a a6 1d 18 01 64 09 0f 00 6a 06 03 6d 7a e0 3e Data Ascii: \|/ x@xtY\| $k@@N4uDZ4[4<B5eLF+uA$@4TtKKy"7m$$(KWs7}Ed1vH&z=ly^+al3)ac=K3\s>-#L#8nJ1vMo9xED)!f8G:djmz>
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: b5 93 9e 26 9b 37 d5 20 cc 64 d2 d0 39 f8 a6 a6 02 53 6e 6e 8d 61 38 46 9e 49 40 b9 a2 f3 df c0 03 46 ee 8c e8 80 b9 9e 4a d3 2d 84 fe 8a 0d f4 9d 4f a4 d4 28 8f 2c 20 e0 4d d8 99 b7 4e 88 57 cd 36 f2 ec f0 26 75 36 58 e3 df e5 79 82 57 06 47 2e 75 5a e9 0d 6d ba 62 20 7e 64 7e 8b a5 cc 59 44 46 92 b1 35 f5 a1 b7 a1 a7 7c 44 b3 da 9d 07 cc 12 12 33 33 09 27 8d 63 5d 34 4f fa 14 6c f3 d1 54 a9 df e8 1c 5f 9b ff c3 22 78 9a 89 0d 4c c3 48 56 1c c3 1b 70 12 81 11 99 1c 23 c8 1e 57 26 71 2c 8d 32 b2 d1 48 f0 d2 23 e8 6b 7f b2 9a 91 85 d1 09 39 26 41 4a c6 0e 36 be 09 2a a4 c2 56 52 99 67 39 ca 3e 77 e5 2c b0 6d e0 c2 f8 08 c9 d1 8d c2 ee 55 0c d3 e5 9f d9 1c 6f e6 57 53 9d ee 83 e5 9a 62 58 89 30 63 e4 ea 9c 14 cb 4a b8 6d ce d8 d3 5f a4 47 ed 31 e8 58 18 bb Data Ascii: &7 d9Snna8FI@FJ-O(, MNW6&u6XyWG.uZmb ~d~YDF5\|D33'c]4OlT_"xLHVp#W&q,2H#k9&AJ6*VRg9>w,mUoWSbX0cJm_G1X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49803	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 2725 Connection: close CF-Ray: 86b2143b4f013932-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777336 Cache-Control: public, max-age=31556926 ETag: "749002f5a04f784cc1802d77d2fed423" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Mon, 08 Jan 2024 03:33:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 2sXXlztVIEvfIkmG6S9wtmhXnE23pBgSi8Ln+O6AiP0WJ5CabkvQXj5YOZuTPoZVYfyVueVFjFg= x-amz-replication-status: COMPLETED x-amz-request-id: KYRNVNQW8KCXESJK x-amz-server-side-encryption: AES256 x-amz-version-id: CYjzPWbPE89Uh.x_PjEnj_d_.iZJD1mL X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 6c 62 4d 6f 62 54 66 46 79 33 78 56 67 48 43 62 25 32 42 48 68 74 41 75 47 4e 61 49 57 6c 75 53 36 39 36 71 51 34 63 54 4c 41 77 58 6e 43 45 4e 42 4f 33 6d 25 32 46 53 31 4f 4e 33 79 70 7a 59 6e 45 34 45 4d 46 68 46 56 39 62 4b 31 35 68 41 59 75 59 36 37 30 62 72 69 33 39 7a 59 35 35 46 55 4a 45 64 6a 34 72 6d 4f 58 33 6b 4a 73 6a 55 36 4a 32 51 66 25 32 46 4b 45 37 49 35 61 76 38 48 32 70 76 25 32 42 45 4b 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9lbMobTfFy3xVgHCb%2BHhtAuGNaIWluS696qQ4cTLAwXnCENBO3m%2FS1ON3ypzYnE4EMFhFV9bK15hAYuY670bri39zY55FUJEdj4rmOX3kJsjU6J2Qf%2FKE7I5av8H2pv%2BEKk%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:05 UTC	1198	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 30 38 20 33 31 2e 39 32 31 63 30 20 2e 39 36 33 2e 32 35 32 20 31 2e 36 31 32 2e 38 39 35 20 31 2e 36 31 32 20 31 2e 31 30 32 20 30 20 32 2e 31 38 39 2d 32 2e 39 39 35 20 32 2e 31 38 39 2d 34 2e 36 39 32 20 30 2d 2e 37 36 32 2d 2e 32 30 32 2d 31 2e 33 38 37 2d 2e 37 32 39 2d 31 2e 33 38 37 2d 31 2e 32 31 31 20 30 2d 32 2e 33 35 35 20 32 2e 37 39 37 2d 32 2e 33 35 35 20 34 2e 34 36 37 7a 6d 32 32 2e 33 34 37 2d 35 2e 30 31 31 63 30 20 Data Ascii: <svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 38 30 31 2d 32 2e 36 31 35 20 31 2e 38 30 31 2d 2e 38 36 38 20 30 2d 31 2e 35 33 35 2d 2e 35 36 39 2d 31 2e 37 38 37 2d 31 2e 37 32 37 2d 2e 36 35 34 20 31 2e 31 30 38 2d 31 2e 35 31 20 31 2e 37 33 36 2d 32 2e 35 36 38 20 31 2e 37 33 36 2d 31 2e 31 38 38 20 30 2d 31 2e 39 36 37 2d 2e 38 39 35 2d 32 2e 30 38 38 2d 32 2e 36 31 36 2d 31 2e 30 37 38 20 32 2e 30 37 37 2d 33 2e 30 37 35 20 33 2e 38 35 31 2d 35 2e 33 35 39 20 33 2e 38 35 31 43 38 2e 39 33 37 20 33 36 2e 30 37 34 20 37 20 33 33 2e 37 30 38 20 37 20 32 39 2e 37 38 33 20 37 20 32 34 2e 38 35 20 31 30 2e 38 35 20 32 31 20 31 34 2e 36 37 35 20 32 31 63 32 2e 33 31 36 20 30 20 33 2e 36 32 33 20 31 2e 31 38 32 20 33 2e 36 32 33 20 32 2e 37 39 33 20 30 20 31 2e 36 31 32 2d 31 2e 31 38 32 20 32 2e 37 39 Data Ascii: 801-2.615 1.801-.868 0-1.535-.569-1.787-1.727-.654 1.108-1.51 1.736-2.568 1.736-1.188 0-1.967-.895-2.088-2.616-1.078 2.077-3.075 3.851-5.359 3.851C8.937 36.074 7 33.708 7 29.783 7 24.85 10.85 21 14.675 21c2.316 0 3.623 1.182 3.623 2.793 0 1.612-1.182 2.79
2024-03-27 20:20:05 UTC	158	IN	Data Raw: 2e 32 33 33 2e 35 31 33 20 30 20 2e 37 32 2e 31 38 37 2e 37 32 2e 35 36 36 61 31 2e 34 31 37 20 31 2e 34 31 37 20 30 20 30 20 31 2d 2e 30 38 2e 34 31 38 63 2d 2e 34 30 33 20 31 2e 33 30 33 2d 31 2e 32 31 32 20 34 2e 31 35 39 2d 31 2e 32 31 32 20 35 2e 35 30 33 20 30 20 2e 35 34 2e 31 32 35 2e 38 38 33 2e 34 33 33 2e 38 38 33 2e 35 33 36 20 30 20 31 2e 31 38 38 2d 2e 38 32 20 31 2e 36 37 2d 32 2e 31 39 35 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: .233.513 0 .72.187.72.566a1.417 1.417 0 0 1-.08.418c-.403 1.303-1.212 4.159-1.212 5.503 0 .54.125.883.433.883.536 0 1.188-.82 1.67-2.195z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49804	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	886	OUT	GET /1/image-resize/1/200_87_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAEVHaa9t_0kzI0s6V5Iw6cN25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI HTTP/1.1 Host: media.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:05 UTC	1207	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/webp Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143b68a987a6-IAD CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 123749 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Tue, 26 Mar 2024 09:57:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 3000 Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=5460 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 86a64708db4782a8 Set-Cookie: __cf_bm=.EiCcpZVqB5OM5IqMYuKOPoikPoJcw7FqMfTCbubRYA-1711570805-1.0.1.1-5xndKQ7ZH23dsFc6vPKGU89lJ.Qk_RvGG43zDw9BuV1mRbPNderc0RDTqnImhjSNW4KAuA4mXSj1WpTJqjmKMQ; path=/; expires=Wed, 27-Mar-24 20:50:05 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None
2024-03-27 20:20:05 UTC	507	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6d 77 62 35 57 32 46 6f 6b 4d 61 69 38 54 39 47 4a 78 78 63 50 44 54 33 4d 71 38 55 35 6c 42 53 33 47 46 7a 59 31 54 6c 44 48 62 43 66 42 59 72 56 74 6b 57 37 35 51 25 32 42 78 54 79 67 35 31 45 4e 4a 6d 6d 65 45 36 6e 71 65 5a 30 79 6e 35 39 31 78 55 45 75 61 4e 76 54 35 70 43 63 58 46 79 44 55 78 77 48 72 55 25 32 46 76 67 6f 4a 58 4a 59 6b 42 5a 68 54 6b 6a 31 48 6d 43 53 47 61 73 34 36 55 39 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mwb5W2FokMai8T9GJxxcPDT3Mq8U5lBS3GFzY1TlDHbCfBYrVtkW75Q%2BxTyg51ENJmmeE6nqeZ0yn591xUEuaNvT5pCcXFyDUxwHrU%2FvgoJXJYkBZhTkj1HmCSGas46U9w%3D%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:05 UTC	1024	IN	Data Raw: 38 34 61 0d 0a 52 49 46 46 42 08 00 00 57 45 42 50 56 50 38 4c 36 08 00 00 2f c6 80 15 00 26 3a d2 b6 ab 92 1b b1 34 3d 3d cd 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 14 33 33 b3 ba 7b 4e d0 3d 62 9d c9 cc 76 4a 5b 38 76 e6 72 64 61 97 9c 2b 77 d6 d1 54 75 e8 f0 46 a6 6c d2 29 67 93 9e 6c aa 73 67 b8 02 47 a3 50 69 67 da 80 d6 a0 15 a8 18 6e a4 15 cc 12 6e 38 5b 30 e7 9d 4f e6 74 52 73 a6 25 38 65 9f 54 2c dd f2 16 94 dd cc f5 45 2e 86 6d db 86 f9 ff e2 cd 92 9d 4a 80 24 c9 b4 ad 5e 9d 87 6f db b6 6d db b6 6d db b6 6d db b6 ed ff 6c db c6 9e 73 a6 ff 13 60 41 98 e0 91 45 03 cc 20 8b 1c 26 26 1b 65 91 c3 47 85 11 26 f4 a2 7a 03 11 24 87 8a 37 ab 33 40 4b 46 84 51 69 52 44 68 94 5b 30 6c 38 1a 84 9b 64 ab 86 4d c7 fa 2d 22 ee 62 84 51 91 59 91 06 1c Data Ascii: 84aRIFFBWEBPVP8L6/&:4==ffffffffffffffff33{N=bvJ[8vrda+wTuFl)glsgGPignn8[0OtRs%8eT,E.mJ$^ommmls`AE &&eG&z$73@KFQiRDh[0l8dM-"bQY
2024-03-27 20:20:05 UTC	1105	IN	Data Raw: 80 15 15 5c 39 e3 e4 fb ee 37 2d 9d b3 6b d2 24 7f dd 38 b3 c2 8d 49 96 41 f4 f1 78 42 90 f1 3b b2 46 d8 9f 96 c9 68 fd cc 0a 5a 51 00 f8 9b 83 25 5f a9 26 64 99 fb 77 74 14 bc c2 47 77 f9 3d 35 68 0d f7 9c 73 ae 85 04 13 a6 46 d5 66 ca 3d e4 7b f8 a1 93 1b 61 7e 00 5e 76 14 c7 f3 5d b0 0e 50 d2 e5 7d b8 16 53 82 2f 47 e0 d6 8c ec 73 71 ef 4b 3d 9c 67 4a f3 d2 2d 46 03 60 56 a4 0d a6 a7 d9 fd fb d3 c5 20 68 88 27 ec e9 96 e1 28 aa 13 bc fa b4 e0 a2 f4 97 9d cf ea 21 2e e1 7e 4b 05 00 7c dd f7 72 db d0 e6 d3 0b 1a 32 08 6d 82 54 d7 03 1f aa 9f 07 ac c9 79 ad 2f 73 cc 3b e3 5c 3a 3c e4 ff 31 52 36 81 03 e0 09 e3 a5 da 10 c9 fd 26 28 08 d0 c3 7c a8 e1 ef c2 22 cc 28 13 ea 19 33 0e 6d 7e 83 ab ef 9b a6 a0 23 8e 1a f7 c1 f5 71 bf 1b 24 fa 29 a9 de 5c 97 52 62 Data Ascii: \97-k$8IAxB;FhZQ%_&dwtGw=5hsFf={a~^v]P}S/GsqK=gJ-F`V h'(!.~K\|r2mTy/s;\:<1R6&(\|"(3m~#q$)\Rb
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49806	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1035	OUT	GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 470 Connection: close CF-Ray: 86b2143b7fb60846-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777336 Cache-Control: public, max-age=31556926 ETag: "e5c5a4d109aeb5234e4405032dfd4800" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: KaLpVKuzva0veub5cSvDdZA6q4F9v/ybKCeyMZCUURjseZR5ZUWSSxMhrlLW0txky0br7LJMH1I= x-amz-replication-status: COMPLETED x-amz-request-id: TNX9T1TD0HXQABK0 x-amz-server-side-encryption: AES256 x-amz-version-id: NIIc0.pFtTuA2dWYosnVnW8pIOVqEpoW X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 5a 79 44 76 4a 25 32 42 72 4d 44 58 59 4e 31 4d 66 72 51 76 4b 32 52 69 45 7a 70 6c 54 32 50 4b 6f 65 64 58 63 44 4e 4e 49 6e 38 64 39 42 36 73 55 31 73 4b 78 4d 36 52 43 4f 56 7a 77 55 31 31 61 37 41 62 72 38 75 53 77 37 79 5a 57 36 6c 25 32 46 63 73 68 48 36 79 6f 61 64 62 25 32 42 53 71 39 45 48 6a 68 44 32 48 4d 65 64 52 7a 71 42 30 37 53 4d 30 4a 75 76 69 48 33 53 4e 4d 4c 53 70 62 4d 41 79 46 34 66 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZyDvJ%2BrMDXYN1MfrQvK2RiEzplT2PKoedXcDNNIn8d9B6sU1sKxM6RCOVzwU11a7Abr8uSw7yZW6l%2FcshH6yoadb%2BSq9EHjhD2HMedRzqB07SM0JuviH3SNMLSpbMAyF4fA%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:05 UTC	470	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 41 43 33 33 22 20 64 3d 22 4d 32 37 2e 32 38 37 20 33 34 2e 36 32 37 63 2d 2e 34 30 34 20 30 2d 2e 38 30 36 2d 2e 31 32 34 2d 31 2e 31 35 32 2d 2e 33 37 31 4c 31 38 20 32 38 2e 34 32 32 6c 2d 38 2e 31 33 35 20 35 2e 38 33 34 61 31 2e 39 37 20 31 2e 39 37 20 30 20 30 20 31 2d 32 2e 33 31 32 2d 2e 30 30 38 20 31 2e 39 37 31 20 31 2e 39 37 31 20 30 20 30 20 31 2d 2e 37 32 31 2d 32 2e 31 39 34 6c 33 2e 30 33 34 2d 39 2e 37 39 32 2d 38 2e 30 36 32 2d 35 2e 36 38 31 61 31 2e 39 38 20 31 2e 39 38 20 30 20 30 20 31 2d 2e 37 30 38 2d 32 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49807	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:04 UTC	1357	OUT	GET /_ajax/reaction/config/DAGAtXAJufM?documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804
2024-03-27 20:20:05 UTC	909	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143ba82e3914-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2143ba82e3914 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uv6VFTtzKDt%2B7uxJF6lXETrMxSFMGUo8%2FxIBn%2BBJ5KXgiikDnQsF3%2Fw58uRm%2BGwS6R0VYCYZX5IQbjcLzM9%2Bf2KgCOE2ZvOkRT7f6OcVBWS%2BLiiRn5QAdgjRfpJoXRA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	57	IN	Data Raw: 33 33 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 42 22 3a 7b 22 41 22 3a 74 72 75 65 7d 7d 0d 0a Data Ascii: 33'"])}while(1);</x>//{"A":{"A":true},"B":{"A":true}}
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49812	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/9abc2241bf1479263a0a039f3d1e5b5c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 2312 Connection: close CF-Ray: 86b2143cc90181f3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792654 Cache-Control: public, max-age=31556926 ETag: "9abc2241bf1479263a0a039f3d1e5b5c" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: mlU1uOQPhguUOaiX3w0AV7hclXxnQ1vXpK96IQnbRIbBXeL0udWhwmsWNQSDsreX7S2CUIcghaY= x-amz-replication-status: COMPLETED x-amz-request-id: EW27DPNMKT05QKG2 x-amz-server-side-encryption: AES256 x-amz-version-id: RHImjd5e24cKm0xMC36PvUPBcw582F4s X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 55 75 42 36 70 54 33 69 55 74 69 42 32 30 67 49 25 32 46 4b 4f 46 53 66 31 68 69 58 65 72 58 71 56 50 4d 64 70 65 4d 72 38 65 57 36 61 30 35 32 6a 61 64 78 66 67 56 78 4f 71 4a 59 4d 65 65 59 44 50 25 32 46 50 74 65 4c 41 68 67 64 31 38 76 74 54 64 4a 58 25 32 42 4d 76 25 32 46 77 75 4c 6a 37 76 39 4c 54 6e 70 56 58 57 51 25 32 46 78 57 25 32 46 30 71 31 6f 39 77 53 61 79 65 54 54 76 6f 7a 5a 52 4b 42 39 72 35 4e 34 36 4c 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UuB6pT3iUtiB20gI%2FKOFSf1hiXerXqVPMdpeMr8eW6a052jadxfgVxOqJYMeeYDP%2FPteLAhgd18vtTdJX%2BMv%2FwuLj7v9LTnpVXWQ%2FxW%2F0q1o9wSayeTTvozZRKB9r5N46LY%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:05 UTC	1194	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 46 39 36 34 35 22 20 64 3d 22 4d 33 32 2e 33 30 32 20 32 34 2e 33 34 37 63 2d 2e 36 39 35 2d 31 2e 30 31 2d 2e 33 30 37 2d 32 2e 34 37 2d 2e 34 38 2d 34 2e 30 38 32 2d 2e 31 37 38 2d 32 2e 36 33 2d 31 2e 33 30 38 2d 35 2e 31 37 38 2d 33 2e 35 2d 37 2e 32 31 36 6c 2d 37 2e 34 36 36 2d 36 2e 39 34 32 73 2d 31 2e 34 37 31 2d 31 2e 33 36 39 2d 32 2e 38 34 31 2e 31 30 33 63 2d 31 2e 33 36 38 20 31 2e 34 37 31 2e 31 30 34 20 32 2e 38 34 2e 31 30 34 20 32 2e 38 34 6c 33 2e 31 35 34 20 32 2e 39 33 34 20 32 2e 37 33 34 20 32 2e 35 34 32 73 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#EF9645" d="M32.302 24.347c-.695-1.01-.307-2.47-.48-4.082-.178-2.63-1.308-5.178-3.5-7.216l-7.466-6.942s-1.471-1.369-2.841.103c-1.368 1.471.104 2.84.104 2.84l3.154 2.934 2.734 2.542s-.
2024-03-27 20:20:05 UTC	1118	IN	Data Raw: 31 2e 37 36 37 61 31 20 31 20 30 20 30 20 31 2d 2e 37 30 37 2d 31 2e 37 30 38 6c 33 2e 35 35 32 2d 33 2e 35 35 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 34 20 31 2e 34 31 35 6c 2d 33 2e 35 35 32 20 33 2e 35 35 61 2e 39 39 33 2e 39 39 33 20 30 20 30 20 31 2d 2e 37 30 37 2e 32 39 33 7a 6d 2d 34 2e 31 36 34 2d 31 2e 36 39 37 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2d 31 2e 33 33 31 6c 2e 39 37 2d 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 20 31 2e 38 38 38 2e 36 36 6c 2d 2e 39 37 20 32 2e 37 37 33 61 31 20 31 20 30 20 30 20 31 2d 2e 39 34 34 2e 36 37 31 7a 6d 36 2e 31 34 33 20 35 2e 37 37 34 61 31 2e 30 30 31 20 31 2e 30 30 31 20 30 20 30 20 31 2d 2e 33 33 33 2d 31 2e 39 34 33 6c 32 2e 34 39 34 2d 2e 38 38 31 61 31 20 31 20 30 20 31 20 31 20 2e 36 Data Ascii: 1.767a1 1 0 0 1-.707-1.708l3.552-3.55a1 1 0 0 1 1.414 1.415l-3.552 3.55a.993.993 0 0 1-.707.293zm-4.164-1.697a1 1 0 0 1-.944-1.331l.97-2.773a1 1 0 0 1 1.888.66l-.97 2.773a1 1 0 0 1-.944.671zm6.143 5.774a1.001 1.001 0 0 1-.333-1.943l2.494-.881a1 1 0 1 1 .6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49811	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/3e78ef31f2928a74c6d7ba19b91d0570.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 1865 Connection: close CF-Ray: 86b2143cdf4481d5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792656 Cache-Control: public, max-age=31556926 ETag: "3e78ef31f2928a74c6d7ba19b91d0570" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 06:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: uuvkC9Ia5kgmINmib7bwWVrDxf2H2yGbyRsnTWh+d0kOty0IwLAT0G3M89pV+ES0oBeXtPabJ2I= x-amz-replication-status: COMPLETED x-amz-request-id: W79TRV5MEM6PAQZC x-amz-server-side-encryption: AES256 x-amz-version-id: MKvbOcPT.ZamEvvCqLIq05HsRrDkbZF8 X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 63 77 4d 63 76 6f 75 68 65 56 33 25 32 46 25 32 42 47 67 6d 43 36 6c 70 5a 4c 59 37 79 75 78 32 41 6e 77 51 57 4d 38 54 4e 77 37 53 79 47 56 34 4b 58 45 38 53 38 45 56 64 4c 43 4f 45 71 6b 47 59 65 67 62 44 25 32 42 72 39 74 53 37 73 54 45 7a 67 55 34 70 6f 52 41 4e 32 39 4a 58 79 69 37 32 64 5a 32 46 31 6c 6d 6c 5a 7a 54 5a 6b 45 64 61 65 42 61 30 53 44 52 68 43 56 4c 75 42 25 32 42 65 67 45 68 4c 46 65 71 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vcwMcvouheV3%2F%2BGgmC6lpZLY7yux2AnwQWM8TNw7SyGV4KXE8S8EVdLCOEqkGYegbD%2Br9tS7sTEzgU4poRAN29JXyi72dZ2F1lmlZzTZkEdaeBa0SDRhCVLuB%2BegEhLFeqU%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:05 UTC	1198	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 2e 32 39 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 34 20 31 36 2d 31 36 20 31 36 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 20 30 2d 38 2e 38 33 36 20 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 38 2e 38 33 36 20 30 20 31 36 20 37 2e 31 36 34 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 33 39 30 30 36 36 33 33 39 34 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 31 33 31 20 31 Data Ascii: <svg width="33" height="32" viewBox="0 0 33 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32.29 16c0 8.837-7.164 16-16 16-8.837 0-16-7.163-16-16 0-8.836 7.163-16 16-16 8.836 0 16 7.164 16 16Z" fill="url(#_3900663394__a)"/><path d="M26.131 1
2024-03-27 20:20:05 UTC	667	IN	Data Raw: 6c 6c 3d 22 23 36 36 34 35 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 2e 38 31 38 20 32 30 2e 37 30 36 73 32 2e 38 32 34 2e 39 34 20 38 2e 34 37 2e 39 34 63 35 2e 36 34 38 20 30 20 38 2e 34 37 31 2d 2e 39 34 20 38 2e 34 37 31 2d 2e 39 34 73 2d 31 2e 38 38 32 20 33 2e 37 36 35 2d 38 2e 34 37 20 33 2e 37 36 35 63 2d 36 2e 35 38 38 20 30 2d 38 2e 34 37 2d 33 2e 37 36 35 2d 38 2e 34 37 2d 33 2e 37 36 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 35 35 37 20 32 35 2e 36 32 38 61 34 2e 37 30 35 20 34 2e 37 30 35 20 30 20 30 20 31 2d 35 2e 37 32 20 33 2e 34 30 32 20 34 2e 37 30 34 20 34 2e 37 30 34 20 30 20 30 20 31 2d 33 2e 34 30 32 2d 35 2e 37 31 38 63 2e 36 34 2d 32 2e 35 32 20 35 2e 39 36 34 2d 38 2e 31 39 36 20 Data Ascii: ll="#664500"/><path d="M7.818 20.706s2.824.94 8.47.94c5.648 0 8.471-.94 8.471-.94s-1.882 3.765-8.47 3.765c-6.588 0-8.47-3.765-8.47-3.765Z" fill="#fff"/><path d="M9.557 25.628a4.705 4.705 0 0 1-5.72 3.402 4.704 4.704 0 0 1-3.402-5.718c.64-2.52 5.964-8.196

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49809	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/0483f2b648dcc986d01385062052ae1c.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 368 Connection: close CF-Ray: 86b2143ced1d3b3b-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792653 Cache-Control: public, max-age=31556926 ETag: "0483f2b648dcc986d01385062052ae1c" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Rd2GUns54fYdSzJs+PwSaV2CDQZXfRcntWwrh/okNGrmmwVxMxNNKrMEf188UiL5asgxOv9p1Lg= x-amz-replication-status: COMPLETED x-amz-request-id: 546AJTVY19PVEWWC x-amz-server-side-encryption: AES256 x-amz-version-id: E.c5zjSTfUrZJPqzwok9bwh70Qy_m2NM X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 68 33 75 37 74 39 44 67 6a 6e 78 38 78 36 6a 6f 33 57 4a 59 52 5a 6d 34 38 53 69 69 33 6c 39 58 4e 5a 42 76 25 32 42 71 69 56 49 6e 47 61 55 36 39 31 71 66 72 34 63 25 32 46 69 71 25 32 46 41 71 74 55 6e 6b 77 47 6d 41 6f 4e 4a 61 4d 4b 74 67 36 39 73 4a 6a 35 4b 61 6f 4f 38 59 63 50 56 31 64 72 6e 39 44 76 54 6a 70 50 6f 72 32 25 32 42 57 49 78 6c 59 67 68 70 42 65 52 39 4d 5a 77 75 25 32 46 58 73 79 52 35 57 6f 4b 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h3u7t9Dgjnx8x6jo3WJYRZm48Sii3l9XNZBv%2BqiVInGaU691qfr4c%2Fiq%2FAqtUnkwGmAoNJaMKtg69sJj5KaoO8YcPV1drn9DvTjpPor2%2BWIxlYghpBeR9MZwu%2FXsyR5WoKc%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:05 UTC	368	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 44 32 45 34 34 22 20 64 3d 22 4d 33 35 2e 38 38 35 20 31 31 2e 38 33 33 63 30 2d 35 2e 34 35 2d 34 2e 34 31 38 2d 39 2e 38 36 38 2d 39 2e 38 36 37 2d 39 2e 38 36 38 2d 33 2e 33 30 38 20 30 2d 36 2e 32 32 37 20 31 2e 36 33 33 2d 38 2e 30 31 38 20 34 2e 31 32 39 2d 31 2e 37 39 31 2d 32 2e 34 39 36 2d 34 2e 37 31 2d 34 2e 31 32 39 2d 38 2e 30 31 37 2d 34 2e 31 32 39 2d 35 2e 34 35 20 30 2d 39 2e 38 36 38 20 34 2e 34 31 37 2d 39 2e 38 36 38 20 39 2e 38 36 38 20 30 20 2e 37 37 32 2e 30 39 38 20 31 2e 35 32 2e 32 36 36 20 32 2e 32 34 31 43 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#DD2E44" d="M35.885 11.833c0-5.45-4.418-9.868-9.867-9.868-3.308 0-6.227 1.633-8.018 4.129-1.791-2.496-4.71-4.129-8.017-4.129-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49810	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/3a05dbf1cdd156fcd1677a0b444cc36f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 842 Connection: close CF-Ray: 86b2143ceec828a6-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 788561 Cache-Control: public, max-age=31556926 ETag: "3a05dbf1cdd156fcd1677a0b444cc36f" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 06:47:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9UKIIh/gDJYCWwBiUMLv7wXFlIxpPcZ5CTpZXAGUyzNtR99YK3RLHXobQDLjaK6eFiCmD8Ei/yM= x-amz-replication-status: COMPLETED x-amz-request-id: QR6ZJNMKENC8RGY1 x-amz-server-side-encryption: AES256 x-amz-version-id: 89eYaVxS0FFMW1yG3hfwtFrbd6sRha4y X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 42 61 52 37 43 36 25 32 42 73 42 41 34 79 45 6d 65 70 64 65 6f 32 25 32 42 44 5a 75 57 37 50 66 49 6e 36 36 55 67 62 69 55 51 4a 36 6a 49 37 44 68 39 38 41 37 78 4e 59 77 5a 6a 43 64 78 4d 25 32 46 47 44 37 78 73 48 77 49 75 6d 56 49 71 46 6b 69 46 5a 33 35 71 66 61 72 59 35 25 32 46 6a 4b 4c 41 44 37 73 48 73 5a 62 75 30 31 37 34 74 72 75 5a 67 71 54 77 25 32 46 38 73 35 6d 4b 74 55 50 4f 25 32 42 6e 44 78 6a 77 77 67 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBaR7C6%2BsBA4yEmepdeo2%2BDZuW7PfIn66UgbiUQJ6jI7Dh98A7xNYwZjCdxM%2FGD7xsHwIumVIqFkiFZ35qfarY5%2FjKLAD7sHsZbu0174truZgqTw%2F8s5mKtUPO%2BnDxjwwgA%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:05 UTC	842	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 32 20 31 36 63 30 20 38 2e 38 33 37 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 53 30 20 32 34 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 30 20 31 36 20 30 73 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 31 35 36 32 34 30 39 33 36 35 5f 5f 61 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 32 33 35 20 31 32 2e 32 33 35 63 30 20 31 2e 35 36 2d 2e 39 30 33 20 32 2e 38 32 34 2d 32 2e 30 31 37 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M32 16c0 8.837-7.163 16-16 16S0 24.837 0 16 7.163 0 16 0s16 7.163 16 16Z" fill="url(#_1562409365__a)"/><path d="M12.235 12.235c0 1.56-.903 2.824-2.017

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49813	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/aba10b640f15bb01b8e5f0b804eefc7f.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 1404 Connection: close CF-Ray: 86b2143cfa035884-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777336 Cache-Control: public, max-age=31556926 ETag: "aba10b640f15bb01b8e5f0b804eefc7f" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 06:47:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: D0yrNmSWCpGhDT1W7cwuyR6NOLOIN5w88WwGtnF+JdM67sy/KO0z3lJVOfbojWTgAopXN3OzjjI= x-amz-replication-status: COMPLETED x-amz-request-id: TNXEADBNVAP9974B x-amz-server-side-encryption: AES256 x-amz-version-id: l1GFoHGsoh6OUfTCQ1hafnz7cucsXwRK X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 34 4c 74 76 67 44 72 31 78 48 59 4e 51 51 50 34 25 32 42 74 72 39 68 63 76 71 25 32 42 6a 7a 66 54 4b 32 74 65 48 32 76 61 51 44 33 4f 62 4b 68 69 6c 33 71 47 4f 61 76 61 6e 35 46 44 31 32 46 7a 73 56 25 32 46 35 52 32 43 69 79 5a 4a 49 78 46 41 74 42 71 6b 34 39 7a 53 50 43 5a 5a 4f 59 55 6a 39 39 6c 65 55 63 55 69 57 59 62 42 37 6b 70 74 34 6a 5a 36 70 44 6c 4a 77 68 53 6c 76 68 45 35 49 6e 25 32 42 6c 61 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4LtvgDr1xHYNQQP4%2Btr9hcvq%2BjzfTK2teH2vaQD3ObKhil3qGOavan5FD12FzsV%2F5R2CiyZJIxFAtBqk49zSPCZZOYUj99leUcUiWYbB7kpt4jZ6pDlJwhSlvhE5In%2Blao%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:05 UTC	1198	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 44 42 35 45 22 20 64 3d 22 4d 33 34 2e 39 35 36 20 31 37 2e 39 31 36 63 30 2d 2e 35 30 33 2d 2e 31 32 2d 2e 39 37 35 2d 2e 33 32 31 2d 31 2e 34 30 34 2d 31 2e 33 34 31 2d 34 2e 33 32 36 2d 37 2e 36 31 39 2d 34 2e 30 31 2d 31 36 2e 35 34 39 2d 34 2e 32 32 31 2d 31 2e 34 39 33 2d 2e 30 33 35 2d 2e 36 33 39 2d 31 2e 37 39 38 2d 2e 31 31 35 2d 35 2e 36 36 38 2e 33 34 31 2d 32 2e 35 31 37 2d 31 2e 32 38 32 2d 36 2e 33 38 32 2d 34 2e 30 31 2d 36 2e 33 38 32 2d 34 2e 34 39 38 20 30 2d 2e 31 37 31 20 33 2e 35 34 38 2d 34 2e 31 34 38 20 31 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFDB5E" d="M34.956 17.916c0-.503-.12-.975-.321-1.404-1.341-4.326-7.619-4.01-16.549-4.221-1.493-.035-.639-1.798-.115-5.668.341-2.517-1.282-6.382-4.01-6.382-4.498 0-.171 3.548-4.148 12
2024-03-27 20:20:05 UTC	206	IN	Data Raw: 30 20 31 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 32 20 31 2e 35 37 32 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 37 68 2d 37 2e 30 36 33 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 68 38 2e 30 39 31 61 33 2e 33 35 20 33 2e 33 35 20 30 20 30 20 30 20 32 2e 38 36 37 2d 31 2e 36 33 32 2e 38 37 35 2e 38 37 35 20 30 20 30 20 30 2d 31 2e 35 30 34 2d 2e 38 39 34 20 31 2e 35 37 33 20 31 2e 35 37 33 20 30 20 30 20 31 2d 31 2e 33 36 33 2e 37 37 36 48 32 33 2e 30 32 61 31 2e 35 38 35 20 31 2e 35 38 35 20 30 20 30 20 31 20 30 2d 33 2e 31 36 37 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 0 1 0-1.504-.894 1.572 1.572 0 0 1-1.363.777h-7.063a1.585 1.585 0 0 1 0-3.167h8.091a3.35 3.35 0 0 0 2.867-1.632.875.875 0 0 0-1.504-.894 1.573 1.573 0 0 1-1.363.776H23.02a1.585 1.585 0 0 1 0-3.167z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49814	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1448	OUT	GET /_ajax/reaction/reactions/summaries?parentArtifactType=DOCUMENT&source=B&reactedObjectType=B&limit=100&documentId=DAGAtXAJufM&documentExtension=4xmaf95qR5m4wJYw4_fQxg HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804
2024-03-27 20:20:05 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143cdfd587a3-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2143cdfd587a3 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K1p8N0NrWggb0HLTEe5PMNAk3QQz4ylgmscNnoeQVRMlboin2tJ4ONH9Vby%2B0FRdNUQCYzGLTZdtwJZ2mhQiowzD6CRVnjXgwJpOjfy35aKHiX9BpKzmfJKcqX8%2Bjwo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	63	IN	Data Raw: 33 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 5b 5d 2c 22 42 22 3a 5b 5d 2c 22 44 22 3a 5b 5d 7d 7d 0d 0a Data Ascii: 39'"])}while(1);</x>//{"A":{"A?":"A","A":[],"B":[],"D":[]}}
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49808	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	803	OUT	GET /web/images/8777e8ed572c4159d71b08cca2972b15.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 1525 Connection: close CF-Ray: 86b2143d1e3e39a4-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792653 Cache-Control: public, max-age=31556926 ETag: "8777e8ed572c4159d71b08cca2972b15" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: O30RyRSpkbo6mVrImZ/Bu/VFUBA6jpVtKr1JKCMlRhhbIjlsHSm31jtsarWSex8QqhqDt7htFg4= x-amz-replication-status: COMPLETED x-amz-request-id: 5463TKVBKDPDRXWD x-amz-server-side-encryption: AES256 x-amz-version-id: DiS.ibZVDKrCSuT3IX.Lfb6cs07gD6RZ X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4b 37 6f 41 75 62 6d 48 42 4d 50 31 79 68 36 32 30 79 69 75 4f 59 52 47 75 6d 59 25 32 46 54 31 57 5a 58 36 6b 52 68 55 70 49 45 78 70 4a 55 52 6f 57 43 52 50 4a 7a 6b 37 4c 70 65 6e 31 4c 63 45 4f 73 4b 69 57 45 65 38 62 4c 6d 65 6d 78 25 32 42 44 66 7a 49 47 44 61 7a 62 38 38 74 4a 31 57 76 73 71 33 6b 33 53 44 41 4a 4f 58 61 30 7a 33 41 52 50 70 4d 4c 77 76 7a 78 68 55 65 77 4c 39 57 71 58 48 49 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K7oAubmHBMP1yh620yiuOYRGumY%2FT1WZX6kRhUpIExpJURoWCRPJzk7Lpen1LcEOsKiWEe8bLmemx%2BDfzIGDazb88tJ1Wvsq3k3SDAJOXa0z3ARPpMLwvzxhUewL9WqXHI0%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:05 UTC	1202	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 46 46 43 42 34 43 22 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 30 31 38 22 20 72 3d 22 31 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 35 34 37 31 42 22 20 64 3d 22 4d 31 34 2e 35 32 34 20 32 31 2e 30 33 36 61 2e 39 31 34 2e 39 31 34 20 30 20 30 20 31 2d 2e 33 31 32 2d 2e 34 36 34 2e 37 39 39 2e 37 39 39 20 30 20 30 20 31 20 2e 35 39 2d 31 2e 30 32 31 63 34 2e 35 32 38 2d 31 2e 30 32 31 20 37 2e 35 37 37 20 31 2e 33 36 33 20 37 2e 37 30 36 20 31 2e 34 36 35 2e 33 38 34 2e 33 30 36 2e 34 35 39 2e 38 34 35 2e 31 37 33 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036a.914.914 0 0 1-.312-.464.799.799 0 0 1 .59-1.021c4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173
2024-03-27 20:20:05 UTC	323	IN	Data Raw: 2e 30 33 34 2e 34 33 33 2e 32 33 31 2e 36 30 38 2e 37 34 37 2e 33 39 31 20 31 2e 31 35 34 2d 2e 32 31 36 2e 34 30 35 2d 2e 37 34 2e 35 34 36 2d 31 2e 31 37 33 2e 33 31 38 2d 2e 31 32 33 2d 2e 30 36 33 2d 32 2e 38 33 32 2d 31 2e 34 33 32 2d 36 2e 32 37 38 2e 30 34 37 61 2e 39 31 35 2e 39 31 35 20 30 20 30 20 31 2d 2e 37 38 35 2d 2e 30 34 32 7a 6d 31 32 2e 31 33 35 20 33 2e 37 35 61 2e 39 32 34 2e 39 32 34 20 30 20 30 20 31 2d 2e 33 36 32 2d 2e 34 32 34 2e 38 2e 38 20 30 20 30 20 31 20 2e 34 36 38 2d 31 2e 30 38 34 63 34 2e 33 38 31 2d 31 2e 35 33 36 20 37 2e 36 38 35 2e 34 38 20 37 2e 38 32 33 2e 35 36 37 2e 34 31 35 2e 32 36 2e 35 35 35 2e 37 38 37 2e 33 31 32 20 31 2e 31 37 38 2d 2e 32 34 32 2e 33 39 2d 2e 37 37 36 2e 34 39 35 2d 31 2e 31 39 31 2e 32 33 Data Ascii: .034.433.231.608.747.391 1.154-.216.405-.74.546-1.173.318-.123-.063-2.832-1.432-6.278.047a.915.915 0 0 1-.785-.042zm12.135 3.75a.924.924 0 0 1-.362-.424.8.8 0 0 1 .468-1.084c4.381-1.536 7.685.48 7.823.567.415.26.555.787.312 1.178-.242.39-.776.495-1.191.23

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49815	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	2240	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	911	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143c5b522898-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2143c5b522898 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0YiUgFHqSNpypp5iQsxZrq2dCZ8x8STHz6F1cHv%2BJrhxW8BjaJDthLDW1KJcUU6ysWjKm4XdLoj56fAqEPCT8og0FKUMr7iSnndhZoAmAJf0CrqD3UCeNb8RWZKLHA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 45 45 7a 41 48 72 67 39 74 4e 47 74 4a 30 37 6e 47 77 72 73 4e 58 64 4d 70 4d 30 54 49 73 67 33 34 42 41 42 77 44 78 42 6b 6d 52 72 65 57 73 64 32 5a 42 69 64 37 4d 44 77 56 43 31 33 4d 35 62 30 78 39 48 75 70 67 63 32 42 57 76 79 41 78 66 6b 67 43 56 38 71 46 35 47 33 4d 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 30 35 33 30 34 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M","B":1711578005304}
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49816	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	470	OUT	POST /report/v4?s=nKznXf5csYwTyZMhl9%2FAGVIkfsYTkkJosplDbTzAJExx7a4rb1Ils9X2rFHe40YVvCmqYHeY5nRjM29BSvZJLk4ISlJORxhsKXpSaxlNUNskTfgeycZQdnY2MQyP35I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 437 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:05 UTC	437	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 31 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 32 32 34 2e 31 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 63 Data Ascii: [{"age":0,"body":{"elapsed_time":615,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.224.149","status_code":400,"type":"http.error"},"type":"network-error","url":"https://www.canva.com/c
2024-03-27 20:20:05 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 27 Mar 2024 20:20:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49822	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1397	OUT	GET /web/40f0ce866d9a0621.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/css Content-Length: 153 Connection: close CF-Ray: 86b2143f48d72d20-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782063 Cache-Control: public, max-age=31556926 ETag: "a6f8a04613dee769174ce0afe39d1530" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Wed, 28 Feb 2024 04:16:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Feb 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: sLQNgBtDOjIT6QI1qEUsIVuLJMqnY4L1SJgvc+o7etS0XQEnPPd++YJcJAepjSYbyvExJdgsyX4= x-amz-replication-status: COMPLETED x-amz-request-id: 40M4N70EHXJ67E90 x-amz-server-side-encryption: AES256 x-amz-version-id: rXI77GJySeCdq0xoBBOHk9p8ZOtMmH7D X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6d 41 51 32 39 76 6e 45 49 4e 44 44 58 36 38 69 69 45 76 25 32 42 69 41 6a 67 43 30 56 67 52 6e 44 44 6b 47 48 7a 48 54 30 33 4d 6b 65 77 35 39 66 41 78 77 41 53 6d 52 78 70 58 6f 25 32 42 42 66 57 4f 46 5a 6d 30 65 63 67 74 74 58 6a 6d 49 68 6f 47 47 4f 48 30 42 45 4e 51 6a 35 71 79 4d 76 4c 6c 31 55 6d 25 32 42 48 59 4d 4d 33 74 61 35 72 63 42 4e 36 65 58 34 39 79 55 51 73 54 34 65 72 6c 56 44 5a 4a 4d 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mAQ29vnEINDDX68iiEv%2BiAjgC0VgRnDDkGHzHT03Mkew59fAxwASmRxpXo%2BBfWOFZm0ecgttXjmIhoGGOH0BENQj5qyMvLl1Um%2BHYMM3ta5rcBN6eX49yUQsT4erlVDZJMQ%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:05 UTC	153	IN	Data Raw: 2e 4e 69 50 50 72 51 7b 67 72 69 64 2d 67 61 70 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 41 6d 6a 38 44 77 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 34 30 66 30 63 65 38 36 36 64 39 61 30 36 32 31 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .NiPPrQ{grid-gap:16px;display:grid;overflow:hidden}.Amj8Dw{grid-row-gap:16px;display:grid}/# sourceMappingURL=sourcemaps/40f0ce866d9a0621.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49821	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1423	OUT	GET /chunk-batch/6f50888fcddc9770.strings.js+087c6892f61a9e28.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1148	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript Content-Length: 10074 Connection: close CF-Ray: 86b2143f8fd23913-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63677 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: jEy7OvhFFh0W6oBKX9fF841rM9rAP656KZSU1Q2K9iS0zkVvX9l7mKVLrLBEGEsi2Swdp9gR37g= x-amz-replication-status: COMPLETED x-amz-request-id: QC3NHK0WV54ZHSMY x-amz-server-side-encryption: AES256 x-amz-version-id: kPA0TcBU1N0z_zjzJKtOK77LUkSDkq7k X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	364	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 77 66 51 36 6d 57 58 63 4c 71 42 72 59 6d 37 77 70 4a 58 45 6f 58 59 61 4f 38 61 55 74 32 49 6d 58 70 4e 41 46 67 6a 78 6c 51 25 32 46 75 70 59 31 36 74 59 44 38 42 5a 58 68 57 58 63 4d 4f 45 49 65 68 63 71 35 6e 45 63 75 56 55 52 6d 79 71 50 4d 35 37 79 55 71 70 6d 70 72 71 49 65 61 49 48 45 42 4f 50 36 41 56 73 5a 33 53 31 77 25 32 46 54 70 63 67 7a 33 66 73 64 55 35 7a 25 32 46 4c 35 7a 5a 36 25 32 46 54 57 6f 67 6e 79 4d 4e 6c 4c 56 44 65 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=swfQ6mWXcLqBrYm7wpJXEoXYaO8aUt2ImXpNAFgjxlQ%2FupY16tYD8BZXhWXcMOEIehcq5nEcuVURmyqPM57yUqpmprqIeaIHEBOP6AVsZ3S1w%2FTpcgz3fsdU5z%2FL5zZ6%2FTWognyMNlLVDe0%3D"}],"group":"cf-nel","m
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 36 66 35 30 38 38 38 66 63 64 64 63 39 37 37 30 2e 73 74 72 69 6e 67 73 2e 6a 73 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 58 59 7a 33 43 41 5c 22 3a 5c 22 49 66 20 79 6f 75 20 64 6f 6e e2 80 99 74 20 6b 6e 6f 77 20 79 6f 75 72 20 5a 50 45 20 65 6d 61 69 6c 2c 20 70 6c 65 61 73 65 20 61 73 6b 20 79 6f 75 72 20 73 63 68 6f 6f 6c 20 61 64 6d 69 6e 2e 5c 22 2c 5c 22 7a 43 45 54 34 77 5c 22 3a 5c 22 57 65 e2 80 99 6c 6c 20 63 68 65 63 6b 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 2e 20 59 6f 75 20 63 61 6e e2 80 99 74 20 73 69 67 6e 20 Data Ascii: ;// __FILE_CONTENT_FOR__:6f50888fcddc9770.strings.js(function() { const messages = JSON.parse("{\"XYz3CA\":\"If you dont know your ZPE email, please ask your school admin.\",\"zCET4w\":\"Well check if you already have an account. You cant sign
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 65 6e 65 72 5c 5c 5c 22 3e 43 61 6e 76 61 20 6c 6f 67 69 6e 20 70 61 67 65 3c 2f 61 3e 20 61 6e 64 20 74 72 79 20 69 6e 73 74 65 61 64 2e 5c 22 2c 5c 22 75 58 36 53 79 51 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 6d 6f 62 69 6c 65 20 6f 72 20 65 6d 61 69 6c 5c 22 2c 5c 22 79 68 33 6c 38 41 5c 22 3a 5c 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 69 74 e2 80 99 73 20 79 6f 75 5c 22 2c 5c 22 6c 36 4f 45 50 77 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 77 69 74 68 20 6d 6f 62 69 6c 65 5c 22 2c 5c 22 36 4b 31 6f 76 77 5c 22 3a 5c 22 54 6f 20 6c 6f 67 20 69 6e 20 77 69 74 68 20 79 6f 75 72 20 41 6b 75 6e 20 62 65 6c 61 6a 61 72 2e 69 64 2c 20 63 6c 69 63 6b 20 63 6f 6e 74 69 6e 75 65 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 47 6f 6f 67 6c 65 e2 80 99 73 20 61 63 Data Ascii: ener\\\">Canva login page</a> and try instead.\",\"uX6SyQ\":\"Continue with mobile or email\",\"yh3l8A\":\"Let us know its you\",\"l6OEPw\":\"Log in with mobile\",\"6K1ovw\":\"To log in with your Akun belajar.id, click continue and follow Googles ac
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 63 29 20 7b 76 61 72 20 4b 3d 5f 5f 63 2e 4b 3b 76 61 72 20 79 3d 5f 5f 63 2e 79 3b 76 61 72 20 56 5a 62 2c 57 5a 62 2c 24 5a 62 2c 63 5f 62 2c 6c 34 2c 6d 34 2c 6e 34 2c 65 5f 62 3b 56 5a 62 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 5f 63 2e 43 6e 28 62 2e 58 63 29 26 26 61 77 61 69 74 20 61 2e 68 63 61 28 7b 73 74 6f 72 65 3a 62 2c 50 65 3a 7b 6e 61 6d 65 3a 22 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 2e 63 6f 6e 74 69 6e 75 65 5f 77 69 74 68 5f 61 63 63 6f 75 6e 74 22 2c 74 79 70 65 3a 62 2e 58 63 2e 4d 71 3d 3d 3d 5f 5f 63 2e 49 70 3f 22 65 6d 61 69 6c 22 3a 22 70 68 6f 6e 65 22 7d 7d 29 7d 3b 57 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 2e 6b 69 6e 64 Data Ascii: {};(function(__c) {var K=__c.K;var y=__c.y;var VZb,WZb,$Zb,c_b,l4,m4,n4,e_b;VZb=async function(a,b){__c.Cn(b.Xc)&&await a.hca({store:b,Pe:{name:"authenticating.continue_with_account",type:b.Xc.Mq===__c.Ip?"email":"phone"}})};WZb=function(a){switch(a.kind
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 75 65 5f 77 69 74 68 5f 61 63 63 6f 75 6e 74 5f 70 61 6e 65 6c 5f 6f 70 65 6e 22 7d 7d 29 3b 0a 63 6f 6e 73 74 20 7b 49 6b 3a 44 2c 58 63 3a 45 2c 4b 6b 3a 49 7d 3d 5f 5f 63 2e 79 5f 28 42 29 3b 65 3d 6e 65 77 20 64 5f 62 28 7b 58 63 3a 45 2c 56 67 3a 65 2c 68 65 61 64 69 6e 67 3a 6e 65 77 20 5f 5f 63 2e 76 6b 2c 43 64 3a 6e 65 77 20 5f 5f 63 2e 41 6b 7d 29 3b 64 3d 6e 65 77 20 6b 34 28 7b 4d 3a 63 2c 53 61 3a 64 2c 6f 61 3a 62 2c 4b 6b 3a 49 2c 46 62 3a 66 2c 4e 42 3a 67 2c 75 62 3a 75 2e 75 62 2c 7a 66 3a 68 2c 48 3a 6d 2c 47 62 3a 72 2c 74 67 3a 6b 2c 5a 78 3a 71 2c 71 61 3a 76 2c 56 48 3a 78 2c 62 69 3a 41 7d 29 3b 63 3d 24 5a 62 28 7b 4d 3a 63 2c 49 6b 3a 44 2c 41 63 3a 75 2e 41 63 2c 76 61 3a 64 2c 73 74 6f 72 65 3a 65 2c 4e 49 3a 6e 75 6c 6c 21 3d Data Ascii: ue_with_account_panel_open"}});const {Ik:D,Xc:E,Kk:I}=__c.y_(B);e=new d_b({Xc:E,Vg:e,heading:new __c.vk,Cd:new __c.Ak});d=new k4({M:c,Sa:d,oa:b,Kk:I,Fb:f,NB:g,ub:u.ub,zf:h,H:m,Gb:r,tg:k,Zx:q,qa:v,VH:x,bi:A});c=$Zb({M:c,Ik:D,Ac:u.Ac,va:d,store:e,NI:null!=
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 63 2e 76 61 6c 75 65 3b 63 2e 56 67 2e 51 68 2e 4a 62 3d 63 2e 58 63 2e 4a 62 3b 63 6f 6e 73 74 20 6b 3d 61 77 61 69 74 20 5f 5f 63 2e 6d 72 28 7b 4d 6b 3a 7b 61 63 74 69 6f 6e 3a 31 32 2c 59 6a 3a 6e 65 77 20 5f 5f 63 2e 4f 70 28 7b 69 64 65 6e 74 69 74 79 3a 5f 5f 63 2e 76 72 28 68 29 7d 29 7d 2c 6c 64 3a 74 68 69 73 2e 6c 64 2c 75 73 61 67 65 3a 22 63 6f 6e 74 69 6e 75 65 46 6c 6f 77 50 72 65 73 65 6e 74 65 72 2e 63 6f 6e 74 69 6e 75 65 57 69 74 68 41 63 63 6f 75 6e 74 22 2c 4d 3a 74 68 69 73 2e 47 2e 4d 2c 75 62 3a 74 68 69 73 2e 47 2e 75 62 2c 57 3a 64 7d 29 3b 69 66 28 6b 2e 6f 6b 29 7b 76 61 72 20 65 3d 61 77 61 69 74 20 74 68 69 73 2e 47 2e 4e 42 2e 44 49 28 7b 77 62 3a 68 2c 71 64 3a 6b 2e 76 61 6c 75 65 2c 57 3a 64 7d 29 2c 66 3d 22 70 68 6f 6e Data Ascii: c.value;c.Vg.Qh.Jb=c.Xc.Jb;const k=await __c.mr({Mk:{action:12,Yj:new __c.Op({identity:__c.vr(h)})},ld:this.ld,usage:"continueFlowPresenter.continueWithAccount",M:this.G.M,ub:this.G.ub,W:d});if(k.ok){var e=await this.G.NB.DI({wb:h,qd:k.value,W:d}),f="phon
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 20 6e 3d 66 2e 68 61 73 28 22 45 4d 41 49 4c 5f 50 41 53 53 57 4f 52 44 22 29 7c 7c 66 2e 68 61 73 28 22 50 48 4f 4e 45 5f 4e 55 4d 42 45 52 5f 50 41 53 53 57 4f 52 44 22 29 3b 69 66 28 6d 26 26 21 6e 26 26 21 64 29 7b 61 77 61 69 74 20 74 68 69 73 2e 47 2e 71 61 2e 62 6a 28 22 4c 4f 47 49 4e 5f 43 4f 44 45 5f 56 45 52 49 46 49 43 41 54 49 4f 4e 5f 50 41 4e 45 4c 22 2c 7b 48 62 3a 62 2c 78 66 3a 68 2c 54 6b 3a 61 2e 52 31 7d 2c 7b 73 74 6f 72 65 3a 61 2c 57 3a 65 7d 29 3b 74 68 69 73 2e 4e 28 61 2c 5f 5f 63 2e 52 2e 4e 61 28 29 29 3b 62 72 65 61 6b 7d 69 66 28 6d 7c 7c 64 29 7b 61 77 61 69 74 20 74 68 69 73 2e 47 2e 71 61 2e 62 6a 28 22 4c 4f 47 49 4e 5f 57 49 54 48 5f 50 41 53 53 57 4f 52 44 5f 4f 52 5f 4f 54 50 5f 50 41 4e 45 4c 22 2c 7b Data Ascii: const n=f.has("EMAIL_PASSWORD")\|\|f.has("PHONE_NUMBER_PASSWORD");if(m&&!n&&!d){await this.G.qa.bj("LOGIN_CODE_VERIFICATION_PANEL",{Hb:b,xf:h,Tk:a.R1},{store:a,W:e});this.N(a,__c.R.Na());break}if(m\|\|d){await this.G.qa.bj("LOGIN_WITH_PASSWORD_OR_OTP_PANEL",{
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 28 30 2c 5f 5f 63 2e 74 6f 29 28 29 3b 72 65 74 75 72 6e 20 6f 34 28 5f 5f 63 2e 61 52 2c 7b 6f 6e 53 75 62 6d 69 74 3a 61 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 4e 69 50 50 72 51 22 2c 6e 6f 56 61 6c 69 64 61 74 65 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 5b 6a 34 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 72 78 70 55 63 67 22 2c 63 68 69 6c 64 72 65 6e 3a 6a 34 28 62 2c 7b 64 69 73 61 62 6c 65 64 3a 66 2c 72 65 71 75 69 72 65 64 3a 21 30 2c 61 75 74 6f 46 6f 63 75 73 3a 22 61 6c 77 61 79 73 22 7d 29 7d 29 2c 6f 34 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6a 34 28 63 2c 7b 7d 29 2c 6a 34 28 5f 5f 63 2e 4c 71 2c 7b 76 61 72 69 61 6e 74 3a 22 70 72 69 6d 61 72 79 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 61 32 6c 31 35 41 22 2c 24 61 3a Data Ascii: (0,__c.to)();return o4(__c.aR,{onSubmit:a,className:"NiPPrQ",noValidate:!0,children:[j4("div",{className:"rxpUcg",children:j4(b,{disabled:f,required:!0,autoFocus:"always"})}),o4("div",{children:[j4(c,{}),j4(__c.Lq,{variant:"primary",className:"a2l15A",$a:
2024-03-27 20:20:05 UTC	491	IN	Data Raw: 4b 31 6f 76 77 22 29 3b 63 61 73 65 20 22 57 4f 52 4b 5f 45 4d 41 49 4c 5f 53 55 42 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4b 28 22 79 54 32 43 72 77 22 29 3b 63 61 73 65 20 22 5a 50 45 5f 53 55 42 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4b 28 22 75 31 4e 4a 79 51 22 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 79 28 61 29 3b 7d 7d 2c 6a 5f 62 3d 61 3d 3e 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 5f 5f 63 2e 77 52 3a 72 65 74 75 72 6e 20 4b 28 22 4a 53 6b 32 4d 51 22 29 3b 63 61 73 65 20 5f 5f 63 2e 78 52 3a 72 65 74 75 72 6e 20 4b 28 22 4f 43 46 39 50 77 22 29 3b 63 61 73 65 20 5f 5f 63 2e 7a 52 3a 72 65 74 75 72 6e 20 4b 28 22 75 58 36 53 79 51 22 29 3b 63 61 73 65 20 5f 5f 63 2e 79 52 3a 72 65 74 75 72 6e 20 4b 28 Data Ascii: K1ovw");case "WORK_EMAIL_SUBHEADING":return K("yT2Crw");case "ZPE_SUBHEADING":return K("u1NJyQ");default:throw new y(a);}},j_b=a=>{switch(a){case __c.wR:return K("JSk2MQ");case __c.xR:return K("OCF9Pw");case __c.zR:return K("uX6SyQ");case __c.yR:return K(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49820	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1469	OUT	GET /1/image-resize/1/200_87_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAEVHaa9t_0kzI0s6V5Iw6cN25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1140	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143f8ec68269-IAD CF-Cache-Status: HIT Age: 123749 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Tue, 26 Mar 2024 09:57:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=5460 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 86a64708db4782a8 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xvpqHgx4NlYYbt75QXdONVLA4qhJ2PRyVggW1%2BWW5%2BbaQSjF3YIltFZz1ITRQmERouadHkwW9VZYocGCwwQIGPfll41VC4tRapsROJAIvpItgJ3FeJ%2F4X0T6%2Fg0F7F6zfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 61 38 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c7 00 00 00 57 08 02 00 00 00 3f 01 c6 d2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0a 46 49 44 41 54 78 da ed dd 7b b0 55 e5 79 c7 f1 ef f3 ae b5 f7 e1 1c 38 0c 91 8b 51 e3 85 4a 45 6a 54 94 0c d5 a0 36 25 de 48 da a8 51 13 a3 e2 05 5a 33 fd 2b 33 cd 8c d1 a4 71 c6 49 6d a7 a9 ed 34 cd 34 36 5a 0a 06 08 46 82 42 45 a2 18 11 8d 57 54 82 5c 8c 0a 08 a8 28 0e 12 10 38 b7 7d f6 fb fc ca 0c 8c 9c 3d 87 cb 24 c3 7f fb f9 cc 9e 3d 67 e6 9c fd cf 9e ef 3c fb 5d 6b bd eb 6c ab 1d 55 e0 22 84 23 a7 c4 85 cb e2 9d 08 47 4e 09 18 10 59 85 23 27 c5 5b 10 a2 aa 10 55 85 a8 2a 84 a8 2a 44 55 21 aa 0a 21 aa 0a 51 55 88 aa 42 88 aa 42 54 15 a2 aa 10 a2 aa 10 55 85 a8 2a 84 03 2a 69 5a 2e c4 61 18 Data Ascii: a8cPNGIHDRW?sRGBFIDATx{Uy8QJEjT6%HQZ3+3qIm446ZFBEWT\(8}=$=g<]klU"#GNY#'[UDU!!QUBBTUiZ.a
2024-03-27 20:20:05 UTC	1338	IN	Data Raw: b7 fb bc b9 e5 25 97 92 21 c5 ac 6a 26 26 69 c6 34 cb 60 05 07 24 ed 7f e4 6c 03 4a 5b b9 86 27 16 1b 00 e6 b9 3c fb 73 ba f0 12 76 ca fa 8c 2b 5c aa c0 ec e9 fa fd 36 2a 05 8a aa 9a 84 3b ad 68 e5 2a 16 2e a0 0d 3c c3 e1 99 61 75 fc 67 33 04 98 99 30 e0 9b 7f a7 c6 53 0c b8 a7 81 66 cb 5e f0 3d fd b5 0f c6 a3 aa 26 aa aa f4 39 33 d9 b6 85 aa 21 71 28 8d 97 65 9e 5c ec 4f 3d e9 1b d6 fb 9b bf db f3 b0 13 4e 62 d4 49 74 67 cc d8 cf 10 3e 6b 86 e7 0c 80 68 32 56 1b 92 cc 85 d1 6c 94 b1 12 c4 1f 44 2e 51 58 99 10 00 96 30 59 ae 81 d1 97 a1 3a 24 cc 00 a2 aa a6 f0 c7 6f 2e 30 10 7d 49 c2 fa c7 83 cc 90 8c a8 2a 84 58 57 1d 01 29 51 96 94 25 fd d5 45 8f 70 0e ac 26 6a b1 ed 33 aa ea cf 50 47 d6 b6 5e 6d ef 45 fd d6 4f c3 86 f1 a7 27 ab b5 15 17 7d 08 64 a6 13 Data Ascii: %!j&&i4`$lJ['<sv+\6;h.<aug30Sf^=&93!q(e\O=NbItg>kh2VlD.QX0Y:$o.0}I*XW)Q%Ep&j3PG^mEO'}d
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49819	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1467	OUT	GET /1/image-resize/1/750_328_100_PNG_F/czM6Ly9tZWRpYS1wcml2YXRlLmNhbnZhLmNvbS9paXFKay9NQUdBbVJpaXFKay8xL3AucG5n?osig=AAAAAAAAAAAAAAAAAAAAAAT5krkQ8QTCmoz0tGrxy0n5zeqofv1vvtwxfksfVIVs&exp=1711586125&x-canva-quality=screen&csig=AAAAAAAAAAAAAAAAAAAAAJMKrIMmsAYmnQMAqshxs6Ap2WV6GkR6g25xpRmD1Y3o HTTP/1.1 Host: media.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1139	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143f88ab39b8-IAD CF-Cache-Status: HIT Age: 123749 Cache-Control: public, max-age=31556926 Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Tue, 26 Mar 2024 09:57:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=26221 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_media X-Content-Type-Options: nosniff X-Request-ID: 86a64708db4582a8 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RUvQx644c4sgryVSKXoqPlVxCMwP%2BUpPv%2Fh34tTPSU0cJGZmrLYNWQl4a9jkrzO64V689Cq%2BjxojUorGgXEtukGATX94DepnoViT0vgGqlT7EfTUl3uRMJRP6Whaey2w6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 34 65 61 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 48 08 02 00 00 00 80 d2 ec f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 4e 60 49 44 41 54 78 da ec d6 41 4e c3 40 10 44 d1 6e 3b 88 a5 59 84 05 f7 3f 24 49 40 6e 9c 80 90 72 84 92 de d3 9f 51 1f a1 ea f6 f1 7a 39 9f be de 5f fe fb 3e 7e 49 92 a4 84 ea 7a 3e 7d 6e 75 db fa ba d5 e5 ed de 75 93 24 49 ca 68 59 ab d7 ee 75 ef 75 6a d9 25 49 92 a2 9a ae 99 d9 8f af fa 57 49 92 24 85 b4 54 d5 f4 d1 54 d7 fe a8 24 49 92 42 3a d5 b3 65 0a 00 20 c5 72 7f 53 3d 35 8f e3 d0 23 49 92 94 d1 32 fd b7 63 a6 8f f7 b8 5b 92 24 29 a3 a5 00 00 62 99 32 00 40 30 53 06 00 08 66 ca 00 00 c1 4c 19 00 20 98 29 03 00 04 33 65 00 80 60 a6 0c 00 10 cc 94 01 00 82 99 32 00 40 30 53 06 00 08 66 Data Ascii: 4ea6PNGIHDRHsRGBN`IDATxAN@Dn;Y?$I@nrQz9_>~Iz>}nuu$IhYuuj%IWI$TT$IB:e rS=5#I2c[$)b2@0SfL )3e`2@0Sf
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 60 74 0f 65 93 49 97 5d 10 f7 fd a0 fb e0 5d c6 04 44 24 ac f2 a2 94 52 29 53 4a 79 a2 12 fb 84 f4 21 72 c6 85 17 c4 8f 1f e6 da 80 c4 f6 51 c2 83 34 a4 88 c5 14 76 9a d9 97 be ac eb ae ec 90 8c c9 2e 72 90 d5 95 bb a5 94 4a 99 52 ca 13 96 06 f6 0e 03 6f bf 9d 97 5f a8 fd f0 0e 40 d8 46 54 9a c6 4e a1 c9 a6 6e 0e 93 9f f7 c9 b6 71 a2 5b 83 d4 09 87 b1 52 a6 94 52 29 53 4a 79 a2 3a 90 64 4a 76 f8 ca e5 77 ee d5 fa c2 7a 6e 6b ca 90 4a 30 04 52 0c 43 f4 d4 d3 7c f3 aa 6b fc f6 af 00 60 d0 21 90 aa 94 29 a5 54 ca 94 52 9e a8 41 88 d6 fa 23 8f 9c 38 f7 9c b6 a0 a7 27 25 10 db 87 00 85 a0 0c 93 25 87 4c 0b 0d 27 36 8f 7d e2 13 86 94 8f 50 24 c8 da 8a 5b 4a a9 94 29 a5 3c 51 ec 3c 01 b4 2f 7e 2e 6e fe f2 b8 06 8b 13 93 e3 c9 c0 9f fd 10 20 a9 ad 71 3c 78 58 3f Data Ascii: `teI]]D$R)SJy!rQ4v.rJRo_@FTNnq[RR)SJy:dJvwznkJ0RC\|k`!)TRA#8'%%L'6}P$[J)<Q</~.n q<xX?
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 9d 44 5d f8 5b ca de 56 29 53 ca 9e 25 59 c8 20 42 c0 f1 9b 6e c2 6d b7 2d 0f f8 fe 8d ec 4e 4f 25 c8 64 4b 08 3b 06 95 6e fb 96 2d 4f 47 5c 7a b8 df 7b 77 43 29 65 af ab 94 29 65 8f 4a d0 d2 93 81 a4 e6 63 8b ff f4 ff 0e 9e 94 64 34 04 c8 21 25 2a 41 e2 94 24 91 04 05 02 49 9c 8a 80 79 37 72 72 35 3e fc 00 ff f6 e3 1d 98 7a 9f 05 04 3a 02 a9 ac 17 67 97 b2 c7 54 ca 94 b2 47 11 0a c1 ba 02 cc af dc 76 fc 8b 9f f3 06 cb 14 41 48 00 85 9d 86 14 2c ba cb 68 a4 8e 5e 74 41 3b fa 28 dd bd 23 09 03 45 82 f5 2e 83 52 f6 96 4a 99 52 f6 28 02 00 91 46 c3 fc d1 4f 3e 6d 5e 26 77 7a 03 58 2a 29 11 a9 6e 03 f6 dd f9 9d b8 f8 12 a3 59 0f 11 26 4b 21 6b 4e a6 94 3d a6 52 a6 94 bd 4a 34 22 46 f3 7b bf ab ab 8e e4 1c bd ed f4 94 11 3c 4d 26 30 81 d1 86 47 8e cf 17 1c f4 Data Ascii: D][V)S%Y Bnm-NO%dK;n-OG\z{wC)e)eJcd4!%A$Iy7rr5>z:gTGvAH,h^tA;(#E.RJR(FO>m^&wzX)nY&K!kN=RJ4"F{<M&0G
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 9a 01 f3 95 97 db cd 37 fb 3e a6 88 6d 42 02 a2 0c 16 39 b5 7d fe 6f 3f dc 05 0c 10 09 69 06 40 18 d9 3a a6 e7 3c 8f ef 7d df b2 03 14 f1 8f bc 25 72 ab 89 26 c2 04 11 10 14 d4 1a ec 8a 8b e2 9e ef d2 d8 15 00 4c 30 80 95 32 a5 ec 5e 95 32 a5 ec 01 ec 42 62 30 6d 6c da 45 57 e6 b1 13 31 34 2a b1 4d 12 68 09 50 33 30 fc e1 9f e4 19 6f 1e a8 ce 6c 22 09 27 3a 65 0a ba 9a c8 f7 fd d5 f0 f4 67 2a 25 28 dc 12 6c 21 6c 89 00 83 5a ca 84 e5 98 07 36 0c 07 86 f9 eb 77 ce 57 df 44 c0 01 10 32 24 ea ce bc 52 76 b3 4a 99 52 f6 80 68 88 ee 46 ff ea 2d 76 dd 21 3b 6d cc 14 b6 0f a1 94 87 35 76 8c 1f f8 c8 b4 76 80 bd 07 49 00 34 07 1c 46 36 38 1a a1 df 7f 69 7f eb bf e1 71 a5 8f 1e ec c3 26 60 d8 2a 8a 49 00 30 51 16 4c b5 c6 e1 dc ff 8b 47 1f 86 39 22 90 e8 ea 52 ed Data Ascii: 7>mB9}o?i@:<}%r&L02^2Bb0mlEW14MhP30ol"':eg%(l!lZ6wWD2$RvJRhF-v!;m5vvI4F68iq&`*I0QLG9"R
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: b9 fb f7 be 7b ec 82 83 76 80 4a 50 18 3b 4c 04 65 12 40 6c 15 45 cb 6c 0e 6d 02 1f f8 90 3f ed d9 91 33 35 e0 e4 18 08 d2 00 c2 d0 8c 00 fe f8 4f f3 4d 6f d4 63 41 37 06 04 84 09 d4 d6 97 97 8c 4d a2 d1 3b 23 b0 d6 e7 8d 8f ff 7f c8 9e a4 00 20 09 50 a8 94 29 65 77 a8 94 29 65 57 a1 10 16 14 36 01 5e 71 98 77 dc 3d 0c a0 02 80 b8 6d 1f 01 b6 69 de 68 2f 79 b1 bd f5 cd 24 52 0e 19 b6 80 86 88 76 da e9 f6 8e 77 e5 fa 88 98 cc 72 d1 39 3b b6 2c 81 21 92 d2 dc 20 43 00 be ce c5 65 57 e6 b7 be 3e d1 2d a2 03 12 49 26 1a 4a 29 ab af 52 a6 94 dd 45 64 22 89 b5 cd 63 f9 89 8f af 37 cd b4 a0 b0 9d 18 a3 69 53 e3 19 ef 18 7e f7 65 0a 0d 34 50 d8 1a 32 80 e1 cc b7 f6 3f 78 99 36 b0 b9 a0 e0 63 d0 85 ad 21 d0 9d 14 3d 65 89 46 9f 16 e2 89 c7 f2 63 9f 1c 81 8c 00 28 Data Ascii: {vJP;Le@lElm?35OMocA7M;# P)ew)eW6^qw=mih/y$Rvwr9;,! CeW>-I&J)REd"c7iS~e4P2?x6c!=eFc(
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: b6 78 f9 2b 17 8f f6 84 7b 32 7d 62 2a d8 84 2d 4a 42 d4 22 04 5b 0e b4 cd 13 47 a7 bf 3b 08 12 d9 67 f6 19 ee 6a 32 35 83 57 c9 94 b2 6a 2a 65 4a 59 5d ea cc 90 31 92 c0 74 f5 55 ed 96 1b 63 dd 99 c2 f6 09 3a b4 6f da d4 e2 f9 2f c6 d9 ef 15 6c 0d 4a 5a 92 bf 72 90 74 c8 08 92 90 41 8e 74 3c 9e 84 12 34 80 34 9b 53 cf 7c 56 9c fd 2e 2c 2c 32 d3 1b 05 81 ae 20 4e 81 c4 64 b4 48 6b 6b 04 2e 3c 1f f7 dd 6b 36 0c 8a 26 20 99 50 48 00 51 13 33 a5 ac 94 4a 99 52 56 95 80 80 1a 0c 34 40 6b ff ff f9 89 a9 d3 b0 8d 04 63 38 37 c7 09 f3 19 af 59 fc ab df 57 5f 0a 60 c4 49 0d f5 60 ef 8c 60 27 52 50 37 e1 e7 49 91 4a 03 13 80 99 b3 29 87 f7 bd 7f f3 39 cf f1 59 d3 a8 61 66 77 13 13 5b 45 c0 05 13 05 4c 06 27 71 df 9d 3a 74 49 d0 38 37 cb 94 81 ca ba 33 af 94 55 54 Data Ascii: x+{2}b-JB"[G;gj25WjeJY]1tUc:o/lJZrtAt<44S\|V.,,2 NdHkk.<k6& PHQ3JRV4@kc87YW_`I``'RP7IJ)9Yafw[EL'q:tI873UT
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 20 91 04 41 0a 3b 07 c5 30 06 b3 85 66 02 83 d6 ee bc 23 2e 3f ec 70 cf 9e 80 81 34 d9 2f b8 02 98 10 69 30 9a 34 be fb dd fd 05 2f 9c 43 69 49 50 14 d9 bd 23 69 c4 16 19 e4 52 02 3e 70 ed 7b f7 e4 39 9f 26 89 8e 52 ca 6a a9 94 29 65 65 58 ba 00 cb 9c 5c b8 ed 56 dc 78 3d 08 10 21 25 09 c0 12 26 0a 3b 02 81 ee 20 04 83 88 96 2d 8c 1b 0c 7c fa 7c cf 08 87 89 14 c8 34 19 1e 8f 5c 96 10 c9 e8 ed b9 2f 1c ce 3c 73 08 75 cb c9 cd e5 9d 20 ac 49 c2 d6 0d 33 97 f4 68 36 f7 99 57 1e 1e 8f 1f 95 3b 54 57 cb 94 b2 4a 2a 65 4a 59 15 84 38 03 e8 e6 e0 f1 8f 9f 93 3f 7e a4 af b1 53 61 48 08 20 41 82 d8 31 c4 6c 09 09 9b 4d 16 b6 98 dd 09 fb e2 17 e6 2f df 2c 73 48 22 26 1a 1e 0f a1 84 51 20 25 a3 24 fb f0 5f d9 e9 4f 6b 33 3a 68 c1 24 d2 45 e5 96 4b 2b 4c e1 74 19 bb Data Ascii: A;0f#.?p4/i04/CiIP#iR>p{9&Rj)eeX\Vx=!%&; -\|\|4\/<su I3h6W;TWJ*eJY8?~SaH A1lM/,sH"&Q %$_Ok3:h$EK+Lt
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 69 b6 a4 3d f5 ff ff ba 5e ba b1 f5 4d 2f 2d 09 b9 34 84 2d 44 d9 f7 c1 60 2c 8c 7d 13 c3 58 58 4b f5 21 a9 97 da 90 d6 d2 d6 88 32 c0 bb 46 2b 03 4c a3 97 86 d5 a3 38 b1 46 93 6b be a5 bf db 5a 92 b2 a8 95 14 8d 48 91 33 a2 7f 1b bd a5 96 9e ba aa 61 ed 8f 8b b6 45 eb 70 74 26 51 59 cb 70 35 b9 ea 7a a4 ec 6a e9 7c 5f 02 de 31 a2 0c 30 87 72 75 69 eb 5a a2 58 92 35 67 57 d0 a2 36 7c 5a b5 4a f2 90 d4 77 a5 35 bd 42 53 2d a3 0f 6b b7 6c f7 92 9c e8 7c ac 25 72 fc f3 ba 6e 4e d9 9a 36 eb 8a 1c 03 bc 6f 7e fc b2 fa d7 96 28 dd ad 64 69 c2 7f a1 03 97 62 d2 a5 be 2f 38 4f f3 8c 25 45 b1 5e ed ef cd 51 fb 73 3e bf b2 5a 14 4b 99 af f7 02 2e 0d 51 06 00 5e b2 26 ed bc 80 4b 44 94 01 00 00 13 23 ca 00 00 80 89 11 65 00 00 c0 c4 88 32 00 00 60 62 44 19 00 00 30 Data Ascii: i=^M/-4-D`,}XXK!2F+L8FkZH3aEpt&QYp5zj\|_10ruiZX5gW6\|ZJw5BS-kl\|%rnN6o~(dib/8O%E^Qs>ZK.Q^&KD#e2`bD0
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 40 00 06 37 78 11 aa 4c b2 9a ad 26 00 8c 6e 63 65 58 0e 1a 3d a3 73 56 5b 19 46 2b 1d 06 84 59 7e 97 ea 13 18 86 65 c1 c2 88 24 44 32 4a b6 e6 11 e0 6c a4 4c 69 d3 40 ce 64 b2 c5 4c 63 bf 93 c9 d6 44 a2 a7 af ae e4 05 0f 33 20 31 08 74 64 d2 02 01 c8 4d b9 64 9f b9 3d f0 9c dc e6 44 37 a2 04 1a d9 0d b3 50 12 df 49 b0 20 29 30 d3 21 2f ad bb ab 79 96 1a 40 d2 e6 02 58 80 c0 5d 08 98 75 78 7a 2b 11 4e 00 9d ac c8 d1 3c c9 2a 38 cc a1 74 74 aa 31 6b 43 8d 26 cb 56 a0 2c 96 80 05 84 bb 11 d8 8d 55 10 b8 a8 51 bd c1 9c 5e 86 04 80 30 2d 95 c6 24 16 e1 0c 93 08 4f 58 56 22 80 c4 b7 2b 68 41 50 66 01 92 ee 5c 92 b3 30 5a f7 50 c0 96 03 18 32 08 9c 6a 66 32 d9 4a a6 94 99 4c b6 1e 49 24 d5 81 a3 76 f1 dc f3 04 19 04 10 0a ed bf cd 4a e1 b6 1d 89 46 2b 05 d0 39 Data Ascii: @7xL&nceX=sV[F+Y~e$D2JlLi@dLcD3 1tdMd=D7PI )0!/y@X]uxz+N<*8tt1kC&V,UQ^0-$OXV"+hAPf\0ZP2jf2JLI$vJF+9
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 69 ed d8 bd 6a 68 50 49 19 d2 92 c6 24 cc 02 61 9a ed 77 bd e4 25 f5 15 ff 97 b6 cf 2d c2 54 c0 02 92 4a 87 92 90 29 29 20 c5 4c 24 20 7c 8b 20 aa 76 b3 d2 fb 72 d4 93 ff b9 ff 9b 97 a5 33 32 81 dc 28 1e f0 59 17 b2 57 f5 4d 4a b4 99 2c d1 22 b3 3e f3 39 f9 bc 9f f1 fd e1 16 ad a4 44 0a ae 24 21 80 28 16 83 68 51 02 80 8b 82 dc 3b 11 dd 19 74 c2 e0 cc de 7b 04 9f fb ec fe fc 9f 5b 6f e9 e6 0b 2b 45 6a 56 98 33 42 eb 56 e2 15 af d0 e3 9f 88 45 8a 4a 24 24 17 90 46 69 8e b4 86 b1 94 22 8f 71 73 ed 71 8f cd 17 bd 78 fb 6d 82 8d 96 3e ba 15 25 26 93 c9 61 6c 4a 99 c9 64 cb b0 54 10 2e a6 d1 1b f0 e0 f3 62 6d bb 00 11 84 37 40 57 5c 32 03 ed b2 2b 74 eb 2d 20 33 73 49 b0 67 df b6 b3 9e 73 8e 25 e4 2c 49 0a 49 c3 9d 28 47 3f 04 3c fd e9 f5 a5 2f 03 56 91 19 ee Data Ascii: ijhPI$aw%-TJ)) L$ \| vr32(YWMJ,">9D$!(hQ;t{[o+EjV3BVEJ$$Fi"qsqxm>%&alJdT.bm7@W\2+t- 3sIgs%,II(G?</V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49824	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1230	OUT	GET /web/images/749002f5a04f784cc1802d77d2fed423.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 2725 Connection: close CF-Ray: 86b2143fcc9882da-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777336 Cache-Control: public, max-age=31556926 ETag: "749002f5a04f784cc1802d77d2fed423" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Mon, 08 Jan 2024 03:33:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Wed, 08 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 2sXXlztVIEvfIkmG6S9wtmhXnE23pBgSi8Ln+O6AiP0WJ5CabkvQXj5YOZuTPoZVYfyVueVFjFg= x-amz-replication-status: COMPLETED x-amz-request-id: KYRNVNQW8KCXESJK x-amz-server-side-encryption: AES256 x-amz-version-id: CYjzPWbPE89Uh.x_PjEnj_d_.iZJD1mL X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 42 4e 56 7a 6b 25 32 46 63 38 4f 4f 25 32 42 59 33 33 74 79 71 44 79 25 32 46 6d 74 61 77 63 4c 38 42 72 57 50 53 56 72 59 55 50 4f 5a 53 79 54 66 4e 41 6e 62 42 4d 43 37 43 66 54 45 37 35 25 32 42 55 74 61 62 6a 44 5a 45 50 6d 32 56 50 43 76 31 30 56 63 75 66 36 61 70 69 4b 54 4a 49 34 6e 25 32 46 6d 55 58 78 47 7a 65 4c 6c 65 41 4b 64 64 53 76 48 25 32 46 6e 77 65 57 35 36 37 5a 4a 59 4d 59 6b 54 56 4b 65 37 66 73 46 4f 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BNVzk%2Fc8OO%2BY33tyqDy%2FmtawcL8BrWPSVrYUPOZSyTfNAnbBMC7CfTE75%2BUtabjDZEPm2VPCv10Vcuf6apiKTJI4n%2FmUXxGzeLleAKddSvH%2FnweW567ZJYMYkTVKe7fsFOc%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:05 UTC	1194	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 38 30 38 20 33 31 2e 39 32 31 63 30 20 2e 39 36 33 2e 32 35 32 20 31 2e 36 31 32 2e 38 39 35 20 31 2e 36 31 32 20 31 2e 31 30 32 20 30 20 32 2e 31 38 39 2d 32 2e 39 39 35 20 32 2e 31 38 39 2d 34 2e 36 39 32 20 30 2d 2e 37 36 32 2d 2e 32 30 32 2d 31 2e 33 38 37 2d 2e 37 32 39 2d 31 2e 33 38 37 2d 31 2e 32 31 31 20 30 2d 32 2e 33 35 35 20 32 2e 37 39 37 2d 32 2e 33 35 35 20 34 2e 34 36 37 7a 6d 32 32 2e 33 34 37 2d 35 2e 30 31 31 63 30 20 Data Ascii: <svg width="60" height="60" viewBox="0 0 60 60" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.808 31.921c0 .963.252 1.612.895 1.612 1.102 0 2.189-2.995 2.189-4.692 0-.762-.202-1.387-.729-1.387-1.211 0-2.355 2.797-2.355 4.467zm22.347-5.011c0
2024-03-27 20:20:05 UTC	1369	IN	Data Raw: 32 20 31 2e 38 30 31 2d 32 2e 36 31 35 20 31 2e 38 30 31 2d 2e 38 36 38 20 30 2d 31 2e 35 33 35 2d 2e 35 36 39 2d 31 2e 37 38 37 2d 31 2e 37 32 37 2d 2e 36 35 34 20 31 2e 31 30 38 2d 31 2e 35 31 20 31 2e 37 33 36 2d 32 2e 35 36 38 20 31 2e 37 33 36 2d 31 2e 31 38 38 20 30 2d 31 2e 39 36 37 2d 2e 38 39 35 2d 32 2e 30 38 38 2d 32 2e 36 31 36 2d 31 2e 30 37 38 20 32 2e 30 37 37 2d 33 2e 30 37 35 20 33 2e 38 35 31 2d 35 2e 33 35 39 20 33 2e 38 35 31 43 38 2e 39 33 37 20 33 36 2e 30 37 34 20 37 20 33 33 2e 37 30 38 20 37 20 32 39 2e 37 38 33 20 37 20 32 34 2e 38 35 20 31 30 2e 38 35 20 32 31 20 31 34 2e 36 37 35 20 32 31 63 32 2e 33 31 36 20 30 20 33 2e 36 32 33 20 31 2e 31 38 32 20 33 2e 36 32 33 20 32 2e 37 39 33 20 30 20 31 2e 36 31 32 2d 31 2e 31 38 32 20 Data Ascii: 2 1.801-2.615 1.801-.868 0-1.535-.569-1.787-1.727-.654 1.108-1.51 1.736-2.568 1.736-1.188 0-1.967-.895-2.088-2.616-1.078 2.077-3.075 3.851-5.359 3.851C8.937 36.074 7 33.708 7 29.783 7 24.85 10.85 21 14.675 21c2.316 0 3.623 1.182 3.623 2.793 0 1.612-1.182
2024-03-27 20:20:05 UTC	162	IN	Data Raw: 32 33 2d 31 2e 32 33 33 2e 35 31 33 20 30 20 2e 37 32 2e 31 38 37 2e 37 32 2e 35 36 36 61 31 2e 34 31 37 20 31 2e 34 31 37 20 30 20 30 20 31 2d 2e 30 38 2e 34 31 38 63 2d 2e 34 30 33 20 31 2e 33 30 33 2d 31 2e 32 31 32 20 34 2e 31 35 39 2d 31 2e 32 31 32 20 35 2e 35 30 33 20 30 20 2e 35 34 2e 31 32 35 2e 38 38 33 2e 34 33 33 2e 38 38 33 2e 35 33 36 20 30 20 31 2e 31 38 38 2d 2e 38 32 20 31 2e 36 37 2d 32 2e 31 39 35 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 23-1.233.513 0 .72.187.72.566a1.417 1.417 0 0 1-.08.418c-.403 1.303-1.212 4.159-1.212 5.503 0 .54.125.883.433.883.536 0 1.188-.82 1.67-2.195z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49823	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1230	OUT	GET /web/images/e5c5a4d109aeb5234e4405032dfd4800.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: image/svg+xml Content-Length: 470 Connection: close CF-Ray: 86b2143fbaa09c84-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777336 Cache-Control: public, max-age=31556926 ETag: "e5c5a4d109aeb5234e4405032dfd4800" Expires: Fri, 28 Mar 2025 02:08:51 GMT Last-Modified: Fri, 15 Mar 2024 02:41:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: KaLpVKuzva0veub5cSvDdZA6q4F9v/ybKCeyMZCUURjseZR5ZUWSSxMhrlLW0txky0br7LJMH1I= x-amz-replication-status: COMPLETED x-amz-request-id: TNX9T1TD0HXQABK0 x-amz-server-side-encryption: AES256 x-amz-version-id: NIIc0.pFtTuA2dWYosnVnW8pIOVqEpoW X-Content-Type-Options: nosniff
2024-03-27 20:20:05 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 5a 6c 68 4b 79 32 72 49 4e 74 4f 4f 65 51 4d 50 37 43 57 31 71 51 70 4b 46 44 37 54 54 62 4e 6a 4a 75 74 45 6b 57 55 76 37 58 4e 65 62 71 78 6a 55 73 6e 45 56 49 47 36 77 73 68 6a 48 6a 6d 65 59 52 67 53 42 25 32 42 4c 57 66 75 25 32 42 47 4f 34 4b 6f 35 42 66 6f 6d 57 54 47 4e 34 30 62 68 70 75 32 6b 75 75 79 64 25 32 46 34 6a 39 4e 6b 6c 4f 4f 37 4a 51 70 6f 58 66 39 50 4b 79 67 6e 7a 34 43 55 4a 57 4b 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZlhKy2rINtOOeQMP7CW1qQpKFD7TTbNjJutEkWUv7XNebqxjUsnEVIG6wshjHjmeYRgSB%2BLWfu%2BGO4Ko5BfomWTGN40bhpu2kuuyd%2F4j9NklOO7JQpoXf9PKygnz4CUJWKw%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:05 UTC	470	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 41 43 33 33 22 20 64 3d 22 4d 32 37 2e 32 38 37 20 33 34 2e 36 32 37 63 2d 2e 34 30 34 20 30 2d 2e 38 30 36 2d 2e 31 32 34 2d 31 2e 31 35 32 2d 2e 33 37 31 4c 31 38 20 32 38 2e 34 32 32 6c 2d 38 2e 31 33 35 20 35 2e 38 33 34 61 31 2e 39 37 20 31 2e 39 37 20 30 20 30 20 31 2d 32 2e 33 31 32 2d 2e 30 30 38 20 31 2e 39 37 31 20 31 2e 39 37 31 20 30 20 30 20 31 2d 2e 37 32 31 2d 32 2e 31 39 34 6c 33 2e 30 33 34 2d 39 2e 37 39 32 2d 38 2e 30 36 32 2d 35 2e 36 38 31 61 31 2e 39 38 20 31 2e 39 38 20 30 20 30 20 31 2d 2e 37 30 38 2d 32 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFAC33" d="M27.287 34.627c-.404 0-.806-.124-1.152-.371L18 28.422l-8.135 5.834a1.97 1.97 0 0 1-2.312-.008 1.971 1.971 0 0 1-.721-2.194l3.034-9.792-8.062-5.681a1.98 1.98 0 0 1-.708-2.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49829	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	2453	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2698 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	2698	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 31 30 64 63 62 31 62 66 2d 38 63 30 31 2d 34 64 34 34 2d 39 62 63 65 2d 35 66 38 33 62 35 63 35 38 33 37 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 34 2e 31 34 39 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 34 2e 36 31 35 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"10dcb1bf-8c01-4d44-9bce-5f83b5c5837f","E":"2024-03-27T20:20:04.149Z","F":"2024-03-27T20:20:04.615Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:05 UTC	907	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2143f59b405d9-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2143f59b405d9 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fwkm3DyvEFkJqz4wV0UHK76GEgBVN4oG6Gs1lEkmO85XP%2FsHIMf2%2B1ka1y8On9fdskeueQJM3egwAOP1QSEi%2BgQCcRMpTtoXsX%2F%2FVONzPeblBrIkmV9GHG6NQrCLnBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49830	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:05 UTC	1662	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:05 UTC	913	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214400ac2802a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214400ac2802a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NZRmgx3rdRRObheEVkQAEvvX9bKk%2BGFzmM8OFdVbeulSk%2BkL1KPU3C9uRWAtFLPv6oE08kIttSRR75moK8jTU7TBTl03vAHbdvNdZPmzcJHah4zyKI9wBXzjWrBOCjk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:05 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 7a 71 2d 67 30 72 4c 4e 41 66 62 42 45 37 46 6c 49 48 5f 6e 37 53 31 51 52 30 52 32 38 57 6b 35 6b 57 36 45 45 5a 30 4b 63 73 31 7a 58 75 4f 51 64 4d 79 6e 57 49 42 4a 34 57 35 59 4e 4a 33 2d 44 39 6e 63 4e 75 53 76 55 37 53 34 69 61 53 51 45 64 69 30 65 4d 4e 46 5a 48 55 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 30 35 37 39 37 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"zq-g0rLNAfbBE7FlIH_n7S1QR0R28Wk5kW6EEZ0Kcs1zXuOQdMynWIBJ4W5YNJ3-D9ncNuSvU7S4iaSQEdi0eMNFZHU","B":1711578005797}
2024-03-27 20:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49834	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	1668	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:06 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21442e85e07bc-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21442e85e07bc X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNruVW0btMOG1YnO1vSNzrPF2SlSG7yNAPiH0igocRJv%2Bj9%2By9jzn5njrOjwyKB4E6QKjcBqmAHlDuqRlcUvN1XLynVfMZQ%2Bjob2xcgHUS6no8Sbq%2ByarkC0TGjxHpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:06 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49835	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	2241	OUT	GET /_ajax/csrf3/designinsight HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:06 UTC	907	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21442de1e5b41-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21442de1e5b41 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8Z4KPUSEvSPpBezOMRF1t%2FC%2FCZR%2B746b5FxGk9KsHnT5q%2F0CI24hHIbG12%2BqkSWkwzjyJ5DKlsOKyxMSQ%2FN48ocdJA8vUc5SaR5V0uQ0wV87xRRufirqwwlVvMOrSk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:06 UTC	164	IN	Data Raw: 39 65 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 6b 38 75 6b 30 59 5a 62 44 5f 4f 36 7a 38 68 34 53 63 70 5f 61 39 6f 75 35 48 67 4e 75 77 75 77 56 49 6a 55 4b 32 34 33 41 75 4f 65 65 4c 77 5f 4b 39 39 48 61 58 68 59 70 49 56 6d 57 41 58 70 51 67 73 72 75 4b 31 7a 6c 47 45 6b 4a 6c 33 62 6b 4a 52 72 59 2d 50 34 72 4c 61 56 71 65 6e 38 39 58 65 55 65 48 6f 6f 67 49 77 5a 58 4e 75 70 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 30 36 33 32 38 7d 0d 0a Data Ascii: 9e'"])}while(1);</x>//{"A":"k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup","B":1711578006328}
2024-03-27 20:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49836	99.86.229.18	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	528	OUT	GET /site-insights.js HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:06 UTC	788	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2770 Connection: close Last-Modified: Fri, 22 Mar 2024 02:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: EKO3EAYu2jpZrdQQfpOFGk3pdfA6AAQC Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 27 Mar 2024 16:58:21 GMT ETag: "0b8c32bd74fbe7b22dd7487f9d663115" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8b91488fa62e73ed6328bc389e6d1cbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: SU60BeczP5eX7K_eLnTp7y3y-50ieWPI06CKj_QqG-m9EQU2KJFKcA== Age: 12313 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-03-27 20:20:06 UTC	2770	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 76 61 72 20 61 63 63 6f 75 6e 74 49 64 3b 0a 20 20 76 61 72 20 76 69 73 69 74 6f 72 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 76 69 73 69 74 6f 72 5f 69 64 22 3b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3b 0a 20 20 76 61 72 20 62 61 73 65 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 67 77 2e 6d 65 74 61 64 61 74 61 2e 69 6f 22 3b 0a 20 20 76 61 72 20 62 6c 61 63 6b 6c 69 73 74 49 64 73 20 3d 20 5b 31 37 32 31 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 28 6b 65 79 29 20 7b 0a 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: (function () { var accountId; var visitorIdKey = "Metadata_visitor_id"; var sessionIdKey = "Metadata_session_id"; var baseUrl = "https://api-gw.metadata.io"; var blacklistIds = [1721]; function getCookieValue(key) { var cookie = document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49837	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	666	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570805634&gtmcb=1732387887 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:06 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:06 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 52428a32-d478-4310-bbf2-86143df40673 Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49838	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	2711	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 80 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}
2024-03-27 20:20:06 UTC	80	OUT	Data Raw: 7b 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 31 2e 30 30 33 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":1.003,"G":"C"}
2024-03-27 20:20:06 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21445ba62802a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21445ba62802a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YWKDxkH9j03U%2BAgm6lnxqowxmja4uQOrGwp0XHmvapFz7n7jx4rkp5ZhqEaFmYeABLpJsdBm1EWzrc7Y7xFKjYT8idOwSmcbBPhzRD%2B1ln5n38b55CbmBnp5uClIkoU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:06 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49843	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:06 UTC	1991	OUT	GET /_ajax/csrf3/designinsight HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:07 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:07 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21447fedc586c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21447fedc586c X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yZfn%2BKQmwNenWUFAQjsMiu%2FAxzPfwFk3ga0lhrFfdgdKgDjbQdxN3h1GSRYG%2FmzsS0OE2btjhmd9BY7cCra3v7fWdCXoaaJuwAsqk0b0g0KmYu%2BbBA0GcoOFrT1OeR0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:07 UTC	164	IN	Data Raw: 39 65 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 67 43 44 4c 55 53 7a 72 63 6d 30 58 5f 41 53 79 6a 43 30 7a 79 31 6c 71 64 4b 71 70 7a 54 30 44 32 33 53 37 71 5a 4e 32 77 44 32 4a 65 49 51 76 72 49 58 6c 6b 49 50 34 55 56 6b 62 6c 47 51 46 54 52 72 65 38 4b 68 5f 59 31 63 74 77 4a 65 51 78 70 55 58 56 54 58 5a 30 4a 66 47 78 39 56 52 32 73 44 4d 35 67 5a 42 72 42 63 6a 79 34 4c 2d 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 30 37 31 35 35 7d 0d 0a Data Ascii: 9e'"])}while(1);</x>//{"A":"gCDLUSzrcm0X_ASyjC0zy1lqdKqpzT0D23S7qZN2wD2JeIQvrIXlkIP4UVkblGQFTRre8Kh_Y1ctwJeQxpUXVTXZ0JfGx9VR2sDM5gZBrBcjy4L-","B":1711578007155}
2024-03-27 20:20:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49844	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:07 UTC	433	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570805634&gtmcb=1732387887 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:07 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:07 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: d0b1cfd4-7d0a-481e-b4db-7dd0dfce3d4a Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49845	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:07 UTC	2402	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 23126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:07 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 33 32 33 38 35 38 33 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 32 39 32 30 30 33 35 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 64 65 39 31 38 34 30 38 61 62 66 62 35 31 39 66 2e 6c 74 72 2e 63 73 73 22 2c 22 73 22 3a 31 33 38 33 2e 37 2c 22 64 22 3a 37 39 30 2e 38 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 31 33 38 33 2e 37 2c 22 64 73 22 3a 31 36 32 37 2e 31 2c 22 64 Data Ascii: {"memory":{"totalJSHeapSize":43238583,"usedJSHeapSize":22920035,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.canva.com/web/de918408abfb519f.ltr.css","s":1383.7,"d":790.8,"i":"link","p":"http/1.1","rs":0,"re":0,"fs":1383.7,"ds":1627.1,"d
2024-03-27 20:20:07 UTC	6742	OUT	Data Raw: 32 35 76 46 47 73 34 7a 74 64 79 6a 55 46 71 4d 63 4e 6b 55 2d 26 65 78 70 3d 31 37 31 31 35 38 36 31 32 35 26 78 2d 63 61 6e 76 61 2d 71 75 61 6c 69 74 79 3d 74 68 75 6d 62 6e 61 69 6c 26 63 73 69 67 3d 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 4d 44 6e 78 69 47 53 38 65 7a 61 61 49 32 6a 64 32 75 42 6a 63 45 37 49 66 53 69 6f 54 56 4b 30 50 32 57 35 4d 4a 67 6a 51 74 49 22 2c 22 73 22 3a 36 34 32 38 2e 32 2c 22 64 22 3a 36 39 34 2e 39 2c 22 69 22 3a 22 69 6d 67 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 36 34 32 38 2e 32 2c 22 64 73 22 3a 30 2c 22 64 65 22 3a 30 2c 22 63 73 22 3a 30 2c 22 63 65 22 3a 30 2c 22 71 73 22 3a 30 2c 22 70 73 22 3a 30 2c 22 70 65 22 3a 37 31 32 33 2e 31 2c 22 77 73 Data Ascii: 25vFGs4ztdyjUFqMcNkU-&exp=1711586125&x-canva-quality=thumbnail&csig=AAAAAAAAAAAAAAAAAAAAAMDnxiGS8ezaaI2jd2uBjcE7IfSioTVK0P2W5MJgjQtI","s":6428.2,"d":694.9,"i":"img","p":"","rs":0,"re":0,"fs":6428.2,"ds":0,"de":0,"cs":0,"ce":0,"qs":0,"ps":0,"pe":7123.1,"ws
2024-03-27 20:20:07 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:07 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b2144b1f79066c-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49846	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:07 UTC	2278	OUT	GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1 Host: www.canva.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:07 UTC	1166	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:07 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2144bab383b4e-IAD CF-Cache-Status: MISS Cache-Control: no-cache, no-store, no-cache Content-Language: en Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Wed, 27 Mar 2024 20:20:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin service-worker-allowed: / X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 86b2144bab383b4e X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvlRh4kRdmKLt1RHbWbvB5aVXLO%2FuA2V6aeNDWiLOwuXBkW1%2F0KJ7JujMrkwu02J8Svw4Rm70KRkSPc4A0KOQCmUZOI69gdPHTePJdgSiArs3gaKeR4Y7lTQwQ34tIA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:07 UTC	203	IN	Data Raw: 33 62 61 0d 0a 73 65 6c 66 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 2f 77 65 62 2f 27 3b 0a 73 65 6c 66 5b 27 62 6f 6f 74 73 74 72 61 70 27 5d 20 3d 20 7b 20 70 61 67 65 3a 20 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 66 65 35 65 38 34 64 62 63 32 31 34 34 31 38 38 30 31 30 38 31 61 62 33 37 65 35 38 64 61 35 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 2e 69 Data Ascii: 3baself['__canva_public_path__'] = 'https:\/\/static.canva.com\/web/';self['bootstrap'] = { page: {"A?":"B","A":{"A?":"C","b":"https:\u002F\u002Fdfe5e84dbc214418801081ab37e58da5@o13855.ingest.sentry.i
2024-03-27 20:20:07 UTC	758	IN	Data Raw: 6f 5c 75 30 30 32 46 35 35 34 36 36 38 33 22 2c 22 64 22 3a 6e 75 6c 6c 2c 22 68 22 3a 6e 75 6c 6c 2c 22 63 22 3a 30 2e 32 2c 22 65 22 3a 6e 75 6c 6c 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 48 22 3a 22 41 22 2c 22 4b 22 3a 22 4e 22 2c 22 4c 22 3a 22 4e 22 2c 22 47 22 3a 22 4e 22 2c 22 4e 22 3a 6e 75 6c 6c 2c 22 52 22 3a 33 30 30 30 30 2c 22 53 22 3a 30 2e 30 30 31 2c 22 54 22 3a 66 61 6c 73 65 2c 22 55 22 3a 74 72 75 65 2c 22 61 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: o\u002F5546683","d":null,"h":null,"c":0.2,"e":null,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":true,"B":100,"C":30,"D":10},"l":[]},"H":"A","K":"N","L":"N","G":"N","N":null,"R":30000,"S":0.001,"T":false,"U":true,"a":"https:\u002F\u002Fstatic.canva.com
2024-03-27 20:20:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49848	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:07 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:07 UTC	906	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:07 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2144b9d6b7fee-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2144b9d6b7fee X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hiJ1Wfkty95OxQi6FBsGFnlL7Fu7aNs6%2F8KSIUDFucjDcGQ3rRDrEr7A9wJ1rvafBf1TWlbgRe8m4gsTYdYIt7MREN87IFBNYFY5%2FmNKqVokfOnWWwfYsxLufJRccB4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:07 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49847	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:07 UTC	1442	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:07 UTC	1341	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:07 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 86b2144b8e0d5842-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777338 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Fri, 28 Mar 2025 02:08:53 GMT Last-Modified: Wed, 01 Nov 2023 23:04:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: Dz2tzkVUYej6zhHtpLYzTHg52//ayvE/cf2L/i/yNHN3hRWzcgVLOBVrXDEWaqjc5ddfu+iMT1g= x-amz-replication-status: COMPLETED x-amz-request-id: KYRHT2741G1B382V x-amz-server-side-encryption: AES256 x-amz-version-id: ytNVK.Z3f3u4lf4TKL9HrtBMqKueQBAz X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XhJrG6smL6z5s0QC%2Btk4fEqLWhWGtfzUsVbip40UA6H4hz6PxWbP8LuZxGRYk3BU3dRXQjheEabDucghr81JftFhqvVkWQ67qXVXzF6%2B8%2Bl9zigHYWzqp8cS6B0Qvhy8q7I%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:07 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:20:07 UTC	1305	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-03-27 20:20:07 UTC	1369	IN	Data Raw: ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 ff e3 6d 3a ff e3 6c 3b ff e3 6d 43 ff e2 66 3a ff e2 6b 4a ff fd f7 Data Ascii: ?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9m:l;mCf:kJ
2024-03-27 20:20:07 UTC	1369	IN	Data Raw: cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff cd bd 0a ff cd be 12 ff cb bb 00 ff f3 f0 de ff ff ff ff ff ff ff ff Data Ascii: &O6*/38z<zFoE\& (#),04:x>tF
2024-03-27 20:20:07 UTC	371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49857	108.139.47.50	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	708	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:08 UTC	898	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Wed, 27 Mar 2024 20:20:08 GMT Location: /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 b5c1f99a1985819c0c422c9ce2cc03fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: 9DVTSIMM3tMhzFGPVv_KbXU8roQQo3k1KxNkU0k6xBR_3wZ4kBIYGQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49856	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	691	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2044672759 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:08 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:08 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49851	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	622	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=926803116 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:08 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:08 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49861	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	1385	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D If-None-Match: W/"ba9c619e1ba6a9272c44084a93375283" If-Modified-Since: Wed, 01 Nov 2023 23:04:36 GMT
2024-03-27 20:20:08 UTC	1300	IN	HTTP/1.1 304 Not Modified Date: Wed, 27 Mar 2024 20:20:08 GMT Connection: close CF-Ray: 86b214530f4d81ee-IAD CF-Cache-Status: HIT Age: 782066 Cache-Control: public, max-age=31556926 ETag: "ba9c619e1ba6a9272c44084a93375283" Expires: Fri, 28 Mar 2025 02:08:54 GMT Last-Modified: Wed, 01 Nov 2023 23:04:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: w0+Z5O5Px+ZE6oHyOfteJbcAd8aLVAIKZRaFcKAkgBG4PfZgU5TPU1rul1RP9J3x+aDjeJ29M0w= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: KYRGWCA4J46TP2TD x-amz-server-side-encryption: AES256 x-amz-version-id: kFCDbB.azfiZLQfhBYb8Gboqeqt3J2PO X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CkSEsbYAxAE%2F03e%2BP1896zmw4TbDOSpUNTS8peI2s%2BcdFHSjRZpiG57z4ABnLKoWrogMB3%2BzJ1ak1%2FD88HvDatIxo3ZhHsY%2FUTIt6KzxcMPi%2FfeQEg8BlRA2Jc4PwUTc52U%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:08 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49860	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	2790	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:08 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 31 2c 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 32 2e 33 35 31 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":1,"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":2.351,"G":"C"}
2024-03-27 20:20:09 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:08 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214530a89073e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214530a89073e X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ED%2FGw0uKUK%2F56jIyzYZibblw3mlXmvVPQrCB1xnfsDkggFMVAboDDY1PMkM2GMI2u4E08mFKU%2FIThrjSEG0s0fcVP31veott3eqWCxcJzWPcdf0gMfHJ6IVpwc4rLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:09 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49859	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	2771	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 6283 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:08 UTC	6283	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 34 66 39 37 35 32 32 2d 34 39 37 65 2d 34 36 30 36 2d 61 66 33 35 2d 30 39 36 39 36 39 38 33 33 30 36 39 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 34 2e 39 33 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 30 37 2e 39 35 35 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"44f97522-497e-4606-af35-096969833069","E":"2024-03-27T20:20:04.934Z","F":"2024-03-27T20:20:07.955Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:08 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:08 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214530e453950-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214530e453950 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zhnGuj9VyvQFGJbTaYpSb%2BhOaJgNID627nyByhLHyrk6C0UIbIWXNBEA%2FZYie4vgW0hJBGG59OVmmE2N0rDnsA6ee3l0ekzO%2F5BdfmAsecHIFa6gBj4DfEyEoTGe8AU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:08 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49850	108.139.47.50	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:08 UTC	834	OUT	GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:08 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:08 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 005b0f8dc37e46fc9bdc40ea2ce8a602.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: PdI8aAqb6RiZwt5BRLpK20H3PmOP5i0fK35VlWHB_B1xOYUaeJ-o8w==
2024-03-27 20:20:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49862	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	508	OUT	OPTIONS /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.canva.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:09 UTC	1229	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:09 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.canva.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 Set-Cookie: __cf_bm=H0ovTeVkNIwbfd3rpZEG4d9JrPBW3a0ldUU2DTtgto4-1711570809-1.0.1.1-oSmJgGHrrUDoKh6x2vm9MC4VYr_07JMq45xVgADwpVblbQlfBZFVidQGRPKR6ZxhdjhYYa4WxxKas4AFExMl8A; path=/; expires=Wed, 27-Mar-24 20:50:09 GMT; domain=.canva.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOIJYhGvXn6p%2B%2F9syTU1qRB4f5C0%2Bgt6X4ueU0dljDU9jgfRUBPXVo6iUGUO1EYyY2PFQsazqwEnMgs6mnoLt1G7VqoGEUfrLZcyv9YasW1%2Bppy7S63S7g7%2FR0C%2BiQMAgDNxyv4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=Sh95VO4siWSSpM7q4TE57dY7NcWD.gJ0e65newrxkdk-1711570809644-0.0.1.1-604800000; path=/; domain=.canva.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 86b214582ccd061b-IAD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49864	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	1282	OUT	GET /web/d60c358ab90474a9.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:09 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:09 GMT Content-Type: text/javascript Content-Length: 7223 Connection: close CF-Ray: 86b21459784a6fef-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63997 Cache-Control: public, max-age=31556926 ETag: "44d4608b2d68d7dd142847351b546fa0" Expires: Fri, 28 Mar 2025 02:08:55 GMT Last-Modified: Wed, 27 Mar 2024 02:24:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: TX1LDfjYYFhzI1Pbf4Ob/9Q+b2xviJ4JvJuYLOA4sWv5xTqKpKlvAnwtPgaZfnIpbhDZgBkNt2c= x-amz-replication-status: COMPLETED x-amz-request-id: 4SBM5689S8MFKY2C x-amz-server-side-encryption: AES256 x-amz-version-id: YOLIUoZ8YH1dJvlJuXtrnu05SkPUT7jJ X-Content-Type-Options: nosniff
2024-03-27 20:20:09 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 30 6b 39 53 46 49 76 31 7a 54 63 32 6b 67 6c 72 54 65 75 67 6b 4b 55 74 25 32 42 45 65 25 32 42 61 52 53 69 4e 6a 41 36 41 57 5a 6d 65 45 50 6e 6f 50 50 64 38 76 71 59 41 52 41 69 6b 59 6d 79 73 53 4f 4b 72 58 6b 76 65 37 74 37 6a 50 67 57 57 43 45 73 6b 59 38 4e 6a 75 6a 49 67 7a 7a 6d 74 53 6d 69 52 65 38 4c 30 25 32 42 25 32 46 6f 38 32 75 6b 64 68 68 75 79 50 25 32 42 39 49 4f 65 38 36 69 6e 25 32 46 78 41 73 44 62 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t0k9SFIv1zTc2kglrTeugkKUt%2BEe%2BaRSiNjA6AWZmeEPnoPPd8vqYARAikYmysSOKrXkve7t7jPgWWCEskY8NjujIgzzmtSmiRe8L0%2B%2Fo82ukdhhuyP%2B9IOe86in%2FxAsDbA%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:09 UTC	1193	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 3d 7b 7d 2c 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 73 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 73 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 69 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6c 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6c 2e 6d 3d 69 2c 65 3d 5b 5d 2c 6c 2e 4f 3d 28 74 2c 72 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6e 2c 6f 5d 3d 65 5b 66 5d 2c 73 3d 21 30 2c 61 3d Data Ascii: (()=>{"use strict";var e,t,r,n,o,i={},s={};function l(e){var t=s[e];if(void 0!==t)return t.exports;var r=s[e]={exports:{}};return i[e](r,r.exports,l),r.exports}l.m=i,e=[],l.O=(t,r,n,o)=>{if(!r){var i=1/0;for(f=0;f<e.length;f++){for(var[r,n,o]=e[f],s=!0,a=
2024-03-27 20:20:09 UTC	1369	IN	Data Raw: 74 75 72 6e 22 64 35 30 32 35 35 65 33 62 38 63 63 64 64 61 65 2e 6a 73 22 7d 2c 6c 2e 6d 69 6e 69 43 73 73 46 3d 65 3d 3e 7b 69 66 28 7b 35 31 31 30 3a 31 2c 34 34 35 30 3a 31 7d 5b 65 5d 29 72 65 74 75 72 6e 22 65 66 34 36 64 62 33 37 35 31 64 38 65 39 39 39 2e 6c 74 72 2e 63 73 73 22 7d 2c 6c 2e 6d 69 6e 69 43 73 73 46 52 74 6c 3d 65 3d 3e 7b 69 66 28 38 35 38 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 75 6e 74 69 6d 65 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 34 33 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 76 65 6e 64 6f 72 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 33 38 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 68 6a 66 65 70 74 2e 63 31 36 36 65 35 64 32 Data Ascii: turn"d50255e3b8ccddae.js"},l.miniCssF=e=>{if({5110:1,4450:1}[e])return"ef46db3751d8e999.ltr.css"},l.miniCssFRtl=e=>{if(8581===e)return"c166e5d20ad58f4e.runtime.rtl.css";if(5436===e)return"c166e5d20ad58f4e.vendor.rtl.css";if(1389===e)return"hjfept.c166e5d2
2024-03-27 20:20:09 UTC	1369	IN	Data Raw: 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6c 2e 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 28 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 6e 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 6f 29 3a 28 69 3d 72 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 69 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: ol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})},(()=>{const e=l.e,t=function e(t,r,n){return t().catch((function(o){return 0===n?Promise.reject(o):(i=r,new Promise((function(e){setTimeout(e,i)}))).then((function(){return
2024-03-27 20:20:09 UTC	1369	IN	Data Raw: 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 6e 7d 29 29 2c 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 6c 65 74 20 68 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 72 2e 6f 6e 65 72 72 6f 72 3d 65 3d 3e 74 28 65 29 2c 72 2e 68 72 65 66 3d 65 2c 72 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 66 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 6c 65 74 20 6c 3d 30 2c 61 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 65 29 7b 63 6f 6e 73 74 20 65 3d 6e 2e 73 72 63 Data Ascii: {type:"timeout",target:n})),t),document.head.appendChild(n)}let h=0;function p(e,t){const r=document.createElement("link");r.onload=r.onerror=e=>t(e),r.href=e,r.rel="stylesheet",f(r)}function m(e,t){const s=n();let l=0,a=[];for(const n of e){const e=n.src
2024-03-27 20:20:09 UTC	1369	IN	Data Raw: 22 3a 5b 5d 2c 22 35 34 33 36 22 3a 5b 5d 7d 27 29 2c 72 3d 28 65 2c 6e 2c 6f 29 3d 3e 7b 69 66 28 21 6f 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 6f 2e 61 64 64 28 65 29 2c 74 5b 65 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 72 28 65 2c 6e 2c 6f 29 29 29 2c 6e 2e 70 75 73 68 28 65 29 2c 6e 7d 3b 6c 2e 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 28 74 29 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 6e 2c 5b 5d 2c 6e 65 77 20 53 65 74 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 6f 2e 6d 61 70 28 28 65 3d 3e 6c 2e 65 28 65 29 29 29 29 2e 74 68 65 6e 28 28 28 29 3d 3e 6c 28 74 29 29 29 7d 7d 29 28 29 2c Data Ascii: ":[],"5436":[]}'),r=(e,n,o)=>{if(!o.has(e))return o.add(e),t[e].forEach((e=>r(e,n,o))),n.push(e),n};l.me=function(t){const n=e[t];if(null==n)return Promise.resolve(l(t));const o=r(n,[],new Set);return Promise.all(o.map((e=>l.e(e)))).then((()=>l(t)))}})(),
2024-03-27 20:20:09 UTC	554	IN	Data Raw: 73 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 74 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 6f 2b 22 3a 20 22 2b 69 2b 22 29 22 2c 73 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 73 2e 74 79 70 65 3d 6f 2c 73 2e 72 65 71 75 65 73 74 3d 69 2c 6e 5b 31 5d 28 73 29 7d 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 74 2c 74 29 7d 65 6c 73 65 20 65 5b 74 5d 3d 30 7d 2c 6c 2e 4f 2e 6a 3d 74 3d 3e 30 3d 3d 3d 65 5b 74 5d 3b 76 61 72 20 74 3d 28 74 2c 72 29 3d 3e 7b 76 61 72 20 6e 2c 6f 2c 5b 69 2c 73 2c 61 5d 3d 72 2c 63 3d 30 3b 69 66 28 69 2e 73 6f 6d 65 28 28 74 3d 3e 30 21 3d 3d 65 5b 74 5d 29 29 29 7b 66 6f 72 28 6e 20 69 6e 20 73 29 69 66 28 6c 2e 6f 28 73 2c 6e 29 29 6c 2e 6d 5b 6e 5d 3d 73 5b 6e 5d 3b Data Ascii: s.message="Loading chunk "+t+" failed.\n("+o+": "+i+")",s.name="ChunkLoadError",s.type=o,s.request=i,n[1](s)}}}),"chunk-"+t,t)}else e[t]=0},l.O.j=t=>0===e[t];var t=(t,r)=>{var n,o,[i,s,a]=r,c=0;if(i.some((t=>0!==e[t]))){for(n in s)if(l.o(s,n))l.m[n]=s[n];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49867	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:10 UTC	908	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2145a89e92045-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2145a89e92045 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=74n140xhoO3DCedH515gu4N4IfAO8tVKHTux94OuBkO%2FBjuvFANhCtLpdWzXFcRk6OgRnob5XpD%2FFHYMiToScXIVZfq3pUJVtroCZ9wjvP9EfYfVJx4gIb%2BysEarIYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:10 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49865	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	1210	OUT	GET /static/images/favicon-1.ico HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:10 UTC	1341	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 4414 Connection: close CF-Ray: 86b2145a8eae054a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777341 Cache-Control: public, max-age=31556926 ETag: "a0c86da7fc37ea50e848c4733761d53e" Expires: Fri, 28 Mar 2025 02:08:56 GMT Last-Modified: Wed, 01 Nov 2023 23:04:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-id-2: Dz2tzkVUYej6zhHtpLYzTHg52//ayvE/cf2L/i/yNHN3hRWzcgVLOBVrXDEWaqjc5ddfu+iMT1g= x-amz-replication-status: COMPLETED x-amz-request-id: KYRHT2741G1B382V x-amz-server-side-encryption: AES256 x-amz-version-id: ytNVK.Z3f3u4lf4TKL9HrtBMqKueQBAz X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jsX3Vz9Lc256XUtKiHyyJlu2FjzhLXnTEE%2BFaA8lvRsk7LPOSTdi7CXks3FDc2IrlDcZnQKdid9qo%2FXoqnof2muYPdkqqFMW%2FPIUCyRd2M1G7KhDGdmAoQal5QoWDuz3vDY%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:10 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:20:10 UTC	1305	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 28 11 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 00 00 01 ff 40 80 04 00 00 00 00 00 00 00 00 f3 23 68 16 f9 21 67 5c fc 22 68 9d fa 21 69 c9 f8 23 6b e3 f7 24 6c fb f6 24 6e fb f5 24 6f e3 f2 25 71 c9 f2 25 72 9d f1 27 73 5b e8 23 74 16 00 00 00 00 00 00 00 00 ff 40 80 04 ff 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 55 55 03 00 00 00 00 00 00 00 00 f9 2c 5d 29 fa 2b 5f 9f fb 29 62 f2 ff 2a 6a ff ff 29 6c ff ff 27 6c ff ff 25 6c ff f8 24 6b ff f7 Data Ascii: (( @ @#h!g\"h!i#k$l$n$o%q%r's[#t@UU,])+_)b*j)l'l%l$k
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: ff e3 3f 42 ff e4 53 5e ff e4 49 60 ff e5 43 65 ff e5 3d 6b ff e7 37 71 fa f6 36 7e ff e5 30 78 9f 00 00 00 00 dc 74 2e 16 e1 78 33 f2 e4 78 32 ff e2 75 32 fe e3 74 33 ff e4 73 33 ff e5 74 3d ff e4 5f 00 ff f8 e2 dc ff ff ff ff ff ff ff ff ff fa e7 e4 ff e5 58 00 ff e7 6d 45 ff e7 69 3e ff e6 67 3c ff e6 67 3d ff e5 66 3f ff e5 6a 48 ff e5 67 48 ff e1 35 00 ff f7 dd db ff fa ea ea ff e0 3e 27 ff e2 5b 59 ff e3 51 59 ff e3 4c 5f ff e3 46 64 ff e4 40 6a fe e7 3a 72 ff e6 35 75 f2 dc 2e 74 16 e0 81 2d 5b ed 89 30 ff de 80 2d fb e0 7f 2d ff e0 7d 2e ff e1 7d 33 ff e1 75 16 ff e5 8b 5e ff fe fa f9 ff ff fe fe ff ff ff ff ff ef b9 a9 ff e2 5d 00 ff e5 75 41 ff e4 6f 36 ff e4 6f 38 ff e4 6e 39 ff e3 6d 3a ff e3 6c 3b ff e3 6d 43 ff e2 66 3a ff e2 6b 4a ff fd f7 Data Ascii: ?BS^I`Ce=k7q6~0xt.x3x2u2t3s3t=_XmEi>g<g=f?jHgH5>'[YQYL_Fd@j:r5u.t-[0--}.}3u^]uAo6o8n9m:l;mCf:kJ
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: cd ae 00 ff d1 b2 26 ff d1 ae 0e ff d1 ac 12 ff d2 aa 1d ff d1 a4 00 ff d6 ad 4f ff fc f8 f5 ff ff ff ff ff ea d5 bb ff d0 8e 00 ff d5 97 36 ff d5 90 2a ff d6 8b 2f ff d7 85 33 ff d8 80 38 ff d8 7a 3c fb e8 7a 46 ff db 6f 45 5c d1 ae 0c 16 d0 b3 0e f2 d1 b7 0c ff cf b7 0a fe ce b8 09 ff ce b9 08 ff ce ba 05 ff cf bc 26 ff c9 b5 00 ff e6 de b3 ff ff ff ff ff ff ff ff ff f5 f1 e2 ff cc b4 00 ff cf b7 20 ff cf b4 16 ff cf b1 0d ff d0 af 0f ff d1 ae 28 ff ce a2 00 ff f1 e7 d6 ff ff ff ff ff f8 f3 ec ff d3 9d 1d ff d3 98 23 ff d4 94 29 ff d5 8f 2c ff d6 89 30 ff d7 85 34 fe da 7f 3a ff d9 78 3e f2 dc 74 46 16 00 00 00 00 cf b5 0b 9f dd c3 0b ff ce b9 09 fa ce ba 08 ff ce bb 07 ff cd bc 07 ff cd bd 0a ff cd be 12 ff cb bb 00 ff f3 f0 de ff ff ff ff ff ff ff ff Data Ascii: &O6*/38z<zFoE\& (#),04:x>tF
2024-03-27 20:20:10 UTC	371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 01 bf bf 00 04 00 00 00 00 00 00 00 00 c5 b9 00 16 ca bf 03 5c cd c0 03 9d cc c0 04 c9 ce bf 04 e3 cd be 05 fb cd bd 06 fb ce bd 07 e3 ce ba 08 c9 ce b9 0a 9d cd b4 0b 5c d1 ae 0c 16 00 00 00 00 00 00 00 00 ff bf 00 04 ff ff 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49866	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	1986	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:10 UTC	930	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2145a8e1b8021-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2145a8e1b8021 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xeQkqiUHT5WckYJirYgfqTaL9WWBL%2FluQIjspCG%2BwbWRmaNlMy%2BrGD%2Brs0K9O8OaWGAKrzuiQT5v5WSqNMDfG1Iinb3iscX%2FAa0%2F6sMY23MfqOVKR1%2B6qhbxYAaqKqI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:10 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49868	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	1449	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1512 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:09 UTC	1512	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"design_viewer"}},{"key":"service.name","value":{"stringValue":"design_viewer \| telemetry.user_operation"}}
2024-03-27 20:20:10 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b2145a29430a17-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u5Uej2LRX3Nbo6pUfJD2Klw8wRok61Prp%2FyqwZWOcWL257Czc5ETSETpH6ODJNL4vcIWkFh8lOszIG2mAeW455BFt3rU3H3luRikvVyOoam9tCSdxUee53ssCswn0X8m4fPH4Ns%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:10 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49870	18.154.227.51	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:09 UTC	523	OUT	GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1193359379 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:10 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:10 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 19818f9265689e7f5cbb430f8edbe402.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: BlPVDv22qDgeU7lMXPLn6i9G37omla4Ute6x7hxFkhP_ctLlEUqsFA==
2024-03-27 20:20:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49869	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:10 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2044672759 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:20:10 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:10 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49871	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:10 UTC	1281	OUT	GET /web/3ca27320fba118d7.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:10 UTC	1191	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: text/javascript Content-Length: 10837 Connection: close CF-Ray: 86b2145cae405b16-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777340 Cache-Control: public, max-age=31556926 ETag: "34e1c8f1d5fdc60e02201c32efb25e58" Expires: Fri, 28 Mar 2025 02:08:56 GMT Last-Modified: Fri, 05 Jan 2024 02:02:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 05 Jan 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: PxWQFeOn7f3Cv4KqoYagQfFcrYxYcn5S9oWXEiz0Lt12X717v0xajr5glST9hX9hlF34Aj7qImw= x-amz-replication-status: COMPLETED x-amz-request-id: KYRHRJJ8S1TPJV9C x-amz-server-side-encryption: AES256 x-amz-version-id: 4.q729ef1jyTc0iz1bpNfnCKtaQpzSmW X-Content-Type-Options: nosniff
2024-03-27 20:20:10 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 39 77 6e 72 33 4d 4c 64 7a 62 4e 52 35 4f 69 30 39 75 31 58 46 33 4a 32 73 57 52 77 78 25 32 46 72 6b 73 65 6a 6e 6a 42 59 71 53 57 70 43 4c 45 73 50 54 25 32 46 58 30 42 4e 39 59 66 45 56 63 79 79 69 74 64 4f 67 62 30 42 75 4b 41 34 72 77 33 4a 64 37 32 30 36 50 59 6f 4e 73 45 67 62 64 68 6d 74 31 32 77 6f 4a 32 78 78 50 33 4e 6d 79 6f 7a 6d 7a 4f 39 77 4b 30 6b 76 57 6e 64 62 52 66 63 52 32 6d 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l9wnr3MLdzbNR5Oi09u1XF3J2sWRwx%2FrksejnjBYqSWpCLEsPT%2FX0BN9YfEVcyyitdOgb0BuKA4rw3Jd7206PYoNsEgbdhmt12woJ2xxP3NmyozmzO9wK0kvWndbRfcR2mY%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:10 UTC	1199	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 33 35 33 36 31 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 49 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 37 31 32 33 34 33 29 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 73 74 61 74 69 63 20 5f 5f 69 6e 69 74 53 74 61 74 69 63 28 29 7b 74 68 69 73 2e 69 64 3d 22 44 65 64 75 70 65 22 7d 5f 5f 69 6e 69 74 28 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 69 2e 69 64 7d 73 Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{353610:(t,e,n)=>{n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}s
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 69 6f 6e 21 3d 3d 65 2e 66 75 6e 63 74 69 6f 6e 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 74 2e 66 69 6e 67 65 72 70 72 69 6e 74 2c 72 3d 65 2e 66 69 6e 67 65 72 70 72 69 6e 74 3b 69 66 28 21 6e 26 26 21 72 29 72 65 74 75 72 6e 21 30 3b 69 66 28 6e 26 26 21 72 7c 7c 21 6e 26 26 72 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 21 28 6e 2e 6a 6f 69 6e 28 22 22 29 21 3d 3d 72 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 78 63 65 70 74 69 6f 6e 26 26 74 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 26 26 74 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 Data Ascii: ion!==e.function)return!1}return!0}function c(t,e){let n=t.fingerprint,r=e.fingerprint;if(!n&&!r)return!0;if(n&&!r\|\|!n&&r)return!1;try{return!(n.join("")!==r.join(""))}catch(i){return!1}}function u(t){return t.exception&&t.exception.values&&t.exception.va
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 74 2e 74 6f 4a 53 4f 4e 28 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 29 7b 63 6f 6e 73 74 20 69 3d 65 5b 74 5d 3b 6e 5b 74 5d 3d 28 30 2c 72 2e 56 5a 29 28 69 29 3f 69 2e 74 6f 53 74 72 69 6e 67 28 29 3a 69 7d 7d 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 29 26 26 63 2e 6b 67 2e 65 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 65 78 74 72 61 63 74 20 65 78 74 72 61 20 64 61 74 61 20 66 72 6f 6d 20 74 68 65 20 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 22 2c 65 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 75 2e 5f Data Ascii: onst e=t.toJSON();for(const t of Object.keys(e)){const i=e[t];n[t]=(0,r.VZ)(i)?i.toString():i}}return n}catch(e){("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&c.kg.error("Unable to extract extra data from the Error object:",e)}return null}}u._
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 74 2e 66 72 61 6d 65 73 26 26 74 2e 66 72 61 6d 65 73 2e 6d 61 70 28 28 74 3d 3e 74 68 69 73 2e 5f 69 74 65 72 61 74 65 65 28 74 29 29 29 7d 7d 7d 69 2e 5f 5f 69 6e 69 74 53 74 61 74 69 63 28 29 7d 2c 38 35 38 34 36 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 52 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 35 36 37 35 39 37 29 3b 6e 28 39 37 31 32 33 35 29 2e 6e 32 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 74 72 79 7b 6c 65 74 20 6e 3d 74 3b 63 6f 6e 73 74 20 72 3d 35 2c 69 3d 38 30 2c 63 3d 5b 5d 3b 6c 65 74 20 75 3d 30 2c 73 3d 30 3b 63 6f 6e 73 74 20 61 3d 22 20 3e 20 22 2c 66 3d 61 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6c 3b 66 6f 72 28 3b 6e 26 26 75 2b 2b 3c 72 26 26 28 6c 3d 6f 28 6e 2c 65 29 2c 21 28 22 68 74 6d 6c 22 Data Ascii: t.frames&&t.frames.map((t=>this._iteratee(t)))}}}i.__initStatic()},858464:(t,e,n)=>{n.d(e,{Rt:()=>i});var r=n(567597);n(971235).n2;function i(t,e){try{let n=t;const r=5,i=80,c=[];let u=0,s=0;const a=" > ",f=a.length;let l;for(;n&&u++<r&&(l=o(n,e),!("html"
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 74 63 68 28 72 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 5d 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 68 28 74 2c 45 72 72 6f 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 29 3d 3d 3d 60 5b 6f 62 6a 65 63 74 20 24 7b 65 7d 5d 60 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 2c 22 53 74 72 69 6e 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 Data Ascii: tch(r.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function o(t,e){return r.call(t)===`[object ${e}]`}function c(t){return o(t,"String")}function u(t){return null===t\|\|"object"!=typ
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 63 6f 6e 73 74 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 57 65 61 6b 53 65 74 2c 65 3d 74 3f 6e 65 77 20 57 65 61 6b 53 65 74 3a 5b 5d 3b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 29 72 65 74 75 72 6e 21 21 65 2e 68 61 73 28 6e 29 7c 7c 28 65 2e 61 64 64 28 6e 29 2c 21 31 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 66 28 65 5b 74 5d 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 6e 29 2c 21 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 29 65 2e 64 65 6c 65 74 65 28 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 Data Ascii: function r(){const t="function"==typeof WeakSet,e=t?new WeakSet:[];return[function(n){if(t)return!!e.has(n)\|\|(e.add(n),!1);for(let t=0;t<e.length;t++){if(e[t]===n)return!0}return e.push(n),!1},function(n){if(t)e.delete(n);else for(let t=0;t<e.length;t++)i
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 72 63 75 6c 61 72 20 7e 5d 22 3b 63 6f 6e 73 74 20 68 3d 65 3b 69 66 28 68 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 2e 74 6f 4a 53 4f 4e 29 74 72 79 7b 72 65 74 75 72 6e 20 73 28 22 22 2c 68 2e 74 6f 4a 53 4f 4e 28 29 2c 75 2d 31 2c 61 2c 66 29 7d 63 61 74 63 68 28 6d 29 7b 7d 63 6f 6e 73 74 20 67 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 5b 5d 3a 7b 7d 3b 6c 65 74 20 64 3d 30 3b 63 6f 6e 73 74 20 79 3d 28 30 2c 6f 2e 53 68 29 28 65 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 79 29 7b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 79 2c 6e 29 29 63 6f 6e 74 69 6e 75 65 3b 69 66 28 64 3e 3d 61 29 7b 67 5b 6e 5d 3d 22 5b 4d 61 78 50 72 6f Data Ascii: rcular ~]";const h=e;if(h&&"function"==typeof h.toJSON)try{return s("",h.toJSON(),u-1,a,f)}catch(m){}const g=Array.isArray(e)?[]:{};let d=0;const y=(0,o.Sh)(e);for(const n in y){if(!Object.prototype.hasOwnProperty.call(y,n))continue;if(d>=a){g[n]="[MaxPro
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 65 3f 65 2e 73 6c 69 63 65 28 31 29 3a 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 2e 2e 2e 74 29 7b 6c 65 74 20 65 3d 22 22 2c 6e 3d 21 31 3b 66 6f 72 28 6c 65 74 20 72 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 72 3e 3d 2d 31 26 26 21 6e 3b 72 2d 2d 29 7b 63 6f 6e 73 74 20 69 3d 72 3e 3d 30 3f 74 5b 72 5d 3a 22 2f 22 3b 69 26 26 28 65 3d 60 24 7b 69 7d 2f 24 7b 65 7d 60 2c 6e 3d 22 2f 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 29 7d 72 65 74 75 72 6e 20 65 3d 72 28 65 2e 73 70 6c 69 74 28 22 2f 22 29 2e 66 69 6c 74 65 72 28 28 74 3d 3e 21 21 74 29 29 2c 21 6e 29 2e 6a 6f 69 6e 28 22 2f 22 29 2c 28 6e 3f 22 2f 22 3a 22 22 29 2b 65 7c 7c 22 2e 22 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 6c 65 74 20 65 3d 30 3b 66 6f 72 28 3b 65 3c 74 2e 6c 65 6e 67 74 68 26 Data Ascii: e?e.slice(1):[]}function c(...t){let e="",n=!1;for(let r=t.length-1;r>=-1&&!n;r--){const i=r>=0?t[r]:"/";i&&(e=`${i}/${e}`,n="/"===i.charAt(0))}return e=r(e.split("/").filter((t=>!!t)),!n).join("/"),(n?"/":"")+e\|\|"."}function u(t){let e=0;for(;e<t.length&
2024-03-27 20:20:10 UTC	55	IN	Data Raw: 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 33 63 61 32 37 33 32 30 66 62 61 31 31 38 64 37 2e 76 65 6e 64 6f 72 2e 6a 73 2e 6d 61 70 Data Ascii: rceMappingURL=sourcemaps/3ca27320fba118d7.vendor.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49872	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:10 UTC	2790	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 85 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:10 UTC	85	OUT	Data Raw: 7b 22 41 22 3a 32 2c 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 31 2e 39 39 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":2,"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":1.99,"G":"C"}
2024-03-27 20:20:10 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2145f3f628268-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2145f3f628268 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rKWKfTauYr%2FMRoqa3NtpIIk7d5fgdvckKOUISJfz4D4%2BF5obs0AqmTrQFDJ7W211jaPMWyU3ohGNIdulAdD49a1OEWdRNkMh1rsnNCLHni%2FTMSTG6JoErkDXGFQBNOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:10 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49873	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:10 UTC	1281	OUT	GET /web/hjfept.9b84b5d5947e6d42.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:10 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:10 GMT Content-Type: text/javascript Content-Length: 68509 Connection: close CF-Ray: 86b214601f110624-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63997 Cache-Control: public, max-age=31556926 ETag: "97cec306e6928c9cd0bd1ed9e98f2106" Expires: Fri, 28 Mar 2025 02:08:56 GMT Last-Modified: Wed, 27 Mar 2024 02:24:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 46U97OyJ0J9echjfCrWxD15zYjxnuzWdsgOCnQ5oqZ73os+QLBGo1TqPsRlT5/Q0BiiEMGpuSEs= x-amz-replication-status: COMPLETED x-amz-request-id: 4SBVBVTQ2F67YNHV x-amz-server-side-encryption: AES256 x-amz-version-id: WPFRdh58vcWADW7CnkwCcoKt5skbIwEN X-Content-Type-Options: nosniff
2024-03-27 20:20:10 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 63 71 54 41 42 4b 6b 51 33 74 70 35 44 52 64 66 72 48 71 69 57 68 39 45 31 50 6d 32 6c 6c 6a 4e 56 67 48 32 63 33 74 62 4b 6c 61 56 74 67 34 45 6f 38 4a 6f 44 54 36 71 39 70 33 37 6d 35 33 25 32 46 50 53 46 77 4b 49 45 79 6d 75 53 4f 4d 36 46 4e 69 6b 57 47 25 32 42 6e 25 32 46 65 69 68 52 71 51 37 43 68 67 71 67 72 46 51 6b 38 55 66 64 30 48 66 55 4a 43 4c 53 61 35 78 6d 68 79 63 6c 64 6e 65 46 41 44 6c 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cqTABKkQ3tp5DRdfrHqiWh9E1Pm2lljNVgH2c3tbKlaVtg4Eo8JoDT6q9p37m53%2FPSFwKIEymuSOM6FNikWG%2Bn%2FeihRqQ7ChgqgrFQk8Ufd0HfUJCLSa5xmhycldneFADlY%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:10 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 34 37 36 38 33 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 65 34 37 37 33 64 36 39 33 32 36 31 36 61 38 35 66 32 65 61 63 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 476834:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e4773d6932616a85f2eac
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 62 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 Data Ascii: n(a,b){if(b)a:{var c=ba;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};fa=function(a,b){var c=[];if(!a)throw Error(null==b?"
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 56 61 6c 75 65 2c 6c 3a 61 2e 6c 7d 7d 3b 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 62 2c 63 2c 64 29 3d 3e 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 65 2c 43 3a 66 2c 54 3a 67 7d 3d 6c 28 62 2c 63 2c 64 29 3b 72 65 74 75 72 6e 7b 4c 3a 35 2c 74 61 67 3a 65 2c 43 3a 66 2c 48 3a 67 2c 41 62 3a 7a 61 2e 6c 2c 6c 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 61 3f 22 6f 62 6a 65 63 74 22 3a 22 65 6e 75 6d 22 3d 3d 3d 61 3f 22 73 74 72 69 6e 67 22 3a 61 2e 6c 7d 7d 7d 3b 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 63 2c 43 3a 64 2c 54 3a 65 7d 3d 6c 28 61 2c 62 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 4c 3a 31 2c 43 3a 76 6f 69 64 20 30 2c 4a 62 3a 64 2c 76 61 6c 75 65 3a 65 2c 4a 63 3a 21 31 Data Ascii: efaultValue,l:a.l}};Aa=function(a){return(b,c,d)=>{const {tag:e,C:f,T:g}=l(b,c,d);return{L:5,tag:e,C:f,H:g,Ab:za.l,l:"object"===a?"object":"enum"===a?"string":a.l}}};p=function(a,b){const {tag:c,C:d,T:e}=l(a,b);return{tag:c,L:1,C:void 0,Jb:d,value:e,Jc:!1
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 2c 5b 5d 29 7d 73 74 61 74 69 63 20 42 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 63 61 28 65 2c 5b 5d 29 7d 73 74 61 74 69 63 20 63 61 28 65 2c 66 29 7b 76 61 72 20 7b 55 61 3a 67 7d 3d 63 28 29 3b 63 6f 6e 73 74 20 68 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 64 2e 70 72 6f 74 6f 74 79 70 65 29 3b 66 6f 72 28 63 6f 6e 73 74 20 78 20 6f 66 20 67 29 7b 63 6f 6e 73 74 20 72 3d 78 2e 63 6f 6e 66 69 67 2c 77 3d 78 2e 6e 61 6d 65 3b 76 61 72 20 6b 3d 78 2e 46 2c 71 3d 78 2e 55 2c 6e 3d 6b 3b 67 3d 65 5b 6e 5d 3b 6e 75 6c 6c 3d 3d 67 26 26 6e 75 6c 6c 21 3d 71 26 26 6e 75 6c 6c 21 3d 65 5b 71 5d 26 26 28 6e 3d 71 2c 67 3d 65 5b 6e 5d 29 3b 73 77 69 74 63 68 28 72 2e 4c 29 7b 63 61 73 65 20 33 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 68 5b 77 5d 3d 76 6f 69 64 20 Data Ascii: ,[])}static B(e){return d.ca(e,[])}static ca(e,f){var {Ua:g}=c();const h=Object.create(d.prototype);for(const x of g){const r=x.config,w=x.name;var k=x.F,q=x.U,n=k;g=e[n];null==g&&null!=q&&null!=e[q]&&(n=q,g=e[n]);switch(r.L){case 3:if(null==g){h[w]=void
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 72 22 3d 3d 3d 72 2e 41 62 3b 71 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 67 29 3b 0a 6d 3d 41 72 72 61 79 28 71 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 79 3d 30 3b 79 3c 71 2e 6c 65 6e 67 74 68 3b 2b 2b 79 29 7b 63 6f 6e 73 74 20 5b 43 2c 46 5d 3d 71 5b 79 5d 3b 69 66 28 6b 29 7b 69 66 28 75 3d 4e 75 6d 62 65 72 28 43 29 2c 69 73 4e 61 4e 28 75 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 6e 75 6d 62 65 72 20 6d 61 70 20 6b 65 79 2c 20 66 6f 75 6e 64 3a 20 4e 61 4e 20 24 7b 47 28 5b 2e 2e 2e 66 2c 6e 5d 29 7d 60 29 3b 7d 65 6c 73 65 20 75 3d 43 3b 69 66 28 74 79 70 65 6f 66 20 46 21 3d 3d 72 2e 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 72 Data Ascii: r"===r.Ab;q=Object.entries(g);m=Array(q.length);for(y=0;y<q.length;++y){const [C,F]=q[y];if(k){if(u=Number(C),isNaN(u))throw new TypeError(`Expected number map key, found: NaN ${G([...f,n])}`);}else u=C;if(typeof F!==r.l)throw new TypeError(`Expected ${r
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 2e 70 75 73 68 28 60 24 7b 75 7d 5b 24 7b 72 7d 5d 60 29 3b 63 6f 6e 73 74 20 77 3d 76 28 6d 5b 72 5d 2c 66 29 3b 66 2e 70 6f 70 28 29 3b 69 66 28 74 79 70 65 6f 66 20 77 21 3d 3d 6b 2e 6c 29 74 68 72 6f 77 20 45 28 7b 46 3a 6e 7d 2c 77 2c 6b 2e 6c 2c 5b 2e 2e 2e 66 2c 75 5d 2c 72 29 3b 78 5b 72 5d 3d 77 7d 71 5b 75 5d 3d 78 7d 65 6c 73 65 7b 66 6f 72 28 76 3d 30 3b 76 3c 6d 2e 6c 65 6e 67 74 68 3b 2b 2b 76 29 69 66 28 74 79 70 65 6f 66 20 6d 5b 76 5d 21 3d 3d 6b 2e 6c 29 74 68 72 6f 77 20 45 28 7b 46 3a 6e 7d 2c 0a 6d 5b 76 5d 2c 6b 2e 6c 2c 5b 2e 2e 2e 66 2c 75 5d 2c 76 29 3b 71 5b 75 5d 3d 6d 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 69 66 28 21 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: .push(`${u}[${r}]`);const w=v(m[r],f);f.pop();if(typeof w!==k.l)throw E({F:n},w,k.l,[...f,u],r);x[r]=w}q[u]=x}else{for(v=0;v<m.length;++v)if(typeof m[v]!==k.l)throw E({F:n},m[v],k.l,[...f,u],v);q[u]=m}break;case 5:if(!(m instanceof Map))throw new TypeErr
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 6e 73 69 73 74 65 6e 74 2e 20 24 7b 6b 2e 55 7d 20 24 7b 75 2e 6a 61 7d 60 29 3b 79 3d 77 2e 74 61 67 3b 6b 3d 7b 46 3a 75 2e 61 61 2c 55 3a 75 2e 6a 61 7d 7d 69 66 28 6e 75 6c 6c 3d 3d 6b 7c 7c 6e 75 6c 6c 3d 3d 79 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 6e 65 4f 66 20 68 61 73 20 6e 6f 20 63 61 73 65 73 2e 22 29 3b 67 3d 62 28 29 3b 75 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 67 29 3b 76 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 78 20 6f 66 20 75 29 76 5b 67 5b 78 5d 2e 74 61 67 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 67 5b 78 5d 2c 7b 6e 61 6d 65 3a 78 7d 29 3b 78 3d 6e 75 6c 6c 21 3d 63 2e 48 63 3f 63 2e 48 63 28 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 7b 74 79 70 65 3a 32 2c 55 61 3a 43 61 28 67 2c 63 2e 54 Data Ascii: nsistent. ${k.U} ${u.ja}`);y=w.tag;k={F:u.aa,U:u.ja}}if(null==k\|\|null==y)throw new TypeError("OneOf has no cases.");g=b();u=Object.keys(g);v={};for(var x of u)v[g[x].tag]=Object.assign({},g[x],{name:x});x=null!=c.Hc?c.Hc():void 0;return{type:2,Ua:Ca(g,c.T
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 60 54 68 65 20 70 72 6f 74 6f 20 65 6e 75 6d 20 73 65 72 69 61 6c 69 7a 65 72 20 66 61 69 6c 65 64 20 74 6f 20 73 65 72 69 61 6c 69 7a 65 20 76 61 6c 75 65 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 29 7d 20 69 6e 74 6f 20 4a 53 4f 4e 2e 0a 49 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 63 6f 67 6e 69 7a 65 20 76 61 6c 75 65 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 29 7d 20 61 73 20 61 20 76 61 6c 69 64 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 54 79 70 65 53 63 72 69 70 74 20 65 6e 75 6d 2e 0a 24 7b 6b 3f 47 28 6b 29 3a 22 22 7d 60 29 3b 72 65 74 75 72 6e 20 68 7d 2c 66 3d 28 67 2c 68 29 3d 3e 7b 63 6f 6e 73 74 20 6b 3d 64 28 29 2e 47 64 2e 67 65 74 28 67 29 3b 69 66 28 6e 75 6c 6c 3d 3d 6b 29 74 68 72 6f 77 20 6e 65 77 20 54 Data Ascii: `The proto enum serializer failed to serialize value ${JSON.stringify(g)} into JSON.It does not recognize value ${JSON.stringify(g)} as a valid member of the TypeScript enum.${k?G(k):""}`);return h},f=(g,h)=>{const k=d().Gd.get(g);if(null==k)throw new T
2024-03-27 20:20:10 UTC	1369	IN	Data Raw: 65 63 74 65 64 20 6f 70 74 69 6f 6e 61 6c 20 24 7b 63 7d 20 76 61 6c 75 65 20 66 6f 72 20 6b 65 79 20 24 7b 45 61 28 61 29 7d 2c 20 66 6f 75 6e 64 3a 20 24 7b 48 28 62 29 7d 20 24 7b 47 28 64 29 7d 60 29 7d 3b 0a 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 63 7d 20 76 61 6c 75 65 24 7b 76 6f 69 64 20 30 21 3d 3d 65 3f 60 20 61 74 20 69 6e 64 65 78 20 24 7b 65 7d 60 3a 22 22 7d 20 66 6f 72 20 6b 65 79 20 24 7b 45 61 28 61 29 7d 2c 20 66 6f 75 6e 64 3a 20 24 7b 48 28 62 29 7d 20 24 7b 47 28 64 29 7d 60 29 7d 3b 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 46 3b 72 65 74 75 72 6e 28 61 3d 61 2e 55 29 3f 60 65 Data Ascii: ected optional ${c} value for key ${Ea(a)}, found: ${H(b)} ${G(d)}`)};E=function(a,b,c,d,e){return new TypeError(`Expected ${c} value${void 0!==e?` at index ${e}`:""} for key ${Ea(a)}, found: ${H(b)} ${G(d)}`)};Ea=function(a){const b=a.F;return(a=a.U)?`e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49874	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:11 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:11 UTC	914	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21462da247fa2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21462da247fa2 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H5m4MuCS7z1gNrU%2FCxX7ztVmtxbWGvrmrQO0PiNaIJX%2F6T4rx3RCDnn5doDfwdSYLvQ5mz9GlXU5q4uS%2BqjYqxlN6L0%2BcPHhPGV0dNIPcnN5uG%2BmwBoTOzoz1Mh%2B1PY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:11 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49875	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:11 UTC	1274	OUT	GET /web/a42419d3d437dc30.js HTTP/1.1 Host: static.canva.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:11 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:11 GMT Content-Type: text/javascript Content-Length: 5538 Connection: close CF-Ray: 86b21463fca159ec-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63998 Cache-Control: public, max-age=31556926 ETag: "3f28c4776444d0f5eb4051f477019438" Expires: Fri, 28 Mar 2025 02:08:57 GMT Last-Modified: Wed, 27 Mar 2024 02:24:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: j089t7klbyqweNLMFuVxjYDv8Qf1bJBjHe4PNE0iDPk1RXBd+xrfS+ZUKzM3iTgdjXBXqqzwx88= x-amz-replication-status: PENDING x-amz-request-id: 511ACJK5RMTRD04Z x-amz-server-side-encryption: AES256 x-amz-version-id: 6.eQS1CAMDSsZStCgZPv72EiRijU0mvt X-Content-Type-Options: nosniff
2024-03-27 20:20:11 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 72 31 79 68 51 49 71 33 45 25 32 42 6c 31 37 52 6a 64 4e 65 6c 47 70 66 35 4a 33 62 6d 73 73 59 25 32 42 4f 6b 70 41 25 32 46 6b 76 73 63 53 41 73 4b 58 43 77 4b 39 55 38 4f 35 4b 41 25 32 46 72 54 25 32 42 36 37 4d 70 47 65 4a 44 62 4f 6e 6f 4b 6a 57 78 50 50 78 66 78 53 6f 39 67 77 46 59 55 75 37 68 54 67 46 59 4e 37 45 73 31 44 43 73 63 49 47 67 55 64 47 33 37 75 56 37 68 72 50 42 6f 52 34 61 30 32 73 54 65 44 4b 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r1yhQIq3E%2Bl17RjdNelGpf5J3bmssY%2BOkpA%2FkvscSAsKXCwK9U8O5KA%2FrT%2B67MpGeJDbOnoKjWxPPxfxSo9gwFYUu7hTgFYN7Es1DCscIGgUdG37uV7hrPBoR4a02sTeDKM%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:11 UTC	1197	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 31 30 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 33 37 37 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 34 37 36 38 33 34 29 3b 73 65 6c 66 2e 5f 65 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5110],{/***/ 13778:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(476834);self._e4
2024-03-27 20:20:11 UTC	1369	IN	Data Raw: 3f 76 6f 69 64 20 30 3a 62 2e 73 75 62 74 6c 65 3b 69 66 28 63 29 72 65 74 75 72 6e 20 61 3d 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 2e 65 6e 63 6f 64 65 28 61 29 2c 61 3d 61 77 61 69 74 20 63 2e 64 69 67 65 73 74 28 7b 6e 61 6d 65 3a 22 53 48 41 2d 32 35 36 22 7d 2c 61 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 29 2e 6d 61 70 28 64 3d 3e 64 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2e 6a 6f 69 6e 28 22 22 29 3b 63 3d 30 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 63 3d 4d 61 74 68 2e 69 6d 75 6c 28 33 31 2c 0a 63 29 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 29 3b 72 65 74 75 72 6e 20 63 2e 74 6f 53 74 72 69 6e 67 28 29 Data Ascii: ?void 0:b.subtle;if(c)return a=(new TextEncoder).encode(a),a=await c.digest({name:"SHA-256"},a),Array.from(new Uint8Array(a)).map(d=>d.toString(16).padStart(2,"0")).join("");c=0;for(b=0;b<a.length;++b)c=Math.imul(31,c)+a.charCodeAt(b);return c.toString()
2024-03-27 20:20:11 UTC	1369	IN	Data Raw: 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 59 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 59 29 3b 76 61 72 20 63 3d 61 77 61 69 74 20 61 2e 67 65 74 28 62 29 3b 63 3d 6e 65 77 20 4f 67 28 7b 6b 65 79 3a 62 2c 56 3a 63 3f 28 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 56 29 2b 31 3a 31 7d 29 3b 61 77 61 69 74 20 61 2e 70 75 74 28 63 2c 62 29 7d 2c 51 67 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 77 61 69 74 20 61 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5a 2c 22 72 65 61 64 77 72 69 74 65 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 5a 29 2e 70 75 74 28 63 2c 62 29 7d 2c 46 Data Ascii: ync function(a,b){a=a.db.transaction(Y,"readwrite").objectStore(Y);var c=await a.get(b);c=new Og({key:b,V:c?(null===c\|\|void 0===c?void 0:c.V)+1:1});await a.put(c,b)},Qg=async function(a,b,c){await a.db.transaction(Z,"readwrite").objectStore(Z).put(c,b)},F
2024-03-27 20:20:11 UTC	1369	IN	Data Raw: 67 29 3b 72 65 74 75 72 6e 20 30 3e 3d 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5a 2c 22 72 65 61 64 6f 6e 6c 79 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 5a 29 2e 67 65 74 41 6c 6c 28 29 29 2e 6c 65 6e 67 74 68 7d 6f 6b 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 0a 74 68 69 73 2e 64 62 7d 61 73 79 6e 63 20 73 69 7a 65 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 64 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5a 67 29 3b 72 65 74 75 72 6e 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5a 2c 22 72 65 61 64 6f 6e 6c 79 22 29 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 5a 29 2e 67 65 74 41 6c 6c 28 29 29 2e 6c 65 6e 67 74 68 7d 61 73 79 6e 63 20 51 62 28 61 2c Data Ascii: g);return 0>=(await this.db.transaction(Z,"readonly").objectStore(Z).getAll()).length}ok(){return void 0!==this.db}async size(){if(void 0===this.db)throw Error(Zg);return(await this.db.transaction(Z,"readonly").objectStore(Z).getAll()).length}async Qb(a,
2024-03-27 20:20:11 UTC	234	IN	Data Raw: 64 65 66 69 6e 65 64 2e 20 45 6e 73 75 72 65 20 79 6f 75 20 68 61 76 65 20 63 61 6c 6c 65 64 20 69 6e 69 74 28 29 22 3b 57 67 3d 22 4f 66 66 6c 69 6e 65 45 72 72 6f 72 53 74 6f 72 65 4c 6f 63 6b 22 3b 4c 67 3d 33 30 3b 56 67 3d 31 30 30 3b 4b 67 3d 31 2e 36 36 36 36 37 45 2d 35 3b 5f 5f 63 2e 71 64 3d 7b 7d 3b 5f 5f 63 2e 71 64 2e 63 63 3d 24 67 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 65 34 37 37 33 64 36 39 33 32 36 31 36 61 38 35 66 32 65 61 63 38 36 66 34 33 37 64 66 38 66 37 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 61 34 32 34 31 39 64 33 64 34 33 37 64 63 33 30 2e 6a 73 2e 6d 61 70 Data Ascii: defined. Ensure you have called init()";Wg="OfflineErrorStoreLock";Lg=30;Vg=100;Kg=1.66667E-5;__c.qd={};__c.qd.cc=$g;}).call(self, self._e4773d6932616a85f2eac86f437df8f7);}}])//# sourceMappingURL=sourcemaps/a42419d3d437dc30.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49876	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:12 UTC	2790	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:12 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 33 2c 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 31 2e 37 30 34 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":3,"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":1.704,"G":"C"}
2024-03-27 20:20:12 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21468d981062c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21468d981062c X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIwpkl0og2nSFky%2Fs%2B72byp2M1eL0FySfMM1baktlfi3gejEEdVobrnDh11LwSqwDtclZnNZfECzQgV%2BvzEyKxw4bjlUt61clJsdnGOBwQoIdUqRYsKJRYwT1mjMhMo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:12 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49877	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:12 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:12 UTC	906	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2146c5b8d0610-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2146c5b8d0610 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fNdWhr8Y1RC22aNM2qARYddbW0JA5LFSZvOhW5OnjZ1x4dcXlHI134SFhfYxDudppNSiQrmVBcCviWI%2BDszU0iY7ZQjTNx8iAsA1omGP6dyZW1d4R%2FGOHwQK5nYiVIU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:12 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49882	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:14 UTC	2790	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:14 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 34 2c 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 32 2e 36 32 31 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":4,"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":2.621,"G":"C"}
2024-03-27 20:20:15 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:14 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21478aa2f0641-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21478aa2f0641 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B3y8Hik2asNNjoiKsufbg13mmYZVpQCJoDuthzdpKvr4eJ%2BGxYpVrxwCbcrSMvvmyIVbEAt5ALCC0xrxLDpqTQNWjGZcDzRDfL6dKulAAeDn1NkfRyI4mwHNaG%2BKABg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:15 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49884	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:15 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:15 UTC	914	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:15 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2147bfdd18018-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2147bfdd18018 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9R6gV%2F3JsTWUA%2BOoNZTxYQPWr2VHlRAuRKHa5azoW%2FeofASaEBw0Kv6bor5ibj1R6mHPWXxQ%2FHlacprlV3QBjLyuGgYOZSeF6rZRT4%2BM7Yf%2BfLRaMmyvQFKIqK7g45I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:15 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49887	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:18 UTC	2303	OUT	GET / HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:19 UTC	1282	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2149338781ffd-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-h28b9EkACH4DgbDs/D7phw'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=86b2149338781ffd&app=anon_home&policyHash=35a2414c Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-Request-ID: 86b2149338781ffd X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UVHrQSdGDYZ9VlYHDlNRqhwQCcpeRjg57vIJ1m5ynx2p7EePhRd2bC8HyOqTEpW3ZC8UWlntKkc975cWK%2F4dMBSI6e5Ze570Z6NjL27OgFuIpuyTfB4m3w4aUGd8HQI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	87	IN	Data Raw: 37 61 61 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 Data Ascii: 7aa2<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 43 61 6e 76 61 3a 20 56 69 73 75 61 6c 20 53 75 69 74 65 20 66 6f 72 20 45 76 65 72 79 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6e 6f 6e 5f 68 6f 6d 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 34 35 65 63 33 37 36 62 65 64 39 61 31 39 66 63 2e 6c 74 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 Data Ascii: charset="utf-8"><title>Canva: Visual Suite for Everyone</title><meta name="app-name" content="anon_home" /><meta name="viewport" content="width=device-width, initial-scale=1"><link href="https://static.canva.com/web/45ec376bed9a19fc.ltr.css" rel="styleshe
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 20 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 63 66 66 31 34 39 65 65 31 65 39 64 32 62 65 35 30 61 63 37 Data Ascii: +02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:normal;font-weight:400 700;src:url(https://static.canva.com/web/images/cff149ee1e9d2be50ac7
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 47 72 61 70 68 69 63 73 5f 73 6f 66 74 77 61 72 65 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6e 76 61 22 2c 22 6c 65 67 61 6c 4e 61 6d 65 22 3a 22 43 61 6e 76 61 20 50 74 79 20 4c 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 6e 6f 6e 5f 68 6f 6d 65 2f 63 61 6e 76 61 2d 6c 6f 67 6f 2e 70 6e 67 22 2c 22 63 6f 6e 74 61 63 74 50 6f 69 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 43 6f 6e 74 61 63 74 50 6f 69 6e 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 65 6c Data Ascii: :"https://en.wikipedia.org/wiki/Graphics_software","name":"Canva","legalName":"Canva Pty Ltd","url":"https://www.canva.com","logo":"https://static.canva.com/anon_home/canva-logo.png","contactPoint":[{"@type":"ContactPoint","url":"https://www.canva.com/hel
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 66 5f 7a 61 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 66 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 72 5f 65 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 73 5f 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 Data Ascii: ttps://www.canva.com/"><link rel="alternate" href="https://www.canva.com/af_za/" hreflang="af"><link rel="alternate" href="https://www.canva.com/ar_eg/" hreflang="ar"><link rel="alternate" href="https://www.canva.com/as_in/" hreflang="as"><link rel="alter
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 63 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 43 4f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 65 73 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 6d 78 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 75 73 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 55 53 22 Data Ascii: anva.com/es_co/" hreflang="es-CO"><link rel="alternate" href="https://www.canva.com/es_es/" hreflang="es"><link rel="alternate" href="https://www.canva.com/es_mx/" hreflang="es-MX"><link rel="alternate" href="https://www.canva.com/es_us/" hreflang="es-US"
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 79 5f 61 6d 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 64 5f 69 64 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 67 5f 6e 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 74 5f 69 74 2f 22 20 68 72 65 66 6c 61 6e 67 Data Ascii: "https://www.canva.com/hy_am/" hreflang="hy"><link rel="alternate" href="https://www.canva.com/id_id/" hreflang="id"><link rel="alternate" href="https://www.canva.com/ig_ng/" hreflang="ig"><link rel="alternate" href="https://www.canva.com/it_it/" hreflang
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 72 5f 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 73 5f 6d 79 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 79 5f 6d 6d 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6e 62 5f 6e 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d Data Ascii: https://www.canva.com/mr_in/" hreflang="mr"><link rel="alternate" href="https://www.canva.com/ms_my/" hreflang="ms"><link rel="alternate" href="https://www.canva.com/my_mm/" hreflang="my"><link rel="alternate" href="https://www.canva.com/nb_no/" hreflang=
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6e 5f 7a 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6f 5f 73 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 71 5f 61 6c 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 71 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 72 5f 72 73 2f 22 20 68 Data Ascii: " href="https://www.canva.com/sn_zw/" hreflang="sn"><link rel="alternate" href="https://www.canva.com/so_so/" hreflang="so"><link rel="alternate" href="https://www.canva.com/sq_al/" hreflang="sq"><link rel="alternate" href="https://www.canva.com/sr_rs/" h
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 68 6b 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 48 4b 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 74 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 54 57 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 75 5f 7a 61 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 75 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 20 68 72 Data Ascii: href="https://www.canva.com/zh_hk/" hreflang="zh-HK"><link rel="alternate" href="https://www.canva.com/zh_tw/" hreflang="zh-TW"><link rel="alternate" href="https://www.canva.com/zu_za/" hreflang="zu"><link rel="alternate" href="https://www.canva.com/" hr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49886	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:18 UTC	2790	OUT	POST /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 86 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: k8uk0YZbD_O6z8h4Scp_a9ou5HgNuwuwVIjUK243AuOeeLw_K99HaXhYpIVmWAXpQgsruK1zlGEkJl3bkJRrY-P4rLaVqen89XeUeHoogIwZXNup X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordheartbeat sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:18 UTC	86	OUT	Data Raw: 7b 22 41 22 3a 35 2c 22 42 22 3a 22 36 64 31 62 34 65 65 38 2d 65 66 30 38 2d 34 66 61 31 2d 38 63 36 63 2d 30 31 31 33 62 37 36 33 37 35 35 63 22 2c 22 43 22 3a 22 44 41 47 41 74 58 41 4a 75 66 4d 22 2c 22 45 22 3a 34 2e 31 39 34 2c 22 47 22 3a 22 43 22 7d Data Ascii: {"A":5,"B":"6d1b4ee8-ef08-4fa1-8c6c-0113b763755c","C":"DAGAtXAJufM","E":4.194,"G":"C"}
2024-03-27 20:20:19 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21492ac463ae2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21492ac463ae2 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wr4UiChpODGshYaeBu5dzRDyAa5mutx6e5NSbH4EG8y7KyGExJFMRTOWL%2BCjZt6nxR%2FYhFsZOBInK66QUBL%2F2tz%2FS0oBBGbXLxwL4nmy6Fmm%2FsQe6JkjTgtfT9uMB9o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49891	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1996	OUT	GET /_ajax/designinsight/heartbeats HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:19 UTC	906	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21496fc68059f-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21496fc68059f X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qB6pS9dVnPlRTlWtU7xZBoxzls38Vb8fv2P0ALiKB4suubgcBji4WRbf5WMzsqNcKcV0Fvb1LNy6Vlq2LTmPMdctWyqE2CCFmSQMxE5%2BsKlOI5bUXSsUX4sq%2F0FY4L4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49888	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	2771	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 4334 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:19 UTC	4334	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 39 38 39 36 65 39 63 30 2d 31 35 65 65 2d 34 35 65 36 2d 38 32 63 33 2d 61 63 64 36 64 32 64 64 66 64 66 36 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 31 38 2e 34 37 33 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 31 39 2e 31 39 31 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"9896e9c0-15ee-45e6-82c3-acd6d2ddfdf6","E":"2024-03-27T20:20:18.473Z","F":"2024-03-27T20:20:19.191Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:19 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21496bca8057a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21496bca8057a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d1FfKfOUOACY6qhLlbUCfknNUJqJxvsjpQbnhmTGgdcbJS95PeSLQSthvdFerjpLGtYr6nxRiSeKDxRxG2J3ln8yy%2BshaSorAchJRTqfzBDQ7y%2BdS3LnkWWHXvDUTJo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49889	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	582	OUT	GET /web/45ec376bed9a19fc.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:19 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/css Content-Length: 108588 Connection: close CF-Ray: 86b21496fb8a8256-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 64180 Cache-Control: public, max-age=31556926 ETag: "39414cb608b501694c882e2f670146c8" Expires: Fri, 28 Mar 2025 02:09:05 GMT Last-Modified: Wed, 27 Mar 2024 02:20:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Lxm8itwto15BFav/0klVVdB/aFha1nDSv+9EWWveOCF1FQ9oi4yUCKqBGEUkemvire+WRkUGP18= x-amz-replication-status: COMPLETED x-amz-request-id: DXJEW9XKGHWX87YA x-amz-server-side-encryption: AES256 x-amz-version-id: b_Cf6YrxV8TG8Kq_Ck1OpBYAmfzWFJn3 X-Content-Type-Options: nosniff
2024-03-27 20:20:19 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 48 59 78 38 5a 4d 5a 6a 4f 6b 61 61 63 63 37 46 63 49 53 6e 4f 64 56 55 61 4c 54 48 32 43 69 6b 55 74 54 39 64 74 6a 47 70 79 6b 2d 31 37 31 31 35 37 30 38 31 39 2d 31 2e 30 2e 31 2e 31 2d 74 6c 34 6b 33 6e 5f 57 43 37 50 35 66 39 42 34 33 5a 72 71 56 47 4d 7a 64 58 78 62 6f 67 52 69 50 75 33 44 6e 79 31 6d 63 46 59 58 4c 74 63 33 51 65 47 33 71 31 6d 66 49 49 38 6d 32 75 55 66 5f 50 63 71 65 6c 2e 62 55 6b 4d 5a 67 68 73 30 44 66 6b 49 75 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 31 39 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=HYx8ZMZjOkaacc7FcISnOdVUaLTH2CikUtT9dtjGpyk-1711570819-1.0.1.1-tl4k3n_WC7P5f9B43ZrqVGMzdXxbogRiPu3Dny1mcFYXLtc3QeG3q1mfII8m2uUf_Pcqel.bUkMZghs0DfkIug; path=/; expires=Wed, 27-Mar-24 20:50:19 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:19 UTC	605	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 54 57 46 34 72 77 29 7d 2e 6c 69 67 68 74 7b 2d 2d 54 57 46 34 72 77 3a 6c 69 67 68 74 3b 2d 2d 74 4e 31 4d 4d 41 3a 23 30 30 63 34 63 63 3b 2d 2d 5f 6d 48 4c 72 41 3a 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 Data Ascii: .theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QY
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2c 32 32 2c 30 29 3b 2d 2d 66 67 41 4c 55 77 3a 23 30 64 31 32 31 36 3b 2d 2d 6e 34 4c 31 73 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 6e 65 4a 71 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 56 44 43 55 4e 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 45 30 35 59 41 51 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 73 61 6e 6c 43 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 63 39 6b 61 51 51 3a 23 30 64 31 32 31 36 3b 2d 2d 47 56 36 72 75 51 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5f 7a 4b 42 51 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 66 50 4e 5f 77 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 Data Ascii: ,22,0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2d 2d 4d 31 59 4c 45 67 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 2e 37 29 3b 2d 2d 66 46 55 41 65 41 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 30 29 3b 2d 2d 71 4b 33 6e 38 77 3a 23 66 36 66 37 66 38 3b 2d 2d 6a 69 70 57 78 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 4f 72 47 68 4a 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 62 44 62 6c 59 77 3a 23 66 66 66 3b 2d 2d 59 6c 42 4a 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 59 35 68 69 65 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 54 6c 55 75 64 51 3a 23 66 66 66 3b 2d 2d 6d 4d 65 5f 55 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 34 53 76 70 39 51 3a Data Ascii: --M1YLEg:rgba(235,236,240,.7);--fFUAeA:rgba(235,236,240,0);--qK3n8w:#f6f7f8;--jipWxQ:rgba(246,247,248,.7);--OrGhJg:rgba(246,247,248,0);--bDblYw:#fff;--YlBJZQ:hsla(0,0%,100%,.7);--Y5hieQ:hsla(0,0%,100%,0);--TlUudQ:#fff;--mMe_UA:hsla(0,0%,100%,.7);--4Svp9Q:
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 Data Ascii: #8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:hsla(0,0%,100%,.07);--4Yobmg:#fff;--9QR_hg:hsla(0,0%,100%,.4);--K12xjw:hsla(0,0%,100%,.07);--B2THfg:hsla(0,0%,100%,.15);--QYA_-A:hsla(0,0%,100%,.2);--ctGD3w:hsla(0,0%,100%,.07);--_T63JA:#fff;--oXjekw:hsla
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 23 66 66 66 3b 2d 2d 37 4a 73 6a 33 41 3a 23 66 66 66 3b 2d 2d 52 64 32 35 6c 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 44 50 36 71 71 51 3a 23 31 61 36 32 66 66 3b 2d 2d 57 4a 39 78 78 51 3a 23 33 64 38 62 66 66 3b 2d 2d 6b 4a 46 69 7a 51 3a 23 31 38 35 35 64 38 3b 2d 2d 59 4f 79 31 6b 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 61 78 63 6b 56 67 3a 23 31 64 33 62 37 63 3b 2d 2d 54 6a 5a 34 67 67 3a 23 66 66 66 3b 2d 2d 79 70 41 76 62 51 3a 23 66 66 66 3b 2d 2d 79 75 44 57 31 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 78 51 4f 6d 41 77 3a 23 61 64 35 61 30 30 3b 2d 2d 53 50 4b 6f 42 51 3a 23 64 31 37 36 30 30 3b 2d 2d 66 4e 4e 46 66 51 3a 23 39 34 34 66 30 35 3b 2d 2d 7a 62 Data Ascii: #fff;--7Jsj3A:#fff;--Rd25lA:hsla(0,0%,100%,.4);--DP6qqQ:#1a62ff;--WJ9xxQ:#3d8bff;--kJFizQ:#1855d8;--YOy1kQ:hsla(0,0%,100%,.07);--axckVg:#1d3b7c;--TjZ4gg:#fff;--ypAvbQ:#fff;--yuDW1w:hsla(0,0%,100%,.4);--xQOmAw:#ad5a00;--SPKoBQ:#d17600;--fNNFfQ:#944f05;--zb
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 42 32 54 48 66 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 63 74 47 44 33 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 66 66 66 3b 2d 2d 6f 58 6a 65 6b 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 68 6a 56 73 72 77 3a 23 34 61 32 65 37 66 3b 2d 2d 6f 6e 32 31 61 77 3a 23 34 61 32 65 37 66 3b 2d 2d 46 4e 55 51 34 67 3a 23 33 36 32 35 35 62 3b 2d 2d 36 52 64 37 55 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 6e 66 75 5f 6f 67 3a 23 66 31 65 62 66 66 3b 2d 2d 75 78 33 64 6f 51 3a 68 73 6c 61 28 30 Data Ascii: la(0,0%,100%,0);--B2THfg:hsla(0,0%,100%,.15);--QYA_-A:hsla(0,0%,100%,.07);--ctGD3w:hsla(0,0%,100%,0);--_T63JA:#fff;--oXjekw:hsla(0,0%,100%,.4);--hjVsrw:#4a2e7f;--on21aw:#4a2e7f;--FNUQ4g:#36255b;--6Rd7UQ:hsla(0,0%,100%,.15);--nfu_og:#f1ebff;--ux3doQ:hsla(0
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 6d 4c 5f 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 4b 59 56 6b 52 51 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 7d 2e 57 36 6c 6c 6b 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 5f 38 61 39 4b 35 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 61 72 74 7d 2e 51 39 31 77 57 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 4a 4e 31 4d 30 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 65 6e 64 7d 2e 6d 5a 42 36 67 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 7d 2e 6c 69 67 68 74 7b 2d 2d 59 6b 42 70 7a 41 3a 23 66 36 66 37 66 38 7d 2e 64 61 72 6b 7b 2d 2d 59 6b 42 70 7a 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 7d 2e 5f 36 68 4e 42 79 67 7b 62 Data Ascii: mL_Q{align-items:flex-end}.KYVkRQ{align-self:stretch}.W6llkg{align-self:center}._8a9K5A{align-self:start}.Q91wWg{align-self:flex-start}.JN1M0g{align-self:end}.mZB6gA{align-self:flex-end}.light{--YkBpzA:#f6f7f8}.dark{--YkBpzA:hsla(0,0%,100%,.15)}._6hNByg{b
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 28 2d 2d 79 70 41 76 62 51 29 7d 2e 78 5f 35 62 30 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 70 48 6f 7a 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 30 31 77 30 41 29 7d 2e 5f 32 5a 31 37 32 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6b 38 4c 61 61 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 58 52 6f 2d 4e 51 29 7d 2e 7a 6a 50 43 46 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 55 56 37 68 41 29 7d 2e 4e 37 46 4c 42 41 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 71 49 42 34 62 77 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 74 4b 54 6c 35 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 57 33 6a 43 4f 51 7b 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: (--ypAvbQ)}.x_5b0w{background-color:var(--wpHozg);color:var(--a01w0A)}._2Z172g{background-color:var(--k8LaaQ);color:var(--XRo-NQ)}.zjPCFw{color:var(--pUV7hA)}.N7FLBA{border-radius:4px}.qIB4bw{border-radius:8px}.tKTl5g{border-radius:4px}.W3jCOQ{border-radi
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2d 2d 34 4d 48 78 57 51 29 3b 2d 2d 4f 71 43 74 48 41 3a 76 61 72 28 2d 2d 4b 5a 33 48 68 77 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 68 72 73 37 5f 77 7b 2d 2d 6e 55 58 39 4c 41 3a 76 61 72 28 2d 2d 4b 5a 33 48 68 77 29 3b 2d 2d 4f 71 43 74 48 41 3a 76 61 72 28 2d 2d 6e 55 58 39 4c 41 29 7d 7d 2e 5f 55 38 66 55 51 7b 2d 2d 50 7a 4c 75 66 67 3a 72 6f 77 3b 2d 2d 63 4e 71 45 4f 51 3a 76 61 72 28 2d 2d 50 7a 4c 75 66 67 29 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 63 4e 71 45 4f 51 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 5f 55 38 66 55 51 7b 2d 2d 41 6e 7a 39 35 77 3a 76 61 72 28 2d 2d 50 7a 4c 75 66 67 29 3b 2d 2d 63 4e 71 45 4f 51 3a 76 61 Data Ascii: --4MHxWQ);--OqCtHA:var(--KZ3Hhw)}}@media (min-width:1200px){.hrs7_w{--nUX9LA:var(--KZ3Hhw);--OqCtHA:var(--nUX9LA)}}._U8fUQ{--PzLufg:row;--cNqEOQ:var(--PzLufg);flex-direction:var(--cNqEOQ)}@media (min-width:600px){._U8fUQ{--Anz95w:var(--PzLufg);--cNqEOQ:va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49890	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1462	OUT	GET /web/images/12487a1e0770d29351bd4ce4f87ec8fe.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/svg+xml Content-Length: 4237 Connection: close CF-Ray: 86b21496fe995b11-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792675 Cache-Control: public, max-age=31556926 ETag: "12487a1e0770d29351bd4ce4f87ec8fe" Expires: Fri, 28 Mar 2025 02:09:05 GMT Last-Modified: Thu, 14 Mar 2024 09:09:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 15 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: PvAe/IcdVsQJ6pYsChfA5AFtAS/SKEdXCpl0hq/l5j/W4B1uMsq6IPtw0d0UNSU0H1+Yp2Q5rRw= x-amz-replication-status: COMPLETED x-amz-request-id: 3Q62SZW2GW35J8S9 x-amz-server-side-encryption: AES256 x-amz-version-id: kJaYOsVtwSsTYzrbAC67d66wbhzaAYUZ X-Content-Type-Options: nosniff
2024-03-27 20:20:19 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 59 38 32 64 53 74 52 79 4c 41 6d 4f 56 46 43 64 30 32 65 4f 6c 72 46 6c 41 39 41 62 58 62 58 25 32 42 58 4e 4e 72 4a 69 45 78 59 71 31 74 73 64 58 59 68 42 55 59 52 45 75 25 32 46 41 46 70 50 4a 32 56 46 6d 43 25 32 42 53 79 30 32 30 37 73 59 7a 72 55 39 73 78 4e 74 6f 7a 56 52 79 35 31 47 65 52 4e 62 56 47 6e 30 4b 35 69 56 74 52 47 77 37 39 78 56 4e 65 44 4c 38 74 4c 65 47 68 79 71 4f 75 50 75 43 31 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HY82dStRyLAmOVFCd02eOlrFlA9AbXbX%2BXNNrJiExYq1tsdXYhBUYREu%2FAFpPJ2VFmC%2BSy0207sYzrU9sxNtozVRy51GeRNbVGn0K5iVtRGw79xVNeDL8tLeGhyqOuPuC1E%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:19 UTC	1200	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 30 22 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 61 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 36 2e 38 30 30 30 32 20 2d 31 37 2e 32 38 20 31 31 2e 34 38 34 30 33 20 31 31 2e 31 36 35 30 34 20 34 30 2e 39 36 20 32 39 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="80" height="30" viewBox="0 0 80 30"><defs><radialGradient id="_2002046508__a" cx="0" cy="0" r="1" gradientTransform="matrix(16.80002 -17.28 11.48403 11.16504 40.96 29)" gradientUnits="userSpaceOnUse"><stop st
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 36 37 2e 39 39 39 38 32 20 31 35 2e 30 33 39 39 36 20 2d 31 38 2e 34 34 35 39 36 20 38 33 2e 33 39 39 32 35 20 37 2e 36 38 20 32 2e 39 32 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 30 30 43 34 43 43 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 30 30 43 34 43 43 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 70 61 74 74 65 72 6e 20 69 64 3d 22 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 66 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 3e 3c 70 61 74 68 Data Ascii: tTransform="matrix(67.99982 15.03996 -18.44596 83.39925 7.68 2.92)" gradientUnits="userSpaceOnUse"><stop stop-color="#00C4CC"/><stop offset="1" stop-color="#00C4CC" stop-opacity="0"/></radialGradient><pattern id="_2002046508__f" width="1" height="1"><path
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 36 20 32 2e 30 38 2d 36 2e 32 34 38 20 35 2e 39 37 36 2e 37 32 2d 32 2e 39 38 34 20 31 2e 30 31 36 2d 35 2e 38 37 32 2d 31 2e 31 31 36 2d 35 2e 38 37 32 41 32 2e 38 38 36 20 32 2e 38 38 36 20 30 20 30 20 30 20 33 36 20 39 2e 39 31 36 61 2e 37 35 32 2e 37 35 32 20 30 20 30 20 30 2d 2e 34 33 32 2e 37 32 38 63 2e 32 30 34 20 33 2e 31 37 36 2d 32 2e 35 36 20 31 31 2e 33 31 32 2d 35 2e 31 38 20 31 31 2e 33 31 32 2d 2e 34 37 36 20 30 2d 2e 37 30 38 2d 2e 35 31 36 2d 2e 37 30 38 2d 31 2e 33 34 38 20 30 2d 32 2e 32 39 36 20 31 2e 33 36 38 2d 37 2e 31 34 34 20 32 2e 30 35 36 2d 39 2e 33 36 34 2e 30 38 38 2d 2e 32 38 38 2e 31 33 36 2d 2e 35 33 36 2e 31 33 36 2d 2e 37 35 32 20 30 2d 2e 36 30 38 2d 2e 33 37 36 2d 2e 39 32 2d 31 2e 32 32 38 2d 2e 39 32 2d 2e 39 33 36 Data Ascii: 6 2.08-6.248 5.976.72-2.984 1.016-5.872-1.116-5.872A2.886 2.886 0 0 0 36 9.916a.752.752 0 0 0-.432.728c.204 3.176-2.56 11.312-5.18 11.312-.476 0-.708-.516-.708-1.348 0-2.296 1.368-7.144 2.056-9.364.088-.288.136-.536.136-.752 0-.608-.376-.92-1.228-.92-.936
2024-03-27 20:20:19 UTC	299	IN	Data Raw: 31 2e 32 34 20 32 2e 33 35 36 20 30 20 32 2e 38 39 32 2d 31 2e 38 35 32 20 37 2e 39 38 38 2d 33 2e 37 32 38 20 37 2e 39 38 38 7a 6d 33 37 2e 34 30 34 2d 38 2e 35 63 2d 2e 36 35 32 2d 2e 37 37 36 2d 2e 38 38 38 2d 31 2e 38 33 32 2d 2e 38 38 38 2d 32 2e 37 37 32 20 30 2d 31 2e 31 36 2e 34 32 34 2d 32 2e 31 34 2e 39 33 32 2d 32 2e 31 34 73 2e 36 36 34 2e 35 2e 36 36 34 20 31 2e 31 39 36 63 30 20 31 2e 31 36 34 2d 2e 34 31 36 20 32 2e 38 36 34 2d 2e 37 30 38 20 33 2e 37 31 36 7a 6d 38 2e 34 36 38 20 38 2e 35 63 2d 31 2e 30 39 32 20 30 2d 31 2e 35 32 2d 31 2e 32 36 34 2d 31 2e 35 32 2d 32 2e 37 34 20 30 2d 32 2e 37 34 38 20 31 2e 39 34 38 2d 37 2e 36 30 34 20 34 2e 30 32 34 2d 37 2e 36 30 34 2e 39 20 30 20 31 2e 32 32 20 31 2e 30 35 32 20 31 2e 32 32 20 32 2e Data Ascii: 1.24 2.356 0 2.892-1.852 7.988-3.728 7.988zm37.404-8.5c-.652-.776-.888-1.832-.888-2.772 0-1.16.424-2.14.932-2.14s.664.5.664 1.196c0 1.164-.416 2.864-.708 3.716zm8.468 8.5c-1.092 0-1.52-1.264-1.52-2.74 0-2.748 1.948-7.604 4.024-7.604.9 0 1.22 1.052 1.22 2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49896	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1522	OUT	GET /cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 4345 Connection: close CF-Ray: 86b21497ace720c0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfJUf1Gp80JtIcBO8CltIqrYphkiHsTARsnZIiJ4wGDQ:7ecda19a7b299e542c9945137f62ac74" Last-Modified: Wed, 15 Nov 2023 21:58:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=49+263 c=0+0 v=2024.3.2 l=4345 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0r94oa5DAx5lSKHd3rWrAy8PLexc%2F8yRroU8u4%2BOo4x3y1mDgufYDtZD2fLLzdJVVweZVmNF%2BcVmq0yjIDm7ffUE1daiKdblvFM9L2kUrh8WsRgNjF9Ve5UyOY0WUrXr6qJOvAGq3QP%2BuA7aronV9DuXb8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	334	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 10 07 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 10 0f 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD#iinfinfeav01Viprp8ipcoispehav1C?@pixiipmamdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 01 b7 ad 29 25 6f 42 f3 22 61 07 7c 03 92 68 d0 af ca c6 a3 62 aa 10 10 47 2f a8 5b 96 fc 2f 06 25 ee df 2f cd 4d fa 8c 25 8d b0 78 f8 e2 3a c7 b9 77 ef 14 d8 e1 46 61 f4 fc fd 94 e8 50 c8 01 ab ee 44 37 b0 a4 35 87 b8 de c7 e5 a9 f0 c4 da ac 18 70 52 8d 5d 0c 5a 26 1a a3 73 8c 4d 85 4f 4c 13 96 2f 99 de 0d cc ae 31 dc 0b 24 49 7c 39 c2 4f 8a a8 89 e6 92 e6 50 be 44 79 22 03 8d 62 03 ec a4 18 02 60 3b 82 04 7e 9a d0 79 19 64 3c 48 27 fc b5 d5 47 33 1e a3 06 78 9b e9 fc aa 76 ef 8f 5e 8c fd 98 4d b5 cb b8 9d 26 ed 31 0b ca 46 8f ff a1 be a4 40 6c c2 be 50 bb 38 3d 8f b8 af e1 77 91 9d d5 26 52 8a c9 17 a3 6f 22 b3 62 11 f4 c6 0b 0b 6b 0a ed 39 4c 96 cb 71 f8 a2 06 68 79 b2 9d 27 d0 cf a2 4c 66 22 1e e2 35 f7 4e dd b2 32 5b 49 a3 45 38 c3 cb 99 5d b1 f5 2c Data Ascii: )%oB"a\|hbG/[/%/M%x:wFaPD75pR]Z&sMOL/1$I\|9OPDy"b`;~yd<H'G3xv^M&1F@lP8=w&Ro"bk9Lqhy'Lf"5N2[IE8],
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 75 8e 89 a7 4c a3 12 9d 1c 04 62 da a2 dd 67 76 ed 9f db a5 a3 0c 15 43 8b 45 06 f8 f9 23 5e 6e 0c e4 95 f4 a8 61 e0 df 9e 47 d5 67 57 93 61 c8 1a b3 95 46 02 20 48 fc e6 46 0c 6f af 68 db eb 30 7b 10 fc 94 6c b6 65 4b 6a 8b 3b 95 46 77 a7 07 54 9a 96 8f e0 6e cc 6f 7d 09 57 fd c5 2c 0d 8d ba a8 c2 f5 19 4c ee c3 e9 db 6f 5c 72 a4 67 91 b2 4f 37 7d ff 61 0f 23 c8 21 38 e7 32 90 35 b8 c5 9c a8 15 6b f1 9c a2 25 72 33 18 e9 a0 0f 64 92 b0 4a 9b 2d 06 9a 12 73 9e 34 58 47 e1 cc 2c 97 05 5e e2 30 53 6b 25 dd e1 ee e7 14 64 a4 e7 c8 20 a4 02 85 b1 3a 16 2d 71 5a d3 69 98 08 f3 50 80 c2 b9 67 73 e5 18 8f 6e cb 39 4e 55 fe ae e7 c2 dd 11 32 2b 75 fa 7a d1 e5 9d f4 58 08 b2 eb 85 31 33 fe 30 30 21 75 fa 18 82 9b e6 76 38 b3 d3 2f e3 b3 d4 0e 6a 6a 4c ce 05 f2 7a Data Ascii: uLbgvCE#^naGgWaF HFoh0{leKj;FwTno}W,Lo\rgO7}a#!825k%r3dJ-s4XG,^0Sk%d :-qZiPgsn9NU2+uzX1300!uv8/jjLz
2024-03-27 20:20:19 UTC	1273	IN	Data Raw: d4 b3 66 2d e5 bc dd dd 59 8b c8 60 c8 91 43 7f 52 98 52 f0 ca 40 bb 6f d5 a6 41 e2 24 c9 cc 08 f2 ca 3c 18 7a 27 d2 7f e1 e9 3f c1 1a 01 4e 42 4e ea 1b dd ca 87 91 58 f5 d3 0a 8e 12 50 38 f2 ec 05 62 21 8b 8a 70 87 ac 03 6e 6c f8 ec 29 b2 f1 0e e9 16 df 7c af e1 13 a3 6d 6b 12 c3 02 05 03 26 3a e4 cb f4 28 99 e9 aa b5 3f 88 57 d8 d6 b9 9b 42 2c 95 46 87 8d f5 57 ad 88 b6 28 c8 24 7c 69 2a 34 7b f8 1e 1f 63 b4 23 c2 4b ca e1 29 e9 fa bf 8c 39 1c 91 74 31 90 d7 cf cf b2 cc dc cb 30 06 29 4a e7 af be ff 03 19 35 17 1d ae 44 40 4f 11 7c 2e 17 50 d7 50 2f 5c a9 9c 35 45 ce 5d bb e0 fa f5 bc 04 e5 8f 0a e8 99 df 7d bb a1 3e c0 5b 00 6a 81 1a 77 aa 68 87 24 9b 38 24 fc d6 9b 61 3b 69 ce 0b dc 16 53 83 92 16 fc 4f 01 7f 03 0a 6d 76 79 23 b0 0c af 21 a2 a1 d7 67 Data Ascii: f-Y`CRR@oA$<z'?NBNXP8b!pnl)\|mk&:(?WB,FW($\|i*4{c#K)9t10)J5D@O\|.PP/\5E]}>[jwh$8$a;iSOmvy#!g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49892	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1521	OUT	GET /cdn-cgi/image/format=auto,w=264/9cf118fb-ed55-479b-ba72-7463abf6c920/docs_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1041	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 7572 Connection: close CF-Ray: 86b21497c95b68f3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf67EmUq_pyUvm-V2yoviFuJ0WkiHsTARsnZIiJ4wGDQ:c3f11aca8d8f05fe36ba85b09750917a" Last-Modified: Wed, 15 Nov 2023 05:44:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+136 c=0+0 v=2024.3.2 l=7572 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F1bg9Pu1cIZj0aNZSk0OX8xALj5X1TpA2t8S0fL1hU7nZO9dbEGQ8xrWnRUAgDYYmSUptRZjSydDgUbl%2FT8fFn3D8GtG5wB3YL9aCs4G4pNGHw4kr8ahqnD%2FfeLCH%2B%2BnftlJDB%2FvqYb1S%2BTcl0Ho%2BjvWn0w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	328	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1c a2 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1c aa 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD#iinfinfeav01Viprp8ipcoispehav1C?@pixiipmamdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2b 0b 68 b3 3c 76 7d 78 5a 70 a1 0b a8 04 02 64 be 5a c6 9d 2f 79 47 85 c3 d1 3d c0 45 bf c3 bd 86 83 51 35 f4 ad 91 99 5e 67 0a 16 77 c1 dc 8c 60 7f cd d8 34 8c d0 5f 0c a9 7e 87 47 07 9b 77 46 24 74 f3 e9 00 a7 5f 9d 99 34 02 3f c5 ec 62 77 53 c7 5f 19 5b 13 2a 48 45 ca 36 8f 2b 8f ab a5 e9 07 1e 5f 35 d1 f7 42 78 f6 62 42 77 d6 c7 5e 32 f8 66 06 02 3b 5d de 19 24 de 0a 3d 52 d7 00 68 dd 67 3f aa 49 bf 28 dd 40 a6 16 af 0b 28 1e 5b 4f 94 59 58 38 09 06 92 32 f9 f1 d3 10 5b fa 9c 5f 68 5e c0 64 51 dc cb e2 e0 c8 df 85 d9 5b 75 1e e3 41 90 ac ff 75 1a 48 12 6b 08 dd 2a 22 c9 7e d1 8f 1c 5e 07 85 23 16 d4 22 ae c1 c7 51 73 6e b4 06 7f 52 ae 9d e5 15 3e ee 78 5a b8 5f 9e 8b af 6a 6e 4d 58 31 cd 2e 79 b6 35 44 d1 38 f1 2a c6 3c 18 6c 82 a0 0b 12 49 dc ad ff Data Ascii: +h<v}xZpdZ/yG=EQ5^gw`4_~GwF$t_4?bwS_[HE6+_5BxbBw^2f;]$=Rhg?I(@([OYX82[_h^dQ[uAuHk"~^#"QsnR>xZ_jnMX1.y5D8*<lI
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 97 82 d8 c9 a2 7b 57 c5 68 81 47 3c a0 2e 1d b3 21 43 91 ac 27 7d 8b 21 74 19 2b ba 18 3a 1c 9a da 06 98 c8 aa 2e 19 7c a0 08 13 23 8a 32 54 44 82 c5 15 c5 21 09 3b d3 27 fc dc 3f eb 25 e4 4c 72 75 cd 77 63 7d 48 67 40 f1 07 71 0d 4b 9c 1a dc 3e d2 dc cd 02 ca 84 f9 aa 37 29 80 d8 ae 7e 64 05 d9 71 23 72 16 2f 37 99 84 7b 5c 2c 20 b9 82 3b 59 da c9 f1 a6 fb 0c 12 71 a5 48 30 e6 b1 26 49 cb dd 44 5b 06 ff 32 18 b6 e6 91 3a 53 2d ef 9c 38 74 2e f6 39 fe 6a 75 81 a0 7c b6 fb 0e 1f 09 b3 f2 57 c0 3d ce ae b1 a9 b7 c8 ec e5 7e 30 0c 7c 12 b2 98 32 19 6f 4e f3 b8 3c c8 75 16 7b 93 1d ed f3 26 26 d3 71 0e c9 85 16 84 87 71 29 6e 2e d8 55 e8 ac d3 81 c2 9c 22 73 8e 29 81 15 a7 ea b0 2a 5a 1d 84 ee a6 d4 e5 60 49 82 bd 05 85 e7 4a 6f 2b f3 ef f3 19 d2 9c 8a 19 7b Data Ascii: {WhG<.!C'}!t+:.\|#2TD!;'?%Lruwc}Hg@qK>7)~dq#r/7{\, ;YqH0&ID[2:S-8t.9ju\|W=~0\|2oN<u{&&qq)n.U"s)*Z`IJo+{
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 5e 31 21 62 8b 7e bf 4f 28 19 c9 f2 4f d6 b7 7f 46 c4 1a d1 d5 9f ff 1e 94 dd f1 d6 22 e2 cc 6b 25 04 a2 df af 88 f4 1a 81 13 21 0c ba f7 5c f0 43 a2 41 02 90 39 31 80 d0 a2 2f d1 11 ad 2f 6a 78 9b 7d 4c 7b b3 4b 01 95 4f 27 f4 ea cb 6c 29 f8 b6 d0 61 df 93 a8 5c fe 1b 54 a8 c2 69 d6 f3 f1 46 bd ac d2 38 a5 b3 73 fd e2 ee bf 36 45 b1 b5 2b a7 6c 56 ac 61 2c d5 f3 79 0e 28 f0 f1 02 7f fc 29 f6 f6 f7 59 3c ce 15 d4 92 d3 ba 82 bf f7 55 2e e8 02 1a ba 13 58 9c 9b f5 98 f3 79 57 c0 f1 ea 44 2d ff cf b2 58 79 68 74 44 cb fd 06 2d b2 5e 30 36 33 2c 60 36 b5 09 57 7b 92 14 82 22 c9 2e b2 a9 3a 96 04 32 c8 d7 99 d9 aa 37 4a e1 1b 49 c6 63 5e 2b bd c2 9d 55 60 6c c3 98 c9 90 bc 59 16 5e 2f 12 67 0c b2 7e e3 2d c5 c1 20 b3 6f c7 a1 5e d0 ee 69 2b b9 de 56 07 31 e7 Data Ascii: ^1!b~O(OF"k%!\CA91//jx}L{KO'l)a\TiF8s6E+lVa,y()Y<U.XyWD-XyhtD-^063,`6W{".:27JIc^+U`lY^/g~- o^i+V1
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: d2 9e 5d ad 4e 7f f7 b3 9d 92 5e 0e 8e 1a b5 29 9f 27 04 21 12 22 6e 98 ee e7 e1 9b 7b 07 a3 e8 fb 3a 98 2d cf c9 f9 5b 54 11 14 d8 b9 00 06 99 df 37 16 1c 60 ba b7 a8 6f 35 f3 8a 07 c8 f9 ee 1f 49 38 4d 91 05 c5 09 1a cc 1a 1d 1b 92 c6 64 bd 2d fd 5a 25 2d 75 93 37 e3 22 44 16 4b 7f be 95 4c 60 d5 d2 d7 1f f7 e9 92 bc 48 4e 75 8b ab 60 b0 ba 28 2b 22 c5 d1 6b 7b cb 79 f6 84 41 42 34 31 22 a9 44 45 83 d9 92 29 d5 58 67 eb a5 e0 93 37 57 12 89 51 3b 3e 18 70 e3 12 12 e2 c2 86 b1 ce 69 14 37 c7 a1 6e 61 b7 93 da 68 ad 08 a3 a8 91 7a 70 b5 f2 0d db e8 50 98 f5 c6 65 b4 59 7f 06 04 21 7a 48 45 da 7a 84 50 3a e8 8c 41 b6 7c 11 d4 8d 00 f4 f5 7d b5 89 26 1f 24 21 24 7d 7c 92 f7 56 0e 8f c0 22 ff fd 38 68 b5 22 ce 93 6c ef d3 0b 00 fc 90 19 13 3f fd 72 65 98 be Data Ascii: ]N^)'!"n{:-[T7`o5I8Md-Z%-u7"DKL`HNu`(+"k{yAB41"DE)Xg7WQ;>pi7nahzpPeY!zHEzP:A\|}&$!$}\|V"8h"l?re
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 2b b3 d6 4a 40 d1 f2 35 7d a9 bb f2 70 66 34 76 e4 f3 63 1c 80 af fd 1f 73 02 b3 f9 77 f1 88 5f ac 76 bd 1b 5a e4 ac 34 df b3 bb 74 3a 85 50 e9 5b 00 d2 90 38 ee ce 9d da de bb 8f 43 d1 d7 df 2d 4d 73 6f cf b3 b9 92 d0 b8 3a 42 73 80 a5 a3 3e 37 01 a6 e5 7d a0 88 51 bb ba f5 27 79 5c 63 42 35 01 37 1e 9e 92 34 0e e3 a2 74 85 09 b5 35 46 59 3a d0 89 46 0b 14 94 f2 48 64 0e 32 38 5d 4b c5 69 4e 28 66 7e 48 22 1b cb 4c 5b 6d de 71 f4 17 0f 1d 69 e6 1c 4f df 5c be 3b bc cf 61 f0 3e 31 ea 08 f2 f8 64 8f 58 96 bb fc 0c 23 a1 15 03 c0 39 a0 0f 97 45 7e 89 60 d0 de 18 7d e3 71 00 0b 22 95 78 5d 84 9c 20 02 5a 5d 96 d9 18 4d 25 23 22 c0 39 6e 4b 3b 80 ca fd ad 3e b1 79 07 8e 6a 71 66 ae 3d 56 c3 a6 b7 78 c8 56 09 57 c7 2c 9e d4 05 de eb 83 65 51 a2 73 91 55 0d d1 Data Ascii: +J@5}pf4vcsw_vZ4t:P[8C-Mso:Bs>7}Q'y\cB574t5FY:FHd28]KiN(f~H"L[mqiO\;a>1dX#9E~`}q"x] Z]M%#"9nK;>yjqf=VxVW,eQsU
2024-03-27 20:20:19 UTC	399	IN	Data Raw: 56 a5 b8 0d cb 1b 84 d1 f1 c6 a7 50 f6 28 a4 8f dd 59 06 2c cc 3e 6c 54 fc 09 01 65 f3 12 28 44 2c 5c d1 74 cd b2 b7 bc df 55 1f a9 f9 90 08 41 69 dc e0 ff 5d d3 07 9d 9b 1a 38 c2 7c 0a 45 8a ed 44 81 65 ae 50 9e 03 4c 0d a0 7c 5b dd 90 a9 67 a4 24 cd ac a8 2d 7d 6c cf 1a a3 e1 f4 5d 05 9a 9b ac 45 28 11 10 df ca 76 71 03 7b 8a cb 93 52 54 84 f1 d4 d1 6a 3b f4 e8 22 d9 a7 8b 40 e4 8f ea c8 43 22 ca a2 7d 7b bf 91 92 0e e3 e4 3d c9 12 d2 ae e1 9b 6c bf 45 e0 93 5a 0a 51 e2 30 d7 62 67 89 39 99 2e eb f7 b6 31 03 bf 48 86 ce 4d c1 94 97 64 b4 ba 63 78 21 5a 8d 41 98 22 e4 ba b5 5c ba 1f 1e 9e b7 c2 f9 5a 63 d3 80 ca a5 57 d7 1b ea b8 ce 83 52 a8 53 5b ec e7 f5 19 55 c9 98 f8 e2 50 3e 52 33 40 84 80 da c5 19 02 06 98 fc a8 18 8c 37 44 34 96 04 a6 51 bb c1 26 Data Ascii: VP(Y,>lTe(D,\tUAi]8\|EDePL\|[g$-}l]E(vq{RTj;"@C"}{=lEZQ0bg9.1HMdcx!ZA"\ZcWRS[UP>R3@7D4Q&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49893	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1528	OUT	GET /cdn-cgi/image/format=auto,w=264/ca5de8c1-746f-4ed5-9581-5830c5b1d3f0/whiteboards_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1036	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 5656 Connection: close CF-Ray: 86b21497ee9838af-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfvw5CIudjXLvAiUES2Y9r1hAMkiHsTARsnZIiJ4wGDQ:519d277d1df6444a8e1e4f9d6dfd5b8d" Last-Modified: Wed, 22 Nov 2023 04:54:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=26+99 c=0+0 v=2024.3.2 l=5656 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uTBLR6PIDGksaCm%2FFIXu%2FSKRa3txPrHKeHKVdVL6RGX621PWcXmbvMZ9f9t34E0Y2SAzGQeBvYfMIInB1kjM1A4a4BCAd6VVjknhpbHsql1M%2B1fEI2cMC4R6I9Kk6P8K1DM82CEsnw%2BES4%2FtoODQ1AWIBWc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	333	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 15 26 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 15 2e 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD&#iinfinfeav01Viprp8ipcoispehav1C?@pixiipma.mdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 9f d0 ef f9 dc 7b 9c cf 5b 1e 74 98 91 ac e5 1d fb 01 d3 19 d4 03 6f f3 67 bd 0e 42 d9 4e ec fe 5c cf 14 f9 6f 7e 88 1b 83 7a aa 7d ed b3 42 ce 2e 5e e0 85 b7 2b 1a 03 e5 18 ab 54 49 c5 e5 46 94 70 be 7a 77 df ea d6 73 3c 2e bd d8 37 41 2b db d2 f2 d5 f2 e6 21 4a 17 e8 08 bc 62 50 f3 2f bc 1e e2 e4 3b b0 a5 ba 6b 19 5f f1 84 8d e0 15 d1 61 41 b3 f5 cd f6 a1 05 80 cc df 2e a7 25 d8 86 91 0d 9e 7d 5d 1e 2a 26 4d 1d b4 ab 28 b8 72 08 11 dd 8b 83 fe 7f c0 aa 7b b5 01 da 16 85 9d 28 c1 34 ab 4e ae 2a c6 e1 20 1d 01 bc eb cd 26 5a 8e 1b 6e 90 ec 5e 99 58 8b 52 85 7b be 18 f6 fc 14 28 71 e4 5b a2 f1 02 d5 34 99 35 ce 1b c3 8a 5d a6 b8 f7 3d a5 fd 9c ca fd cd 1c 82 06 83 ea c4 09 72 35 05 80 30 6c 25 6d c3 88 ca 2b fd 51 57 0b a1 62 a7 fd 1d f9 b6 90 2b 9e 26 77 Data Ascii: {[togBN\o~z}B.^+TIFpzws<.7A+!JbP/;k_aA.%}]&M(r{(4N &Zn^XR{(q[45]=r50l%m+QWb+&w
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: fc 7d 4c 86 2a 51 0c 59 6f 77 77 9a bb a4 ba 83 ed 0e 8d 11 54 9f 81 b3 bb b3 e1 8c 9b 20 8c 5d df 2e 84 d7 05 bf 79 37 bb 6d 36 80 36 ac d3 42 60 03 e2 5b 1a 1d 58 18 78 e8 b5 a7 a9 f4 1f 85 4b ac 57 61 17 4f 07 03 70 ad 54 de 84 6b c2 18 a9 0c aa 77 64 35 32 c0 63 a7 9d a5 92 94 63 f4 d2 9a 53 98 12 f4 3c 7a cb c3 b7 1e 70 c6 39 1d 5b e2 cf 8c 50 32 b6 a9 f3 f9 71 d6 0c 81 b3 e3 11 74 31 2a d7 e7 8a 43 f5 70 a3 04 5a 44 9c 6b 06 31 96 9a 31 55 a1 8f ff eb ba 0b dc f8 f2 73 56 5b 63 b0 02 64 b8 c3 f6 21 d0 36 59 e4 39 99 9d 72 5f a8 6a c9 3c db 2c 79 e0 7d 20 61 72 32 df 49 01 39 fd 8e 79 a9 7e d6 e1 35 ef f8 f4 80 15 60 21 36 52 43 aa 93 26 0a ea 86 08 33 3e d4 20 09 05 d6 d0 7b 0a 6a 25 b7 55 c8 a0 55 47 4f e1 08 48 49 9a 0f d8 52 b1 39 7e e0 1a 1b d3 Data Ascii: }LQYowwT ].y7m66B`[XxKWaOpTkwd52ccS<zp9[P2qt1CpZDk11UsV[cd!6Y9r_j<,y} ar2I9y~5`!6RC&3> {j%UUGOHIR9~
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: e7 27 94 dd 6c f5 fe ad cd d2 1e 24 ff 71 1b 7f 7d a0 8a ed c0 40 d3 c2 69 4c 48 fd 85 fb dc 49 6d ba 37 6d f9 1a 3d 1e aa ad f1 43 ba a9 21 a3 0e ed b5 bd 70 77 74 ef 57 60 9d e0 12 ed fc 8c e0 f5 d4 49 5b 40 d0 70 f2 23 e1 1e fc 38 66 a2 b6 08 a8 61 55 5a c1 5e b0 be d3 c6 ae 9c 19 a7 e7 9c aa c2 99 72 ff 6d 89 eb 3a 7f d4 b8 31 3d e0 3e 13 e5 e9 d7 d0 6c fd 03 d5 fe a1 18 1c 22 f8 8b 64 bd f2 c6 c8 19 7e 0b 6d e6 a6 5e 18 7e 78 f7 f4 b2 78 fd c4 d5 4d e3 60 b9 73 1c c4 01 a7 f9 02 7b 8e 4f 30 87 64 c3 2c 8b 1d e8 44 7a b3 42 2a 8b 9d cc 72 7c 89 ec 13 80 83 0c 42 8f 32 c5 fc 42 76 39 32 50 c7 32 bd 0b 59 7e b2 33 c4 f6 2f c9 ea 6b 66 d2 b6 02 ca 2d fc a2 1b c2 1a 49 73 e5 53 8f cf db c9 ff 44 43 64 e3 6a 39 2c 2d 56 d9 8d d0 7d 20 48 2a e6 e1 98 6a db Data Ascii: 'l$q}@iLHIm7m=C!pwtW`I[@p#8faUZ^rm:1=>l"d~m^~xxM`s{O0d,DzBr\|B2Bv92P2Y~3/kf-IsSDCdj9,-V} Hj
2024-03-27 20:20:19 UTC	1216	IN	Data Raw: 55 33 b2 9f ae 49 58 11 5e ca 84 0e 95 00 61 65 9c 97 d6 c2 fe 3b a8 08 e5 bb 85 ef 62 58 0c a8 1d e0 f8 cb 02 ba 69 4a 09 47 38 a5 ae ca b5 2e 94 74 93 7a f2 89 10 61 d4 15 9b 3a f1 30 d3 c8 01 40 d1 98 0c a4 c7 7c ce 25 39 77 9e 46 5a 13 f0 d9 71 e7 12 fd 95 d8 a9 b3 99 96 07 67 5d c0 fe 78 ae 14 46 38 07 fa 1b ab 46 e9 48 6a 66 3d e3 7d ef 75 72 d1 48 a5 13 62 ea 54 c9 f8 f4 0f a9 01 d6 33 fd 8e 36 fe 7a 79 ef 2d a3 3f a3 09 6f 3b eb 46 4e 55 a1 6f 09 8f 2f ef d5 02 f7 56 8d 89 03 6c 96 81 a8 54 49 5e 0f d3 94 a5 68 6d 98 bd 66 dd aa 51 04 94 0d fa b6 79 bf 54 ab 65 0f 4a 1a 6e d4 08 d1 82 87 9c fc 10 4a 03 6c 0f f8 22 2f 4c 71 5b 2f 63 8b 54 5e e8 06 a6 f7 a9 cb bb f8 a0 a5 df ec 0d bb 1d d3 68 d7 3e 58 87 5e f4 51 c6 99 28 41 7d 5f e2 66 a1 81 15 ca Data Ascii: U3IX^ae;bXiJG8.tza:0@\|%9wFZqg]xF8FHjf=}urHbT36zy-?o;FNUo/VlTI^hmfQyTeJnJl"/Lq[/cT^h>X^Q(A}_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49899	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	571	OUT	GET /web/ee1b3a27ac4a0b1a.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:19 UTC	1356	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript Content-Length: 20614 Connection: close CF-Ray: 86b214982fb86fe5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 64173 Cache-Control: public, max-age=31556926 ETag: "8933f774e3dbcabd5ff57501088e7ce8" Expires: Fri, 28 Mar 2025 02:09:05 GMT Last-Modified: Wed, 27 Mar 2024 02:20:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: TL4F6cpIzJgUjUXLuvh3IkcBfDhj802TeeGNJbA6viz5kyTalpr+/eoi11GnQb9CQia2gSo4Gas= x-amz-replication-status: COMPLETED x-amz-request-id: YH8JTTC3QSR34XA1 x-amz-server-side-encryption: AES256 x-amz-version-id: eMak2JcZDSsG5rssfxkdHSFq2mgPRSx9 X-Content-Type-Options: nosniff
2024-03-27 20:20:19 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 55 68 73 44 5a 5f 52 30 69 4a 68 73 55 44 4f 6a 35 63 70 79 4a 52 57 71 72 67 52 53 33 35 71 32 5f 6a 39 31 36 59 71 4a 67 51 55 2d 31 37 31 31 35 37 30 38 31 39 2d 31 2e 30 2e 31 2e 31 2d 4a 6f 4f 54 35 73 57 78 5f 43 34 47 44 4d 36 79 59 7a 34 39 64 35 4d 7a 42 2e 77 6f 42 32 38 64 4e 54 49 49 69 62 73 76 71 54 55 79 5a 54 47 4b 59 61 63 61 6a 42 4a 34 75 47 71 72 4f 33 57 36 52 57 6f 4f 56 65 66 69 68 51 32 77 74 42 62 6b 65 77 49 47 47 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 31 39 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=UhsDZ_R0iJhsUDOj5cpyJRWqrgRS35q2_j916YqJgQU-1711570819-1.0.1.1-JoOT5sWx_C4GDM6yYz49d5MzB.woB28dNTIIibsvqTUyZTGKYacajBJ4uGqrO3W6RWoOVefihQ2wtBbkewIGGg; path=/; expires=Wed, 27-Mar-24 20:50:19 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:19 UTC	595	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 6d 61 54 4e 69 41 5c 22 3a 5c 22 53 74 61 72 74 20 6f 66 20 6c 69 73 74 5c 22 2c 5c 22 69 47 41 44 73 67 5c 22 3a 5c 22 53 6b 69 70 20 74 6f 20 73 65 61 72 63 68 5c 22 2c 5c 22 77 4d 6e 41 69 51 5c 22 3a 5c 22 43 68 72 6f 6d 65 5c 22 2c 5c 22 48 38 6a 42 65 51 5c 22 3a 5c 22 45 6e 64 20 6f 66 20 74 65 6d 70 6c 61 74 65 20 6c 69 73 74 5c 22 2c 5c 22 30 64 35 6a 55 67 5c 22 3a 5c 22 53 74 61 72 74 20 79 6f 75 72 20 66 72 65 65 20 50 72 6f 20 74 72 69 61 6c 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c 22 3a 5c 22 43 68 61 6e 67 65 20 65 6d 61 69 6c 5c 22 2c 5c 22 66 33 4d 6e 5a 77 5c 22 3a 5c 22 53 69 67 6e 20 75 70 20 77 69 74 Data Ascii: (function() { const messages = JSON.parse("{\"maTNiA\":\"Start of list\",\"iGADsg\":\"Skip to search\",\"wMnAiQ\":\"Chrome\",\"H8jBeQ\":\"End of template list\",\"0d5jUg\":\"Start your free Pro trial\",\"nGBlYg\":\"Change email\",\"f3MnZw\":\"Sign up wit
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 63 61 72 64 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 62 75 73 69 6e 65 73 73 20 63 61 72 64 73 3c 2f 61 3e 2c 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 66 6c 79 65 72 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 31 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 66 6c 79 65 72 73 3c 2f 61 3e 20 6f 72 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 69 6e 76 69 74 65 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 32 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d Data Ascii: cards\\\" href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">business cards</a>, <a data-anchor-id=\\\"flyers\\\" href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">flyers</a> or <a data-anchor-id=\\\"invites\\\" href=\\\"{2}\\\" target=
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 65 66 69 6e 65 20 74 68 65 20 77 61 79 20 79 6f 75 20 63 72 65 61 74 65 20 77 69 74 68 20 4d 61 67 69 63 20 53 74 75 64 69 6f 2c 20 6f 75 72 20 73 75 69 74 65 20 6f 66 20 41 49 2d 70 6f 77 65 72 65 64 20 74 6f 6f 6c 73 2e 20 47 65 6e 65 72 61 74 65 20 63 6f 70 79 20 69 6e 20 79 6f 75 72 20 62 72 61 6e 64 20 76 6f 69 63 65 20 77 69 74 68 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 6d 61 67 69 63 5f 77 72 69 74 65 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 4d 61 67 69 63 20 57 72 69 74 65 3c 2f 61 3e 2c 20 6f 72 20 74 72 61 6e 73 66 6f 72 6d 20 79 6f 75 72 20 70 68 6f 74 6f 73 20 77 Data Ascii: efine the way you create with Magic Studio, our suite of AI-powered tools. Generate copy in your brand voice with <a data-anchor-id=\\\"magic_write\\\" href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Magic Write</a>, or transform your photos w
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 20 79 6f 75 e2 80 99 6c 6c 20 66 69 6e 64 20 6d 6f 72 65 20 63 6f 6e 74 65 6e 74 20 64 65 73 69 67 6e 65 64 20 6a 75 73 74 20 66 6f 72 20 43 68 69 6e 65 73 65 20 75 73 65 72 73 2e 20 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 3e 68 65 72 65 3c 2f 61 3e 20 74 6f 20 72 65 74 75 72 6e 20 74 6f 20 63 61 6e 76 61 2e 63 6f 6d 2e 5c 22 2c 5c 22 74 2f 58 43 34 51 5c 22 3a 5c 22 46 6f 72 20 61 6e 79 6f 6e 65 20 74 6f 20 64 65 73 69 67 6e 20 61 6e 79 74 68 69 6e 67 2c 20 6f 6e 20 74 68 65 69 72 20 6f 77 6e 20 6f 72 20 77 69 74 68 20 66 61 6d 69 6c 79 2c 20 66 72 69 65 6e 64 73 2c 20 6f 72 20 6f 74 68 65 72 73 2e 20 4e 6f 20 65 78 70 65 72 69 65 6e 63 65 20 72 65 71 75 69 72 65 64 2e 5c 22 2c 5c 22 54 2b 56 79 72 Data Ascii: youll find more content designed just for Chinese users. Please click <a href=\\\"{0}\\\">here</a> to return to canva.com.\",\"t/XC4Q\":\"For anyone to design anything, on their own or with family, friends, or others. No experience required.\",\"T+Vyr
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 79 20 43 61 6e 76 61 20 66 6f 72 20 54 65 61 6d 73 2c 20 74 68 65 20 61 6c 6c 2d 69 6e 2d 6f 6e 65 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 74 65 61 6d 73 20 6f 66 20 61 6c 6c 20 73 69 7a 65 73 20 74 6f 20 63 72 65 61 74 65 20 61 6e 64 20 63 6f 6c 6c 61 62 6f 72 61 74 65 20 74 6f 67 65 74 68 65 72 2e 5c 22 2c 5c 22 69 4e 30 36 2b 51 5c 22 3a 5c 22 50 6c 61 79 20 77 69 74 68 20 43 61 6e 76 61 5c 22 2c 5c 22 61 73 63 6f 48 41 5c 22 3a 5c 22 44 61 74 65 20 6f 66 20 42 69 72 74 68 5c 22 2c 5c 22 38 32 33 58 57 41 5c 22 3a 5c 22 70 72 65 76 69 65 77 20 6f 66 20 61 20 74 65 6d 70 6c 61 74 65 3a 20 7b 30 7d 5c 22 2c 5c 22 35 52 67 77 64 67 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 61 74 4c 46 50 67 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 74 65 72 Data Ascii: y Canva for Teams, the all-in-one solution for teams of all sizes to create and collaborate together.\",\"iN06+Q\":\"Play with Canva\",\"ascoHA\":\"Date of Birth\",\"823XWA\":\"preview of a template: {0}\",\"5Rgwdg\":\"Continue\",\"atLFPg\":\"Please enter
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 5c 5c 22 3e 45 64 75 63 61 74 69 6f 6e 61 6c 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 3c 2f 61 3e 20 61 6e 64 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 6e 6f 6e 70 72 6f 66 69 74 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 31 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 6e 6f 6e 70 72 6f 66 69 74 73 3c 2f 61 3e 20 63 61 6e 20 65 6e 6a 6f 79 20 70 72 65 6d 69 75 6d 20 43 61 6e 76 61 20 66 65 61 74 75 72 65 73 20 66 6f 72 20 66 72 65 65 5c 22 2c 5c 22 39 71 69 7a 4e 67 5c 22 3a 5c 22 57 68 61 74 20 64 6f 65 73 20 74 68 69 73 20 6d 65 61 6e 20 66 6f 72 20 79 6f 75 3f 5c 22 2c 5c 22 65 59 57 54 36 67 5c 22 3a 5c 22 43 6c 65 61 Data Ascii: \\">Educational organizations</a> and <a data-anchor-id=\\\"nonprofits\\\" href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">nonprofits</a> can enjoy premium Canva features for free\",\"9qizNg\":\"What does this mean for you?\",\"eYWT6g\":\"Clea
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 69 6e 2e 5c 22 2c 5c 22 70 65 54 70 63 51 5c 22 3a 5c 22 54 68 69 73 20 61 63 63 6f 75 6e 74 e2 80 99 73 20 62 65 65 6e 20 64 65 6c 65 74 65 64 2e 20 4c 6f 67 20 69 6e 20 61 67 61 69 6e 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 20 70 72 6f 6d 70 74 73 20 74 6f 20 72 65 73 74 6f 72 65 20 69 74 2e 5c 22 2c 5c 22 6f 61 61 37 44 77 5c 22 3a 5c 22 46 6f 72 20 67 72 6f 77 69 6e 67 20 79 6f 75 72 20 62 72 61 6e 64 20 6f 72 20 70 61 73 73 69 6f 6e 20 70 72 6f 6a 65 63 74 20 77 69 74 68 20 70 72 65 6d 69 75 6d 20 66 65 61 74 75 72 65 73 2e 5c 22 2c 5c 22 78 5a 37 67 74 51 5c 22 3a 5c 22 49 6e 73 74 61 67 72 61 6d 5c 22 2c 5c 22 36 2b 4b 51 38 41 5c 22 3a 5c 22 49 e2 80 99 6d 20 6e 6f 74 20 72 65 63 65 69 76 69 6e 67 20 65 6d 61 69 6c 20 76 65 72 69 66 69 63 61 Data Ascii: in.\",\"peTpcQ\":\"This accounts been deleted. Log in again and follow the prompts to restore it.\",\"oaa7Dw\":\"For growing your brand or passion project with premium features.\",\"xZ7gtQ\":\"Instagram\",\"6+KQ8A\":\"Im not receiving email verifica
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 74 69 6d 65 2c 20 74 72 79 20 61 6e 6f 74 68 65 72 20 77 61 79 3f 5c 22 2c 5c 22 4c 47 73 44 66 41 5c 22 3a 5c 22 54 75 72 6e 20 79 6f 75 72 20 6d 65 6d 6f 72 69 65 73 20 69 6e 74 6f 20 70 68 6f 74 6f 20 61 6c 62 75 6d 73 2c 20 79 6f 75 72 20 64 65 73 69 67 6e 73 20 69 6e 74 6f 20 54 2d 73 68 69 72 74 73 2c 20 61 6e 64 20 79 6f 75 72 20 62 72 61 6e 64 69 6e 67 20 69 6e 74 6f 20 62 75 73 69 6e 65 73 73 20 63 61 72 64 73 2c 20 66 6c 79 65 72 73 20 6f 72 20 69 6e 76 69 74 65 73 2e 20 47 65 74 20 61 6c 6c 20 79 6f 75 72 20 70 72 69 6e 74 69 6e 67 20 64 6f 6e 65 20 72 69 67 68 74 20 68 65 72 65 20 77 69 74 68 20 66 72 65 65 20 64 65 6c 69 76 65 72 79 20 74 6f 20 79 6f 75 72 20 64 6f 6f 72 73 74 65 70 2e 5c 22 2c 5c 22 51 43 4c 54 53 77 5c 22 3a 5c 22 54 68 65 Data Ascii: time, try another way?\",\"LGsDfA\":\"Turn your memories into photo albums, your designs into T-shirts, and your branding into business cards, flyers or invites. Get all your printing done right here with free delivery to your doorstep.\",\"QCLTSw\":\"The
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 57 68 69 74 65 62 6f 61 72 64 73 3c 2f 61 3e 2c 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 64 6f 63 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 32 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 44 6f 63 73 3c 2f 61 3e 2c 20 3c 61 20 64 61 74 61 2d 61 6e 63 68 6f 72 2d 69 64 3d 5c 5c 5c 22 76 69 64 65 6f 73 5c 5c 5c 22 20 68 72 65 66 3d 5c 5c 5c 22 7b 33 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c Data Ascii: \\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Whiteboards</a>, <a data-anchor-id=\\\"docs\\\" href=\\\"{2}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Docs</a>, <a data-anchor-id=\\\"videos\\\" href=\\\"{3}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49897	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1533	OUT	GET /cdn-cgi/image/format=auto,w=264/75d73709-81d8-4be7-baaa-ea27097f6212/presentations_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 7293 Connection: close CF-Ray: 86b21497f82d0624-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfcf2miLlnvaJ0mMjkaeXnHsmIkiHsTARsnZIiJ4wGDQ:7a570c43ce5efbb27fd979f86c895218" Last-Modified: Thu, 16 Nov 2023 00:50:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+0 c=0+0 v=2024.3.2 l=7293 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RTpmRA2EeCKerilq%2BJ4lpWUwRt%2FrjjlL7iWgTGHusBgs7Fi%2FCva6zxP6V8%2FTvWYj28V8NoHTUhhxjHP1kvf00IGvPm%2Fv6YRf05E82FPyKuJkqvSdD8z95Dh%2BFCpMLHokLyniCtVzOUOXbYeHUD26XWt3w4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	332	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1b 8b 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1b 93 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD#iinfinfeav01Viprp8ipcoispehav1C?@pixiipmamdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: d2 72 38 aa 60 a5 a8 57 99 79 70 bb 54 a6 61 7f b2 3a dc 74 2f be b5 ef ff 28 3f c5 9c 08 16 79 63 7f 02 95 90 9e 5f 9d dc f9 8d ae 28 f1 16 fb cf 19 e2 73 1f 2f 99 00 12 9c e0 11 de 11 44 90 7e 38 0f 8c c7 71 d3 1e 38 c7 12 0d 4b 88 fd e3 8c d8 6e 7b 89 b1 ac be 37 cf fe 54 29 55 d0 4c 54 a9 16 05 39 15 03 21 58 7b 91 f6 4c 82 4d 2e 7e f5 e8 94 8f 23 bc 6f 8d 57 4c 77 fa 64 6f ed 9c 72 e7 4c 84 01 0a 5b 8f bd 55 d0 ba 65 f9 8b 0c 90 02 6a bf 6b c3 e8 9e f8 d2 36 e5 93 7c 95 cb e7 5a 01 e1 53 74 2a 57 8b 06 03 b3 64 26 0d af 5a 9d 28 4d cc f5 98 e3 28 f0 a8 1a 18 57 ce 98 b4 b3 6f a7 8a 33 f0 9a 32 6a d7 07 66 90 b2 ce 28 a6 02 ed 9d 72 da 04 64 41 64 d4 30 87 53 2f 75 d4 0c 51 8d 5d 72 0e f3 c5 32 00 9f f7 38 37 57 14 53 cf 9d 76 0f 91 80 bf dc c4 3b c8 Data Ascii: r8`WypTa:t/(?yc_(s/D~8q8Kn{7T)ULT9!X{LM.~#oWLwdorL[Uejk6\|ZSt*Wd&Z(M(Wo32jf(rdAd0S/uQ]r287WSv;
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 48 26 ad 92 e3 36 60 32 d8 eb aa c1 b6 ed c3 15 09 d8 6c 19 78 ce 2b 15 9e 76 cf 0d 42 98 a0 1a 00 dc 18 85 e1 54 86 30 8e 9a 3a a2 56 32 1b 51 b2 1e 02 df df 23 db 50 ab f4 cd 75 6e 8b bd 88 c8 80 fb b8 7a cf 10 7e 12 f1 62 2b 6f 20 9a 55 e2 0c cb 60 2c b9 fa 61 3d 99 10 7a 7d e9 11 52 3c c4 e2 98 e4 d5 8f 9b f6 70 67 28 9d 6e c9 2d 4c 3b 2a 81 b6 32 55 e1 40 43 4a 6b a0 5b 6e 2f 6e 31 49 f3 ab df af ec 2e 0b ee c4 d7 09 58 eb d1 2b 83 14 40 9d 4d bc c2 79 31 e7 8c 3c 74 21 cc 88 73 12 e6 5e 1a 41 75 97 e8 d4 f7 ae 2e ed f4 a9 27 f7 aa 83 ce bb 24 44 a5 76 d3 07 23 42 de c3 19 a8 c6 63 ad b6 b1 51 09 41 85 89 54 9d 07 f1 be b6 24 4f 44 c8 e2 33 fd d0 a6 be ff 68 6b 40 b8 cc 22 6b 63 4d fa 8c f5 3f f3 9f db 09 c7 d8 6e 09 9d 16 30 20 2d c5 4f ed d9 f7 a3 Data Ascii: H&6`2lx+vBT0:V2Q#Punz~b+o U`,a=z}R<pg(n-L;*2U@CJk[n/n1I.X+@My1<t!s^Au.'$Dv#BcQAT$OD3hk@"kcM?n0 -O
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: f5 d2 cb 19 fe f7 48 44 95 86 1f 8a ea da f9 6f d8 97 50 75 cf 85 07 84 5c f5 43 11 90 a3 5a 48 8a 85 55 b6 da c1 12 20 c8 c1 56 f8 30 7c e8 f3 c2 67 6c 8e 46 a1 75 30 a0 0b 07 a4 c9 e6 fe bc 6b 32 cb a7 4c ae a2 04 ac 8d e6 5c 88 2f 90 f3 cb d3 a6 b1 df d3 75 f7 6b ff c5 83 6b 78 7f 95 db 46 de 56 e4 a5 b8 75 41 b3 98 ba 48 c3 28 6b 99 73 f1 57 d2 48 00 1c 99 cc de 6e 79 a2 a4 fe 6a ac 79 a0 22 b7 e5 7b f7 56 8c fb 8d 4c b1 e9 a5 7d 8c 61 40 5f 9d 63 4f 0a 5e e2 47 e7 bb 15 d7 bf a5 d1 92 4a a3 b9 ed 04 c1 19 51 0b 9f 90 18 32 6a 18 81 ee 57 93 b2 5c 9a d1 6c 86 78 33 19 e9 20 30 e8 60 c0 79 4c b5 20 93 47 3a bb a6 ff b6 8a 4e 91 1b f8 69 31 c6 da 30 f2 fb e8 b3 1a 41 2c ca 1d 89 0a df 9e ee 96 5a be ee 34 9d 86 98 d5 57 c6 6f 90 53 51 5a ca fa e4 af c3 Data Ascii: HDoPu\CZHU V0\|glFu0k2L\/ukkxFVuAH(ksWHnyjy"{VL}a@_cO^GJQ2jW\lx3 0`yL G:Ni10A,Z4WoSQZ
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 40 4f 73 8f d0 14 eb 3f 35 5e 17 55 af b3 8b 67 1d b8 3b 2e 0d 08 95 4f 45 42 a6 67 a4 c6 30 53 27 5a 89 5d a9 df b5 dd 40 a0 bd ea d3 a3 ee d4 e2 8e 39 7a cf 3e 15 7f e8 ff 8c 99 1b cf cf 1e b8 17 3b a6 3d 98 ee 5a 62 69 1f 45 5d 01 4b ac 57 9a f3 9f 8d a7 fc 54 0c 75 a1 bd 60 d6 fb 87 b0 5a ed 0b 87 bb 70 a3 c3 f9 b3 8e 5e 68 58 16 fe 6d 0a 44 47 21 ba 5e f1 33 a4 8f 56 88 ec 73 d6 fc 3a 6b ed 49 8f 64 14 dd b7 90 4b 1e 5e 6a 9a 0b 03 f2 9b 41 f3 1e b2 f1 18 85 63 24 2c f3 99 01 dc 6e 84 1f e4 7f 21 7b 25 8c ca a2 f5 2a ff ad 0a 07 fa 31 aa 10 8b 44 b0 60 62 6f d6 f5 56 1f d8 58 cd 6d 26 97 d5 36 34 15 06 34 ed 8b f2 d5 d9 95 88 f7 02 5f 60 21 f1 4f ef d9 9e 7a 09 7a 35 b7 26 1e 26 e0 53 54 5b 26 08 84 f9 a9 86 36 8d 83 75 cf 7a d7 83 df 54 1f 93 e4 fe Data Ascii: @Os?5^Ug;.OEBg0S'Z]@9z>;=ZbiE]KWTu`Zp^hXmDG!^3Vs:kIdK^jAc$,n!{%*1D`boVXm&644_`!Ozz5&&ST[&6uzT
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: d6 63 a3 29 6b 6e 1e 57 b4 09 d9 d4 98 00 4e fc f8 f8 57 cc 37 a3 c1 50 a5 85 6c 52 68 d6 b0 e2 9b 92 21 3d 77 b2 24 71 6e be 79 4e 3e a6 f0 52 be a5 09 8d b1 9c df 5b ef f6 2b c5 84 50 85 b1 bc 3e 16 9e 2e 35 1e 2a e8 2e 07 db 38 40 a7 80 f7 81 8e aa 04 8d 2e 07 07 6d 26 b0 4f d9 59 5d ed 18 31 28 60 e7 c2 19 ac 6c a0 07 2b f9 12 5b c2 01 8b 28 f0 04 6a 00 53 bd df c0 32 58 8c 95 ac c5 80 8c 05 66 25 0e e8 0e 24 c7 74 66 e4 0c bd 58 ab 68 ff 4e 32 e3 fa 76 37 33 51 f3 38 67 35 77 96 59 72 c2 32 e8 b0 2e 30 3c 13 f1 26 42 aa 31 03 97 cc 71 b7 21 c3 53 c0 41 ff 08 6d 86 ff 66 1d 3e 22 64 37 bc e3 dc ea 2d 18 bf 6c e3 fb 1e 7c 8f 58 7c 9a d6 a1 90 f6 5a 27 e2 a9 a6 4d e3 42 2e 70 20 fd 33 5d b8 95 f2 00 6a 3d b6 57 74 c6 46 81 6f a8 14 92 7e 94 32 9e 02 3e Data Ascii: c)knWNW7PlRh!=w$qnyN>R[+P>.5*.8@.m&OY]1(`l+[(jS2Xf%$tfXhN2v73Q8g5wYr2.0<&B1q!SAmf>"d7-l\|X\|Z'MB.p 3]j=WtFo~2>
2024-03-27 20:20:19 UTC	116	IN	Data Raw: 98 84 08 87 b6 c7 6a b8 bd 0a 21 16 c1 a9 d1 5a 26 02 f3 c6 f8 7b 38 6c 7c 55 0d db 08 32 06 5a ec 55 42 64 3f 29 d1 63 3f 92 60 2c 5b 8f c5 e7 72 f0 68 cf 87 1c 1c ab d6 2a 5d 45 34 b1 88 55 94 3c 9c 8f d3 6e 13 2a 7a 55 12 e2 57 72 59 4b 6d c4 00 98 4c 05 45 fc 34 5e cd 02 15 4c 8b 68 93 e4 a3 05 2b 82 50 79 1c 88 6d 69 64 7d 53 a5 61 1d 94 c0 Data Ascii: j!Z&{8l\|U2ZUBd?)c?`,[rh]E4U<nzUWrYKmLE4^Lh+Pymid}Sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49898	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	566	OUT	GET /web/743f47b2b32230e6.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:19 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript Content-Length: 530 Connection: close CF-Ray: 86b214987fd85758-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 151423 Cache-Control: public, max-age=31556926 ETag: "d1c7b914a3113e0093bbfb6e0c77a86a" Expires: Fri, 28 Mar 2025 02:09:05 GMT Last-Modified: Tue, 26 Mar 2024 02:11:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: rcb98uu9PoXUBlwjQKE5zZrgPj/wVJKp1c/570IB09Far/LGGNzT89ieAZxltJCE7Vt6OtZ+7es= x-amz-replication-status: COMPLETED x-amz-request-id: F65BAEYCS7PPMSE3 x-amz-server-side-encryption: AES256 x-amz-version-id: 5GVDrDfvWaGPde8MvXN3NITXknVy8i7n X-Content-Type-Options: nosniff
2024-03-27 20:20:19 UTC	773	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 54 64 62 43 67 4e 63 5a 70 2e 56 47 54 59 75 34 4b 4b 6a 44 68 78 4f 45 6c 54 31 7a 44 6f 72 44 43 4b 31 63 61 66 68 61 68 51 59 2d 31 37 31 31 35 37 30 38 31 39 2d 31 2e 30 2e 31 2e 31 2d 31 34 6a 41 50 4f 65 4a 66 61 56 38 71 79 57 53 2e 46 6e 75 33 53 35 51 4b 66 78 35 6b 75 43 4e 70 6d 74 73 51 6d 37 46 37 64 76 4b 49 5a 31 73 75 4f 6c 46 68 41 6d 57 39 73 73 35 63 49 4f 46 44 42 32 49 6a 55 41 6b 5f 37 30 35 76 61 43 73 6e 41 72 5a 75 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 31 39 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=TdbCgNcZp.VGTYu4KKjDhxOElT1zDorDCK1cafhahQY-1711570819-1.0.1.1-14jAPOeJfaV8qyWS.Fnu3S5QKfx5kuCNpmtsQm7F7dvKIZ1suOlFhAmW9ss5cIOFDB2IjUAk_705vaCsnArZuA; path=/; expires=Wed, 27-Mar-24 20:50:19 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:19 UTC	530	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 37 38 32 22 3a 7b 22 6a 73 22 3a 5b 22 33 34 34 63 62 33 61 39 36 61 35 65 33 64 30 36 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 31 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"782":{"js":["344cb3a96a5e3d06.strings.js"],"css":[]},"1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49894	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1526	OUT	GET /cdn-cgi/image/format=auto,w=264/f308c024-a5e9-4e05-ab78-c5f4954b62ad/social_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1031	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 12986 Connection: close CF-Ray: 86b214984aa80613-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf6uocPS3O5Sv1osvPRN0fkhmEkiHsTARsnZIiJ4wGDQ:a510f8cb4dec5ec36eca35fe85802061" Last-Modified: Thu, 16 Nov 2023 02:55:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+0 c=0+0 v=2024.3.2 l=12986 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glYFjnvuchLEe4Qgp9C2iNSYBNiXKtMTXpzRz5QKrymrFWBffxwhUGAwPvaYQY56JLn1suR5Y2VYRAmJoQMS5Zzs0MVLcsCovxInwoPzlFdgYoFKXa4xliIP44IPvXEYDgvlGXYWnEb%2Fh%2B2ZKkYZvkqgTMc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 31 c8 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 31 d0 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD1#iinfinfeav01Viprp8ipcoispehav1C?@pixiipma1mdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 45 13 8f 1b 29 e8 fb 4c 29 ce 30 44 33 82 fc 49 d4 a0 a0 da af 83 1f c8 37 55 ff 35 0a 32 28 a9 8c 96 49 b9 fd 08 f9 a6 53 98 52 1b ae 1c a0 02 31 e4 5b a8 1d 72 fe 75 a7 d7 9a 34 f7 96 4a d9 62 c7 00 23 15 b3 5b c5 a0 3d 82 be 6a e6 ca 90 4c 28 fd 2e a6 d0 82 cc 65 cf c6 ba 28 13 2a bc ef 12 5a 72 4b fc 3c eb 3b 4f 1c 92 73 23 f8 a9 8c cd 73 51 08 47 b3 f2 77 72 6e 3d 5c b9 d9 b5 28 f1 b9 32 aa 98 89 27 30 ce ab f0 67 ac e3 83 dd 5d f5 2b 73 6b 42 25 1e 23 7c 6d be 38 7b d2 ab a3 2b 34 3e eb b1 35 d3 a5 f1 af aa 8d 3f 51 27 cb f6 22 9e ce b1 f6 45 d9 c9 5e 3f 38 77 13 1f f6 1a 26 3b 8e 85 bd d8 4e 80 ce 7d 2c 4c 83 b1 9b 02 b0 3c dc 65 91 dd 83 1c ef 38 a2 e0 f9 65 f9 38 4d d0 98 c9 38 dc 77 6a 8d 60 62 7c 95 db da e8 ca ea 10 a8 e5 5b ad 98 c7 2b 7d 08 Data Ascii: E)L)0D3I7U52(ISR1[ru4Jb#[=jL(.e(*ZrK<;Os#sQGwrn=\(2'0g]+skB%#\|m8{+4>5?Q'"E^?8w&;N},L<e8e8M8wj`b\|[+}
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 6d 1c 4b e1 0a f7 d9 44 6f 5c 20 5c d4 33 1f 47 f0 68 01 e3 c7 0f fa 8d 26 8c f3 e1 19 59 05 28 f1 a0 cf 7c 6c 74 48 93 da 62 12 a7 4b 76 c4 00 79 bf f5 77 ab 5a e9 ec f2 c6 c4 8d c6 14 aa ad 7a c5 1f 62 f1 e1 b7 b8 a3 ad 31 61 33 05 27 fa 6e e2 3f b5 e8 bd 0c 33 66 e8 c6 34 95 34 71 cf db 9f c8 c0 65 d1 02 98 7f cd 2b dd dc c5 ae 0d 83 4d 85 66 27 8c 83 2d 56 17 a8 39 67 98 f9 78 ed 05 f5 14 8e 45 a5 a9 65 f9 4a 05 81 7d 2c 0b 09 49 aa 9a 13 a8 b4 22 d7 f5 e7 be 72 67 61 64 09 8e a6 14 22 78 3d c6 b2 af 60 c6 10 ec 9c 12 1b 53 f5 91 5a 82 16 5d 28 3d 2c 09 22 5a 3a 5e 18 03 38 40 48 a0 65 1e 38 a7 87 d2 ef 64 74 ba 7d b1 9c ba 2c 70 d4 cd eb 66 15 7d 74 c4 8f 29 e9 03 0d b3 a2 81 37 42 3c 7b 71 ce 90 f9 dc 4d de 4f b2 e1 6a f1 48 d6 49 d7 7c 31 0e 4c 5d Data Ascii: mKDo\ \3Gh&Y(\|ltHbKvywZzb1a3'n?3f44qe+Mf'-V9gxEeJ},I"rgad"x=`SZ](=,"Z:^8@He8dt},pf}t)7B<{qMOjHI\|1L]
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: dc a9 6e 99 18 7d 41 94 fb e2 22 d5 be b1 76 2b 57 19 20 37 87 ac 90 35 54 16 18 27 9b 00 7a 49 33 18 85 05 86 4d 7e 9a 9b dc f6 f7 47 85 be 88 88 ba a6 48 b7 70 1a 8a 0a db 7e e2 0b bb f9 0b 56 86 bd ca ef bc 7e 5f ff 25 79 4b 3e b8 a1 e6 85 be 8b 8b 0a f0 34 99 cc 1c 7b 78 e8 0b 9a 53 d6 f6 df 80 60 76 45 8d 91 f1 a4 3f 5c 12 bf 45 00 fa a9 cf 08 c7 0b c2 a8 8c f6 91 71 0f 3f c4 73 b7 3a db 79 6e da fc c3 0a 6a 6c 4f 85 78 df 35 2d 5b 19 aa 7c c2 3a 4e cf 0b 32 38 87 76 65 fd 7a d2 57 f2 5d e3 cf e1 f2 b2 ea 28 4b 4c e1 b3 59 93 3a 24 3a 9b 6f d1 6a 25 36 74 2c 06 cd 4b 2f 39 20 79 e2 f4 94 ea e9 9f 0b f7 38 65 1a cc d4 98 6f b2 a7 a7 e4 4f dd ae ef 8f ae d0 91 29 ab 91 00 8d 07 27 62 22 f9 8f c2 27 7b 3f 2e 9a 71 91 db f5 0c 58 69 aa 9a 00 53 dc 5e 53 Data Ascii: n}A"v+W 75T'zI3M~GHp~V~_%yK>4{xS`vE?\Eq?s:ynjlOx5-[\|:N28vezW](KLY:$:oj%6t,K/9 y8eoO)'b"'{?.qXiS^S
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 8e b5 42 d3 ad 36 3d d7 b9 97 42 d7 01 06 f7 7c bd cf f5 82 9a 75 9b 18 8c 1e d5 5c 1c e2 33 9e 49 99 cf bd c2 c6 0d 10 b0 8f dd b3 b4 44 c6 a0 e3 5d 91 59 8c 6d 29 d7 0b b7 aa 26 73 a7 59 37 d8 60 20 18 fd 7b 63 e8 43 62 00 09 80 c6 9f 79 8f bd a6 15 45 a2 c2 9f a3 e8 4f 01 d3 a9 34 79 f7 a1 e5 39 f7 4c f3 38 f5 d7 35 98 0d 0f fc b6 e0 6f c7 68 ae 7a 84 34 5a ff 24 06 b5 46 6c 89 15 c8 79 9d 04 ab 0f dc d3 25 45 ff a5 e4 a8 a5 0b 50 a3 57 a3 d1 e9 be 2a 92 93 1e a9 3e 39 d9 67 20 8e 76 0c f1 d6 7c c4 45 67 fd 86 e0 cc c7 9d 2a c4 df 90 a6 11 c6 10 b7 12 1d 00 dc 29 f3 b0 f1 5d b6 e5 c6 53 1e a8 da d7 e4 f5 18 cb 30 4b 2a cc a9 c5 53 ba 30 0e a4 3e 8c 3f 56 ac 76 1d 38 f0 8c d0 0d 8b 6a 93 ba 6a 04 09 d6 da 66 7e 19 01 27 62 80 ba e2 f0 01 0f 3e 5a 61 3e Data Ascii: B6=B\|u\3ID]Ym)&sY7` {cCbyEO4y9L85ohz4Z$Fly%EPW>9g v\|Eg)]S0K*S0>?Vv8jjf~'b>Za>
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 7c 69 dd c9 cb 9d 3e 5a f4 5e 43 4d 11 60 fc 07 55 8f f5 08 a2 b2 8d 84 94 24 28 49 b2 83 ed ba 63 39 b2 7f 4f 0c 5b 89 68 32 1a 1c cb 86 ce 17 47 7b 1f 5b 99 b9 b7 e4 15 e6 e6 bd b1 5b 2d 38 cb 44 ac 1c 9a 44 ca d9 87 86 7a ca 95 94 2a a3 80 1b e2 16 77 af c4 c9 92 d5 3a 9f 95 50 6d 0e ac 6a dc 61 42 b2 31 a8 b5 dc 24 cc 02 0d 95 02 3f ac 5a 63 5d 59 b6 af 81 e4 44 ec 01 ef ed 6c 56 8c ae 5b e0 3c 17 03 d1 5c 3d 50 e8 3c ed 9c 18 60 1f 9d e7 20 81 11 68 92 75 5b f2 47 5d 66 c4 16 85 d4 3d 26 e5 b4 18 fe e5 77 d2 c9 8e 0c 0b 68 14 f0 25 f0 f0 64 f3 87 0e 9f b3 8c 0d 87 7c 64 24 27 30 ee 43 d0 cf 17 fe 7c 6f 50 16 ed bb 30 7a d0 d3 c0 a1 16 fd c1 57 e0 b2 8d fc ce f5 ef 00 d3 70 ff 47 fd d2 d9 19 ce ad d0 90 c6 60 da d1 ac d4 2a e5 28 89 71 50 9f 32 43 dc Data Ascii: \|i>Z^CM`U$(Ic9O[h2G{[[-8DDzw:PmjaB1$?Zc]YDlV[<\=P<` hu[G]f=&wh%d\|d$'0C\|oP0zWpG`(qP2C
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 0c dd 5c 8e 7e 8a 3c 57 e5 b3 46 90 76 23 41 e3 03 48 7b 24 39 ab 6b 85 d3 e3 44 33 59 78 f9 e8 d2 b8 20 ee 9a 9c 4a 51 c3 a4 d2 2d fb 97 06 71 fb b7 7c 37 74 be 65 d1 9c 39 0a 5c a1 72 02 11 f5 cf 55 61 f1 39 d7 b9 ce 2a fa f6 37 ef 66 58 c0 a1 6e 5d e2 8e 13 12 39 70 99 57 c4 10 37 49 dc 78 bd bb 06 45 ff bf 8d 34 bb 8d 26 f9 fd a9 ff ae b6 e1 5e 5b ac aa 3c 22 b9 bb bf 1c b3 6f 03 33 18 f7 c5 2d 11 c9 bc 95 6c 81 2a 4b c1 38 a8 6d d3 b8 61 5b 81 12 29 88 c4 28 43 d8 55 33 13 4f 11 db ae 09 86 96 22 64 7c fb 21 9b c2 24 f0 57 07 a3 ae c0 92 d3 79 01 b4 1d 9c ee 7e 50 b1 7e 6f 64 fb fa c5 1a 7b 7d 8a 98 86 65 ed 4d 96 1f ba 9e b3 05 b9 46 bd 08 22 53 e5 45 aa 0a 77 f6 99 0c f5 fc 2e 5b 2e 36 56 ad a4 4f 31 24 b2 6a b8 b2 9a 9b c9 ab 6a ac 76 6d d6 39 47 Data Ascii: \~<WFv#AH{$9kD3Yx JQ-q\|7te9\rUa97fXn]9pW7IxE4&^[<"o3-lK8ma[)(CU3O"d\|!$Wy~P~od{}eMF"SEw.[.6VO1$jjvm9G
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: de 09 c4 c6 61 c2 4b f9 35 10 5a bc 4a a5 24 8d ed 5a 8a 0d f7 24 64 a7 40 84 ca 03 82 56 6e a3 c7 22 0b be 6b a2 d8 b1 5d c3 5a b6 a1 2b 0a e8 2c b1 16 74 25 31 83 5a 6d 27 20 75 59 b9 04 33 1f 95 ec 72 ae 07 7a 28 a7 92 67 30 a7 4e f6 55 c5 f0 fc 6c 88 a8 8f 5e e5 cb 6f 63 fd 45 ae c9 97 de 24 fe fc 09 23 f8 a7 b2 b8 ea 25 0f 42 7a b9 5f 65 7c 39 a0 14 c7 ed 85 d4 62 5e d5 23 9e ec 3e c6 f2 bd 84 ff 6d 85 5c 99 ca 63 a0 8c 9a 26 7e 9f d2 f9 59 7a 35 09 20 e0 7a 58 a8 35 d9 9e e7 7b 57 4d 35 5d 1d e3 f1 07 3b 56 54 1e 95 e8 14 37 b9 40 78 90 46 ba b7 7c ff ae bd fc 91 2a 1e 10 be 6c 46 7e 8f 40 90 dc 0d eb f3 4d 2a 3c 8f fc 91 b0 d3 d3 5e 24 17 c4 c5 86 73 ee 1b bd ae 39 b7 a8 bf 13 6d b1 ab 1c 6d 43 2e 5b c0 09 d8 19 a2 0f 02 13 ad fa a5 40 02 f9 37 a9 Data Ascii: aK5ZJ$Z$d@Vn"k]Z+,t%1Zm' uY3rz(g0NUl^ocE$#%Bz_e\|9b^#>m\c&~Yz5 zX5{WM5];VT7@xF\|lF~@M<^$s9mmC.[@7
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 52 64 7e 42 a1 48 36 b3 59 2a b2 84 69 7e 17 10 06 09 03 82 6f 28 66 db 00 69 fd 20 cb b1 8b 79 9e 10 8d 4c ee 4f 61 7f e6 bc 88 04 ea e3 61 51 49 ab 62 1d cd cc a1 b6 56 81 a3 2b 99 84 7e dc 19 63 a7 3f 3d 19 65 8f 8f e1 9b 08 ce 37 a8 86 1f d6 a6 0a 6b c8 72 1b 0c e0 35 c5 6c 99 24 fd e0 e1 15 df 1b 2d 2c 3e bb 80 fc 59 c8 00 a3 31 e7 08 fb b2 bc 54 81 b0 d3 cb 1c a4 7f 59 b7 e2 ea 87 09 ee 58 69 a7 06 ee e5 2e 75 d2 96 7d d3 85 7e 9a 3c 8b 28 1c cd 17 03 b6 c1 18 9e f1 63 2c 93 bb df 76 5e ef 5e 2a 1a 4a bc 93 10 78 dd 8f c1 5b ef 21 f1 6f e0 f8 83 e2 fb 3a d5 68 57 12 33 ac 37 f2 55 a4 5a 24 1c 38 1a 91 90 f3 32 33 e8 75 29 a5 8f c0 f9 6b 0c 2e dc 31 6c 1a e3 e1 88 e9 a7 6b 3b 65 a8 2e 76 f0 59 d1 f7 74 ad f4 dd 8a a0 21 f0 94 f5 d4 a2 d8 29 71 de c6 Data Ascii: Rd~BH6Yi~o(fi yLOaaQIbV+~c?=e7kr5l$-,>Y1TYXi.u}~<(c,v^^Jx[!o:hW37UZ$823u)k.1lk;e.vYt!)q
2024-03-27 20:20:19 UTC	665	IN	Data Raw: 60 fa bf 45 d1 00 02 c7 26 30 d6 9f e1 03 35 9e 99 1d d8 6d 4f 11 54 ea 7a 28 27 df 06 4c 3d 1c b0 2b 47 4a ca 50 a9 2a d3 8e a1 00 74 fa d1 28 c6 31 fa 5a 78 ad 9d b2 1c 44 d2 9a b0 dd 7f 9f 40 41 4f bc 15 30 64 47 6d a5 02 6b af b0 83 f6 fb c6 14 06 6d 16 04 a3 7e 0d 2c 51 19 12 f5 35 e7 76 9f 37 51 fe 0d ad 95 75 b9 f3 e4 f0 88 64 3a 3d d5 f0 34 8e 79 a1 3e 5e 62 cd 1b 46 95 28 16 0e 27 d5 c7 2d 9e f6 a4 c9 59 1c 56 e2 08 f2 74 70 6b 92 ba c7 6e af 6c 91 7c 5a 73 ef ba d2 f9 0d 37 9d 75 ed 05 c2 83 bf 11 1d c0 00 67 52 46 ba 79 bb 68 38 40 a2 d2 ea 60 30 5a 27 29 89 46 07 7b 95 22 cb 01 0d c9 b5 39 24 3e 91 98 7c 83 c4 7d 2c 9d e1 db 36 85 d0 bd a6 e5 d2 3e d8 e2 56 bf 2e 40 20 07 3f 25 b6 b0 14 32 ba 60 42 53 1b fc 71 75 f7 81 a6 50 aa a0 10 96 e2 d7 Data Ascii: `E&05mOTz('L=+GJP*t(1ZxD@AO0dGmkm~,Q5v7Qud:=4y>^bF('-YVtpknl\|Zs7ugRFyh8@`0Z')F{"9$>\|},6>V.@ ?%2`BSquP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49895	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1526	OUT	GET /cdn-cgi/image/format=auto,w=264/d0e11c60-5f8b-4652-bcd0-33ee2be22093/videos_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:19 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: image/avif Content-Length: 6948 Connection: close CF-Ray: 86b214984df6399a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf7CfEkAq9M4K1igKmV2HCdFhTkiHsTARsnZIiJ4wGDQ:9cb16cbb03fa8218a15ed9328f31104a" Last-Modified: Fri, 01 Dec 2023 06:21:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=74+267 c=0+0 v=2024.3.2 l=6948 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTwJ%2Bl7byhsmb6Ajs7JAu1xBT6YmZOAq%2BViVfev4TXTAOhw3mnD0meAQj2mgaNJi0esb5Rw7QCkiEwv2xH%2FBmw2MrwHDKS8MFVqwvEDGon%2FXAvnwIbpf4r5vJwx0WGp20oPH89%2BIAV9EzXG7cRosiGadmBc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:19 UTC	332	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1a 32 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1a 3a 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD2#iinfinfeav01Viprp8ipcoispehav1C?@pixiipma:mdat? rm
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 1f 52 89 d6 b7 a5 59 a6 ad 9b 3a 9c 04 9b 5e ee d5 6e bc a8 2e 8f 6f 28 9e 1d f3 d9 86 56 61 eb ee 7f 11 2a 42 68 2f 63 40 45 0b 91 30 2c 19 9f 7b 00 dc 3f 50 9f 85 ee 01 02 57 e7 31 35 5e 33 0a b5 4f 2d 0b 76 36 28 84 83 83 35 e2 b2 71 1e 34 0c e4 8e 0b 11 c7 92 e2 69 7b bb a0 31 75 cc 65 17 7f 35 63 2e e9 b0 21 ea ed ff 0a c0 18 67 96 1f ae eb 00 b1 fb f4 22 4d 9e 66 4b 3e ae 20 4a ad 11 a1 c9 3f 6e ba 29 02 59 04 3e f8 1c 68 9e 9c f9 57 98 72 5a 47 ae ac 91 40 ab 2e a8 1d 14 04 5b bd f7 f3 1d 39 8e 1e 2e c8 30 1b c8 e3 14 5d 8d d5 49 60 52 cf 85 78 a8 61 39 bb 0e 5d f3 22 88 00 ef 20 89 43 da 5b 4b db 7b 3b 30 1a 93 be 60 11 cc a7 f8 d4 5f 72 f1 a8 d8 6b 90 a8 41 a2 41 a1 9a c7 70 73 ae 76 47 02 c3 2f 71 f2 01 53 1c 04 de 14 87 22 6f 9c ea 55 cf a6 0e Data Ascii: RY:^n.o(Va*Bh/c@E0,{?PW15^3O-v6(5q4i{1ue5c.!g"MfK> J?n)Y>hWrZG@.[9.0]I`Rxa9]" C[K{;0`_rkAApsvG/qS"oU
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: f9 66 12 9a 82 6a 2b 51 21 3b d6 27 6b ed 03 61 55 fa 5e 95 cc 72 55 be dd 37 66 d7 fb 21 81 1a 22 39 fa 38 bf 46 6a 9e b4 c2 99 0e ee 1d fb 29 cd d7 21 30 a9 dd 2d d9 15 26 d0 c8 b2 bf 1b 2c 5d 00 e1 ea 5f 67 e5 35 ba 8f b2 50 f2 f1 cf 58 4c 3a 13 cc 9d b0 f0 df 89 23 af ef 46 e7 3c c6 1c cd b9 ab fb 90 ce c5 a5 ed b3 9a 16 30 56 e3 71 ee 98 c4 b8 ad e1 5a f2 8c f2 72 e3 7e a9 a5 b0 81 77 9f 4e 28 3d 85 86 b9 be 81 65 40 47 33 ce b9 46 c0 03 cd 9e 02 b5 15 91 f4 a2 3b c4 59 fe 2e ad f9 f9 d2 8e 90 1c 50 c1 e0 fa cc c0 2b 84 35 d2 40 06 83 96 0c 89 2e e0 1c 7f 8d bc 36 be f1 ed ac 94 a8 0c 1e cd 3e e1 a4 1d ce e3 03 d4 ad 4a 94 75 5b 96 80 13 2f 71 03 02 cf f1 e5 e2 95 c1 39 90 13 76 48 12 1c 1a b1 2b 10 23 cd dc 3e 14 3f b8 be 67 11 9a 06 81 7d a8 9d 75 Data Ascii: fj+Q!;'kaU^rU7f!"98Fj)!0-&,]_g5PXL:#F<0VqZr~wN(=e@G3F;Y.P+5@.6>Ju[/q9vH+#>?g}u
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: ef 1b bb a3 c9 27 8c be 73 8d fc 7d 5c 81 8d 28 8b 71 2c 51 65 16 4b 06 f6 92 d3 cc 36 26 4b cb 8f e0 c8 74 6f 72 5b 23 83 cb f9 f1 58 b1 00 17 0e de 70 58 26 76 b3 a3 c6 f0 67 ff a0 b6 0c d0 32 6a 60 a3 23 97 fa bf 70 1d d0 d3 55 b8 17 5b b8 30 b1 64 3c d3 0c 13 c5 e9 74 fc ca 77 76 c5 63 1c e6 d5 1e 06 0c 94 34 ab a5 94 7e 22 64 a5 cc 3a 61 89 f4 f0 66 4a 23 db e9 69 e5 51 c9 fa 82 a9 c9 0b b1 19 fa b7 ad e9 84 0b 25 26 3d d1 02 5d 22 3c b4 ee 66 ad a3 b6 ec b1 0d d9 4c 01 98 d8 87 26 5f 23 f9 f0 34 e7 a4 7e 75 b3 75 6c 8c 11 6b 1c f4 31 42 11 29 13 9d 07 4b 67 2e ca 0d 9b 7b 0f 6e 54 e2 66 33 53 f9 63 1f d9 64 e2 b8 d0 97 69 c4 5c 91 c2 1f f1 63 35 5c fb 33 2a 37 7e 52 49 40 06 e0 7a 84 d2 5e 63 99 d3 4e f7 bf a1 37 90 a6 f8 6b 5c 16 91 93 c1 bd c9 0e Data Ascii: 's}\(q,QeK6&Ktor[#XpX&vg2j`#pU[0d<twvc4~"d:afJ#iQ%&=]"<fL&_#4~uulk1B)Kg.{nTf3Scdi\c5\3*7~RI@z^cN7k\
2024-03-27 20:20:19 UTC	1369	IN	Data Raw: 84 1e 5b ec 91 7f a3 7f a5 cd 01 2d 93 88 ca 36 d6 74 f4 3a 9d e8 96 48 d9 61 06 9a 6f dd 9c 71 66 ce b4 09 70 2b 91 e0 a8 00 5a 4c e6 8a 40 02 74 c0 21 ba 08 b9 ec 14 3c de 60 1b fc 25 ec c6 ce 6a 50 5c 3f 43 ce ab 16 14 5d 5b d8 d9 11 e7 d7 10 57 44 ad 66 ff ff ff ff ff ac 43 d2 a7 be 61 17 ad 9f ec 70 6f 9b 73 eb 6f 5a 8a 69 26 78 1e 88 a1 a7 35 2c a8 1c f9 ad fc db f6 72 69 63 8c 44 2e 24 22 1f 65 a4 89 87 d4 cd cd 2f 6e 02 ea fd 49 50 bc 6e d3 1e 6d 22 1d fd 55 d8 7e 3c ce d1 0d 34 77 75 d0 65 57 0c 3c 26 b6 01 21 00 b7 56 36 76 14 aa 84 d8 a0 73 96 7d 3f 2a e4 8d 2d 2a d0 f9 c4 27 88 3b 8f 17 b0 bf ce 32 b4 27 41 13 fc d3 dc 37 bd d3 e1 5c 20 35 ce 72 4b a1 e9 88 ff 06 5c 71 c7 cd 66 21 7e d0 e6 22 e8 8a b9 4e 96 ef 3a a2 e7 57 ff 96 25 e7 6e 0d db Data Ascii: [-6t:Haoqfp+ZL@t!<`%jP\?C][WDfCaposoZi&x5,ricD.$"e/nIPnm"U~<4wueW<&!V6vs}?-';2'A7\ 5rK\qf!~"N:W%n
2024-03-27 20:20:19 UTC	1140	IN	Data Raw: f5 94 1a b4 14 a0 ab f7 2a 07 16 23 6e 66 da 7a dd 9f 50 f9 8d 95 8b 48 73 83 94 d8 f9 da 8b d9 e5 4c 72 0a d5 6a 1e ed 82 2b d9 05 58 ab 26 05 25 2f 12 e8 0a 2d 41 f4 90 d5 9a 6b 71 6e c3 91 b8 3b 88 4e 9f da 41 b6 f0 7b 29 c1 58 90 35 a4 08 96 89 0f fc 3a 03 91 44 2c d9 5c 48 25 9c 56 d3 69 41 01 73 0e 7e 0a e8 c5 8f cf 0a 3f 72 0d d5 7c 60 de 91 a7 26 16 c3 a0 2e 39 ba 4f 91 b1 58 1b 28 77 41 a2 50 ab d7 4a 7a 4b c6 c5 43 07 90 80 77 ae ef c5 fd 56 9c 01 8a 5a d1 ab 7a 2f 41 c6 1f e9 02 6c 69 20 8e 8e a7 c5 b0 e4 06 a7 6d 98 ff e9 7a 80 4c d7 95 c2 fc 61 9a b6 4f 22 a5 a2 f2 32 c0 08 d0 19 59 41 c2 8c 8a 41 50 3a e6 6b 9e 2e 5f ec 6f b7 b5 b2 7c 39 41 c3 f7 88 b3 e0 74 d4 02 4c 2e f7 e0 17 f8 d7 3e 21 1c 6f fc e6 e2 07 5e 55 73 bc 4b 9c fb 55 ce b7 fa Data Ascii: *#nfzPHsLrj+X&%/-Akqn;NA{)X5:D,\H%ViAs~?r\|`&.9OX(wAPJzKCwVZz/Ali mzLaO"2YAAP:k._o\|9AtL.>!o^UsKU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49901	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	2401	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1554 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:19 UTC	1554	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 33 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 62 62 31 38 31 64 34 39 2d 62 61 36 34 2d 34 36 66 62 2d 39 35 64 36 2d 65 37 35 33 34 61 61 32 35 34 31 61 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 64 65 73 69 67 6e 2f 44 41 47 41 74 58 41 4a 75 66 4d 2f 34 78 6d 61 66 39 35 71 52 35 6d 34 77 4a 59 77 34 5f 66 51 78 67 2f 76 69 65 77 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 64 65 73 69 67 6e 2f 44 41 47 41 74 58 41 4a 75 66 4d 2f 34 78 6d 61 66 39 35 71 52 35 6d Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2024.3.0"},"pageloadId":"bb181d49-ba64-46fb-95d6-e7534aa2541a","location":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view","landingPath":"/design/DAGAtXAJufM/4xmaf95qR5m
2024-03-27 20:20:19 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:19 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b21497cb40878e-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49900	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	571	OUT	GET /web/55e76e6c71b8c4fb.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:20 UTC	1354	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:19 GMT Content-Type: text/javascript Content-Length: 19683 Connection: close CF-Ray: 86b214989e24242d-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 64180 Cache-Control: public, max-age=31556926 ETag: "b60b46fd63498a98a08b7f18bedcbbe4" Expires: Fri, 28 Mar 2025 02:09:05 GMT Last-Modified: Wed, 27 Mar 2024 02:20:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Eh+C7u3Er/hraskMBxoQFaIK2ViDfePUCM+4jmZTp5XZWuG2ibbA9w+Gy/jDL5XWcjEJvXxTF1Y= x-amz-replication-status: PENDING x-amz-request-id: DXJAYK4QTW51NKMP x-amz-server-side-encryption: AES256 x-amz-version-id: _yb1FrRVECPSlhLr90JxQhTZgeGmKQj2 X-Content-Type-Options: nosniff
2024-03-27 20:20:20 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 52 53 46 33 64 6b 61 6d 5f 66 71 78 65 69 63 57 49 45 74 46 57 69 68 56 47 56 76 66 79 5f 70 65 57 78 38 42 6a 54 2e 51 76 6e 4d 2d 31 37 31 31 35 37 30 38 31 39 2d 31 2e 30 2e 31 2e 31 2d 38 5f 43 41 53 31 62 66 4b 6c 4b 55 72 57 36 38 5a 74 41 6c 54 31 30 5a 37 78 36 30 6c 54 34 73 47 71 55 6d 6d 4b 7a 6f 53 75 42 54 33 50 36 67 47 32 56 64 44 49 6d 4b 71 34 70 49 4a 69 56 44 65 75 31 6c 57 75 2e 73 34 71 73 44 55 31 62 5f 7a 6b 33 71 55 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 31 39 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=RSF3dkam_fqxeicWIEtFWihVGVvfy_peWx8BjT.QvnM-1711570819-1.0.1.1-8_CAS1bfKlKUrW68ZtAlT10Z7x60lT4sGqUmmKzoSuBT3P6gG2VdDImKq4pIJiVDeu1lWu.s4qsDU1b_zk3qUw; path=/; expires=Wed, 27-Mar-24 20:50:19 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:20 UTC	603	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6e 2c 66 2c 73 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 63 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 73 2c 63 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define canno
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 64 5d 3d 65 5b 64 2d 31 5d 3b 65 5b 64 5d 3d 5b 74 2c 6e 2c 66 5d 7d 7d 2c 63 2e 6e 3d 65 3d 3e 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 65 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 65 3b 72 65 74 75 72 6e 20 63 2e 64 28 72 2c 7b 61 3a 72 7d 29 2c 72 7d 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 63 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 31 26 6e 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 6e 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 6e 26 26 65 2e 5f 5f 65 Data Ascii: d]=e[d-1];e[d]=[t,n,f]}},c.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return c.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,c.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__e
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 39 62 39 65 31 61 36 32 61 65 61 37 64 65 34 65 2e 6a 73 22 3b 69 66 28 31 35 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 39 36 37 39 32 36 34 65 31 34 30 62 37 31 65 2e 6a 73 22 3b 69 66 28 35 34 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 34 63 64 33 36 65 66 38 31 30 33 62 64 66 65 2e 6a 73 22 3b 69 66 28 33 30 37 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 62 32 32 39 38 36 35 36 34 62 64 38 61 35 37 2e 6a 73 22 3b 69 66 28 38 32 36 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 32 35 62 64 65 30 34 33 62 66 38 34 36 35 65 2e 6a 73 22 3b 69 66 28 31 33 34 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 30 36 31 37 63 36 38 37 39 63 36 31 36 38 36 2e 6a 73 22 3b 69 66 28 37 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 66 39 33 61 38 32 30 38 66 36 37 61 36 33 34 2e Data Ascii: 9b9e1a62aea7de4e.js";if(158===e)return"59679264e140b71e.js";if(5413===e)return"54cd36ef8103bdfe.js";if(3071===e)return"cb22986564bd8a57.js";if(8265===e)return"b25bde043bf8465e.js";if(1348===e)return"90617c6879c61686.js";if(782===e)return"4f93a8208f67a634.
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 64 63 31 36 30 39 62 39 31 66 35 36 61 65 2e 6a 73 22 3b 69 66 28 36 38 31 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 30 63 31 34 65 34 64 64 37 65 35 33 66 32 34 2e 6a 73 22 3b 69 66 28 32 30 36 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 63 35 61 37 37 36 36 30 39 65 65 66 39 33 32 2e 6a 73 22 3b 69 66 28 31 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 65 61 62 64 31 34 32 63 65 39 64 35 34 37 35 2e 6a 73 22 3b 69 66 28 37 39 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 36 37 30 64 65 30 63 65 38 64 65 62 32 30 62 2e 6a 73 22 3b 69 66 28 39 32 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 34 62 32 62 33 33 35 39 39 35 33 63 37 39 32 2e 6a 73 22 3b 69 66 28 32 32 30 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 37 33 62 33 34 61 33 66 34 31 66 64 32 35 64 2e 6a 73 22 Data Ascii: dc1609b91f56ae.js";if(6812===e)return"d0c14e4dd7e53f24.js";if(2063===e)return"4c5a776609eef932.js";if(15===e)return"3eabd142ce9d5475.js";if(7943===e)return"e670de0ce8deb20b.js";if(920===e)return"e4b2b3359953c792.js";if(2206===e)return"573b34a3f41fd25d.js"
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 30 64 35 64 66 35 39 34 39 36 65 65 31 66 34 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 31 31 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 63 35 36 35 35 36 35 66 30 61 63 63 36 38 64 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 35 30 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 36 30 65 32 62 38 34 31 34 39 31 34 66 66 37 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 37 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 66 34 64 61 37 31 32 36 64 31 36 30 39 62 62 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 32 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 66 37 38 61 31 32 30 32 39 65 30 66 34 34 61 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 32 39 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 33 33 33 37 61 36 35 64 33 36 34 36 30 39 34 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 32 31 Data Ascii: 0d5df59496ee1f4.ltr.css";if(5116===e)return"7c565565f0acc68d.ltr.css";if(4506===e)return"860e2b8414914ff7.ltr.css";if(5750===e)return"af4da7126d1609bb.ltr.css";if(1282===e)return"af78a12029e0f44a.ltr.css";if(3295===e)return"53337a65d3646094.ltr.css";if(21
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 74 75 72 6e 22 63 31 36 36 65 35 64 32 30 61 64 35 38 66 34 65 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 34 35 37 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 36 63 39 30 66 34 38 33 37 33 35 38 33 62 33 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 35 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 61 34 66 62 62 35 37 36 30 62 63 36 65 34 38 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 34 31 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 36 36 36 35 61 66 37 38 64 33 64 32 31 33 31 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 33 34 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 64 62 33 38 34 36 38 39 32 39 35 39 35 64 39 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 37 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 39 32 35 66 64 36 30 34 34 31 64 66 38 39 38 2e 72 74 6c 2e 63 73 73 22 3b 69 Data Ascii: turn"c166e5d20ad58f4e.rtl.css";if(4573===e)return"b6c90f48373583b3.rtl.css";if(158===e)return"da4fbb5760bc6e48.rtl.css";if(5413===e)return"66665af78d3d2131.rtl.css";if(1348===e)return"bdb38468929595d9.rtl.css";if(782===e)return"6925fd60441df898.rtl.css";i
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 74 73 2e 2a 2c 20 55 73 65 20 45 53 4d 20 65 78 70 6f 72 74 20 73 79 6e 74 61 78 2c 20 69 6e 73 74 65 61 64 3a 20 22 2b 65 2e 69 64 29 7d 7d 29 2c 65 7d 2c 63 2e 6f 3d 28 65 2c 72 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 2c 6e 3d 7b 7d 2c 66 3d 22 40 63 61 6e 76 61 2f 77 65 62 3a 22 2c 63 2e 6c 3d 28 65 2c 72 2c 74 2c 73 29 3d 3e 7b 69 66 28 21 6e 5b 65 5d 29 7b 76 61 72 20 69 2c 61 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 66 6f 72 28 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 64 3d 30 3b 64 3c 6f 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 75 3d 6f 5b 64 5d 3b Data Ascii: ts.*, Use ESM export syntax, instead: "+e.id)}}),e},c.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),n={},f="@canva/web:",c.l=(e,r,t,s)=>{if(!n[e]){var i,a;if(void 0!==t)for(var o=document.getElementsByTagName("script"),d=0;d<o.length;d++){var u=o[d];
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 2c 66 2c 73 29 7b 63 6f 6e 73 74 20 69 3d 65 2e 6c 2c 63 3d 5b 5d 2c 61 3d 5b 5d 2c 6f 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 6d 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 70 72 65 66 65 74 63 68 22 5d 5b 68 72 65 66 5d 27 29 29 7b 63 6f 6e 73 74 20 65 3d 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 26 26 6f 2e 70 75 73 68 28 65 29 7d 6c 65 74 20 64 3d 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 29 7b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 6f 2e 6c 65 6e 67 74 68 3b 66 2b Data Ascii: function(e,r,t,n,f,s){const i=e.l,c=[],a=[],o=[];for(const m of document.head.querySelectorAll('link[rel="prefetch"][href]')){const e=m.getAttribute("href");e&&o.push(e)}let d=e=>document.head.appendChild(e);e.l=function(e,r,t,n){for(let f=0;f<o.length;f+
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 65 5b 30 5d 2e 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 28 29 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 28 29 2c 72 3d 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 29 7b 63 6f 6e 73 74 7b 70 72 6f 74 6f 63 6f 6c 3a 72 2c 68 6f 73 74 3a 74 7d 3d 6e 65 77 20 55 52 4c 28 65 29 3b 72 65 74 75 72 6e 60 24 7b 72 7d 2f 2f 63 68 75 6e 6b 2d 63 6f 6d 70 6f 73 69 6e 67 2e 24 7b 74 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7d 60 7d 65 6c 73 65 20 69 66 28 5b 22 6c 6f 63 61 6c 68 Data Ascii: h)return void e[0].originalLoad();const t=function(){const e=n(),r=new URL(window.location.href);if(null==e?void 0:e.startsWith("http")){const{protocol:r,host:t}=new URL(e);return`${r}//chunk-composing.${t.split(".").slice(-2).join(".")}`}else if(["localh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49902	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	570	OUT	GET /web/40468dbe50c37871.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:20 UTC	1356	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: text/javascript Content-Length: 395587 Connection: close CF-Ray: 86b21499fc5682b6-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 788725 Cache-Control: public, max-age=31556926 ETag: "5b7fbca916e6990d420e22368aa02e61" Expires: Fri, 28 Mar 2025 02:09:06 GMT Last-Modified: Tue, 06 Feb 2024 02:25:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 06 Feb 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: wno02mdNv1yycAYCnTOfaMFWJ0zvMlnGaQi8hdXWIlz1Auzeyu8ji12u9yNEd1Gyz/l1UQDtmgM= x-amz-replication-status: PENDING x-amz-request-id: 8VQKVCXHK4J0KW6V x-amz-server-side-encryption: AES256 x-amz-version-id: SJOhICiZYUA76jcQGE_w6Niz0a42HHgI X-Content-Type-Options: nosniff
2024-03-27 20:20:20 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 73 64 74 4b 37 79 30 79 4e 42 47 62 30 61 57 75 4f 66 72 4a 39 39 43 33 7a 66 78 71 44 4b 35 5f 79 76 65 47 53 7a 64 4c 43 66 6b 2d 31 37 31 31 35 37 30 38 32 30 2d 31 2e 30 2e 31 2e 31 2d 52 48 30 33 33 68 4c 75 47 45 77 4e 6b 42 33 33 64 4e 2e 55 73 37 58 34 44 46 4e 67 65 78 36 6b 4a 5a 33 39 4d 66 4e 61 5f 2e 56 6e 68 59 4e 65 41 44 6e 44 61 30 46 46 6b 6d 71 6a 69 36 35 45 65 53 37 4f 4b 64 65 74 42 76 56 32 4d 37 53 65 37 41 7a 62 2e 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 32 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=sdtK7y0yNBGb0aWuOfrJ99C3zfxqDK5_yveGSzdLCfk-1711570820-1.0.1.1-RH033hLuGEwNkB33dN.Us7X4DFNgex6kJZ39MfNa_.VnhYNeADnDa0FFkmqji65EeS7OKdetBvV2M7Se7Azb.g; path=/; expires=Wed, 27-Mar-24 20:50:20 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:20 UTC	603	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 30 34 36 38 64 62 65 35 30 63 33 37 38 37 31 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 39 35 39 35 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 72 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see 40468dbe50c37871.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{95957:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serial
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 2c 65 2c 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 68 69 73 2c 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 6f 3a 69 2c 74 2e 63 61 63 68 65 2e 63 72 65 61 74 65 28 29 2c 74 2e 73 65 72 69 61 6c 69 7a 65 72 29 7d 6e 2e 64 28 74 2c 7b 6d 65 6d 6f 69 7a 65 3a 28 29 3d 3e 72 2c 73 74 72 61 74 65 67 69 65 73 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 74 68 69 73 2e 63 61 63 68 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: ),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function l(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{memoize:()=>r,strategies:()=>f});var s=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.crea
2024-03-27 20:20:20 UTC	935	IN	Data Raw: 47 55 4d 45 4e 54 5f 43 4c 4f 53 49 4e 47 5f 42 52 41 43 45 3d 31 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 43 4c 4f 53 49 4e 47 5f 42 52 41 43 45 22 2c 65 5b 65 2e 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 3d 32 5d 3d 22 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 3d 33 5d 3d 22 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 34 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 45 58 50 45 43 Data Ascii: GUMENT_CLOSING_BRACE=1]="EXPECT_ARGUMENT_CLOSING_BRACE",e[e.EMPTY_ARGUMENT=2]="EMPTY_ARGUMENT",e[e.MALFORMED_ARGUMENT=3]="MALFORMED_ARGUMENT",e[e.EXPECT_ARGUMENT_TYPE=4]="EXPECT_ARGUMENT_TYPE",e[e.INVALID_ARGUMENT_TYPE=5]="INVALID_ARGUMENT_TYPE",e[e.EXPEC
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 31 36 5d 3d 22 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 3d 31 37 5d 3d 22 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 3d 31 38 5d 3d 22 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 22 2c 65 5b 65 2e 49 4e 56 41 Data Ascii: PLURAL_ARGUMENT_SELECTOR=16]="EXPECT_PLURAL_ARGUMENT_SELECTOR",e[e.EXPECT_SELECT_ARGUMENT_SELECTOR_FRAGMENT=17]="EXPECT_SELECT_ARGUMENT_SELECTOR_FRAGMENT",e[e.EXPECT_PLURAL_ARGUMENT_SELECTOR_FRAGMENT=18]="EXPECT_PLURAL_ARGUMENT_SELECTOR_FRAGMENT",e[e.INVA
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 65 74 65 20 65 2e 6f 70 74 69 6f 6e 73 5b 74 5d 2e 6c 6f 63 61 74 69 6f 6e 2c 6c 28 65 2e 6f 70 74 69 6f 6e 73 5b 74 5d 2e 76 61 6c 75 65 29 3b 65 6c 73 65 28 30 2c 61 2e 69 73 4e 75 6d 62 65 72 45 6c 65 6d 65 6e 74 29 28 65 29 26 26 28 30 2c 61 2e 69 73 4e 75 6d 62 65 72 53 6b 65 6c 65 74 6f 6e 29 28 65 2e 73 74 79 6c 65 29 7c 7c 28 28 30 2c 61 2e 69 73 44 61 74 65 45 6c 65 6d 65 6e 74 29 28 65 29 7c 7c 28 30 2c 61 2e 69 73 54 69 6d 65 45 6c 65 6d 65 6e 74 29 28 65 29 29 26 26 28 30 2c 61 2e 69 73 44 61 74 65 54 69 6d 65 53 6b 65 6c 65 74 6f 6e 29 28 65 2e 73 74 79 6c 65 29 3f 64 65 6c 65 74 65 20 65 2e 73 74 79 6c 65 2e 6c 6f 63 61 74 69 6f 6e 3a 28 30 2c 61 2e 69 73 54 61 67 45 6c 65 6d 65 6e 74 29 28 65 29 26 26 6c 28 65 2e 63 68 69 6c 64 72 65 6e 29 Data Ascii: ete e.options[t].location,l(e.options[t].value);else(0,a.isNumberElement)(e)&&(0,a.isNumberSkeleton)(e.style)\|\|((0,a.isDateElement)(e)\|\|(0,a.isTimeElement)(e))&&(0,a.isDateTimeSkeleton)(e.style)?delete e.style.location:(0,a.isTagElement)(e)&&l(e.children)
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 2c 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 6e 2c 6e 2b 74 2e 6c 65 6e 67 74 68 29 3d 3d 3d 74 7d 2c 78 3d 6d 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 22 22 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 6f 3e 69 3b 29 7b 69 66 28 28 6e 3d 65 5b 69 2b 2b 5d 29 3e 31 31 31 34 31 31 31 29 74 68 72 6f 77 20 52 61 6e 67 65 45 Data Ascii: unction(e,t,n){return e.startsWith(t,n)}:function(e,t,n){return e.slice(n,n+t.length)===t},x=m?String.fromCodePoint:function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];for(var n,r="",o=e.length,i=0;o>i;){if((n=e[i++])>1114111)throw RangeE
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 61 75 73 65 3d 21 21 74 2e 72 65 71 75 69 72 65 73 4f 74 68 65 72 43 6c 61 75 73 65 2c 74 68 69 73 2e 73 68 6f 75 6c 64 50 61 72 73 65 53 6b 65 6c 65 74 6f 6e 73 3d 21 21 74 2e 73 68 6f 75 6c 64 50 61 72 73 65 53 6b 65 6c 65 74 6f 6e 73 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 21 3d 3d 74 68 69 73 2e 6f 66 66 73 65 74 28 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 61 72 73 65 72 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 30 2c 22 22 2c 21 31 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: ause=!!t.requiresOtherClause,this.shouldParseSkeletons=!!t.shouldParseSkeletons}return e.prototype.parse=function(){if(0!==this.offset())throw Error("parser can only be used once");return this.parseMessage(0,"",!1)},e.prototype.parseMessage=function(e,t,n
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 29 29 3b 76 61 72 20 75 3d 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 3b 72 65 74 75 72 6e 20 72 21 3d 3d 74 68 69 73 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 28 29 3f 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 45 72 72 6f 72 4b 69 6e 64 2e 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 2c 68 28 75 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3a 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 62 75 6d 70 49 66 28 22 3e 22 29 3f 7b 76 61 6c 3a 7b 74 79 70 65 3a 61 2e 54 59 50 45 2e 74 61 67 2c 76 61 6c 75 65 3a 72 2c 63 68 69 6c 64 72 65 6e 3a 6c 2c 6c 6f 63 61 74 69 6f 6e 3a 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 2c 65 72 72 3a 6e Data Ascii: ion()));var u=this.clonePosition();return r!==this.parseTagName()?this.error(i.ErrorKind.UNMATCHED_CLOSING_TAG,h(u,this.clonePosition())):(this.bumpSpace(),this.bumpIf(">")?{val:{type:a.TYPE.tag,value:r,children:l,location:h(n,this.clonePosition())},err:n
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 3d 3d 65 29 3f 6e 75 6c 6c 3a 28 74 68 69 73 2e 62 75 6d 70 28 29 2c 22 3c 22 29 3b 76 61 72 20 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 79 50 61 72 73 65 51 75 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 69 73 45 4f 46 28 29 7c 7c 33 39 21 3d 3d 74 68 69 73 2e 63 68 61 72 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 73 77 69 74 63 68 28 74 68 69 73 2e 70 65 65 6b 28 29 29 7b 63 61 73 65 20 33 39 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 62 75 6d 70 28 29 2c 74 68 69 73 2e 62 75 6d 70 28 29 2c 22 27 22 3b 63 61 73 65 20 31 32 33 3a 63 61 73 65 20 36 30 3a 63 61 73 65 20 36 32 3a 63 61 73 65 20 31 32 35 3a 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 69 66 28 22 70 6c 75 72 61 6c 22 3d 3d 3d 65 7c 7c 22 73 65 6c 65 63 74 6f Data Ascii: ==e)?null:(this.bump(),"<");var e},e.prototype.tryParseQuote=function(e){if(this.isEOF()\|\|39!==this.char())return null;switch(this.peek()){case 39:return this.bump(),this.bump(),"'";case 123:case 60:case 62:case 125:break;case 35:if("plural"===e\|\|"selecto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49903	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:19 UTC	1986	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:20 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21499da513898-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21499da513898 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTuj67Jez%2Bf7T86hyf82vpyPCOfSIWbrpBTTJArlxGX9iys5NpFXHQyVRgg8rEtkTnRyD6Gv%2FNuixEUwNdNM%2F9vs9Gnzbr7Q2s3mHJXnusRTkQRMg7Wu%2FjIbJ8Th4d4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:20 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49904	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	1230	OUT	GET /web/images/12487a1e0770d29351bd4ce4f87ec8fe.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:20 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: image/svg+xml Content-Length: 4237 Connection: close CF-Ray: 86b2149a3fbf0598-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792676 Cache-Control: public, max-age=31556926 ETag: "12487a1e0770d29351bd4ce4f87ec8fe" Expires: Fri, 28 Mar 2025 02:09:06 GMT Last-Modified: Thu, 14 Mar 2024 09:09:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 15 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: PvAe/IcdVsQJ6pYsChfA5AFtAS/SKEdXCpl0hq/l5j/W4B1uMsq6IPtw0d0UNSU0H1+Yp2Q5rRw= x-amz-replication-status: COMPLETED x-amz-request-id: 3Q62SZW2GW35J8S9 x-amz-server-side-encryption: AES256 x-amz-version-id: kJaYOsVtwSsTYzrbAC67d66wbhzaAYUZ X-Content-Type-Options: nosniff
2024-03-27 20:20:20 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 59 6c 75 66 44 38 25 32 42 39 45 62 4d 4a 45 58 73 25 32 46 73 4b 70 57 6e 4c 30 4d 46 44 50 6d 56 79 6f 25 32 42 30 46 5a 47 4b 49 4e 4a 4f 6f 7a 4f 50 42 48 75 7a 4a 68 66 43 76 43 6f 67 56 7a 61 4a 56 6d 4a 66 51 6f 57 38 43 73 57 54 4c 30 44 25 32 46 5a 63 50 4a 6e 6f 51 38 4e 6b 6d 6e 54 55 56 39 66 65 66 57 32 70 58 58 61 65 75 4d 62 37 5a 39 53 4b 56 36 25 32 42 56 38 30 42 46 4a 6c 61 58 58 61 63 74 25 32 42 67 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vYlufD8%2B9EbMJEXs%2FsKpWnL0MFDPmVyo%2B0FZGKINJOozOPBHuzJhfCvCogVzaJVmJfQoW8CsWTL0D%2FZcPJnoQ8NkmnTUV9fefW2pXXaeuMb7Z9SKV6%2BV80BFJlaXXact%2BgI%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 30 22 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 61 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 36 2e 38 30 30 30 32 20 2d 31 37 2e 32 38 20 31 31 2e 34 38 34 30 33 20 31 31 2e 31 36 35 30 34 20 34 30 2e 39 36 20 32 39 29 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 3c 73 74 6f 70 20 73 74 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="80" height="30" viewBox="0 0 80 30"><defs><radialGradient id="_2002046508__a" cx="0" cy="0" r="1" gradientTransform="matrix(16.80002 -17.28 11.48403 11.16504 40.96 29)" gradientUnits="userSpaceOnUse"><stop st
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 70 61 74 74 65 72 6e 20 69 64 3d 22 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 66 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 44 32 41 45 37 22 20 64 3d 22 4d 30 20 30 68 31 30 30 76 31 30 30 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 61 29 22 20 64 3d 22 4d 30 20 30 68 31 30 30 76 31 30 30 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 32 30 30 32 30 34 36 35 30 38 5f 5f 62 29 22 20 64 3d 22 4d 30 20 30 68 31 30 30 76 31 30 30 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 5f 32 30 30 32 Data Ascii: -opacity="0"/></radialGradient><pattern id="_2002046508__f" width="1" height="1"><path fill="#7D2AE7" d="M0 0h100v100H0z"/><path fill="url(#_2002046508__a)" d="M0 0h100v100H0z"/><path fill="url(#_2002046508__b)" d="M0 0h100v100H0z"/><path fill="url(#_2002
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 2e 32 39 36 20 31 2e 33 36 38 2d 37 2e 31 34 34 20 32 2e 30 35 36 2d 39 2e 33 36 34 2e 30 38 38 2d 2e 32 38 38 2e 31 33 36 2d 2e 35 33 36 2e 31 33 36 2d 2e 37 35 32 20 30 2d 2e 36 30 38 2d 2e 33 37 36 2d 2e 39 32 2d 31 2e 32 32 38 2d 2e 39 32 2d 2e 39 33 36 20 30 2d 31 2e 39 35 32 2e 33 35 36 2d 32 2e 39 33 32 20 32 2e 30 38 2d 2e 33 34 34 2d 31 2e 35 32 2d 31 2e 33 37 32 2d 32 2e 31 38 34 2d 32 2e 38 30 38 2d 32 2e 31 38 34 2d 32 2e 33 35 36 20 30 2d 34 2e 39 38 38 20 32 2e 34 39 32 2d 36 2e 31 34 34 20 35 2e 37 34 2d 31 2e 35 34 38 20 34 2e 33 33 36 2d 34 2e 36 36 38 20 38 2e 35 32 34 2d 38 2e 38 36 38 20 38 2e 35 32 34 2d 33 2e 38 31 32 20 30 2d 35 2e 38 32 34 2d 33 2e 31 37 32 2d 35 2e 38 32 34 2d 38 2e 31 38 34 43 34 2e 30 36 38 20 38 2e 33 31 32 20 Data Ascii: .296 1.368-7.144 2.056-9.364.088-.288.136-.536.136-.752 0-.608-.376-.92-1.228-.92-.936 0-1.952.356-2.932 2.08-.344-1.52-1.372-2.184-2.808-2.184-2.356 0-4.988 2.492-6.144 5.74-1.548 4.336-4.668 8.524-8.868 8.524-3.812 0-5.824-3.172-5.824-8.184C4.068 8.312
2024-03-27 20:20:20 UTC	130	IN	Data Raw: 35 63 2d 31 2e 30 39 32 20 30 2d 31 2e 35 32 2d 31 2e 32 36 34 2d 31 2e 35 32 2d 32 2e 37 34 20 30 2d 32 2e 37 34 38 20 31 2e 39 34 38 2d 37 2e 36 30 34 20 34 2e 30 32 34 2d 37 2e 36 30 34 2e 39 20 30 20 31 2e 32 32 20 31 2e 30 35 32 20 31 2e 32 32 20 32 2e 33 35 36 20 30 20 32 2e 38 39 32 2d 31 2e 38 32 20 37 2e 39 38 38 2d 33 2e 37 32 34 20 37 2e 39 38 38 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 5c-1.092 0-1.52-1.264-1.52-2.74 0-2.748 1.948-7.604 4.024-7.604.9 0 1.22 1.052 1.22 2.356 0 2.892-1.82 7.988-3.724 7.988z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49905	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	1523	OUT	GET /cdn-cgi/image/format=auto,w=264/8a1451cf-3ba0-4e8a-b469-f5010862b5cf/prints_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:20 UTC	1033	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: image/avif Content-Length: 7000 Connection: close CF-Ray: 86b2149a8ee3082e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfABMDorrHthygnfaC4OEgO_R6kiHsTARsnZIiJ4wGDQ:63ef491d3d9c3c47dddc45b3677746af" Last-Modified: Sun, 19 Nov 2023 11:14:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=60+207 c=0+0 v=2024.3.2 l=7000 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sKxvTfcnMGxrE9odOrpqxVLnkxjivMtnAJ0JZQ7laVj3OftPV5DF09YHF%2FDjXn9OVXZqGuMgA1IGLErJpv%2B5mME3kyWRauJzRnmUX16DrZdt93Ud3kxy1HCLcMqEMwaevKAA%2FoUxdZx51HfQQkVpS5uXtJY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:20 UTC	336	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1a 66 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1a 6e 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocDf#iinfinfeav01Viprp8ipcoispehav1C?@pixiipmanmdat? rm
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 73 8a 88 a5 d4 4c ec 57 5c 3b 9f 35 7c 4c 73 30 f0 00 53 51 1b b7 40 43 cc bd 36 9b 21 5a 77 b4 06 da cc 87 43 13 c4 7f 09 96 b6 11 c2 8f a5 53 b9 00 a9 03 33 34 5d 77 56 dc fe 9b 76 fc 87 3a d7 6b b6 a7 d4 86 6a 9f 84 11 06 69 dd cc 5b 92 ee de a1 2c 99 a5 ad a6 76 f4 53 b6 31 30 12 b2 4b b5 f7 b4 e9 21 94 02 1f 81 49 c3 37 56 23 de bf 34 13 3a eb fc d0 2c 68 aa be d1 40 a7 1b a3 bb c9 d9 67 89 b8 7d c1 a6 62 e0 71 21 8f 9f 46 a7 74 fa 05 fa 76 c2 e1 86 95 c0 4b 55 40 52 fa 31 b1 9f 48 81 c0 b6 9f 08 49 49 d0 ef 72 8a 86 17 a6 9e 6d ec 62 c1 bd 5a 6c f7 6f 8a 6f c3 0d 1e e8 fa 73 47 b6 2b 83 3b c8 98 69 a4 0f 97 c0 fb 91 93 c2 2e 83 ca a5 8d a4 b7 41 52 ba 25 a9 51 f4 02 5d 18 74 76 b8 32 b2 6f 9b de 5b 0b 89 50 5f 30 4c fa 22 08 cd 3c f8 7a 83 c7 1c f2 Data Ascii: sLW\;5\|Ls0SQ@C6!ZwCS34]wVv:kji[,vS10K!I7V#4:,h@g}bq!FtvKU@R1HIIrmbZloosG+;i.AR%Q]tv2o[P_0L"<z
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: a7 a1 c5 d7 39 87 f5 f5 70 5c 5d ea 1d ea 2a 7d 5d 01 1d 51 12 d1 37 d2 a2 3f 91 cc 03 47 b3 02 aa 53 8d 2a 41 bb 36 30 5f e1 23 3f d7 b0 21 c6 e2 0a 04 34 fd 5f 7c ff 43 58 89 bf f6 d2 75 68 a3 3e a8 fb aa 82 62 d7 c2 14 68 fd 75 d0 18 4a e5 80 ac 96 dc d5 b7 37 a5 79 ee 5c 21 e4 0b 3d c8 1a 58 98 7a 02 55 5d 5b 75 d8 cf 9c 58 1d e9 ed 4d 61 73 99 94 97 48 ae a5 23 e7 0b 6f 51 ae ea 91 57 02 94 c2 de d5 cd 30 01 e4 f1 0a cd 0c bf 5c 4a 75 fc 13 93 ea 8f 7c ac cc 42 bb 58 f7 06 35 72 16 0b 42 7d 36 3a c2 9e 73 5f ce 80 a5 f4 23 15 91 79 16 53 01 fa 71 c6 57 f1 18 0e 95 f9 8d 87 81 e7 44 30 6f 76 e3 2a 72 33 26 fc a6 0c d9 8c ca 45 fa 46 c8 e5 2d a7 f9 e5 8e 0a bb 8e d6 01 0c a0 c8 73 8e 14 7c 3b 50 97 ca 88 db 3e 53 91 c1 5b b8 4b 85 e7 24 a7 96 64 e5 22 Data Ascii: 9p\]}]Q7?GSA60_#?!4_\|CXuh>bhuJ7y\!=XzU][uXMasH#oQW0\Ju\|BX5rB}6:s_#ySqWD0ov*r3&EF-s\|;P>S[K$d"
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: c6 2d fc 54 82 9e 2e a5 81 76 2a 07 87 94 0f ff cd df db a1 d3 d7 65 c9 38 86 12 61 ce 2f 23 23 0f 26 73 9b 75 35 d3 5d ba 8f a1 1a f1 5d 03 0e 4c 38 4d b2 a9 6c c9 4f 96 ee aa 26 90 b7 2e 3e 40 9c dd 60 ce bb 9d 5d 7e 62 cb 1d 7d dc 2f 24 65 6f aa ee 57 39 83 ca ec f9 06 f0 f7 79 2b 3c 37 08 5e 84 82 88 5a 6e c1 e4 bc dd 9b ab 96 0e c2 6b 00 b6 a1 a2 04 80 d6 11 29 46 1b 5a ec 6d 33 f8 9d 3a 82 a4 ab eb 48 4f 40 3d 49 fc e5 64 61 db 13 55 92 29 87 d7 72 30 0b 46 72 a1 5e 60 41 97 a0 73 de db 76 5f 5f 91 3c f4 02 63 e4 15 5f 0f e3 c0 88 7a d4 14 25 18 22 0c 29 98 44 25 7f 7b 29 b0 23 85 8e 41 aa d8 85 c1 42 02 6a e8 bd 77 88 6a eb 4d 71 d1 09 23 42 ed f7 84 1f f0 25 6b f8 b6 71 7b 2a 84 f1 6d 2f f7 fc 04 56 ac c6 3c 62 b6 80 91 6f 2b 98 0e 4c 61 f4 32 64 Data Ascii: -T.ve8a/##&su5]]L8MlO&.>@`]~b}/$eoW9y+<7^Znk)FZm3:HO@=IdaU)r0Fr^`Asv__<c_z%")D%{)#ABjwjMq#B%kq{m/V<bo+La2d
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: f0 42 90 c5 27 7f 65 65 b1 6b 2a c5 1f 63 a4 10 ab 09 01 23 22 e3 7c 1c 82 f8 95 45 e9 6b 7d fc ba da 1c d1 74 e2 ec df a0 dc 66 a3 49 b0 51 ab 23 84 b7 78 10 5a 02 71 ad 04 88 b3 96 21 ce db 93 cb da cd 57 cb a4 39 dd 77 cd 8e 41 56 3b c1 0d 04 7e df c1 2a 1f de 13 33 0e bb 17 2a df 89 b4 2e bc 22 58 b1 ad 50 a3 ff 9e 29 9a 84 b3 18 91 bf 3c 82 82 e9 73 42 76 17 73 a2 59 43 26 95 5f 84 b0 38 2e 12 32 ca 6d 2c df c4 e4 16 d2 2e 0a eb db fc 70 49 e7 52 93 d9 09 ff fe da 04 ef 57 0a 2c 65 5d 04 2a 4d fe 9d 2e e9 26 85 ee ac f9 25 52 21 ae c5 d3 79 a4 2d 86 80 99 38 dc 2d e0 a4 06 3c ce 17 67 7f 6e 29 c8 8b f5 72 89 62 b2 aa 0a 42 35 a1 97 0d 60 e2 28 29 5d 17 ab 3c b1 6f 77 65 c8 bb 74 f5 b8 6d 57 ef 0d ff 4a b2 7f 62 64 e0 e7 85 89 46 79 20 4e 86 44 3d eb Data Ascii: B'eekc#"\|Ek}tfIQ#xZq!W9wAV;~3."XP)<sBvsYC&_8.2m,.pIRW,e]M.&%R!y-8-<gn)rbB5`()]<owetmWJbdFy ND=
2024-03-27 20:20:20 UTC	1188	IN	Data Raw: 68 0c 1a a0 9c 88 9d 84 f5 37 25 22 29 4e ec 87 17 f9 a7 49 02 17 ff 03 9f 1a 7c 7a 5c 4a 58 9b ec ca f3 d9 f7 d9 e5 2d cf 3e 30 1f a9 be 02 2c 05 aa b3 7e 0e c1 a5 8c 63 9c 8d f7 b6 29 0d c4 12 8a 0a c4 a0 ec 19 cb 5a e9 13 49 86 98 46 90 41 63 93 89 e1 b8 f5 10 52 2d 9d 28 fc cb 85 46 53 93 76 97 7d 94 7d 9d 37 71 06 9f 48 30 04 a0 b6 5c e7 64 96 2d 51 36 e9 13 50 fc 8f 33 76 1c b4 ed 5c 8a 79 1a 6b 3b da 97 e8 79 ad 7a 03 52 dc f1 c7 57 f8 15 1c 1a 7a bc f7 c1 2b c5 30 73 37 63 d7 c5 44 c0 31 30 55 04 9d 11 ac a6 b2 b1 6d 2b 36 dd 26 82 1a 7b 4c be a0 2f bf 91 c1 3d c1 6d f7 5e cf 8d 55 93 53 78 9f 98 3a 50 5d b6 73 69 a7 42 70 53 dd 3f a9 2d 29 3d 11 b1 6b 93 ee 18 8d 3b f8 2e de 31 60 55 4d 03 ed 6b ee 88 72 d4 2f 65 b3 2f c0 c8 91 59 c5 cc 19 41 97 Data Ascii: h7%")NI\|z\JX->0,~c)ZIFAcR-(FSv}}7qH0\d-Q6P3v\yk;yzRWz+0s7cD10Um+6&{L/=m^USx:P]siBpS?-)=k;.1`UMkr/e/YA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49906	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	1290	OUT	GET /cdn-cgi/image/format=auto,w=264/bc947206-a6f3-4e8a-83b5-9eb41246e22e/logos_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:20 UTC	1106	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: image/jpeg Content-Length: 8923 Connection: close CF-Ray: 86b2149b2fe50627-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfJUf1Gp80JtIcBO8CltIqrYphul9FdNgUaancoXMGDQ:7ecda19a7b299e542c9945137f62ac74" Last-Modified: Wed, 15 Nov 2023 21:58:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+0 c=0+14 v=2024.3.2 l=8923 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(262;u=3;i=?0 1467;u=5;i=?0 3829;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ArWeGo5wyrhHGxQuVIxvzo4cTGtH%2FUmqpC%2Fi47B3d%2BAzWeHNsV64WILl6ntfzJ9uaHogWyBYZZJZC2TR0p4ORYxTELJZVr2U9yn%2B%2BJO5poMu5jW2oesd5UmFYKp9mBx0QPXAf3IP2PbL9O3LRY9PuqVUO78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 01 02 03 04 07 05 08 09 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 01 06 07 03 02 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 42 9f 75 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"7Bu
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: f4 38 6c 5a f0 00 00 00 1a b9 72 d3 e3 d3 1e 53 ef e2 8a 98 b5 70 b1 78 b5 70 a2 a0 0e 6a 39 cf 6f b7 57 67 55 f1 f4 26 4c 79 36 4e 69 0e 1b 16 bc 00 00 00 00 00 00 00 00 00 07 34 1c e7 b8 59 aa 3e 3e 85 c8 6c 9c ce 1c 36 2d 78 00 00 00 00 00 00 00 00 00 0f ff c4 00 31 10 00 00 06 01 02 05 03 04 03 00 01 05 00 00 00 00 00 01 02 03 04 05 06 11 14 07 10 12 15 35 13 31 40 16 17 20 30 21 34 41 22 32 42 60 61 70 ff da 00 08 01 01 00 01 08 00 ff 00 ec fa 8d 46 a3 51 a8 d4 6a 35 1a 8d 46 a3 51 a8 d4 6a 35 1a 8d 46 a3 51 a8 d4 6a 35 1a 8d 46 a3 51 a8 d4 6a 35 1a ff 00 e0 ba 8d 46 a3 51 d4 3a 87 50 ea 1d 43 a8 75 0e a1 d4 3a 87 50 ea 1d 43 a8 75 0e a1 d4 3a 87 50 ea 1d 43 a8 75 0e a1 d4 3a 87 57 e1 a8 42 1c 79 64 86 fb 25 c1 e8 65 d8 ae 87 63 ba 1d 8e e8 76 3b a1 Data Ascii: 8lZrSpxpj9oWgU&Ly6Ni4Y>>l6-x151@ 0!4A"2B`apFQj5FQj5FQj5FQj5FQ:PCu:PCu:PCu:WByd%ecv;
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 3a d7 82 54 a4 28 94 98 12 4a 64 18 92 08 67 91 c8 9f af 92 43 82 8f 9b 79 64 96 46 39 e5 72 ef 81 63 e6 69 07 10 92 69 ca ec 79 60 c6 5d aa 47 2c da b5 6c 4d 44 f4 8a 1b 5d 8e 3d 78 30 2d 36 b6 25 cb 35 8c 6e d3 93 a4 30 c9 3e b5 2a 1b 31 9e e9 b5 ae e5 c1 84 1a f3 42 50 c7 3c ae 5d f0 2c 3c cd 18 e2 7c 63 6a fa 33 e4 30 39 25 ac f8 86 26 c3 62 7c 67 63 48 b9 a2 99 4e f1 93 84 b5 92 14 82 c1 25 13 73 26 45 31 61 10 a7 41 97 14 d4 93 4a 94 95 60 4e ff 00 16 6c f2 ce e5 12 e6 42 8a 43 81 b0 8d cb 7b c9 a3 1c f2 b9 77 2b eb 99 94 94 ec cc 81 13 88 11 5d d1 36 35 f6 35 17 04 e7 6d 23 1a 8d 46 bf a2 c3 cc 52 0e 27 d7 9c 8a a8 93 52 2a ac 1c ab 9f 1e 52 23 c8 66 53 0d 3e c8 5a 10 e2 54 85 bd 8b 51 3e ae a5 4d 4d 5e 2f 01 d9 51 21 cc 62 7c 66 a4 b0 32 da d3 83 Data Ascii: :T(JdgCydF9rciiy`]G,lMD]=x0-6%5n0>1BP<],<\|cj309%&b\|gcHN%s&E1aAJ`NlBC{w+]655m#FR'RR#fS>ZTQ>MM^/Q!b\|f2
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 2a 00 ea 34 76 0a 34 36 8d 74 bb 2f e0 3f d6 3c f3 9a c5 f2 ad c6 ac e7 0c 87 45 87 06 c7 58 f6 0a 82 61 ed 8d bc 29 1f 58 f4 1a a1 73 a3 73 1b fd 52 00 0a 71 24 9f 3c e6 91 7c b3 0a 1e 7d 04 c7 0b 58 86 a8 c9 e4 ab 6b 8e c8 d5 b5 c7 64 6a da e3 b2 35 6d 71 d9 1a b6 b8 ec 8d 5b 5c 76 46 ad ae 3b 23 56 d7 1d 91 ab 6b 8e c8 d5 b5 c7 64 6a da e3 b2 35 6d 71 d9 1a b6 b8 ec 8d 5b 5c 76 46 ad ae 3b 23 56 d7 1d 91 ab 6b 8e c8 d5 b5 c7 64 6a da e3 b2 35 6d 71 d9 1a b6 b8 ec 8d 5b 5c 76 46 ad ae 3b 23 56 d7 1d 91 ab 6b 8e c8 d5 b5 c7 64 6a da e3 b2 35 6d 71 d9 1f 27 9a 45 f2 f3 f6 19 b9 ac 5f 2a 03 14 5c 46 34 b1 fb a9 63 ea d2 c7 d5 a5 8f ab 4b 1f 56 96 3e ad 2c 7d 5a 58 fa b4 b1 f5 69 63 ea d2 c7 d5 a5 8f ab 49 17 ba 96 2d 43 75 24 78 7b 0d 2c 7e ea 58 fa b4 b1 Data Ascii: 4v46t/?<EXa)XssRq$<\|}Xkdj5mq[\vF;#Vkdj5mq[\vF;#Vkdj5mq[\vF;#Vkdj5mq'E_\F4cKV>,}ZXicI-Cu$x{,~X
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 95 5a 46 b2 92 11 39 59 f1 3b 31 34 f8 c7 20 c4 74 1d c7 a7 32 e1 0d ce 32 27 43 7d a1 5f 70 3b d4 e0 47 18 c4 f8 7b 4d 7d 69 1f 1c 37 0e 41 99 70 93 28 4e d3 7f e3 4e 22 57 3f 5e e0 cd f5 6f 23 3c 1f 44 c9 ad 0d 47 fe d2 f2 70 7a 27 91 86 dc 7a 05 69 5c 5e b4 66 29 ae 98 e0 a3 1f ac 23 5c c6 88 a2 28 8a 22 8f 93 eb bb b5 87 07 34 6c 87 1e 9f 0a 8c a4 d0 be 8b 03 ef 07 d8 46 b1 98 70 b6 ec 71 68 89 ff 00 35 dc 6a ed 61 7f 42 5e 29 15 7f 6e 06 fe 15 6a 6f de 64 f4 63 d9 fa b5 30 0a ba a3 8d 76 20 e8 a3 a7 13 fd 78 9b 61 e9 1b 8d 5c f0 0e 46 b4 97 57 b8 d6 50 b7 5c 38 c9 20 91 71 46 df 57 eb 7b 73 2e 00 2c 00 90 15 79 31 34 74 22 4c 78 38 97 60 e9 3b ce 6f af 71 20 52 de 82 0d 6e c7 d8 29 34 61 82 25 8a 35 dc a8 30 15 cf d7 b8 33 6a 74 21 94 f4 8a b1 95 32 Data Ascii: ZF9Y;14 t22'C}_p;G{M}i7Ap(NN"W?^o#<DGpz'zi\^f)#\("4lFpqh5jaB^)njodc0v xa\FWP\8 qFW{s.,y14t"Lx8`;oq Rn)4a%503jt!2
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 39 f6 0e 2b 33 9f 60 e2 b3 39 f6 0e 2b 33 9f 60 e2 b3 39 f6 0e 2b 33 9f 60 e2 9a 46 26 df 55 d3 f3 66 36 27 4f 13 9d 1b 85 da 1a 70 92 3d c4 a8 a4 c9 d8 a2 b5 34 fa c5 be d4 7d 2b 1d 1f b0 97 e6 0f a5 3e a7 27 33 ac c9 07 fb 07 d2 b3 ec 97 b9 2f fd c7 d2 9b 51 93 9f d5 8e 43 fe c1 f4 ac 74 7e c2 5f 98 3e 95 8e 8f d8 4b f3 07 d2 aa e2 9e 49 dc f8 18 f1 18 02 da 6f 6e f4 dd 42 fd 05 7f aa e4 8f 86 3e 32 a2 20 18 c9 d4 2c a6 ac 92 4d 0d 38 5b e6 43 58 f6 10 1f e9 35 31 ed 7b 43 9a 6e 0a 83 d5 eb 3f 63 7c 43 a1 af f5 5c 8f f0 c7 c6 50 ea b7 b8 72 5c 1d 44 72 5c 0d 67 92 92 7e 69 f8 49 f4 4a 83 ee 2b 3f 63 7c 43 a0 ba a9 6e 38 72 28 fd 31 f1 94 e7 06 35 ce 3a 80 54 ee ce 9f 21 7f 54 6a 6a aa 84 d3 c9 76 1b 34 e9 08 d5 4b 1c 0c 05 d7 7b bb 76 04 60 12 52 07 e9 Data Ascii: 9+3`9+3`9+3`F&Uf6'Op=4}+>'3/QCt~_>KIonB>2 ,M8[CX51{Cn?c\|C\Pr\Dr\g~iIJ+?c\|Cn8r(15:T!Tjjv4K{v`R
2024-03-27 20:20:20 UTC	709	IN	Data Raw: 96 8d 96 04 0d a5 0a a3 06 20 e8 ac 04 57 0d c9 55 54 51 54 b0 80 d0 1f b0 84 f6 39 8e 73 1c 34 83 62 ab 60 cd a7 c4 e3 1e ef b2 5b f2 26 fe 4b bf 99 ea 58 58 06 b1 97 d8 09 58 b4 2e 7c 0d 78 f8 0e 95 86 cc 21 99 c4 fb a5 84 f2 54 27 2a 9d 8f da e2 5c 7f e4 ac 4d b9 15 8e 3b c0 2a 9e 4f 12 08 9f bd a1 62 40 0a c9 6d b6 cb 1c 03 3a ab ff 00 4c 7f 5f 24 8b f8 be a5 49 37 81 51 13 c9 d0 0e 95 ec bd b6 d6 d2 14 d8 43 b2 89 85 e2 c7 61 54 4d f0 18 29 9d 20 32 37 4d 86 e2 b1 88 49 64 72 8d 9a 0a c3 9e 33 26 39 c6 c1 b7 b9 f9 2a a9 7c 79 e5 93 61 3a 16 27 37 8d 55 89 10 74 34 31 bc 8a c1 a6 a6 83 13 a4 7d 54 4d 92 1f 10 07 b5 da ac 57 6b 30 7e cc 61 f4 e1 ec 0e 8a a6 46 e5 44 c8 cd c1 ff 00 26 ea c6 ea c5 58 ab 2b 77 34 5d d2 fa 95 3c ed a8 61 23 58 71 04 2a 7c Data Ascii: WUTQT9s4b`[&KXXX.\|x!T'\M;Ob@m:L_$I7QCaTM) 27MIdr3&9\|ya:'7Ut41}TMWk0~aFD&X+w4]<a#Xq\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49907	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	1525	OUT	GET /cdn-cgi/image/format=auto,w=264/4d134638-a29e-44d6-af9a-c70eb4c0dd43/websites_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:20 UTC	1037	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: image/avif Content-Length: 8380 Connection: close CF-Ray: 86b2149b1eb25728-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfuG6hbCRrIe5YiBoy4QFHgY_0kiHsTARsnZIiJ4wGDQ:5cb4ea6b93f6fa69260d1f9412ecec9e" Last-Modified: Wed, 15 Nov 2023 05:47:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=4+0 c=0+0 v=2024.3.2 l=8380 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UARTNa3ECnzPTSFJtnAdaoBt0UtdWsuG0X6vuTyQqb75TF%2F1u3TDuQ5J1MqtOetIeFSAppL53%2BWeBZbNXyTNMX9%2BXTIFI9qYUdUhA2myIZA%2FXO42fyW4JsT1wX%2F94vgTzPJmBoQqfUVHgH3MoS%2BjZ47VyvY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:20 UTC	332	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1f ca 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1f d2 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocD#iinfinfeav01Viprp8ipcoispehav1C?@pixiipmamdat? rm
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 56 a6 3b 2d 7a cd f1 cc cb cb 93 9b d1 21 80 39 9b 8b bb 4a 31 a0 72 63 96 cb b7 cd 3c ac bb b3 ad ff 5f ce a1 ee f7 d9 28 c8 a4 ad ba 63 4d 02 0e 2b 98 4c ab ac 82 41 03 21 f5 16 13 07 e2 40 6c 49 ce 5e 84 31 53 3a f5 0e 43 58 54 b4 4e 2e 78 45 af c4 40 ce ef 72 31 59 93 aa 4b d8 23 37 a9 8e 28 17 14 0b 10 95 4e bb 07 e3 65 58 89 31 dc 5e 22 7d 39 6f e7 28 44 29 45 05 de a0 43 19 a0 16 d2 dc 53 87 6d 2d b9 12 3d 5d 6c b0 55 07 2a e0 70 7c 5c b3 77 3e e9 d6 af 0e 71 42 04 f8 26 eb 96 c0 71 db 07 0a 70 f3 d6 e3 d2 75 45 b1 bc 17 ab 78 fe 24 64 4d 0f 4f bd 8d 9f 65 a9 36 84 46 c4 0a 71 0b 86 33 86 de db 25 77 49 7f 60 97 b7 ae f0 00 86 51 a5 c8 5c 43 42 80 44 9a 4f de ea 17 40 3c 62 25 1c 8d 48 1f 56 58 20 f4 3f 3b c3 dc 82 f2 a0 0f 30 94 6f 3c 4b 2e 53 78 Data Ascii: V;-z!9J1rc<_(cM+LA!@lI^1S:CXTN.xE@r1YK#7(NeX1^"}9o(D)ECSm-=]lU*p\|\w>qB&qpuEx$dMOe6Fq3%wI`Q\CBDO@<b%HVX ?;0o<K.Sx
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 32 e2 02 30 06 50 64 b0 d6 5e b1 ab 94 59 18 02 94 b7 8e dd d6 d5 dc 5f 0e 27 49 cf bc 64 95 f9 b4 2d 74 7d 35 d8 5c 89 11 b5 2e 65 cf 56 1c bf c8 f1 5d e1 32 ba 92 9a 76 62 d2 ac 62 18 a4 f4 61 7c 77 c7 a6 c7 c3 9b 35 e0 ce 1b 4c d9 35 01 54 ac 03 50 66 d6 89 4c 05 d4 ac f8 9f 06 81 68 c5 3c 4e 3f 15 68 87 fa 1a 4e 88 4f 71 57 9b ee 4e 5f f6 0c 5b b9 8c 69 a6 23 f8 0b 0a c6 99 47 80 62 bf 46 a2 19 62 99 fd 21 34 78 d6 f0 59 ed 48 a8 3f 3d c8 6f 0d 33 c1 6f 17 c4 24 fb 88 53 b0 2c 2f 52 ec f9 4b 9a f7 48 56 f3 5b 49 18 91 18 4b 54 56 1b a3 d7 25 d5 cf a3 7d 76 c4 b7 7d 88 af ae 5e 93 54 77 15 81 e9 44 d6 6a f9 5b a5 ee 49 b8 25 e3 24 fe ed 9d fe a4 dc aa 07 2b 69 da 8e 7d a3 f4 91 c5 cd dc 22 c5 ec 5a 24 16 c3 5b fc 92 a8 23 d4 54 84 b1 c1 8a 83 4f c8 5d Data Ascii: 20Pd^Y_'Id-t}5\.eV]2vbba\|w5L5TPfLh<N?hNOqWN_[i#GbFb!4xYH?=o3o$S,/RKHV[IKTV%}v}^TwDj[I%$+i}"Z$[#TO]
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 71 74 75 8a c2 20 b2 e4 72 26 9a 01 41 e3 51 d5 e5 10 e6 40 68 25 82 84 85 b8 11 c5 a7 f2 4b 9c ae 99 45 db 2f ea bc b5 58 1a 2b 70 df ff 63 5f c2 b8 d7 85 83 42 e6 9a f1 3e 4f c5 09 fc b9 22 7d 1b a5 65 6b 50 07 46 af 7f 20 1a c3 5e e6 32 a9 72 81 b8 35 6e 8a ee dc 3a 2c d4 1f fa ab 2b 25 8b e0 e3 ec 4c a3 03 98 c7 e9 c5 60 6d ed e9 16 23 83 9e 83 21 d4 96 2f 8f ad fe 73 08 f6 eb fc a6 e2 3c c1 51 dc d0 1a ee 8d c8 6f 32 3b 03 65 6e 41 7e 7d ba fa e4 33 18 33 17 b0 1c 08 0b 92 ef a1 4c c7 1c 70 bf 1a 4e 6d 96 d5 cf be 51 61 dc 9a 50 52 9d 93 14 26 d3 01 b2 73 f0 65 c0 33 9a 1c cf 23 62 cd 61 11 c6 f6 0f dc f2 2a 9d ee 12 0f a6 0d 5c 24 bf c3 cc 98 cd ee af bb b9 99 0f 6e 85 df b2 cd 8b 6f 69 17 db 9c c5 5a e8 12 5d 26 21 b0 ee 72 77 1e d6 81 df 88 9c 39 Data Ascii: qtu r&AQ@h%KE/X+pc_B>O"}ekPF ^2r5n:,+%L`m#!/s<Qo2;enA~}33LpNmQaPR&se3#ba*\$noiZ]&!rw9
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: a5 62 3e b0 d3 ed 59 d4 a5 27 16 7a 35 2d e0 05 c2 11 25 2c 0e 1d 81 66 d3 d4 a2 ec 03 eb 6f fe 92 1d 50 f9 cb ea 51 4b 1b 1a c0 34 cf f4 70 43 a2 1d 35 46 3e 91 0e df 6d d6 99 89 3b 0f c8 92 b2 42 9d 9e dc 36 ec f3 86 03 14 cd 3a 44 1b 53 dc 05 27 65 cb 5d 60 37 81 15 73 f2 49 12 07 a5 16 e7 bf a7 9a ea 84 93 d1 c7 df 92 5c d3 b1 42 5c 59 7d 5f f9 99 5f ba 7b a3 db e9 50 4d 88 7b 77 2e 27 f7 f4 48 bb f5 da a6 05 c0 0f 7a 10 1f 1c 02 5b 06 a5 0f db 7a b3 b0 de d1 13 03 db 37 4b 7d 0f bc 40 ef e2 18 40 fc 75 de fd b6 e9 25 3e 58 8a db b8 c7 cf 51 0f 3f 53 87 b1 04 b0 5c a5 d3 ce 2b 31 b7 27 d0 90 d7 d3 33 3e 2c 68 85 80 48 55 87 c7 38 d6 8e 7f 52 39 17 61 f6 c1 eb 23 03 df c0 9b 7b 31 64 85 bc 3d a7 01 ba a8 ac 61 ac 06 15 55 0c 04 6e 0c cb ba de 82 4e a2 Data Ascii: b>Y'z5-%,foPQK4pC5F>m;B6:DS'e]`7sI\B\Y}__{PM{w.'Hz[z7K}@@u%>XQ?S\+1'3>,hHU8R9a#{1d=aUnN
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 6e 05 5c 84 79 7f 10 d7 bf 3a e2 36 57 70 8b a5 cb 86 13 40 b6 b0 ca 93 3e 71 9a 52 00 9d 0b 93 13 bd 74 8b c3 57 08 06 7d 8a f0 cf b1 d3 40 52 62 9e 17 13 8a c3 de 7b 0a 28 45 0d 05 63 8f b8 1c c7 17 84 a0 61 24 3a 48 cf 53 ca 6f a4 e7 0c ef 45 97 fc 7d e2 e5 d7 64 a4 3b ee c4 b7 84 75 06 2e 84 ed e4 b2 e4 30 f2 4c c6 c8 3f eb ec 18 e4 37 54 77 9c 9e 03 b1 a6 5c b2 63 bd ae ed 1d a9 90 af 6b cd 93 c0 c4 21 40 bb be f5 d0 61 f1 c5 48 c5 23 e4 85 85 c4 a7 a8 bd c5 a4 96 b7 e6 7f 93 e2 78 fa 71 e9 23 cd d9 e3 d2 d1 69 f9 06 56 7c 37 e8 ed f8 6f 4a 85 0d 02 32 ab 1d 27 fa d8 65 1d 07 a1 86 1a b5 dc 16 e9 b3 34 c7 f6 74 a2 2f 0c 37 56 cb c7 e3 3e 7f 7a 34 69 33 3d 5c 97 5c 33 cc d3 21 7c ca bb 98 df 93 ce 1e b1 0a d5 55 c1 b5 15 ab 7f 00 7a bd 41 4e fb 45 9d Data Ascii: n\y:6Wp@>qRtW}@Rb{(Eca$:HSoE}d;u.0L?7Tw\ck!@aH#xq#iV\|7oJ2'e4t/7V>z4i3=\\3!\|UzANE
2024-03-27 20:20:20 UTC	1203	IN	Data Raw: 84 c9 d3 20 e4 5b 97 2b 1c a6 57 10 46 4d c8 7c 75 0a a9 a9 e0 f0 c6 1f d8 ca f4 4d d0 ed b0 6c 50 d3 2a 7a 5e 4d 07 3e d6 da b6 ab 4b 33 c3 cb 5f 5e 84 6a d3 bb 00 ce 56 93 af 12 04 a9 ff 50 e0 b9 2d cd c8 cc 23 39 7c b1 ba aa 7f e8 d7 3a 22 84 2a ad f8 57 a7 c9 e3 3b 30 3d 12 9a 33 56 bf 13 cf 19 a6 16 fa 78 51 94 fe ff 9e c7 6f 8b 78 b0 d8 05 1b ca 81 7e af 7e 4a 83 e5 63 73 03 db fd 94 93 eb 56 85 b9 49 16 f8 3e b5 fd 47 ad cb c2 5f b9 7a 6a f2 33 50 ea c3 f2 df cc ac 7d ff 29 bb 93 31 c3 1b f1 37 93 97 37 f0 b8 f2 a7 25 1a 19 21 b4 f0 33 e8 94 03 16 10 0d 84 25 61 d8 11 bb 78 2d a0 81 9a ff 8d 7b b5 c3 d0 8f 51 cd ec 3d b3 65 12 fe bd cf db 11 ae 77 a3 ec 5a 8f fe d9 51 61 c6 56 f9 0e 08 ec 87 a4 2c 48 b4 75 2d 20 ff 06 b7 d7 fd 5e 7e 74 3c 71 2b e2 Data Ascii: [+WFM\|uMlPz^M>K3_^jVP-#9\|:"W;0=3VxQox~~JcsVI>G_zj3P})177%!3%ax-{Q=ewZQaV,Hu- ^~t<q+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49909	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	570	OUT	GET /web/75ef27a5584bfafa.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:20 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: text/javascript Content-Length: 37792 Connection: close CF-Ray: 86b2149baf599c64-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 753026 Cache-Control: public, max-age=31556926 ETag: "0dfb0358af567a734a865a948ee2f3e3" Expires: Fri, 28 Mar 2025 02:09:06 GMT Last-Modified: Tue, 19 Mar 2024 03:04:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: nrOtYANNph60JWwKjXKTT6WUoY3XQmwbpocNiIdwmVYZK/spGGY6cc5grEBqhGYR8hLgHSAuq3U= x-amz-replication-status: COMPLETED x-amz-request-id: NSQ1F5WW9GQDH6GW x-amz-server-side-encryption: AES256 x-amz-version-id: dAk_Q497geReWeq2Q10qHdGu9cAJRDFX X-Content-Type-Options: nosniff
2024-03-27 20:20:20 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 4e 72 74 4e 6d 4e 2e 43 47 46 4c 65 65 4a 42 77 52 5a 62 4f 36 32 54 2e 4b 71 44 41 33 7a 66 45 34 5a 62 41 77 66 34 58 48 4d 49 2d 31 37 31 31 35 37 30 38 32 30 2d 31 2e 30 2e 31 2e 31 2d 68 5a 36 55 71 5a 54 6e 57 78 65 63 6a 52 6f 70 77 78 42 54 62 6c 57 34 55 39 47 4e 55 78 6e 36 2e 35 7a 4b 59 5f 4b 33 37 79 66 30 75 32 74 77 6c 48 6f 44 38 5a 77 33 50 63 74 31 31 46 38 30 6d 39 42 79 44 63 7a 79 4a 48 73 6a 6e 46 35 69 58 6c 58 48 36 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 32 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=NrtNmN.CGFLeeJBwRZbO62T.KqDA3zfE4ZbAwf4XHMI-1711570820-1.0.1.1-hZ6UqZTnWxecjRopwxBTblW4U9GNUxn6.5zKY_K37yf0u2twlHoD8Zw3Pct11F80m9ByDczyJHsjnF5iXlXH6Q; path=/; expires=Wed, 27-Mar-24 20:50:20 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:20 UTC	600	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 37 35 65 66 32 37 61 35 35 38 34 62 66 61 66 61 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 39 36 36 33 33 37 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 65 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 Data Ascii: /! For license information please see 75ef27a5584bfafa.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{966337:()=>{!function(e,t){"use strict";if("IntersectionObserver"in e&&"IntersectionObserverEntry"
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 5f 4d 55 54 41 54 49 4f 4e 5f 4f 42 53 45 52 56 45 52 3d 21 30 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6c 65 6d 65 6e 74 3d 3d 65 7d 29 29 29 7b 69 66 28 21 65 7c 7c 31 21 3d 65 2e 6e 6f 64 65 54 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 61 72 67 65 74 20 6d 75 73 74 20 62 65 20 61 6e 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 5f 72 65 67 69 73 74 65 72 49 6e 73 74 61 6e 63 65 28 29 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 74 69 6f 6e 54 61 72 67 65 74 73 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a Data Ascii: _MUTATION_OBSERVER=!0,r.prototype.observe=function(e){if(!this._observationTargets.some((function(t){return t.element==e}))){if(!e\|\|1!=e.nodeType)throw new Error("target must be an Element");this._registerInstance(),this._observationTargets.push({element:
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 7c 7c 28 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 21 30 2c 74 68 69 73 2e 50 4f 4c 4c 5f 49 4e 54 45 52 56 41 4c 3f 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 49 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 2c 74 68 69 73 2e 50 4f 4c 4c 5f 49 4e 54 45 52 56 41 4c 29 3a 28 69 28 65 2c 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 2c 21 30 29 2c 69 28 74 2c 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e Data Ascii: function(){this._monitoringIntersections\|\|(this._monitoringIntersections=!0,this.POLL_INTERVAL?this._monitoringInterval=setInterval(this._checkForIntersections,this.POLL_INTERVAL):(i(e,"resize",this._checkForIntersections,!0),i(t,"scroll",this._checkForIn
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 68 29 3a 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 70 75 73 68 28 68 29 7d 29 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 2c 74 68 69 73 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6d 70 75 74 65 54 61 72 67 65 74 41 6e 64 52 6f 6f 74 49 6e 74 65 72 73 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 69 66 28 22 6e 6f 6e 65 22 21 3d 65 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 2e 64 69 73 70 6c 61 79 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 2c 61 2c 63 2c 6c 2c 68 2c 66 2c 64 2c 76 3d 73 28 Data Ascii: euedEntries.push(h):this._queuedEntries.push(h)}),this),this._queuedEntries.length&&this._callback(this.takeRecords(),this)},r.prototype._computeTargetAndRootIntersection=function(n,o){if("none"!=e.getComputedStyle(n).display){for(var r,i,a,c,l,h,f,d,v=s(
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 26 26 65 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 2c 6f 3d 74 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 74 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 6e 21 3d 3d 6f 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 5b 72 5d 3b 69 66 28 69 3d 3d 6e 7c 7c 69 3d 3d 6f 7c 7c 69 3c 6e 21 3d 69 3c 6f 29 72 65 74 75 72 6e 21 30 7d 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 6f 6f 74 49 73 49 6e 44 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: unction(e,t){var n=e&&e.isIntersecting?e.intersectionRatio\|\|0:-1,o=t.isIntersecting?t.intersectionRatio\|\|0:-1;if(n!==o)for(var r=0;r<this.thresholds.length;r++){var i=this.thresholds[r];if(i==n\|\|i==o\|\|i<n!=i<o)return!0}},r.prototype._rootIsInDom=function(
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 74 69 6f 6e 54 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 71 75 65 75 65 64 45 6e 74 72 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 5f 72 6f 6f 74 4d 61 72 67 69 6e 56 61 6c 75 65 73 3d 74 68 69 73 2e 5f 70 61 72 73 65 52 6f 6f 74 4d 61 72 67 69 6e 28 69 2e 72 6f 6f 74 4d 61 72 67 69 6e 29 2c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 3d 74 68 69 73 2e 5f 69 6e 69 74 54 68 72 65 73 68 6f 6c 64 73 28 69 2e 74 68 72 65 73 68 6f 6c 64 29 2c 74 68 69 73 2e 72 6f 6f 74 3d 69 2e 72 6f 6f 74 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 72 6f 6f 74 4d 61 72 67 69 6e 3d 74 68 69 73 2e 5f 72 6f 6f 74 4d 61 72 67 69 6e 56 61 6c 75 65 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 2b 65 2e 75 6e 69 74 7d 29 29 2e 6a 6f 69 6e Data Ascii: tionTargets=[],this._queuedEntries=[],this._rootMarginValues=this._parseRootMargin(i.rootMargin),this.thresholds=this._initThresholds(i.threshold),this.root=i.root\|\|null,this.rootMargin=this._rootMarginValues.map((function(e){return e.value+e.unit})).join
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 5f 44 61 74 61 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 73 2e 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2c 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 53 74 61 74 65 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 73 2e 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 53 74 61 74 65 43 6f 6e 74 65 78 74 2c 55 4e 53 41 46 45 5f 46 65 74 63 68 65 72 73 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 4c 2c 55 4e 53 41 46 45 5f 4c 6f 63 61 74 69 6f 6e 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 73 2e 55 4e 53 41 46 45 5f 4c 6f 63 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2c 55 4e 53 41 46 45 5f 4e 61 76 69 67 61 74 69 6f 6e 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 73 2e 55 4e 53 41 46 45 5f 4e 61 76 69 67 61 74 69 6f 6e 43 6f 6e 74 65 78 74 2c 55 4e Data Ascii: _DataRouterContext:()=>s.UNSAFE_DataRouterContext,UNSAFE_DataRouterStateContext:()=>s.UNSAFE_DataRouterStateContext,UNSAFE_FetchersContext:()=>L,UNSAFE_LocationContext:()=>s.UNSAFE_LocationContext,UNSAFE_NavigationContext:()=>s.UNSAFE_NavigationContext,UN
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3a 28 29 3d 3e 57 2c 75 73 65 4c 6f 61 64 65 72 44 61 74 61 3a 28 29 3d 3e 73 2e 75 73 65 4c 6f 61 64 65 72 44 61 74 61 2c 75 73 65 4c 6f 63 61 74 69 6f 6e 3a 28 29 3d 3e 73 2e 75 73 65 4c 6f 63 61 74 69 6f 6e 2c 75 73 65 4d 61 74 63 68 3a 28 29 3d 3e 73 2e 75 73 65 4d 61 74 63 68 2c 75 73 65 4d 61 74 63 68 65 73 3a 28 29 3d 3e 73 2e 75 73 65 4d 61 74 63 68 65 73 2c 75 73 65 4e 61 76 69 67 61 74 65 3a 28 29 3d 3e 73 2e 75 73 65 4e 61 76 69 67 61 74 65 2c 75 73 65 4e 61 76 69 67 61 74 69 6f 6e 3a 28 29 3d 3e 73 2e 75 73 65 4e 61 76 69 67 61 74 69 6f 6e 2c 75 73 65 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 28 29 3d 3e 73 2e 75 73 65 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 2c 75 73 65 4f 75 74 6c 65 74 3a 28 29 3d 3e Data Ascii: ClickHandler:()=>W,useLoaderData:()=>s.useLoaderData,useLocation:()=>s.useLocation,useMatch:()=>s.useMatch,useMatches:()=>s.useMatches,useNavigate:()=>s.useNavigate,useNavigation:()=>s.useNavigation,useNavigationType:()=>s.useNavigationType,useOutlet:()=>
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 63 6f 64 65 64 22 2c 22 6d 75 6c 74 69 70 61 72 74 2f 66 6f 72 6d 2d 64 61 74 61 22 2c 22 74 65 78 74 2f 70 6c 61 69 6e 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 6d 2e 68 61 73 28 65 29 3f 65 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 6c 65 74 20 6e 2c 6f 2c 72 2c 69 2c 61 3b 69 66 28 64 28 73 3d 65 29 26 26 22 66 6f 72 6d 22 3d 3d 3d 73 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 6c 65 74 20 61 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 63 74 69 6f 6e 22 29 3b 6f 3d 61 3f 28 30 2c 63 2e 73 74 72 69 70 42 61 73 65 6e 61 6d 65 29 28 61 2c 74 29 3a 6e 75 6c 6c 2c 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 74 68 6f 64 22 Data Ascii: coded","multipart/form-data","text/plain"]);function g(e){return null==e\|\|m.has(e)?e:null}function y(e,t){let n,o,r,i,a;if(d(s=e)&&"form"===s.tagName.toLowerCase()){let a=e.getAttribute("action");o=a?(0,c.stripBasename)(a,t):null,n=e.getAttribute("method"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49908	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	1524	OUT	GET /cdn-cgi/image/format=auto,w=264/122beb6f-66f6-41d6-b594-03ce5147989e/ig_post_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:20 UTC	1035	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: image/avif Content-Length: 7013 Connection: close CF-Ray: 86b2149b8e681766-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf6GFgbQY6rk5QOlf3LoAl_2CbkiHsTARsnZIiJ4wGDQ:e7f0cd66ef02d5f56fda31585754253d" Last-Modified: Wed, 15 Nov 2023 05:41:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=59+196 c=0+0 v=2024.3.2 l=7013 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f6dyFfzjP1AkegRiE3kgdugv2yv5UPI2Vs0P6p1OqolAG%2FYbtgZHV6a14dvwEaWITBb7cY6lXWTsul1VE4qtcDBzyh23WItQzUtXUQHC7JSJ9%2FSP8JI%2FiVCIJDcM5ddLvbD35whp%2BJgauQMk8NkuW0cqTis%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:20 UTC	334	IN	Data Raw: 00 00 00 18 66 74 79 70 61 76 69 66 00 00 00 00 6d 69 66 31 6d 69 61 66 00 00 00 d2 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 00 f2 00 00 1a 73 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 56 69 70 72 70 00 00 00 38 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 01 08 00 00 01 68 00 00 00 0c 61 76 31 43 81 3f 40 00 00 00 00 10 70 69 78 69 00 00 00 00 03 0a 0a 0a 00 00 00 16 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 03 01 82 03 00 00 1a 7b 6d 64 61 74 12 00 0a 09 3f e2 20 f6 72 f0 10 d0 6d Data Ascii: ftypavifmif1miafmeta!hdlrpictpitmilocDs#iinfinfeav01Viprp8ipcoispehav1C?@pixiipma{mdat? rm
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 2b ad 65 04 7b 4b 2b a9 b0 16 f1 c3 4b 64 e1 43 44 34 ba db e4 14 95 ec 1b 68 a2 02 0b 3c da fd de d7 6b cf a4 04 fb 13 f4 3f 51 12 d1 a0 6f 2a 3f 24 95 81 08 1f 1f 3f 82 de ba 1d f1 96 c5 50 1a fd c3 28 e0 d1 83 3d 97 8b e8 a1 b3 24 38 e2 64 15 f1 6b a9 6e a1 15 50 5a 0f 25 78 ba f5 39 fb dd 52 df 86 0f 9d 48 67 f7 46 b2 4d 72 75 26 e6 31 b9 0f 06 85 69 58 f2 82 9c 2c 7e d0 2e 92 85 a9 0a 2c ee 95 a4 6d 04 7b 7b 57 8d e1 64 a6 62 e6 e4 a1 3d eb 14 8a 23 e5 c0 d5 48 8c 00 c6 ab d7 de d7 cd 69 11 7f b9 a5 f3 bb 36 a2 44 7f 48 c8 eb cf ed 88 c6 b1 97 be 0f a6 6a c9 a8 b3 3a 82 c5 68 b5 6e 66 48 51 4f 03 cf 31 f0 f5 75 47 ab 7a 29 20 be fa 7e fa 80 ff 05 ce e1 02 89 dd c9 dd 76 28 05 10 0f 51 24 cf 63 e6 18 41 78 09 a4 6a 92 4d 42 ca 10 93 94 aa 3c a9 97 84 Data Ascii: +e{K+KdCD4h<k?Qo*?$?P(=$8dknPZ%x9RHgFMru&1iX,~.,m{{Wdb=#Hi6DHj:hnfHQO1uGz) ~v(Q$cAxjMB<
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 90 35 56 5f c9 02 85 df 95 11 91 ca f7 0d 95 42 06 43 b4 d4 e6 78 f2 de e2 85 ee db 96 80 80 01 78 30 53 45 c0 a6 85 5f 1b 7e 17 f3 d3 8d 70 c0 a5 42 19 32 48 63 cf 9d 81 3a 9d 89 27 6e a8 dc af c4 e7 29 25 4d e3 75 03 91 6b 56 52 64 88 4d ae c8 7a 3d 22 4a 5c 9c c5 45 21 6c e8 20 b3 b6 9b 27 3e 39 09 7a f0 1d e9 58 8a b7 e0 04 85 60 00 13 e2 28 c8 ce 57 fe 45 c4 b9 b9 ba 01 77 49 ee 5c 4e f9 08 66 85 64 74 81 02 10 3d a4 51 a7 ff 04 77 87 55 98 40 f5 2e 97 64 0e f7 95 c1 f3 72 87 0d 0e 07 a2 f3 96 10 f7 66 3e cf 45 88 07 4c c8 ad 8f 88 d8 7f 66 a3 ca 06 49 78 eb 3b f7 d2 db d3 92 09 d2 45 96 5d b6 1b f7 46 44 bb bd 89 1b 8c 8d e8 57 63 b0 c5 75 af 95 05 ae 7b f9 ca 7c ef 8f 44 7b 05 39 9a e9 d3 be 47 64 9e 32 8c 4e a9 1e d6 76 38 96 6d 4f c0 6c 95 4c de Data Ascii: 5V_BCxx0SE_~pB2Hc:'n)%MukVRdMz="J\E!l '>9zX`(WEwI\Nfdt=QwU@.drf>ELfIx;E]FDWcu{\|D{9Gd2Nv8mOlL
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 5b 29 30 2c 18 1b c0 a9 18 22 6e e4 1a df 51 3d bc ce d2 cb 20 1e e7 a7 d5 85 f5 52 f9 e3 d6 47 ca 2e 84 3b 35 d0 bf 17 ff df cc 07 c9 1f b7 69 e6 35 18 8d fb b8 1d eb 8d 16 8f be 3b 3e 9c d3 7b c6 18 c8 23 fd 35 d0 e6 f7 2f 78 17 8a 54 bc 23 94 bc 8b c2 dd 52 f6 52 f8 0d ba 97 11 c2 9c 17 97 0c 1b 95 45 42 a3 a5 98 2a 3a 9e 0c 35 ed 50 36 84 e0 f0 0f 06 9e de f3 f9 4a 57 61 87 b3 98 4b bf 6e 54 f9 8b 54 31 d2 cd fd 7f cc 2c 09 c2 30 9c e7 a9 25 6f e4 ce 98 81 f4 9f e7 af c2 70 7c 25 b0 5e 0c d9 27 3d d6 6c 35 65 23 2f 08 fa b7 fd 9e d8 9e 00 5a af 3f 06 01 5b 6e 78 74 8c 78 ba ce 85 f5 c9 48 31 74 c4 40 5d d9 27 19 b4 cf f0 29 24 b9 df a9 28 ce 20 8f 77 4d 4f 12 ee 62 54 83 85 58 77 71 96 61 21 e4 f8 f1 7f af 4e 10 48 ae 00 c7 3d 6b 48 f3 3f 6d 8c 09 78 Data Ascii: [)0,"nQ= RG.;5i5;>{#5/xT#RREB*:5P6JWaKnTT1,0%op\|%^'=l5e#/Z?[nxtxH1t@]')$( wMObTXwqa!NH=kH?mx
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 62 2d 2e 93 9c 10 ee 0e 24 85 53 c0 f9 fd 4a 27 08 a7 da e3 55 e3 b5 ec eb 69 ec 1d 78 4e 01 db 86 6a 8b 52 b8 37 2a ed 11 7a c6 25 c9 1c 51 fe 13 68 98 5e 3a 63 f2 58 df b1 8a 2d c2 f7 85 16 9e 57 da ed f8 36 eb d3 25 df 1f e9 d9 1c 41 5a 94 f1 5f ab 79 93 8f 56 e8 e0 ce d0 7f b4 c2 b2 32 d6 7b 69 0e 09 d6 27 68 9c 2d d6 c7 83 77 7d 6f 32 e8 fc 2c dd f6 e1 3c 6d a8 82 f0 fd 56 ee 0e 7a 50 5c fe bc d1 c7 f3 f0 49 9b fd 56 01 82 5f 00 a2 44 3a 44 a5 13 1a 03 cb b4 99 a3 3f 9c 14 ca 81 08 5f 40 83 30 88 da bc ae 1f 2e ea da 55 97 e1 db fb 50 33 9b bb 0a 13 1b 6d 29 ff 13 af 5f 48 5a 4a 93 76 78 90 cb 3c 35 57 50 6a f0 1c bf 1f 7f db 62 97 6d 27 e7 e0 c8 60 a9 81 63 43 1a 75 b7 5d b9 49 1b a8 10 0a 67 38 f6 bb 0e 5a cb 1d 2f 57 c1 d0 7f 5f e7 1f df 40 f8 e0 Data Ascii: b-.$SJ'UixNjR7*z%Qh^:cX-W6%AZ_yV2{i'h-w}o2,<mVzP\IV_D:D?_@0.UP3m)_HZJvx<5WPjbm'`cCu]Ig8Z/W_@
2024-03-27 20:20:20 UTC	1203	IN	Data Raw: c5 00 2f 57 c0 b4 bf 99 26 4c 85 0b db 71 96 5c 77 81 44 3f 40 8c 37 93 85 b5 c4 c4 4c ea a5 8c 2c b7 71 3b d1 e5 cf 11 91 56 0a e3 f9 84 a7 54 da c4 62 b6 04 37 b6 c0 78 b0 af a9 7f b7 d0 6f 47 61 ae 65 3e dd 61 02 d4 5a 7f 04 f2 5f 6a 81 89 64 c9 5b 2b dc 7b 68 91 82 7e f3 7a 69 4b 0b 8a 55 1c 0b ab 63 d3 5c b6 81 88 62 a0 70 f2 dd 81 60 91 d6 9e cd 81 53 79 5c bd cd a1 91 a4 d5 fa c0 56 01 4d d6 ef a8 8d bd 77 2d 48 a4 9c a2 19 f6 47 56 40 2d 5a bb d3 89 c9 84 5f 57 bf ad b1 54 bc 45 63 37 19 3a c0 48 2d 69 cb 53 a4 6d 7b e4 c3 28 72 c2 d3 b4 d2 ff 5a f9 a0 99 2a a4 f4 3a 75 2b 96 0d f5 02 81 04 94 7d 99 0e 24 5e 95 6c 45 4e 7b b8 7b 50 4f af ea 8d 5f 68 03 0c 78 d1 1e 55 41 de 59 0b ae 48 fc 4c 65 65 cb a0 17 11 fd ef c7 90 2f 64 29 56 c1 a7 89 64 8f Data Ascii: /W&Lq\wD?@7L,q;VTb7xoGae>aZ_jd[+{h~ziKUc\bp`Sy\VMw-HGV@-Z_WTEc7:H-iSm{(rZ*:u+}$^lEN{{PO_hxUAYHLee/d)Vd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49910	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:20 UTC	563	OUT	GET /web/410ceb80675623d1.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:20 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:20 GMT Content-Type: text/javascript Content-Length: 622155 Connection: close CF-Ray: 86b2149babc157e5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 64181 Cache-Control: public, max-age=31556926 ETag: "1bcf91280548a4b7a8e55df2bcb4709c" Expires: Fri, 28 Mar 2025 02:09:06 GMT Last-Modified: Wed, 27 Mar 2024 02:20:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: NPOA1XUTf9ljN7c9fOCHsG1MztX4pHbRBNiQbozEYRVs5KfrYQMte667/HlalaPwwHRbWa9mwPQ= x-amz-replication-status: COMPLETED x-amz-request-id: DXJ91473TMHG7XCX x-amz-server-side-encryption: AES256 x-amz-version-id: kST8MQNrBZ1IKiUfdjNK5keOp0f_VmWv X-Content-Type-Options: nosniff
2024-03-27 20:20:20 UTC	781	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 35 51 31 37 6c 58 72 69 4c 79 63 31 44 33 54 66 56 70 75 55 5a 74 51 5a 42 44 48 66 48 53 75 58 79 70 67 75 70 37 59 36 30 4d 49 2d 31 37 31 31 35 37 30 38 32 30 2d 31 2e 30 2e 31 2e 31 2d 71 74 4c 49 75 69 61 63 38 79 7a 64 78 52 59 52 4d 63 4a 4d 4a 59 42 4e 46 33 52 31 69 59 75 69 4a 6a 63 7a 56 45 51 79 54 57 49 37 64 6d 36 35 64 4a 30 48 55 46 49 48 72 59 6c 63 77 65 41 41 59 58 6e 36 4e 76 51 76 34 67 41 6a 71 59 4b 30 2e 4e 58 55 41 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 32 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=5Q17lXriLyc1D3TfVpuUZtQZBDHfHSuXypgup7Y60MI-1711570820-1.0.1.1-qtLIuiac8yzdxRYRMcJMJYBNF3R1iYuiJjczVEQyTWI7dm65dJ0HUFIHrYlcweAAYXn6NvQv4gAjqYK0.NXUAw; path=/; expires=Wed, 27-Mar-24 20:50:20 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a8
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 64 2c 46 64 2c 45 64 2c 48 64 2c 47 64 2c 4b 64 2c 4c 64 2c 4f 64 2c 24 64 2c 65 65 2c 62 65 2c 63 65 2c 5a 64 2c 68 65 2c 69 65 2c 66 65 2c 67 65 2c 6b 65 2c 6a 65 2c 6f 65 2c 70 65 2c 74 65 2c 73 65 2c 78 65 2c 79 65 2c 7a 65 2c 41 65 2c 43 65 2c 45 65 2c 44 65 2c 46 65 2c 48 65 2c 49 65 2c 4a 65 2c 4b 65 2c 4c 65 2c 4d 65 2c 4f 65 2c 50 65 2c 51 65 2c 53 65 2c 54 65 2c 52 65 2c 55 65 2c 63 66 2c 68 66 2c 6c 66 2c 6f 66 2c 71 66 2c 72 66 2c 7a 66 2c 74 66 2c 75 66 2c 76 66 2c 77 66 2c 78 66 2c 79 66 2c 48 66 2c 73 66 2c 4e 66 2c 4f 66 2c 51 66 2c 50 66 2c 52 66 2c 54 66 2c 57 66 2c 56 66 2c 55 66 2c 59 66 2c 5a 66 2c 62 67 2c 63 67 2c 66 67 2c 67 67 2c 24 66 2c 68 67 2c 65 67 2c 69 67 2c 71 67 2c 6d 67 2c 72 67 2c 42 67 2c 78 67 2c 43 67 2c 48 67 2c 49 Data Ascii: d,Fd,Ed,Hd,Gd,Kd,Ld,Od,$d,ee,be,ce,Zd,he,ie,fe,ge,ke,je,oe,pe,te,se,xe,ye,ze,Ae,Ce,Ee,De,Fe,He,Ie,Je,Ke,Le,Me,Oe,Pe,Qe,Se,Te,Re,Ue,cf,hf,lf,of,qf,rf,zf,tf,uf,vf,wf,xf,yf,Hf,sf,Nf,Of,Qf,Pf,Rf,Tf,Wf,Vf,Uf,Yf,Zf,bg,cg,fg,gg,$f,hg,eg,ig,qg,mg,rg,Bg,xg,Cg,Hg,I
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 62 61 5b 61 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 5f 5f 63 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 61 5b 61 5d 3d 62 7d 3b 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 0a 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 Data Ascii: eturn ba[a].apply(this,arguments)}};__c.ea=function(a,b){return ba[a]=b};ha=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ia=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&wi
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 6e 75 6c 6c 22 3a 70 61 28 62 2c 2e 2e 2e 63 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 61 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 65 76 65 72 79 28 63 3d 3e 6e 75 6c 6c 21 3d 63 26 26 74 79 70 65 6f 66 20 63 3d 3d 3d 62 2e 74 79 70 65 29 7d 3b 0a 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 76 61 2e 43 61 3b 62 3d 62 5b 61 5d 3b 69 66 28 6e 75 6c 6c 21 3d 62 29 7b 69 66 28 21 75 61 28 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 65 78 70 65 63 74 65 64 20 72 65 70 65 61 74 65 64 20 24 7b 74 61 2e 74 79 70 65 7d 20 66 6f 72 20 70 72 6f 70 65 72 74 79 20 22 24 7b 61 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 Data Ascii: null":pa(b,...c));return a};ua=function(a){var b=ta;return Array.isArray(a)&&a.every(c=>null!=c&&typeof c===b.type)};xa=function(a,b){var c=va.Ca;b=b[a];if(null!=b){if(!ua(b))throw new TypeError(`expected repeated ${ta.type} for property "${a}", found: $
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 29 3a 4c 61 2e 68 61 73 28 61 29 3f 4c 61 2e 67 65 74 28 61 29 3a 61 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 71 61 28 4b 61 2e 68 61 73 28 61 29 2c 22 62 6f 6f 6c 65 61 6e 20 76 61 6c 75 65 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 4b 61 2e 67 65 74 28 61 29 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 71 61 28 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 29 29 2c 22 66 69 6e 69 74 65 20 6e 75 6d 65 72 61 6c 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 4e 75 6d 62 65 72 28 61 29 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 72 65 74 75 72 6e 20 71 61 28 4c 61 2e 68 61 73 28 61 29 2c 22 6f 62 6a 65 63 74 20 76 61 6c Data Ascii: ):La.has(a)?La.get(a):a;case "boolean":return qa(Ka.has(a),"boolean value expected: {}",a),Ka.get(a);case "number":return qa(""!==a.trim()&&Number.isFinite(Number(a)),"finite numeral expected: {}",a),Number(a);case "object":return qa(La.has(a),"object val
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 6a 3a 66 2c 52 61 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 75 3d 5f 5f 63 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 70 62 3a 65 2c 6c 66 3a 66 7d 3d 64 62 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 47 64 3a 33 2c 70 62 3a 65 2c 6f 62 6a 3a 66 2c 52 61 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 76 3d 5f 5f 63 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 70 62 3a 65 2c 6c 66 3a 66 7d 3d 64 62 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 47 64 3a 34 2c 70 62 3a 65 2c 6f 62 6a 3a 66 2c 52 61 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 0a 67 62 3d 5f 5f 63 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 Data Ascii: j:f,Ra:"object"}};u=__c.u=function(a,b,c){const {tag:d,pb:e,lf:f}=db(a,b,c);return{tag:d,Gd:3,pb:e,obj:f,Ra:"object"}};v=__c.v=function(a,b,c){const {tag:d,pb:e,lf:f}=db(a,b,c);return{tag:d,Gd:4,pb:e,obj:f,Ra:"object"}};gb=__c.gb=function(a,b,c){const {t
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 71 5d 3b 6e 75 6c 6c 3d 3d 67 26 26 6e 75 6c 6c 21 3d 6d 26 26 6e 75 6c 6c 21 3d 65 5b 6d 5d 26 26 28 71 3d 6d 2c 67 3d 65 5b 71 5d 29 3b 73 77 69 74 63 68 28 41 2e 47 64 29 7b 63 61 73 65 20 33 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 6b 5b 42 5d 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 21 3d 3d 41 2e 52 61 29 74 68 72 6f 77 20 6b 62 28 7b 65 64 3a 6c 2c 4f 66 3a 6d 7d 2c 67 2c 41 2e 52 61 2c 66 29 3b 66 2e 70 75 73 68 28 71 29 3b 6b 5b 42 5d 3d 41 2e 6f 62 6a 3f 41 2e 6f 62 6a 2e 41 69 28 67 2c 0a 66 29 3a 67 3b 66 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 66 28 6e 75 6c 6c 3d 3d 67 26 26 6e 75 6c 6c 21 3d 41 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7b 6b 5b 42 5d 3d 41 2e 64 65 66 61 Data Ascii: q];null==g&&null!=m&&null!=e[m]&&(q=m,g=e[q]);switch(A.Gd){case 3:if(null==g){k[B]=void 0;break}else if(typeof g!==A.Ra)throw kb({ed:l,Of:m},g,A.Ra,f);f.push(q);k[B]=A.obj?A.obj.Ai(g,f):g;f.pop();break;case 2:if(null==g&&null!=A.defaultValue){k[B]=A.defa
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 6e 75 6d 62 65 72 20 6d 61 70 20 6b 65 79 2c 20 66 6f 75 6e 64 3a 20 4e 61 4e 20 24 7b 6e 62 28 5b 2e 2e 2e 66 2c 71 5d 29 7d 60 29 3b 7d 65 6c 73 65 20 78 3d 43 3b 69 66 28 74 79 70 65 6f 66 20 44 21 3d 3d 41 2e 52 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 41 2e 52 61 7d 20 6d 61 70 20 76 61 6c 75 65 20 66 6f 72 20 6d 61 70 20 6b 65 79 20 22 24 7b 78 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 71 62 28 44 29 7d 20 24 7b 6e 62 28 5b 2e 2e 2e 66 2c 71 5d 29 7d 60 29 3b 66 2e 70 75 73 68 28 60 24 7b 71 7d 5b 22 24 7b 78 7d 22 5d 60 29 3b 63 6f 6e 73 74 20 47 3d 41 2e 6f 62 6a 3f 41 2e 6f 62 6a 2e 41 69 28 44 2c 66 29 3a Data Ascii: row new TypeError(`Expected number map key, found: NaN ${nb([...f,q])}`);}else x=C;if(typeof D!==A.Ra)throw new TypeError(`Expected ${A.Ra} map value for map key "${x}", found: ${qb(D)} ${nb([...f,q])}`);f.push(`${q}["${x}"]`);const G=A.obj?A.obj.Ai(D,f):
2024-03-27 20:20:20 UTC	1369	IN	Data Raw: 5b 2e 2e 2e 66 2c 78 5d 2c 41 29 3b 7a 5b 41 5d 3d 42 7d 6d 5b 78 5d 3d 7a 7d 65 6c 73 65 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 74 29 69 66 28 74 79 70 65 6f 66 20 72 5b 74 5d 21 3d 3d 6c 2e 52 61 29 74 68 72 6f 77 20 6c 62 28 7b 65 64 3a 71 7d 2c 72 5b 74 5d 2c 6c 2e 52 61 2c 5b 2e 2e 2e 66 2c 78 5d 2c 74 29 3b 6d 5b 78 5d 3d 72 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 69 66 28 21 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 4d 61 70 20 66 6f 72 20 6b 65 79 20 22 24 7b 71 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 71 62 28 72 29 7d 20 24 7b 6e 62 28 66 29 7d 60 29 3b 69 66 28 30 3d 3d 3d 72 2e 73 69 7a 65 29 62 72 65 61 6b 3b 71 Data Ascii: [...f,x],A);z[A]=B}m[x]=z}else{for(t=0;t<r.length;++t)if(typeof r[t]!==l.Ra)throw lb({ed:q},r[t],l.Ra,[...f,x],t);m[x]=r}break;case 5:if(!(r instanceof Map))throw new TypeError(`Expected Map for key "${q}", found: ${qb(r)} ${nb(f)}`);if(0===r.size)break;q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49911	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:21 UTC	740	OUT	POST /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:21 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 32 30 2e 30 37 38 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 32 63 32 61 33 34 32 64 33 65 33 34 34 31 66 65 38 36 32 33 30 32 33 37 63 38 36 31 35 30 30 32 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 32 30 2e 30 37 38 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 32 30 2e 30 37 38 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:20:20.078Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"2c2a342d3e3441fe86230237c8615002","init":true,"started":"2024-03-27T20:20:20.078Z","timestamp":"2024-03-27T20:20:20.078Z","stat
2024-03-27 20:20:22 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:22 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49912	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:21 UTC	1449	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:21 UTC	1658	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 64 65 73 69 67 6e 5f 76 69 65 77 65 72 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"design_viewer"}},{"key":"service.name","value":{"stringValue":"design_viewer \| telemetry.user_operation"}}
2024-03-27 20:20:22 UTC	859	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b214a5db9357c7-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M8zL%2B071zKhd3O8ui9t1JwDYb9yQPvF8EETIfr%2BzbGzye8LS29vuIFdAMM%2FUDStfpnMDSoFG4YZLg9iSucHskAktqTvrWmnT1lihTgg3CKywpAOTHO2Brug%2BY1gbqiD8vCV4KBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:22 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49919	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	2450	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: anon_home sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: searchdesignspecsapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:22 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214a8c88e8280-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214a8c88e8280 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p949rKNTqfSav8pAD7YpZJj6OnnUWqaf%2Fj2xdP%2FKjqqzCkcZBG8OXj4T3r6EHEUevW1X61ntq7Kq1%2FYgLIDfD23SsVjYrVT72GxwWZLaXvhdexhueQOSzHwjYY6Cdys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:22 UTC	468	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 6f 72 79 50 Data Ascii: ionsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categoryP
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 22 74 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a Data Ascii: "tACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconUrl":
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 73 4c 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 4e 50 22 2c Data Ascii: sLabel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UUNP",
2024-03-27 20:20:22 UTC	1183	IN	Data Raw: 3a 22 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a Data Ascii: :"Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensions":
2024-03-27 20:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49918	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1397	OUT	GET /web/7147f278e62f8beb.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/css Content-Length: 3427 Connection: close CF-Ray: 86b214a92a2a5842-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 497194 Cache-Control: public, max-age=31556926 ETag: "a08df7973afbda6d0d521f3d61bbbe50" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Fri, 22 Mar 2024 02:08:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: UfY3UtIyJKTRB6gs00cxJEyfOrXXgNSf4NGooy+DXKjRO/yyO8cB8foknQdWNvxMQNWdStZX6XA= x-amz-replication-status: COMPLETED x-amz-request-id: M4RZN4M6FJ5FKSMH x-amz-server-side-encryption: AES256 x-amz-version-id: mPGTtlw48V14dVweXV3T5hYq9l28AVOL X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 61 51 39 25 32 42 48 72 30 6d 30 55 41 61 51 48 63 6c 70 31 39 6e 4b 45 47 46 46 30 6b 25 32 42 65 41 4b 79 25 32 42 41 5a 47 58 6a 37 6e 77 6a 70 63 77 78 45 47 25 32 42 51 53 35 63 48 48 6a 52 33 45 6d 73 6b 37 73 6c 32 6e 49 39 33 49 79 59 38 6f 69 48 25 32 42 30 44 37 49 42 4e 63 55 63 25 32 42 70 47 33 64 4a 74 59 53 77 53 67 72 74 66 59 6f 25 32 42 4b 65 4f 72 33 76 67 6d 35 45 69 63 6b 31 5a 74 39 51 63 7a 53 73 53 70 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vaQ9%2BHr0m0UAaQHclp19nKEGFF0k%2BeAKy%2BAZGXj7nwjpcwxEG%2BQS5cHHjR3Emsk7sl2nI93IyY8oiH%2B0D7IBNcUc%2BpG3dJtYSwSgrtfYo%2BKeOr3vgm5Eick1Zt9QczSsSpg%3D"}],"group":"cf-nel","max_age
2024-03-27 20:20:22 UTC	1197	IN	Data Raw: 2e 65 4a 35 62 66 51 7b 63 6f 6c 6f 72 3a 23 31 38 37 37 66 32 7d 2e 58 76 75 5a 78 67 2c 2e 5f 76 58 76 65 51 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 6e 6b 36 71 4f 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 4a 37 63 59 47 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 68 65 69 67 68 74 3a 2d 77 65 62 6b 69 74 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 34 70 Data Ascii: .eJ5bfQ{color:#1877f2}.XvuZxg,._vXveQ{word-break:break-word}.nk6qOQ{align-items:stretch;display:flex}.J7cYGg{align-items:center;display:flex;flex:0 0 auto;height:-webkit-fit-content;height:-moz-fit-content;height:fit-content;margin-top:-1px;min-height:24p
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 74 71 52 36 67 2e 7a 62 72 39 6e 51 3a 6e 6f 74 28 2e 69 55 7a 49 48 67 29 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 2a 2e 31 29 7d 2e 6d 74 71 52 36 67 2e 69 55 7a 49 48 67 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 50 4e 5f Data Ascii: ttom:0;content:"";height:100%;left:0;position:absolute;right:0;top:0;transition:background-color .2s ease-in-out;width:100%}.mtqR6g.zbr9nQ:not(.iUzIHg):after{border-radius:calc(var(--avatar-size)*.1)}.mtqR6g.iUzIHg:hover:before{background-color:var(--fPN_
2024-03-27 20:20:22 UTC	861	IN	Data Raw: 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 2a 2e 31 29 7d 2e 72 4c 31 66 46 51 2e 6c 65 33 6c 5f 67 7b 78 3a 31 70 78 3b 79 3a 31 70 78 3b 72 78 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 2a 2e 31 20 2d 20 2e 32 70 78 29 3b 72 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 2a 2e 31 20 2d 20 2e 32 70 78 29 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 70 78 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 20 2d 20 32 70 78 29 3b 70 61 69 6e 74 2d 6f 72 64 65 72 3a 66 69 6c 6c 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 76 61 74 61 72 2d 73 69 7a 65 29 20 2d 20 32 70 78 29 7d 2e 6c 69 67 68 74 7b 2d 2d 48 69 65 39 6a 51 3a 76 61 72 28 2d 2d 67 55 65 Data Ascii: -avatar-size).1)}.rL1fFQ.le3l_g{x:1px;y:1px;rx:calc(var(--avatar-size).1 - .2px);ry:calc(var(--avatar-size)*.1 - .2px);stroke-width:2px;height:calc(var(--avatar-size) - 2px);paint-order:fill;width:calc(var(--avatar-size) - 2px)}.light{--Hie9jQ:var(--gUe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49915	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1397	OUT	GET /web/74fe30c142f4f8d5.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/css Content-Length: 1276 Connection: close CF-Ray: 86b214a95a5b07d7-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151425 Cache-Control: public, max-age=31556926 ETag: "4b68892e3b70f86abc8713d3e73d94f4" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Tue, 26 Mar 2024 02:11:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: K3HMFcm0L5OfQi2UW2l15tXQeC5nbLzv9tIa3OlpLXnwjDGnXuKeMlwfWQEfSGA+Mf6sbRurDFM= x-amz-replication-status: COMPLETED x-amz-request-id: K527F3683K0010S4 x-amz-server-side-encryption: AES256 x-amz-version-id: 6P.4gjxfAC4DbZuZlnLIp5WqmiKrcRZ1 X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 32 53 4e 6c 73 46 53 46 71 7a 56 4f 75 6e 31 68 69 46 59 35 74 79 4a 44 4d 6f 67 65 6c 61 51 4e 5a 35 63 33 30 43 59 66 6e 54 56 73 6b 50 50 36 31 79 37 6e 39 56 48 4e 71 45 56 4c 61 47 50 43 7a 49 72 46 36 6e 6a 62 4b 75 6d 50 25 32 46 30 51 30 74 56 67 51 76 30 44 52 30 44 72 36 79 59 52 75 58 72 34 49 77 42 56 44 6d 43 68 52 78 34 6a 30 45 25 32 46 4e 42 63 63 42 52 4f 76 25 32 42 35 4f 36 38 33 61 32 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2SNlsFSFqzVOun1hiFY5tyJDMogelaQNZ5c30CYfnTVskPP61y7n9VHNqEVLaGPCzIrF6njbKumP%2F0Q0tVgQv0DR0Dr6yYRuXr4IwBVDmChRx4j0E%2FNBccBROv%2B5O683a24%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:22 UTC	1205	IN	Data Raw: 2e 6c 69 67 68 74 7b 2d 2d 62 58 6c 78 6f 51 3a 23 35 31 35 31 35 34 7d 2e 64 61 72 6b 7b 2d 2d 62 58 6c 78 6f 51 3a 23 66 66 66 7d 2e 58 53 49 55 5f 41 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 58 6c 78 6f 51 29 7d 2e 41 61 49 4c 38 41 3e 2e 5f 33 38 6f 57 76 51 2c 2e 43 4f 41 57 51 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 44 56 55 33 49 67 3e 2e 5f 33 38 6f 57 76 51 2c 2e 45 57 57 55 65 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 48 76 66 79 4f 77 3e 2e 5f 33 38 6f 57 76 51 2c 2e 4c 49 56 63 4f 51 3e 2e 5f 33 38 6f 57 76 51 2c 2e 58 38 31 66 5f 77 3e 2e 5f 33 38 6f 57 76 51 2c 2e 5f 34 4f 77 52 50 67 3e 2e 5f 33 38 6f 57 76 51 2c 2e 5f 36 50 70 6c 5f 41 3e 2e 5f 33 38 6f 57 76 51 2c 2e 5f 36 6d 32 66 67 67 3e 2e 5f 33 38 6f 57 76 51 2c 2e 5f 37 49 76 4a 67 3e 2e 5f Data Ascii: .light{--bXlxoQ:#515154}.dark{--bXlxoQ:#fff}.XSIU_A{color:var(--bXlxoQ)}.AaIL8A>._38oWvQ,.COAWQQ>._38oWvQ,.DVU3Ig>._38oWvQ,.EWWUeQ>._38oWvQ,.HvfyOw>._38oWvQ,.LIVcOQ>._38oWvQ,.X81f_w>._38oWvQ,._4OwRPg>._38oWvQ,._6Ppl_A>._38oWvQ,._6m2fgg>._38oWvQ,._7IvJg>._
2024-03-27 20:20:22 UTC	71	IN	Data Raw: 65 61 6b 2d 61 6c 6c 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 37 34 66 65 33 30 63 31 34 32 66 34 66 38 64 35 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: eak-all}/# sourceMappingURL=sourcemaps/74fe30c142f4f8d5.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49917	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1397	OUT	GET /web/e6d555235c8c61ec.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/css Content-Length: 108 Connection: close CF-Ray: 86b214a97f752d1e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 728968 Cache-Control: public, max-age=31556926 ETag: "42ac4039a15b1effacaaea617fff2632" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Tue, 19 Mar 2024 03:04:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: OcityPqf99SU+CPCkroID6O4rE6eKq/wqPTVp9D/eJrhHgnnEtK9oKvKphs5hZEaUvp+PXPI3m8= x-amz-replication-status: COMPLETED x-amz-request-id: FKBEXNHQT4NPNG8G x-amz-server-side-encryption: AES256 x-amz-version-id: 0qlVgEC91MRTJIV6Y4Tq4B87dGGIzLEq X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 61 4a 70 77 4a 6b 6d 6d 57 57 71 34 62 6c 42 55 32 4a 78 37 6c 49 50 62 58 50 4e 4a 4a 77 50 4b 36 47 37 71 43 64 43 78 48 52 30 74 57 36 67 68 45 70 36 57 4f 45 6b 69 74 69 4e 6a 79 73 25 32 42 55 51 25 32 46 6e 51 34 4b 32 37 49 76 41 33 39 71 39 4a 42 70 59 78 6a 5a 58 31 75 41 77 33 7a 52 7a 31 45 42 54 53 41 76 4b 4a 58 42 55 6f 4e 63 76 64 64 5a 31 7a 51 75 71 33 69 50 61 25 32 46 42 67 51 4b 7a 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7aJpwJkmmWWq4blBU2Jx7lIPbXPNJJwPK6G7qCdCxHR0tW6ghEp6WOEkitiNjys%2BUQ%2FnQ4K27IvA39q9JBpYxjZX1uAw3zRz1EBTSAvKJXBUoNcvddZ1zQuq3iPa%2FBgQKzk%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:22 UTC	108	IN	Data Raw: 2e 5f 36 58 38 41 53 77 7b 63 6f 6c 6f 72 3a 23 62 64 30 38 31 63 7d 2e 65 42 31 79 63 77 7b 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 65 36 64 35 35 35 32 33 35 63 38 63 36 31 65 63 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: ._6X8ASw{color:#bd081c}.eB1ycw{color:#1da1f2}/# sourceMappingURL=sourcemaps/e6d555235c8c61ec.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49914	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1378	OUT	GET /web/390caf0cb1de6bef.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/javascript Content-Length: 23398 Connection: close CF-Ray: 86b214a97d4687ac-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64182 Cache-Control: public, max-age=31556926 ETag: "e820bdfd8a2dd7cbf30004472dfa20a1" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Wed, 27 Mar 2024 02:20:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kRUhUoBaD0GiemTEIu5Uy6fJzG7xM4ungBYR6TN4cbLJKg1P6ecL5oNGANXHLYJQaY/Pi3C0OiM= x-amz-replication-status: PENDING x-amz-request-id: Z6F4QD2GM3HJBH61 x-amz-server-side-encryption: AES256 x-amz-version-id: urYqBy8UBtCWkqyClLh9nKdEsZLQbskG X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 31 72 6a 76 74 25 32 42 49 73 36 39 70 31 75 69 4e 31 57 57 6f 6b 31 65 46 7a 63 53 59 54 4b 44 32 44 49 35 37 45 4b 56 56 63 58 41 32 51 41 7a 48 25 32 42 51 79 79 64 66 6b 74 5a 4b 50 54 56 41 51 43 25 32 42 56 65 41 55 37 74 6c 59 68 61 4c 37 72 72 69 49 64 70 41 7a 30 36 68 33 30 46 25 32 46 78 31 58 79 25 32 42 35 63 34 47 25 32 42 66 36 6c 33 78 25 32 42 66 4c 61 75 5a 71 67 31 6a 73 66 73 49 31 58 35 6f 45 61 44 51 38 4e 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rjvt%2BIs69p1uiN1WWok1eFzcSYTKD2DI57EKVVcXA2QAzH%2BQyydfktZKPTVAQC%2BVeAU7tlYhaL7rriIdpAz06h30F%2Fx1Xy%2B5c4G%2Bf6l3x%2BfLauZqg1jsfsI1X5oEaDQ8N0%3D"}],"group":"cf-nel","max_age
2024-03-27 20:20:22 UTC	1192	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 33 31 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 34 39 35 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 65 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2231],{/***/ 94958:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 72 73 65 46 6c 6f 61 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 65 2e 6c 65 6e 67 74 68 2d 31 29 29 2f 31 30 30 3b 63 6f 6e 73 74 20 67 3d 70 61 72 73 65 46 6c 6f 61 74 28 66 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 0a 66 2e 6c 65 6e 67 74 68 2d 31 29 29 2f 31 30 30 3b 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 29 3b 63 6f 6e 73 74 20 5b 6b 2c 6c 2c 6d 5d 3d 50 65 61 28 5b 61 2c 62 2c 67 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 57 54 28 4d 61 74 68 2e 72 6f 75 6e 64 28 32 35 35 2a 6b 29 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 32 35 35 2a 6c 29 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 32 35 35 2a 6d 29 2c 63 29 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 60 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 63 6f 6c 6f 72 3a 20 24 7b 61 7d 60 29 3b 7d 3b 50 65 61 3d 66 75 6e 63 Data Ascii: rseFloat(e.substring(0,e.length-1))/100;const g=parseFloat(f.substring(0,f.length-1))/100;c=parseFloat(c);const [k,l,m]=Pea([a,b,g]);return new WT(Math.round(255k),Math.round(255l),Math.round(255*m),c)}throw Error(`unrecognized color: ${a}`);};Pea=func
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 69 6f 6e 28 61 3d 22 22 29 7b 61 3d 62 66 61 28 61 29 3b 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 28 29 2a 5a 54 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 5a 54 5b 61 5d 7d 3b 5f 5f 63 2e 61 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 3d 22 6d 65 64 69 75 6d 22 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 61 26 26 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 62 3a 24 54 5b 62 5d 29 2a 28 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 7c 7c 31 29 3b 72 65 74 75 72 6e 5b 2e 2e 2e 61 5d 2e 73 6f 72 74 28 28 64 2c 65 29 3d 3e 7b 64 3d 64 2e 77 69 64 74 68 3b 65 3d 65 2e 77 69 64 74 68 3b 72 65 74 75 72 6e 20 64 3e 63 26 26 65 3c 63 3f 2d 31 Data Ascii: ion(a=""){a=bfa(a);a=Math.floor(a()ZT.length);return ZT[a]};__c.aU=function(a,b="medium"){if(null!==a&&void 0!==a&&a.length){var c=("number"===typeof b?b:$T[b])(window.devicePixelRatio\|\|1);return[...a].sort((d,e)=>{d=d.width;e=e.width;return d>c&&e<c?-1
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 21 3d 3d 63 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 61 2e 75 73 65 72 49 64 7d 7d 3b 76 61 72 20 6d 55 3b 6d 55 3d 64 66 61 28 76 6f 69 64 20 30 29 3b 5f 5f 63 2e 6e 55 3d 67 55 28 66 75 6e 63 74 69 6f 6e 28 7b 73 70 61 63 69 6e 67 3a 61 3d 22 31 75 22 2c 69 63 6f 6e 3a 62 2c 63 68 69 6c 64 72 65 6e 3a 63 7d 29 7b 72 65 74 75 72 6e 20 64 55 28 6d 55 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 69 63 6f 6e 3a 62 7d 2c 63 68 69 6c 64 72 65 6e 3a 64 55 28 5f 5f 63 2e 47 6a 2c 7b 72 6f 6c 65 3a 22 6c 69 73 74 22 2c 74 61 67 4e 61 6d 65 3a 22 75 6c 22 2c 73 70 61 63 69 6e 67 3a 61 2c 63 68 69 6c 64 72 65 6e 3a 63 7d 29 7d 29 7d 29 3b 5f 5f 63 2e 6e 55 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 42 75 6c 6c 65 74 4c 69 73 74 22 3b 0a 5f 5f 63 2e 6f Data Ascii: !==c&&void 0!==c?c:a.userId}};var mU;mU=dfa(void 0);__c.nU=gU(function({spacing:a="1u",icon:b,children:c}){return dU(mU.Provider,{value:{icon:b},children:dU(__c.Gj,{role:"list",tagName:"ul",spacing:a,children:c})})});__c.nU.displayName="BulletList";__c.o
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 22 70 72 69 6d 61 72 79 22 2c 6f 6e 43 6c 69 63 6b 3a 66 2c 6c 6f 61 64 69 6e 67 3a 71 2c 63 68 69 6c 64 72 65 6e 3a 49 28 22 73 44 67 4f 70 77 22 29 7d 29 5d 7d 29 7d 29 7d 29 3b 5f 5f 63 2e 71 55 3d 67 55 28 28 7b 68 65 61 64 69 6e 67 3a 61 2c 6b 45 3a 62 3d 22 6d 65 64 69 75 6d 22 2c 72 61 3a 63 2c 4e 61 3a 64 2c 58 3a 65 2c 69 77 3a 66 2c 69 45 3a 67 7d 29 3d 3e 64 55 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 4e 36 71 4c 46 77 22 2c 63 68 69 6c 64 72 65 6e 3a 65 55 28 5f 5f 63 2e 47 6a 2c 7b 73 70 61 63 69 6e 67 3a 22 32 75 22 2c 61 6c 69 67 6e 3a 63 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 55 28 5f 5f 63 2e 50 6e 2c 7b 73 70 61 63 69 6e 67 3a 22 30 22 2c 54 64 3a 22 63 65 6e 74 65 72 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 65 26 26 64 55 28 5f Data Ascii: "primary",onClick:f,loading:q,children:I("sDgOpw")})]})})});__c.qU=gU(({heading:a,kE:b="medium",ra:c,Na:d,X:e,iw:f,iE:g})=>dU("div",{className:"N6qLFw",children:eU(__c.Gj,{spacing:"2u",align:c,children:[eU(__c.Pn,{spacing:"0",Td:"center",children:[e&&dU(_
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 69 6d 61 6c 20 63 6f 6c 6f 72 3a 20 24 7b 61 7d 60 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 53 54 28 70 61 72 73 65 49 6e 74 28 62 5b 31 5d 2c 31 36 29 2c 70 61 72 73 65 49 6e 74 28 62 5b 32 5d 2c 31 36 29 2c 70 61 72 73 65 49 6e 74 28 62 5b 33 5d 2c 31 36 29 29 7d 73 74 61 74 69 63 20 44 78 28 61 29 7b 63 6f 6e 73 74 20 62 3d 54 54 2e 65 78 65 63 28 61 29 3b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 60 69 6e 76 61 6c 69 64 20 72 67 62 20 63 6f 6c 6f 72 3a 20 24 7b 61 7d 60 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 53 54 28 2b 62 5b 31 5d 2c 2b 62 5b 32 5d 2c 2b 62 5b 33 5d 29 7d 73 74 61 74 69 63 20 4c 44 28 61 29 7b 63 6f 6e 73 74 20 62 3d 55 54 2e 65 78 65 63 28 61 29 3b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 60 69 6e 76 61 6c 69 Data Ascii: imal color: ${a}`);return new ST(parseInt(b[1],16),parseInt(b[2],16),parseInt(b[3],16))}static Dx(a){const b=TT.exec(a);if(!b)throw Error(`invalid rgb color: ${a}`);return new ST(+b[1],+b[2],+b[3])}static LD(a){const b=UT.exec(a);if(!b)throw Error(`invali
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 37 32 2c 33 30 37 36 2c 33 31 35 37 2c 33 31 35 38 2c 33 31 37 30 2c 33 31 37 31 2c 33 32 30 31 2c 33 32 36 30 2c 33 32 36 33 2c 0a 33 32 36 36 2c 33 32 37 30 2c 33 32 37 36 2c 33 32 37 37 2c 33 32 38 35 2c 33 32 38 36 2c 33 32 39 38 2c 33 32 39 39 2c 33 33 32 38 2c 33 33 32 39 2c 33 33 38 37 2c 33 33 38 38 2c 33 33 39 30 2c 33 34 30 35 2c 33 34 31 35 2c 33 34 32 36 2c 33 34 32 37 2c 33 36 33 33 2c 33 37 36 31 2c 34 31 35 33 2c 34 31 35 34 2c 34 31 35 37 2c 34 31 35 38 2c 34 31 38 34 2c 34 31 38 35 2c 34 32 32 36 2c 34 32 32 39 2c 34 32 33 30 2c 34 32 33 37 2c 34 32 35 33 2c 36 30 36 38 2c 36 30 36 39 2c 36 30 38 36 2c 36 31 30 39 2c 36 39 37 32 2c 36 39 37 38 2c 38 32 30 34 2c 31 31 36 34 37 2c 31 32 34 34 31 2c 31 32 34 34 32 2c 34 32 36 35 34 2c 34 32 Data Ascii: 72,3076,3157,3158,3170,3171,3201,3260,3263,3266,3270,3276,3277,3285,3286,3298,3299,3328,3329,3387,3388,3390,3405,3415,3426,3427,3633,3761,4153,4154,4157,4158,4184,4185,4226,4229,4230,4237,4253,6068,6069,6086,6109,6972,6978,8204,11647,12441,12442,42654,42
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 33 2c 32 35 30 34 2c 32 35 30 37 2c 32 35 30 38 2c 33 30 30 37 2c 33 30 30 39 2c 33 30 31 30 2c 33 33 33 30 2c 33 33 33 31 2c 33 33 39 31 2c 33 33 39 32 2c 33 36 33 35 2c 33 37 36 33 2c 36 30 37 30 2c 36 30 38 37 2c 36 30 38 38 2c 36 39 31 36 2c 36 39 37 31 2c 36 39 37 39 2c 36 39 38 30 2c 34 33 33 39 35 2c 34 33 34 34 34 2c 34 33 34 34 35 2c 34 33 34 35 30 2c 34 33 34 35 31 2c 39 34 31 39 32 2c 39 34 31 39 33 5d 29 2c 58 65 61 3d 5b 5b 32 33 36 36 2c 32 33 36 38 5d 2c 5b 32 33 37 37 2c 32 33 38 30 5d 2c 5b 33 30 31 34 2c 33 30 31 36 5d 2c 5b 33 30 31 38 2c 33 30 32 30 5d 2c 0a 5b 33 30 37 33 2c 33 30 37 35 5d 2c 5b 33 31 33 37 2c 33 31 34 30 5d 2c 5b 33 33 39 38 2c 33 34 30 30 5d 2c 5b 33 34 30 32 2c 33 34 30 34 5d 2c 5b 36 30 37 38 2c 36 30 38 35 5d 2c Data Ascii: 3,2504,2507,2508,3007,3009,3010,3330,3331,3391,3392,3635,3763,6070,6087,6088,6916,6971,6979,6980,43395,43444,43445,43450,43451,94192,94193]),Xea=[[2366,2368],[2377,2380],[3014,3016],[3018,3020],[3073,3075],[3137,3140],[3398,3400],[3402,3404],[6078,6085],
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 73 71 75 61 72 65 22 3a 72 3d 64 55 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 22 31 30 30 25 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 66 69 6c 6c 3a 65 2c 73 68 61 70 65 52 65 6e 64 65 72 69 6e 67 3a 22 67 65 6f 6d 65 74 72 69 63 50 72 65 63 69 73 69 6f 6e 22 2c 0a 63 6c 69 70 50 61 74 68 3a 60 75 72 6c 28 23 24 7b 66 7d 29 60 2c 73 74 72 6f 6b 65 3a 64 2c 63 6c 61 73 73 4e 61 6d 65 3a 6a 55 28 22 72 4c 31 66 46 51 22 2c 7b 6c 65 33 6c 5f 67 3a 64 7d 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 5f 5f 63 2e 68 28 61 29 3b 7d 64 3d 4f 62 6a 65 63 74 3b 66 3d 64 2e 61 73 73 69 67 6e 3b 67 3d 7b 72 6f 6c 65 3a 67 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 6b 2c 63 6c 61 73 73 4e 61 6d 65 3a 6a 55 28 22 56 58 64 Data Ascii: square":r=dU("rect",{width:"100%",height:"100%",fill:e,shapeRendering:"geometricPrecision",clipPath:`url(#${f})`,stroke:d,className:jU("rL1fFQ",{le3l_g:d})});break;default:throw new __c.h(a);}d=Object;f=d.assign;g={role:g,"aria-label":k,className:jU("VXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49913	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1386	OUT	GET /web/82cbbba8c3f54a3f.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/javascript Content-Length: 3582 Connection: close CF-Ray: 86b214a9785c8848-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 151425 Cache-Control: public, max-age=31556926 ETag: "5065e4cfb23c364e859bd09b8009d53d" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Tue, 26 Mar 2024 02:11:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lzkOhUfoJYjeNv/G3If5/MJIpZ40fEuyUVq4CDy5J/HKWSnQns9q8uGc2d1q7Fyy07l8JZ57oUg= x-amz-replication-status: PENDING x-amz-request-id: K523PAWHR7XY55MJ x-amz-server-side-encryption: AES256 x-amz-version-id: t9s7mkajnEm.4fGSKJBiIC.Cwg1ORMLr X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 4a 65 43 73 25 32 42 25 32 46 57 25 32 46 70 73 47 4e 42 51 4d 5a 44 61 62 62 37 61 4c 4d 69 54 61 32 68 55 44 49 64 48 58 45 36 4a 70 6e 4b 41 25 32 46 6d 6d 74 30 36 62 72 57 4c 75 4a 73 63 36 25 32 46 68 77 30 46 47 64 63 52 25 32 42 79 53 6b 38 4f 63 33 39 6f 6e 6a 30 57 70 6b 69 45 57 4c 4d 54 59 74 6b 5a 35 34 4f 6f 61 6c 76 4a 75 41 5a 37 37 73 72 55 4e 35 65 47 77 37 59 25 32 46 4c 25 32 42 52 39 48 52 58 50 62 73 4a 6e 56 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aJeCs%2B%2FW%2FpsGNBQMZDabb7aLMiTa2hUDIdHXE6JpnKA%2Fmmt06brWLuJsc6%2Fhw0FGdcR%2BySk8Oc39onj0WpkiEWLMTYtkZ54OoalvJuAZ77srUN5eGw7Y%2FL%2BR9HRXPbsJnV0%3D"}],"group":"cf-nel","max_a
2024-03-27 20:20:22 UTC	1190	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 65 71 34 50 67 41 5c 22 3a 5c 22 44 69 64 6e e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 63 6f 64 65 5c 22 2c 5c 22 50 46 4f 55 65 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 59 73 33 4e 71 51 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 41 70 70 6c 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 5c 22 2c 5c 22 31 70 42 38 62 51 5c 22 3a 5c 22 41 20 6e 65 77 20 77 69 6e 64 6f 77 20 68 61 73 20 6f 70 65 6e 65 64 20 77 69 74 68 20 74 68 65 20 6c 6f 67 69 6e 20 61 6e 64 20 73 69 67 6e 75 70 20 66 6f 72 6d 73 5c 22 2c 5c 22 6a 34 44 6c 43 51 5c 22 3a 5c 22 43 Data Ascii: (function() { const messages = JSON.parse("{\"eq4PgA\":\"Didnt get the code? Resend code\",\"PFOUew\":\"Continue\",\"Ys3NqQ\":\"Last time you used Apple to log in.\",\"1pB8bQ\":\"A new window has opened with the login and signup forms\",\"j4DlCQ\":\"C
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 69 6e 20 7b 30 2c 20 70 6c 75 72 61 6c 2c 20 6f 6e 65 20 7b 23 20 73 65 63 6f 6e 64 7d 20 6f 74 68 65 72 20 7b 23 20 73 65 63 6f 6e 64 73 7d 7d 5c 22 2c 5c 22 79 46 57 2f 63 51 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 41 6b 75 6e 20 62 65 6c 61 6a 61 72 2e 69 64 5c 22 2c 5c 22 6a 32 54 77 30 51 5c 22 3a 5c 22 43 72 65 61 74 65 20 73 74 75 6e 6e 69 6e 67 20 64 65 73 69 67 6e 73 20 61 6e 64 20 64 6f 63 75 6d 65 6e 74 73 20 69 6e 20 6d 69 6e 75 74 65 73 5c 22 2c 5c 22 62 78 2f 63 47 67 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 47 6f 6f 67 6c 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 5c 22 2c 5c 22 55 52 6e 76 46 77 5c 22 3a 5c 22 43 6f 70 79 Data Ascii: t get the code? Resend in {0, plural, one {# second} other {# seconds}}\",\"yFW/cQ\":\"Continue with Akun belajar.id\",\"j2Tw0Q\":\"Create stunning designs and documents in minutes\",\"bx/cGg\":\"Last time you used Google to log in.\",\"URnvFw\":\"Copy
2024-03-27 20:20:22 UTC	1023	IN	Data Raw: 65 50 67 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 51 51 5c 22 2c 5c 22 6e 38 39 42 37 41 5c 22 3a 5c 22 7b 30 2c 20 6e 75 6d 62 65 72 7d 20 6f 75 74 20 6f 66 20 7b 31 2c 20 6e 75 6d 62 65 72 7d 20 63 68 61 72 61 63 74 65 72 73 20 75 73 65 64 5c 22 2c 5c 22 49 48 53 4d 53 77 5c 22 3a 5c 22 59 6f 75 20 6d 69 73 73 65 64 20 74 68 69 73 20 6f 6e 65 5c 22 2c 5c 22 34 32 2f 4f 6d 77 5c 22 3a 5c 22 59 6f 75 e2 80 99 72 65 20 61 6c 6d 6f 73 74 20 73 69 67 6e 65 64 20 75 70 5c 22 2c 5c 22 70 4a 4a 33 6b 41 5c 22 3a 5c 22 4c 61 73 74 20 73 74 65 70 21 20 54 6f 20 73 65 63 75 72 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2c 20 65 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 2e 5c 22 2c 5c 22 50 69 Data Ascii: ePg\":\"Continue with QQ\",\"n89B7A\":\"{0, number} out of {1, number} characters used\",\"IHSMSw\":\"You missed this one\",\"42/Omw\":\"Youre almost signed up\",\"pJJ3kA\":\"Last step! To secure your account, enter the code we just sent to {0}.\",\"Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49916	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1378	OUT	GET /web/1027e9acc64d126e.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:22 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:22 GMT Content-Type: text/javascript Content-Length: 34069 Connection: close CF-Ray: 86b214a98fbd3b68-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64182 Cache-Control: public, max-age=31556926 ETag: "6679c59dadbff7f98957af2d5562a8a1" Expires: Fri, 28 Mar 2025 02:09:08 GMT Last-Modified: Wed, 27 Mar 2024 02:20:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9Z70C9b/9mjC0C2MKa21537XS82gWM1uyqleeUoaUyRrNImXqjW984+6chBjAgvYIWzab4MIJTg= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F50CTRA7E5EJQS x-amz-server-side-encryption: AES256 x-amz-version-id: GFMpXxoEi8F6l1_ADbXr1x2q0HJ0Y5BM X-Content-Type-Options: nosniff
2024-03-27 20:20:22 UTC	346	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 46 67 52 67 30 61 78 51 75 48 30 31 51 55 55 62 4d 76 54 6a 49 72 75 67 4b 6e 65 61 38 69 79 6a 4b 36 51 47 43 78 32 34 6e 61 69 73 51 4e 6a 59 53 4f 62 58 46 61 73 4c 4d 35 55 33 4d 6d 6e 61 32 37 53 66 7a 59 6f 50 4f 6c 55 25 32 46 37 79 43 77 51 6c 45 30 61 6a 37 55 53 52 4a 30 41 46 4c 4f 66 43 6a 71 72 6d 75 52 54 34 56 79 4f 66 31 44 69 32 46 6d 45 56 4f 64 59 54 74 67 73 53 63 4c 61 43 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgRg0axQuH01QUUbMvTjIrugKnea8iyjK6QGCx24naisQNjYSObXFasLM5U3Mmna27SfzYoPOlU%2F7yCwQlE0aj7USRJ0AFLOfCjqrmuRT4VyOf1Di2FmEVOdYTtgsScLaCU%3D"}],"group":"cf-nel","max_age":604800}N
2024-03-27 20:20:22 UTC	1202	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 35 33 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 30 36 34 30 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9538],{/***/ 206405:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 30 3a 77 2e 6c 6f 61 64 69 6e 67 29 50 3d 31 35 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 56 3d 74 2e 48 42 3b 56 26 26 28 50 3d 5f 5f 63 2e 4a 55 5b 56 5d 29 7d 72 65 74 75 72 6e 20 4b 55 28 41 2c 7b 6c 6f 61 64 69 6e 67 3a 76 6f 69 64 20 30 21 3d 3d 4f 3f 4f 3a 50 3d 3d 3d 0a 7a 2c 64 69 73 61 62 6c 65 64 3a 76 6f 69 64 20 30 21 3d 3d 4d 3f 4d 3a 21 21 50 2c 6f 6e 43 6c 69 63 6b 3a 55 2c 76 61 72 69 61 6e 74 3a 44 7d 29 7d 29 7d 3b 63 3d 7b 5b 31 5d 3a 61 28 7b 6d 6f 64 65 3a 31 2c 42 64 3a 77 66 61 2c 6f 6e 43 6c 69 63 6b 3a 63 2c 24 61 3a 76 6f 69 64 20 30 7d 29 2c 5b 35 5d 3a 61 28 7b 6d 6f 64 65 3a 35 2c 42 64 3a 78 66 61 2c 6f 6e 43 6c 69 63 6b 3a 63 2c 24 61 3a 76 6f 69 64 20 30 7d 29 2c 5b 32 5d 3a 61 28 7b 6d 6f Data Ascii: \|\|void 0===w?0:w.loading)P=15;else{const V=t.HB;V&&(P=__c.JU[V])}return KU(A,{loading:void 0!==O?O:P===z,disabled:void 0!==M?M:!!P,onClick:U,variant:D})})};c={[1]:a({mode:1,Bd:wfa,onClick:c,$a:void 0}),[5]:a({mode:5,Bd:xfa,onClick:c,$a:void 0}),[2]:a({mo
2024-03-27 20:20:22 UTC	510	IN	Data Raw: 68 2c 65 3d 61 2e 78 66 2c 66 3d 61 2e 4e 6c 2c 67 3d 61 2e 50 62 2c 6b 3d 61 2e 79 61 2c 6c 3d 61 2e 61 63 2c 6d 3d 61 2e 55 75 2c 71 3d 61 2e 56 75 2c 72 3d 28 64 65 6c 65 74 65 20 62 2e 72 67 2c 64 65 6c 65 74 65 20 62 2e 50 61 2c 64 65 6c 65 74 65 20 62 2e 50 68 2c 64 65 6c 65 74 65 20 62 2e 78 66 2c 64 65 6c 65 74 65 20 62 2e 4e 6c 2c 64 65 6c 65 74 65 20 62 2e 56 65 2c 64 65 6c 65 74 65 20 62 2e 50 62 2c 64 65 6c 65 74 65 20 62 2e 6c 6b 2c 64 65 6c 65 74 65 20 62 2e 79 61 2c 64 65 6c 65 74 65 20 62 2e 61 63 2c 64 65 6c 65 74 65 20 62 2e 55 75 2c 64 65 6c 65 74 65 20 62 2e 56 75 2c 62 29 3b 63 6f 6e 73 74 20 74 3d 61 73 79 6e 63 28 29 3d 3e 72 2e 49 68 3f 28 72 2e 24 45 28 29 2c 72 2e 49 68 28 29 29 3a 72 2e 4c 2c 77 3d 61 73 79 6e 63 20 43 3d 3e 28 Data Ascii: h,e=a.xf,f=a.Nl,g=a.Pb,k=a.ya,l=a.ac,m=a.Uu,q=a.Vu,r=(delete b.rg,delete b.Pa,delete b.Ph,delete b.xf,delete b.Nl,delete b.Ve,delete b.Pb,delete b.lk,delete b.ya,delete b.ac,delete b.Uu,delete b.Vu,b);const t=async()=>r.Ih?(r.$E(),r.Ih()):r.L,w=async C=>(
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 52 4e 41 54 45 5f 46 4c 4f 57 5f 50 41 4e 45 4c 22 29 3b 72 65 74 75 72 6e 7b 64 6a 3a 61 73 79 6e 63 28 43 2c 44 2c 47 29 3d 3e 7b 47 3d 76 6f 69 64 20 30 3d 3d 3d 47 3f 21 30 3a 47 3b 76 61 72 20 4a 3b 65 2e 45 73 26 26 66 2e 75 41 28 65 29 3b 63 6f 6e 73 74 20 4d 3d 5f 5f 63 2e 50 55 5b 43 5d 3b 69 66 28 4d 29 7b 76 61 72 20 4f 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 76 6f 69 64 28 6e 75 6c 6c 3d 3d 3d 28 4a 3d 72 2e 4c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4a 3f 76 6f 69 64 20 30 3a 4a 2e 4d 47 28 22 53 55 47 47 45 53 54 5f 41 4c 54 45 52 4e 41 54 45 5f 46 4c 4f 57 5f 50 41 4e 45 4c 22 29 29 3b 61 77 61 69 74 20 4c 66 61 28 7b 49 37 3a 5f 5f 63 2e 44 55 28 67 2c 63 2c 4d 2c 44 2c 21 21 72 2e 75 63 29 2c 79 61 3a 6b 2c 61 63 3a 6c 2c 50 35 3a 77 2c 4a 35 3a Data Ascii: RNATE_FLOW_PANEL");return{dj:async(C,D,G)=>{G=void 0===G?!0:G;var J;e.Es&&f.uA(e);const M=__c.PU[C];if(M){var O=Date.now();void(null===(J=r.L)\|\|void 0===J?void 0:J.MG("SUGGEST_ALTERNATE_FLOW_PANEL"));await Lfa({I7:__c.DU(g,c,M,D,!!r.uc),ya:k,ac:l,P5:w,J5:
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 61 73 65 20 22 70 68 6f 6e 65 22 3a 72 65 74 75 72 6e 20 49 28 22 6c 50 5a 52 5a 51 22 29 3b 63 61 73 65 20 22 71 71 22 3a 72 65 74 75 72 6e 20 49 28 22 79 45 30 44 4d 77 22 29 3b 63 61 73 65 20 22 77 65 63 68 61 74 22 3a 72 65 74 75 72 6e 20 49 28 22 66 45 6f 77 70 77 22 29 3b 63 61 73 65 20 22 77 65 69 62 6f 22 3a 72 65 74 75 72 6e 20 49 28 22 4d 71 6f 50 69 41 22 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 68 28 61 29 3b 7d 7d 3b 0a 5f 5f 63 2e 52 55 3d 66 75 6e 63 74 69 6f 6e 28 7b 75 62 3a 61 2c 54 3a 62 7d 29 7b 72 65 74 75 72 6e 28 7b 6c 6f 63 61 74 69 6f 6e 3a 63 2c 6d 65 73 73 61 67 65 3a 64 2c 62 7a 3a 65 7d 29 3d 3e 7b 47 55 28 28 29 3d 3e 7b 76 61 72 20 66 3d 52 65 67 45 78 70 28 22 5b 61 2d 66 30 2d 39 5d 7b 31 36 7d 22 29 3b Data Ascii: ase "phone":return I("lPZRZQ");case "qq":return I("yE0DMw");case "wechat":return I("fEowpw");case "weibo":return I("MqoPiA");default:throw new h(a);}};__c.RU=function({ub:a,T:b}){return({location:c,message:d,bz:e})=>{GU(()=>{var f=RegExp("[a-f0-9]{16}");
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 6f 72 6d 3a 22 57 45 43 48 41 54 22 7d 29 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 31 3a 73 77 69 74 63 68 28 66 3d 66 2e 50 7a 2e 7a 49 2c 66 2e 74 79 70 65 29 7b 63 61 73 65 20 22 49 44 5f 54 4f 4b 45 4e 22 3a 66 3d 6e 65 77 20 5f 5f 63 2e 64 41 28 7b 74 6f 6b 65 6e 3a 66 2e 73 45 2c 70 6c 61 74 66 6f 72 6d 3a 62 7d 29 3b 0a 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 4c 49 4e 4b 5f 54 4f 4b 45 4e 22 3a 66 3d 6e 65 77 20 5f 5f 63 2e 66 41 28 7b 74 6f 6b 65 6e 3a 66 2e 74 44 7d 29 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 68 28 66 29 3b 7d 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 68 28 66 29 3b 7d 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 77 28 7b 73 74 6f 72 65 3a 61 2c 69 68 3a 62 2c 63 72 65 64 65 6e Data Ascii: orm:"WECHAT"});break a;case 1:switch(f=f.Pz.zI,f.type){case "ID_TOKEN":f=new __c.dA({token:f.sE,platform:b});break a;case "LINK_TOKEN":f=new __c.fA({token:f.tD});break a;default:throw new h(f);}default:throw new h(f);}}return this.Ow({store:a,ih:b,creden
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 62 6c 65 3b 5f 5f 63 2e 68 56 3d 66 56 2e 63 6f 6d 70 75 74 65 64 3b 5f 5f 63 2e 69 56 3d 66 56 2e 61 63 74 69 6f 6e 3b 76 61 72 20 6a 56 2c 56 66 61 3b 6a 56 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 56 66 61 3d 6a 56 28 32 39 34 31 38 34 29 3b 6b 56 3d 5f 5f 63 2e 6b 56 3d 6a 56 2e 6e 5f 78 28 56 66 61 29 28 29 3b 5f 5f 63 2e 6c 56 3d 28 29 3d 3e 28 7b 49 63 3a 5f 5f 63 2e 57 28 32 29 2c 54 61 3a 5f 5f 63 2e 70 28 31 34 2c 5f 5f 63 2e 48 6b 29 2c 68 65 61 64 65 72 73 3a 28 30 2c 5f 5f 63 2e 4f 78 29 28 31 35 29 2c 58 6c 3a 5f 5f 63 2e 57 28 31 36 29 7d 29 3b 76 61 72 20 57 66 61 3d 5f 5f 63 2e 45 28 28 29 3d 3e 5b 31 2c 32 5d 29 3b 5f 5f 63 2e 6d 56 3d 5f 5f 63 2e 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c Data Ascii: ble;__c.hV=fV.computed;__c.iV=fV.action;var jV,Vfa;jV=__webpack_require__;Vfa=jV(294184);kV=__c.kV=jV.n_x(Vfa)();__c.lV=()=>({Ic:__c.W(2),Ta:__c.p(14,__c.Hk),headers:(0,__c.Ox)(15),Xl:__c.W(16)});var Wfa=__c.E(()=>[1,2]);__c.mV=__c.y(()=>Object.assign({},
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 31 5d 3a 22 61 70 70 6c 65 22 2c 5b 32 5d 3a 22 67 6f 6f 67 6c 65 22 2c 5b 33 5d 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 5b 34 5d 3a 22 6d 69 63 72 6f 73 6f 66 74 22 2c 5b 35 5d 3a 22 63 6c 65 76 65 72 22 2c 5b 36 5d 3a 22 6b 65 79 63 6c 6f 61 6b 22 2c 5b 37 5d 3a 22 71 71 22 2c 5b 38 5d 3a 22 77 65 63 68 61 74 22 2c 5b 39 5d 3a 22 77 65 63 68 61 74 5f 6d 69 6e 69 5f 61 70 70 22 2c 5b 31 30 5d 3a 22 77 65 69 62 6f 22 2c 5b 31 31 5d 3a 22 65 6d 61 69 6c 22 2c 5b 31 32 5d 3a 22 65 6d 61 69 6c 5f 77 6f 72 6b 22 2c 5b 31 33 5d 3a 22 65 6d 61 69 6c 5f 62 65 6c 61 6a 61 72 5f 69 64 22 2c 5b 31 34 5d 3a 22 65 6d 61 69 6c 5f 7a 70 65 22 2c 5b 31 35 5d 3a 22 70 68 6f 6e 65 22 2c 5b 31 36 5d 3a 22 70 68 6f 6e 65 5f 71 75 69 63 6b 5f 73 69 67 6e 75 70 22 2c 5b 31 37 5d Data Ascii: 1]:"apple",[2]:"google",[3]:"facebook",[4]:"microsoft",[5]:"clever",[6]:"keycloak",[7]:"qq",[8]:"wechat",[9]:"wechat_mini_app",[10]:"weibo",[11]:"email",[12]:"email_work",[13]:"email_belajar_id",[14]:"email_zpe",[15]:"phone",[16]:"phone_quick_signup",[17]
2024-03-27 20:20:22 UTC	1369	IN	Data Raw: 6d 61 6c 6c 3a 6e 56 2c 6d 65 64 69 75 6d 3a 6e 56 2c 4d 61 3a 6e 56 7d 29 3b 76 61 72 20 59 66 61 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 34 2e 35 37 31 20 36 2e 35 34 36 20 32 2e 35 33 20 31 31 2e 31 35 31 63 2d 31 2e 32 36 38 2e 34 38 35 2d 31 2e 32 39 20 32 2e 32 37 2d 2e 30 33 35 20 32 2e 37 38 38 4c 38 20 31 36 2e 32 30 36 76 34 2e 39 36 63 30 20 31 2e 34 33 2e 38 30 38 20 32 2e 37 33 38 20 32 2e 30 38 38 20 33 Data Ascii: mall:nV,medium:nV,Ma:nV});var Yfa='<svg width="32" height="32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M14.571 6.546 2.53 11.151c-1.268.485-1.29 2.27-.035 2.788L8 16.206v4.96c0 1.43.808 2.738 2.088 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49925	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1289	OUT	GET /cdn-cgi/image/format=auto,w=264/9cf118fb-ed55-479b-ba72-7463abf6c920/docs_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1102	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 12533 Connection: close CF-Ray: 86b214ac8d4a208e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf67EmUq_pyUvm-V2yoviFuJ0Wul9FdNgUaancoXMGDQ:c3f11aca8d8f05fe36ba85b09750917a" Last-Modified: Wed, 15 Nov 2023 05:44:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+0 c=0+22 v=2024.3.2 l=12533 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(261;u=3;i=?0 1845;u=5;i=?0 5059;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNfKNArT9ET455auDdkUTt9ukn6JPZJOL2Ma%2BpYMPqQZaVW52Lxsy4HcXIzzSQFW4YuiLSzZXJBNaVnluMrq5thqddLfNXr1d3AAL%2Fye26SLtviqt3GSbhHRwgYEzJ9EAyzcFjCkAYDFPY1al8575Qp5SD4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	267	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 06 07 08 05 04 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f4 51 77 7f 32 49 11 24 44 91 12 44 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"6Qw2I$DD
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 12 44 49 11 24 44 91 12 44 51 45 2b 55 05 54 15 50 00 00 15 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 01 44 4b e4 88 92 22 48 89 22 24 88 92 22 48 89 22 24 88 92 22 48 89 22 24 88 92 22 48 89 22 22 17 80 00 00 00 0a 02 80 ad 54 2a 00 00 00 00 00 51 1a ae aa 82 aa 50 92 22 48 09 a0 26 80 9a 0a 26 80 9a 0a a6 80 9a 02 68 d4 aa 82 aa 50 92 22 48 0a 0b 6e 2b 91 59 9b 1c 64 ab 64 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 4c 94 63 2a 32 c3 d8 5d 11 a0 37 ff 00 33 ec 01 ad eb 85 2d 55 6e ce 3b be a7 c9 0c 55 fb a9 e7 c3 15 7d 47 8b 4b 1e d3 c0 8d 29 91 31 a8 ac c9 d8 ac 6b 66 58 c4 61 7e 3c c5 87 46 fc 59 9b 0b a6 4c 79 ab 09 8e 4b 33 86 0e be dc e1 83 2e b7 9b 14 77 1e 15 b3 7a 03 Data Ascii: DI$DDQE+UTPPUAUTPUAUTPDK"H"$"H"$"H"$"H""TQP"H&&hP"Hn+YddcLcLcLcLcLcLcLcLcLcLcLcLcLcLc2]73-Un;U}GK)1kfXa~<FYLyK3.wz
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: e5 64 1f 3d f4 c4 fe cf 6e 99 6d f9 2e df bb 1e f8 7d 75 fa 4a af 8e 1c 45 d8 f8 86 db e9 3e 6b e9 4e 77 d3 47 c1 03 a2 fb ec 78 98 b6 78 db 12 9a d6 ec a8 9b 15 ad 06 cc 6b b1 b0 da b3 eb a5 76 43 5d 52 a8 e9 ed bf 9a 6f 22 f3 66 ec d8 a8 12 ed d9 fa 63 a1 d9 7c 96 7e e8 1f 04 7e e1 f1 dc fa 26 5a bb 39 94 5c 1c 23 45 3b 2f 14 db dd 25 cd 7d 29 ce 7a 4b cb f5 10 3a 2c 57 09 dc 16 a4 60 d0 36 ba 06 32 e3 68 48 74 24 a8 e7 9f 63 73 ab 4d 1b 3d eb 45 79 f2 e6 fd 89 a4 b6 c7 b1 3c 77 d4 40 9a 05 29 21 04 c4 2b 20 00 1c 1c 3b 2f 14 db 7d 2c 73 9e 94 10 3a 10 00 00 00 00 00 00 00 00 00 00 ff c4 00 35 10 00 00 06 02 01 03 03 03 02 05 04 02 03 00 00 00 00 01 02 03 04 05 06 11 07 10 12 14 15 16 36 13 20 31 21 30 17 22 23 26 40 32 35 37 50 24 41 43 60 70 ff da 00 Data Ascii: d=nm.}uJE>kNwGxxkvC]Ro"fc\|~~&Z9\#E;/%})zK:,W`62hHt$csM=Ey<w@)!+ ;/},s:56 1!0"#&@257P$AC`p
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 8a ba c6 97 de d9 96 c4 88 71 25 eb c9 6d a6 99 41 36 d2 d8 61 c5 92 d6 6c b4 6a ee 33 21 f4 5a ee ee 1a 04 cb 44 ae e2 5b 0c b8 69 52 c6 86 86 ba f1 2f c9 66 74 7c ff 00 ae f8 d8 df f8 07 f7 e8 68 68 76 f5 e2 43 d6 4b 33 a4 85 7f e4 3e 3b 86 c1 7e e9 f4 3f b4 88 68 68 68 68 c6 ba f1 17 eb 93 4b 2e 92 55 a9 32 07 70 d8 23 04 63 60 8f f7 f4 35 d3 43 40 8b f5 1a 1a eb c4 3f ae 4f 2f a4 88 33 57 26 42 91 e9 d6 03 d3 e7 82 af 9e 0a 04 e0 50 67 0f 06 68 f0 66 8f 0a 60 f0 a6 0f 0a 60 f0 a6 0f 0a 60 f0 a6 0f 0a 60 f0 66 0f 06 68 f0 26 8f 02 68 f4 f9 a0 a0 4c 1e 04 c1 e0 4c 05 06 58 28 52 c7 85 24 78 72 47 87 24 78 92 7a f1 1f c9 66 7f 8d b4 8d 90 fa ad fe 06 c1 28 86 cb ee e2 2f 92 cc ff 00 16 d6 e6 be 9a 3a a4 4e b1 e4 7b 6b 17 54 c5 14 c6 b2 19 2d aa 45 b4 58 Data Ascii: q%mA6alj3!ZD[iR/ft\|hhvCK3>;~?hhhhK.U2p#c`5C@?O/3W&BPghf````fh&hLLX(R$xrG$xzf(/:N{kT-EX
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 10 5a 45 fe 33 02 f1 1b 76 eb 09 b4 84 4b 35 bb 54 e9 2c bb 59 a9 98 93 22 52 6a 5e 59 b9 df 4d 84 ce 96 a4 ad ba 3c 66 15 39 13 84 84 98 6d 01 b4 f5 e1 af 95 4b eb 69 6b 16 a1 96 14 f4 6c 8a 04 99 31 a2 a9 d9 4a 43 bd 87 f5 de 0e 4a 5b 48 5b 8b 44 97 16 94 a9 2e 4c 5b 2d ad c7 15 34 d0 a6 90 b7 66 29 96 d6 e3 a9 90 ea 88 8c be bb c3 eb bc 1b 75 b7 2d d1 11 67 0a 18 4a 10 84 92 52 61 44 16 80 b4 05 23 46 25 55 c0 97 bf 20 f1 8a 2d ec 47 aa af 8a 7b 8e 48 30 94 04 20 21 01 09 eb c3 9f 27 9b d7 27 fa cd 3d 8e cb 6d d9 cb b5 b6 c7 0d 9c 85 b9 89 9f 49 32 3c 98 79 63 b6 96 b2 50 fd 56 51 22 aa 64 59 0f d5 65 c6 bb 42 6a e2 96 e7 c8 9b 1e 0d 95 7d ed 6b 36 4a 8d 5d 16 e5 ca 7b f2 6e 7d 0d ec a6 a7 24 8a a2 ed 51 65 b9 18 e1 64 48 7a 0b 8c b1 fa 64 8c 8e 40 c9 Data Ascii: ZE3vK5T,Y"Rj^YM<f9mKikl1JCJ[H[D.L[-4f)u-gJRaD#F%U -G{H0 !''=mI2<ycPVQ"dYeBj}k6J]{n}$QedHzd@
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 87 69 89 0a 82 78 84 20 e0 56 d1 85 2e a7 f6 e3 b5 70 c4 46 0f 24 ec 5a 0e c9 ed c3 35 a8 eb 71 90 30 3b 75 56 d4 81 af a5 05 cc 0e 19 b0 4f d9 cf 21 52 3f a3 dc 97 8d a2 63 c1 25 41 90 47 76 2b ed d9 c5 ff 00 d8 ae a8 63 1d ca 3d 6f b8 49 e7 5e 8f 78 f4 fc 3a e7 fc 33 56 89 71 12 59 33 aa 3f 20 da d4 66 b6 05 b7 fd 55 b2 21 86 78 91 0a 3a e7 23 2e 05 76 db d7 df 6e 7f fd f4 f6 db f9 05 72 df 5a ea fc b3 57 26 38 d6 45 df e2 64 8c 96 23 2b 90 f5 7a c5 58 10 41 bb 87 91 a8 23 86 ca 1b 19 f5 b2 cc 92 1e 59 e4 b4 9e 8e a7 2f a2 20 a0 85 f7 a4 91 eb 6f 66 2b 78 1e 63 13 4c d3 12 50 72 ea 15 f7 58 fc f4 01 56 db 11 86 1d a0 ba d7 6d 28 2a 76 d9 c8 ff 00 e5 ae d1 5f 14 9f cc d5 0c 6d 12 5b ac 6e 5e 40 87 21 c9 ae a0 07 77 ad f7 09 3c eb d1 ef 1e 9f 87 5c ff 00 Data Ascii: ix V.pF$Z5q0;uVO!R?c%AGv+c=oI^x:3VqY3? fU!x:#.vnrZW&8Ed#+zXA#Y/ of+xcLPrXVm(*v_m[n^@!w<\
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: e1 81 57 2c 23 64 0d 27 1e 64 8e 42 82 86 92 16 03 0b 83 cb af 15 19 51 66 f2 40 58 f2 73 9d 7a 87 8b a0 7b 61 4b 27 ea 5a 3e d5 a4 b8 5f d1 27 11 ea 7c 3a 5f 3a 7d 4f 91 12 31 1f 89 60 b5 d4 00 ee e8 40 cb 24 6e 85 7b 43 0c 62 90 83 21 2a 70 0f f4 a0 e9 0a d8 a9 ec 61 89 13 49 90 18 d0 be 9f d4 69 0a cf a9 a2 8c 9e 0c c0 0e 75 a7 7e 10 c9 2e 3d f9 0e ae 9e 46 33 c3 f4 3f a9 f0 d9 7c e9 d3 24 ab 0d c6 d2 d1 30 8e 46 8c b2 88 64 7c 65 08 3c c5 35 ca 6f ef 65 8a 50 f7 32 ca ae a2 dd db 94 8c 47 31 53 47 15 ed d5 c0 86 dd 9e 33 2a 82 a0 c8 c5 95 78 91 85 c5 59 47 e8 e2 ce da 79 65 9a 60 85 0d d2 16 50 89 8f 68 a9 18 35 b3 12 79 26 b4 b8 99 cc 92 ee 4f fa 1c 4a f2 12 80 12 85 c9 f6 56 b6 46 b8 37 cf 6b 19 33 62 57 b8 5b 7f 48 c6 9c 70 42 38 66 a0 31 b2 3a c9 Data Ascii: W,#d'dBQf@Xsz{aK'Z>_'\|:_:}O1`@$n{Cb!paIiu~.=F3?\|$0Fd\|e<5oeP2G1SG3xYGye`Ph5y&OJVF7k3bW[HpB8f1:
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 8e a1 eb 7c 3a 4f 3a 74 89 4e fa 51 14 6b 14 6d 2b bb 90 4e 15 53 27 90 ab 7b e8 25 9c b2 c3 e9 16 92 42 ae ca a5 c8 0c c3 19 c0 a9 40 2c c4 28 e1 93 8e 3c 29 ea 60 88 8a 59 98 e0 05 03 89 26 a4 05 58 02 08 c1 04 1a 94 2a 20 2c ec d8 0a 00 e6 49 3c 80 a9 d5 5a 52 44 60 90 0b 10 32 42 8e ba 99 52 34 05 99 db 0a 14 0e 24 92 79 0a 7c 82 38 11 4d 4d 56 b1 30 7b 73 31 62 a3 39 d5 a6 ad 62 f0 0a 50 14 72 03 80 1e b5 94 12 fe 2e 80 9a d9 30 78 6a c6 08 cf 6a a0 07 e6 3e 1b 2f 9d 3a 6d 2e 27 8e d7 68 19 66 10 46 64 70 86 19 13 3a 47 13 c5 ab 65 ed 18 d6 da f2 49 a6 92 7b 57 85 15 4c 0e 9c df f1 35 b3 e7 bb 5b 5b a9 da 54 84 c6 1c 2b c2 c8 08 de 32 0e 66 96 ec 06 13 35 bc 41 d5 23 31 34 20 24 45 84 be cb 2b f6 2f 3e ba b3 da 52 c6 f0 6d 38 ad e3 8e e1 22 60 f3 28 Data Ascii: \|:O:tNQkm+NS'{%B@,(<)`Y&X* ,I<ZRD`2BR4$y\|8MMV0{s1b9bPr.0xjj>/:m.'hfFdp:GeI{WL5[[T+2f5A#14 $E+/>Rm8"`(
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: ea 1a 95 b1 f7 fb a8 5f 40 7d ee ea 17 51 1e 9a 13 21 a0 c0 ee ea bc ed bb 2b 45 c0 a7 92 a4 92 9e 4a 79 29 9e b6 eb 6a 95 a9 1a 91 a9 1a 90 d2 1a 1b 9a a7 3b 6e ca d3 c9 e9 37 c6 9e 5a 92 4a 79 29 d8 83 c6 28 96 e8 34 49 1c a2 83 52 b5 21 a4 35 1d 25 25 0e 4d cd 53 9d b7 65 6a 59 3d 26 f8 9a 86 4f d2 20 fe 22 ff 00 7a d7 b4 ad 42 ea fd e4 82 d8 b2 6c 28 ce 40 a3 67 73 63 e4 ed fa dc 45 b0 e6 65 23 90 f1 64 57 94 ef 3a 5d d9 6f 86 32 44 0a c3 65 71 5e 4f eb 97 9a 8d d4 b0 ce b1 ec a4 25 86 17 1c 62 84 d7 da f4 13 f0 a9 a1 82 ce 07 cb 4b b1 c7 91 ec 15 73 a3 42 2d 1e ee c6 f8 5c c5 19 02 4e 2d 82 b9 a8 f4 3b 24 de 62 9f 57 45 9e 4c 61 11 76 c0 26 ad b4 29 5e f6 ee d1 e5 0a d0 a6 d0 20 64 1a 87 44 8a 68 64 de 2f 92 49 a3 1e 92 01 81 df 49 a5 44 d6 f2 3c 17 Data Ascii: _@}Q!+EJy)j;n7ZJy)(4IR!5%%MSejY=&O "zBl(@gscEe#dW:]o2Deq^O%bKsB-\N-;$bWELav&)^ dDhd/IID<
2024-03-27 20:20:23 UTC	1314	IN	Data Raw: 65 b2 f1 2e ef a8 f4 8b d9 6c ac 4b bb ea 3d 22 f6 5b 2f 12 ee fa 8f 48 bd 96 cb c4 bb be a3 d2 2f 65 b2 f1 2e ef a8 f4 8b d9 6c ac 4b bb ea 3d 22 f6 5b 2f 12 ee fa 8f 48 bd 96 cb c4 bb be a3 d2 2f 65 b2 f1 2e ef a8 f4 8b d9 6c bc 4b bb ea 3d 22 f6 5b 2f 12 ee fa 8f 48 bd 96 cb c4 bb be a3 d2 2f 65 b2 f1 2e ef a8 f4 8b d9 6c ac 4b bb ea 3d 22 f6 e4 c8 a0 16 c1 01 d9 9a ef 31 df 95 81 dd 68 89 d6 84 d6 88 d6 8c 93 a7 36 64 f5 00 dd a9 eb 61 6e 2c 5e 49 f1 1a 76 ea 3f 24 f8 ad 2b 75 1f 92 7c 62 93 b2 4f 25 b6 a8 fb 24 ff 00 ca b2 c8 be 83 8f c5 91 30 a6 14 22 84 56 6a cd 4e 08 a3 47 1a 38 d4 91 23 8d 14 68 a3 4f 1a b2 c8 ce 83 8f c5 91 0b 70 4c 28 05 9d 33 35 ec 99 99 f7 b3 ae 6f 6b 2b 33 f5 a2 04 60 8e 35 20 23 04 60 88 16 62 b2 c8 de 84 8f c5 91 03 6e 65 Data Ascii: e.lK="[/H/e.lK="[/H/e.lK="[/H/e.lK="1h6dan,^Iv?$+u\|bO%$0"VjNG8#hOpL(35ok+3`5 #`bne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49926	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1296	OUT	GET /cdn-cgi/image/format=auto,w=264/ca5de8c1-746f-4ed5-9581-5830c5b1d3f0/whiteboards_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1104	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 11587 Connection: close CF-Ray: 86b214ac8afd72ef-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfvw5CIudjXLvAiUES2Y9r1hAMul9FdNgUaancoXMGDQ:519d277d1df6444a8e1e4f9d6dfd5b8d" Last-Modified: Wed, 22 Nov 2023 04:54:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=20+0 c=1+18 v=2024.3.2 l=11587 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(261;u=3;i=?0 1698;u=5;i=?0 5166;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8hWFcNz%2FKFC88X9aiF9r9lu8JzLMc%2BZIsE22GcaQsU4srCnVnJXvs1xv0RG95LwPQBGu1GNqX2Odh%2FpjIrPdORXQCkjmit2Ob9kiYt0zHmx1nfoiLpEysoqfYWN5aFLRmqAHH1lhaaU8ha3SC5Xwv2VwDY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	265	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 12 01 ff c4 00 36 00 01 00 03 00 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 07 05 06 08 04 03 09 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 05 06 04 03 02 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d0 55 9a 5f cf d2 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"6U_
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 17 50 2e a0 5d 40 ba 81 75 02 ea 05 d4 0b a8 17 50 2e a0 5d 40 ba 81 75 02 ea 05 d4 0b a8 15 54 2c a8 59 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2c a8 59 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2a a8 59 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2c a8 59 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2c a8 55 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2c a8 59 50 b2 a1 65 42 ca 85 95 0b 2a 16 54 2c a8 59 50 aa a1 65 52 59 51 36 54 89 b2 a4 4d 95 22 6c a9 13 65 48 9b 2a 44 d9 52 26 ca 91 36 54 89 b2 a4 4d 95 22 6c a9 13 65 48 9b 2a 44 d1 52 1c fe e9 d1 74 bb 0d 1f 7c 25 d3 db 30 92 26 12 44 c0 44 92 44 a1 28 98 94 22 49 22 50 94 4c 4a 11 32 89 44 a1 28 98 91 13 12 84 4c a0 89 f2 d2 aa 6f cf da fe 93 9a 69 76 7b 22 25 ed dc 89 89 10 7e 3f 09 fd bf 1e a7 89 64 56 be 92 fa f3 1c ee be ba e3 Data Ascii: P.]@uP.]@uT,YPeBT,YPeBTYPeBT,YPeBT,UPeBT,YPeBT,YPeRYQ6TM"leHDR&6TM"leH*DRt\|%0&DDD("I"PLJ2D(Loiv{"%~?dV
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: fa 0f da 05 cd 52 62 60 26 00 07 86 45 37 e7 ef 40 ec c5 9e c9 03 db b8 90 00 01 96 f7 83 f3 fb d4 8a 5e 40 00 00 00 74 3d 50 fd 03 ed 22 ea a9 12 04 00 07 ff c4 00 42 10 00 01 02 02 03 0a 0b 06 06 02 03 01 00 00 00 00 01 02 03 00 04 05 11 12 13 14 20 21 30 31 33 51 72 b1 10 15 32 34 41 52 54 71 91 92 a2 55 61 73 81 82 c1 22 23 35 42 53 84 50 a1 06 44 80 d1 ff da 00 08 01 01 00 01 3f 02 ff 00 d1 d2 ec 97 d7 57 47 4c 21 a4 36 3f 02 04 7c b2 7f 28 f9 70 7c a3 e5 c3 f2 c1 f9 47 cb 87 e5 81 46 f2 5d ef 1f e0 68 de 43 bb 43 23 68 0c e6 2e 88 eb 40 20 f4 e5 4b 89 4e 73 8e 2f 94 6a 30 97 90 ae 9c 3a 37 90 ee d0 c3 26 a1 59 85 bc a2 0d 50 dc c5 28 ea ad 5e a8 4a 2b fd d9 e1 cb 76 17 60 02 aa b1 03 0d 4c 52 29 7d 08 7a 58 59 57 ee 47 44 21 ee b6 45 cb a0 21 49 f0 Data Ascii: Rb`&E7@^@t=P"B !013Qr24ARTqUas"#5BSPD?WGL!6?\|(p\|GF]hCC#h.@ KNs/j0:7&YP(^J+v`LR)}zXYWGD!E!I
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 28 e9 77 1c 98 6d 76 4d 94 9a c9 87 74 4a ee ca 51 3a 37 b6 86 ec 04 f3 99 ef 8b 94 1c f2 50 57 88 da af c2 2e 69 d5 17 34 ea 8b 9a 75 40 48 10 f6 89 59 4a 27 46 f6 d0 dd 80 9e 73 3d f1 72 83 9f 49 7d 7b b0 5e d1 ab 29 44 68 de da 1b b0 13 ce 67 be 2f db 28 39 f4 97 d7 bb 05 ed 1a bb b2 94 46 8d ed a1 bb 01 3c e6 7b e2 e5 07 3e 92 fa f7 60 bd a3 57 76 52 88 d1 bd b4 37 70 f4 42 79 cc f7 c5 fb 65 07 3e 92 fa f7 60 bd a2 3d d9 4a 23 46 f6 d0 dd 80 a7 43 53 53 96 92 bc 6e 62 a9 31 7d b7 d5 73 c8 62 fb 6f aa e7 90 c5 f6 df 55 cf 21 8b ed be ab 9e 43 17 db 7d 57 3c 86 2f b6 fa ae 79 0c 5f 6d f5 5c f2 18 be db ea b9 e4 31 7d b7 d5 73 c8 62 fb 6f aa e7 90 c5 f6 df 55 cf 21 86 5c 0e ce ca 94 a5 58 ad 67 4d 5d 18 2e 26 d2 08 8b dd 5a e2 f7 54 5e ea d7 17 ba b5 c5 Data Ascii: (wmvMtJQ:7PW.i4u@HYJ'Fs=rI}{^)Dhg/(9F<{>`WvR7pBye>`=J#FCSSnb1}sboU!C}W</y_m\1}sboU!\XgM].&ZT^
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 42 0f aa 87 2a a8 69 a6 d3 50 d5 d6 da 7c f5 84 5c 5d 7f 23 63 1a e3 58 9a 90 ed 8e 0b ab 95 d8 b1 b8 98 d5 7b 0a d6 31 a4 d2 c6 2d a2 b5 8f 5a 5d 0e 9e d4 d3 ed 2d c5 28 56 c2 7d 88 32 8c 27 08 5e 05 63 d0 9f 1d 1f 63 63 06 3a 2b a5 74 8e 35 c1 81 58 c6 8a c2 b0 bc 0a c6 04 2d 15 85 a2 e8 fb 1b 18 3d 18 98 18 c2 e8 c1 3d b4 30 43 0c 10 c3 04 30 6c 25 54 64 d8 1c a1 91 aa 29 17 8d 15 ac 7a 10 da 09 2a 9f 14 cf 9a 67 c9 33 e6 98 bf c6 c5 fe 36 2f f1 b2 8f fd 59 f3 4f 5f 81 b1 8d 1d ad db f6 c5 0a 25 8b dd c0 aa a6 a8 6e a4 2f 1a 27 c1 3c 17 d1 dc 7c 0d 8c 68 ed dc e3 c3 1a ee 0a c4 35 46 4a d2 69 63 d1 b5 ee 3e a6 c5 62 c7 a1 da dd ce 40 92 d9 0f 2e f7 16 d8 2b 0a c2 b5 8f 46 c6 3b 8f ad b1 8d 1b a5 b0 7d fc 76 d5 1e 93 6a d8 b1 b2 cf b6 83 a2 39 d0 e9 b0 Data Ascii: BiP\|\]#cX{1-Z]-(V}2'^ccc:+t5X-==0C0l%Td)zg36/YO_%n/'<\|h5FJic>b@.+F;}vj9
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: e5 e5 c3 8d b7 88 51 78 c3 6d 39 59 ef ab 5d 1b ed 9e f4 f2 22 5e 1b 8a 9d 73 e3 54 52 3e 31 c0 a4 7c 5c 5e 49 cf 8c 58 52 3b 81 48 ee 61 61 9d 6b e8 31 dd be db 6f 83 9c 14 7f 3f 2f 6f be 6d 4f 2a 37 ef ad 47 ee bd cc 3c 0c 80 f7 ec d7 9d c0 dd 8f 87 16 14 8e a4 a9 1d 53 92 3a eb bd af 78 ab 14 39 d5 9d 73 3a d5 9d 73 35 67 5c ea cb da 6e 29 40 86 b9 fb 0f 40 8b 0e e7 e9 fe 08 70 a6 3d 18 9f 9b b7 b3 e3 0b 2a 73 3a c5 42 91 c2 c2 91 9d 61 61 4e 7c 61 50 52 38 54 29 1c a1 28 e4 75 73 02 fe 4d 92 79 b9 a4 e4 f8 c4 3d 95 f9 2b 57 c1 b9 eb 20 3c ac dd df 2d 4e 1e fd ec 82 30 8e 5f 7e 30 66 a1 c0 f3 f7 ae 56 7b eb ee 38 c9 4e 48 e2 a7 24 f5 be 32 bc 06 d7 d9 ce 57 94 e6 75 96 3a e6 75 75 65 9c ce b2 b3 ae 67 5b b7 57 15 59 0e d7 36 25 09 29 3c ac d4 a2 a5 5f Data Ascii: Qxm9Y]"^sTR>1\|\^IXR;Haak1o?/omO7G<S:x9s:s5g\n)@@p=s:BaaN\|aPR8T)(usMy=+W <-N0_~0fV{8NH$2Wu:uueg[WY6%)<_
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 9f 93 e9 5d 72 d1 5e d3 f1 ab 2c f6 eb 25 72 cf ef 7c 7e 9f 49 84 42 4e 4c 2a dd 2e 42 7b 2d 85 59 81 29 fd 0f 9d ee 7e 17 ff 00 4d 71 09 fe 9e f8 39 8f b9 1f ed 39 94 f6 38 fc 9f 4a ba b9 4d 07 dd 2e e9 63 d7 59 79 31 b1 e3 7f 5b e1 f4 c5 ce 84 ff 00 b3 57 60 7a f0 e9 e0 19 7f 64 60 9c d7 e0 c0 37 5b 2a b8 9c 4a 78 b7 2c e6 46 7a 2f 19 21 c1 a0 00 60 e3 a1 25 fa 8b e0 2b d3 b5 2b b7 8d cc bd a7 59 b6 d7 56 6f 78 76 7f 4f a6 54 0a a1 9e 63 71 39 6f d2 f5 39 f3 e4 c8 d1 20 52 81 fb c0 26 07 44 d9 8b 11 48 73 c5 0b 34 68 73 d4 4c 07 d8 98 de 15 a0 29 d5 3b 57 5f 21 3c 3e 95 d7 2d a5 82 cd 59 66 e4 b1 b3 ad fd 6f 8f d4 53 dd de 15 52 99 06 9d 74 e2 74 85 f6 c2 94 cb ec b8 82 a3 3d f9 70 44 49 5f d4 9c ab 13 2e bc 2c f6 eb 2e 4c 6c 78 df d7 f8 fd 47 1a 58 fe Data Ascii: ]r^,%r\|~IBNL.B{-Y)~Mq998JM.cYy1[W`zd`7[Jx,Fz/!`%++YVoxvOTcq9o9 R&DHs4hsL);W_!<>-YfoSRtt=pDI_.,.LlxGX
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: c5 a6 d6 e0 42 a6 f3 8a 9d c6 ca 93 7b 78 3a 4a ef d8 05 9f cb 6a f4 b8 72 67 c2 69 96 99 65 e4 b6 a4 14 e3 20 2f 61 26 d4 bc b1 75 12 a2 c1 ad 34 86 5f 79 09 52 56 9e 80 9c 7b 02 c1 d8 4e a3 1b 96 f8 67 ca b3 56 ab 49 6e 91 4c 88 f3 d7 0c 6f 68 c7 f5 00 9b 50 28 70 aa 6c d5 dc 9b 50 11 4c 56 4a d2 83 70 2a 57 03 6a 3d 06 25 46 97 58 9c f5 45 2c 2a 22 3f 0d 1d 17 ac da 85 4f af b0 17 59 87 09 c3 1a 3a 34 8e af 62 54 80 6e 20 5f b6 d1 de 44 86 19 79 06 f4 38 80 a1 c0 e7 af 3a 63 bf 19 c4 54 e6 32 e2 81 4a 59 61 9d 30 5d dd e2 eb 65 3a 6a 4f cf a2 b1 05 29 64 b6 d6 9b 0b 85 2c 8c 6b 37 12 41 36 a4 d0 e1 35 4e bd 74 f8 e8 7e 66 8c bc 96 fa 5b 2b 4f 70 b6 5f d3 60 53 24 39 2d 14 f7 a4 c8 7e e2 a7 d6 4e 89 a2 3a 2e b9 36 c9 f9 2e 4b a2 53 1f 73 ae b6 13 88 e7 Data Ascii: B{x:Jjrgie /a&u4_yRV{NgVInLohP(plPLVJpWj=%FXE,"?OY:4bTn _Dy8:cT2JYa0]e:jO)d,k7A65Nt~f[+Op_`S$9-~N:.6.KSs
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 70 72 a3 ff da 00 08 01 03 01 01 3f 00 ff 00 af 2c 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 c6 15 77 4c 61 57 74 e4 a3 cb 23 82 2f a9 37 51 3c 91 61 a8 45 86 a1 16 1a 84 58 6a 11 61 a8 45 86 a1 16 1a 84 58 6a 11 61 a8 45 86 a1 16 1a 84 58 6a 11 61 a8 45 86 a1 16 1a 86 4a 6f 24 94 bd b5 1d ff 00 e8 69 ba 0c be c3 bf 31 29 52 c8 09 17 85 b0 eb 62 eb 6d 43 3e 5e 9d 31 30 9c 42 c0 7b 61 f6 1c 97 59 43 83 61 cc a6 e8 32 fb 0e fc a9 49 5a 92 90 39 49 b4 3a 99 a9 43 2c d4 ab 09 5a 97 72 e2 8c 4e bb 3a db ac 06 98 4a d9 24 07 35 f2 c4 f4 b7 17 72 e9 1e 62 b9 b3 24 f8 12 f8 4b a3 cc 50 29 be a2 62 5a 53 14 e7 02 be 64 9b 9d 82 14 e0 6e 75 94 f6 54 da 87 c2 1f 6f 8f 4a Data Ascii: pr?,LaWtwLaWtwLaWtwLaWtwLaWtwLaWtwLaWtwLaWt#/7Q<aEXjaEXjaEXjaEJo$i1)RbmC>^10B{aYCa2IZ9I:C,ZrN:J$5rb$KP)bZSdnuToJ
2024-03-27 20:20:23 UTC	370	IN	Data Raw: ee 3f fe eb 8a 05 37 c9 fa d3 b3 28 55 2c b5 c1 21 2a e9 54 79 cc 79 5d 4c 92 a5 d4 d9 66 4d a2 86 d5 2e 95 91 72 79 49 23 3a 9b a0 cb ec 3b f3 66 7a 39 1f 75 6f 31 aa 6a dc a6 cd 54 14 bb 34 85 25 08 1d 6a 51 31 e4 8c dc b4 ab b3 e1 f9 84 b4 1c 69 21 24 fb 0c 79 6e eb 2f d4 e5 1c 61 c0 b6 cc a2 00 23 d8 a5 0c ea 6e 83 2f b0 ef cd 99 e8 e4 7d d5 b8 a6 79 20 e4 ec 83 53 8f 4e 06 42 d3 88 27 05 ec 23 f6 0b 5d 48 7c 91 fb 04 7e f2 1f 24 55 64 66 68 af 3f 20 a7 31 b4 e6 07 41 e6 06 d7 b6 4a 9f 47 4c f7 63 f9 8b ce a6 e8 32 fb 0e fc d9 ae 56 e4 7d d5 b8 5b ed b3 e4 d4 b8 5a ac 5c 93 4b 68 f6 a9 48 e4 10 89 e9 f9 97 9d 6d 13 8b 40 0f af 98 02 40 2a 42 6d cd d5 73 12 b5 3a 82 a6 1a 53 d3 69 09 33 0c a4 b4 3f 78 e2 fe 91 e5 dd b8 fc 97 82 7e ac 95 3e 8e 99 ee a7 Data Ascii: ?7(U,!Tyy]LfM.ryI#:;fz9uo1jT4%jQ1i!$yn/a#n/}y SNB'#]H\|~$Udfh? 1AJGLc2V}[Z\KhHm@@Bms:Si3?x~>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49923	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:22 UTC	1301	OUT	GET /cdn-cgi/image/format=auto,w=264/75d73709-81d8-4be7-baaa-ea27097f6212/presentations_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1104	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 15300 Connection: close CF-Ray: 86b214acadf92021-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfcf2miLlnvaJ0mMjkaeXnHsmIul9FdNgUaancoXMGDQ:7a570c43ce5efbb27fd979f86c895218" Last-Modified: Thu, 16 Nov 2023 00:50:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ram/h q=0 n=0+0 c=0+25 v=2024.3.2 l=15300 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(262;u=3;i=?0 2244;u=5;i=?0 6099;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98tWpFWVyUCMJql5Exz7HIIX1nptjBYC8hp2N1ybIdp9Gfi9%2FC3oBLU5O4pf5BEjqcuu0vsYDs6DGvwjlMys7OcqZ54i9ren%2BhKQYYFLl44FRD4lhcYClFXOGrVaqg0GHGpmHmP%2BUnxBYQFRFbGJBjDaho0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 12 01 ff c4 00 37 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 06 07 03 05 08 04 09 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 04 05 07 03 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e9 41 0e 74 cf 2a 20 44 a8 81 12 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"7At* D
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: a6 d5 96 9d 4f 81 bc 9a 87 75 1b b6 d4 7a 86 1e 87 d3 37 9d fa fb 21 d1 76 07 bb 37 bb 1e 82 19 93 71 b9 9d e6 96 2a 6c 3d 5e 9b 5d 5c 1f 55 74 f3 e6 13 5e 8f db bd 9c 60 f5 de 27 d7 1e bb 21 98 ae 2a 30 0d 57 40 d6 b6 6d 4f d2 6a 6e 78 10 da b1 0c d3 f4 54 4f 66 ce 87 cc de 1b ce 15 8c e1 97 05 37 a7 ae 16 4f 4e 63 7e 24 2d 49 b4 e5 3e ac e5 3e 8e a9 34 0a c9 74 cc 7a a3 ea 1d 45 6e d3 b8 5b e8 ac a5 be 2f 4a 17 4d 9e 8d af e2 7a 5d c7 38 7a b7 7c d5 e2 d5 31 c7 69 b9 ae e5 f8 fa 6d ce c3 59 e0 d1 4e a7 65 6f d0 5e c8 d6 66 06 d2 ff 00 f0 55 bb 5c 85 06 49 b4 ef 9a 25 54 5a 6c b8 a2 10 24 f0 57 6c b3 f7 55 6c 6f d9 39 a6 fe 83 d4 f3 5f 75 36 8d 15 1d ba 97 f8 e1 6e eb 92 6e 4e ab 71 d2 cc 7e 3e 76 bb 3b 4e 54 ea be 54 e9 4a 65 04 20 c7 aa 3e a8 55 f6 84 Data Ascii: Ouz7!v7ql=^]\Ut^`'!0W@mOjnxTOf7ONc~$-I>>4tzEn[/JMz]8z\|1imYNeo^fU\I%TZl$WlUlo9_u6nnNq~>v;NTTJe >U
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 50 f0 aa a1 e1 35 43 c2 6a 47 84 55 0f 08 aa 1e 11 52 3c 22 a0 78 3d 40 f0 7a 81 e1 15 03 c1 a9 c7 83 53 8f 06 a7 1e 0d 4e 3c 16 9c 78 2d 38 f0 5a 61 e0 b4 a3 c1 69 87 82 d3 0f 04 a5 1e 09 4a 0c fe 40 c5 6f d7 58 f6 8d fc e2 b0 52 4f 62 34 76 09 4f a9 0b 92 f2 90 c7 d0 64 5f 5f a6 8c e2 ee 36 72 dc 87 da 68 4d cc 5b 86 ad 1f c4 06 87 9f da 07 d4 26 48 2b a9 2c a4 2f aa 2c 24 2f ab 2c 24 1f 57 99 10 fa 96 b9 7f d4 3c fc 80 de 74 4e a8 c9 32 7a 9a 51 8c c4 4e a8 45 96 a3 6c 9f ea 43 6c 2c 92 65 d4 c6 c3 9d 52 42 04 7e aa c7 79 e2 69 7e 7e 40 f3 f2 07 9f 90 3c fc 81 e7 e6 c7 9f 9b 1e 7e 6f dc 62 b7 eb ac 7b 46 fe 71 59 ee 2f 52 0c fd 06 46 7f eb 54 29 e0 c8 9d 31 b2 65 ec 76 be 41 7e ed fe 36 ed 53 47 2a 39 c8 0b 92 1c 93 ea 1c 7f 61 96 24 4b 5f 06 a1 53 34 Data Ascii: P5CjGUR<"x=@zSN<x-8ZaiJ@oXROb4vOd__6rhM[&H+,/,$/,$W<tN2zQNElCl,eRB~yi~~@<~ob{FqY/RFT)1evA~6SG*9a$K_S4
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 5f 3c 67 a7 b0 9b 97 fe 6b 5f 4f ad 01 f4 fa d8 bf da 60 c5 3f dc b8 3d a3 7f 38 ac 10 ab 9d 9a 4a 52 5d 69 4c be e3 4a 67 e8 32 3a 9e 7a f0 60 f3 9f 33 18 d5 64 a9 f2 1e 79 87 59 76 3b 8b 69 e7 ab a7 c7 61 0f bd 16 0c c9 c6 b2 8b 88 4b 81 06 15 8b 32 e8 68 0e ee d0 f9 df e3 12 a2 5a 3e cd 76 1b 5e e2 32 46 99 9b 93 d4 bd 27 26 9a c4 29 b4 b3 6b 08 95 35 c7 62 b5 ea 76 91 89 69 4b 6d 53 e4 52 9a ed 43 84 b6 d6 a4 2a 25 7c fb 03 e3 16 6d 35 c4 06 cd c9 64 5c b8 90 63 1c c8 64 b4 4b 6a 54 69 10 9c 36 64 f8 7c eb 25 1b 10 2d 31 9e a4 d5 b4 6e 9c bc 87 28 80 7f ca 2c ee c3 fc 96 79 2f d0 cf d0 18 a7 fb 97 07 b4 7f e7 15 82 25 dc e8 31 d8 62 32 d6 b7 5d 53 8b 67 e8 32 3a a8 7a f0 40 e1 9a 8c 88 b0 77 4a 9e d6 a1 a3 ca a9 ce 46 61 15 84 64 2c 46 b3 a7 b8 af 67 Data Ascii: _<gk_O`?=8JR]iLJg2:z`3dyYv;iaK2hZ>v^2F'&)k5bviKmSRC*%\|m5d\cdKjTi6d\|%-1n(,y/%1b2]Sg2:z@wJFad,Fg
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: fb d6 ab fb 92 59 29 0c 3a c9 b9 4d 3d 2e 70 10 ea 64 c4 6d f7 de 97 b5 2d 46 22 fe dc a8 cb 16 89 f9 a8 3a 83 d9 86 9d 29 11 5b 51 c8 6b 4a 31 5f 23 bb b8 68 54 b6 89 e4 6c 96 d7 13 31 15 e5 b0 a0 6a 6e 42 08 18 31 43 f7 8e 8f 68 ff 00 ce ab 7d c5 ea 41 95 7e cb 22 e2 92 25 d1 c7 37 fc 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 3c 8f 54 15 82 d4 ad 2a 49 af a4 38 da fe 66 5d 1d c6 43 fd 26 c7 5f d9 ac fa 31 8c 1f ab 3d 21 c7 19 41 a1 2b e8 f6 34 e7 af c1 7c 60 27 a4 98 f2 52 44 17 d1 cc 65 7e bf 06 71 90 df 48 31 c6 cf 64 60 cc 50 7d eb a3 da 2e 34 97 b3 8a e5 35 dc 27 82 81 3f 64 19 51 f6 2c 8e 46 39 18 e4 63 91 8e 46 39 18 e4 63 91 8e 46 39 18 e4 63 91 8e 46 39 18 e4 63 91 8e 46 39 18 e4 63 Data Ascii: Y):M=.pdm-F":)[QkJ1_#hTl1jnB1Ch}A~"%7T<T<T<T<T<T<T<T<T<T<T<T<T*I8f]C&_1=!A+4\|`'RDe~qH1d`P}.45'?dQ,F9cF9cF9cF9cF9c
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: d3 8f 0a c1 dd 1d f5 13 30 f0 ac 2d dd 28 ee 58 5b ba 51 dc b0 b7 74 a3 b9 61 6e e9 47 72 c2 dd d2 8e e5 85 bb a5 1d cb 0b 77 4a 3b b8 79 33 da 17 a9 a1 f8 d2 70 6f 0b 93 67 62 fb ef 95 1b 08 c8 7b dc 75 00 b8 c7 1d f9 ac a4 74 94 e3 ce 04 79 4c 07 6f b4 70 94 53 0b 8a b4 8f dd b0 70 eb 39 47 00 d8 47 3f d1 3f 58 c1 ce 3e c7 93 3d ab d4 d0 fc 69 10 89 e2 49 0b 03 33 f9 40 b4 5c dd 34 b5 cd 75 9c 08 b1 04 1b 10 57 26 ce c5 f7 df 2a 0f e3 4d 6c 2c a8 7c 66 cf 64 25 c0 3a c5 63 e1 d8 0e 35 5d 42 6b 68 22 9c fd 5b 59 a6 56 bd 97 bb 33 29 e5 9f 07 a2 22 4a 5e 30 97 88 84 f7 70 63 49 d8 58 51 e0 04 9d c1 1c ad f4 46 b2 a3 0d 68 d8 38 01 24 ea 01 5c 11 af 42 91 a6 eb 52 f4 82 df f4 0d 8b 4d d7 e2 37 1f b0 e4 cf 6a f5 34 3f 1a 45 46 c7 39 ae 71 e3 33 10 46 67 66 Data Ascii: 0-(X[QtanGrwJ;y3pogb{utyLopSp9GG??X>=iI3@\4uW&*Ml,\|fd%:c5]Bkh"[YV3)"J^0pcIXQFh8$\BRM7j4?EF9q3Fgf
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: b9 f9 58 2c d1 73 a8 29 9b 1b ce d2 2e 16 3f 03 3d d1 90 b1 f8 8e e0 43 82 c5 29 8f bc 3d 57 52 1f c5 dd dc 3c 91 ed 0b d4 d0 fc 59 14 d0 c4 c6 c9 1c 65 f2 ba de 54 97 ca 00 17 24 9b 22 09 8e 47 30 91 a8 96 9b 2e 4d 9d 8b ef fe 5e 0a 79 26 30 b2 e0 30 5f 49 d0 a3 31 c8 c3 67 b5 c2 c4 7b d5 1c b1 c4 eb 65 7b 9a 40 37 d2 15 2c 93 16 8b b8 31 b9 ac 0a c2 e6 7c c2 62 d7 96 c0 65 be 8b 65 36 bd 88 54 d3 c5 40 f7 4a 43 d8 2c 1b 6d 4d ba c3 6a 64 a6 6b 23 ca f0 0b ee 72 e9 d2 a9 08 b4 12 de 39 5b b7 2f b5 53 e6 d0 c2 d6 44 dd 43 20 d8 35 2a 59 a1 04 d8 17 b6 c1 38 7e 25 59 cf 2e b3 5a d1 72 49 dc 02 c0 2b 5b 10 17 cc e8 f2 8e 6d 69 a5 ae 69 b1 69 16 21 51 cd 39 1a f2 36 e0 2c 2e a6 26 5b ce 7b 74 0f c4 23 bb 9d 61 15 2f 66 f0 cd 7c ea 19 22 7d b4 b6 46 91 da 8c Data Ascii: X,s).?=C)=WR<YeT$"G0.M^y&00_I1g{e{@7,1\|bee6T@JC,mMjdk#r9[/SDC 5*Y8~%Y.ZrI+[miii!Q96,.&[{t#a/f\|"}F
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 7e 2c 8a 86 96 4b 38 bb 34 91 97 38 dc 83 62 6e 37 20 05 dd 7b 0d 42 e7 50 5c 9b 3b 17 df 7c bf 65 ac 35 1d 47 42 17 73 88 68 f7 95 a9 8d cb de 51 d2 4a ff 00 c7 0b 59 f8 d9 6f 71 ea 5b d6 b8 e5 77 31 d2 8d 9c c7 87 05 a5 b2 31 1b 39 8e e7 f6 21 70 e1 67 34 ec 28 79 07 48 28 de 3b e9 67 72 20 ef 61 d7 c3 c9 1e d0 bd 4d 0f c5 93 83 78 5c 9b 3b 17 df 7c bf 65 a8 82 0a 95 b9 7d ba d4 a1 c5 83 40 03 6a 3a 10 d1 c6 82 7d cd d2 b6 95 fd 7d 9c 07 43 99 98 7f f9 5b 42 3f d6 cf f2 10 f6 14 4e 53 a1 ed de 15 8b 5c 34 21 a1 38 b5 c3 68 e1 e4 8f 68 5e a6 87 e2 c9 c1 bc 2e 4d 9d 8b ef be 5f b6 1e 6c 6f 3d 56 e0 f4 c8 e7 05 6f 46 c3 35 9d ee 2b 58 5a 1c d3 70 51 d0 e6 f5 a0 b4 c6 75 84 41 07 51 43 87 92 3d a1 7a 9a 1f 8b 27 06 f0 b9 36 76 2f be f9 7e d3 f8 c5 af b8 aa Data Ascii: ~,K848bn7 {BP\;\|e5GBshQJYoq[w119!pg4(yH(;gr aMx\;\|e}@j:}}C[B?NS\4!8hh^.M_lo=VoF5+XZpQuAQC=z'6v/~
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: ea 98 9a 3c 10 4a 7c af 7e b2 9a 2e e6 82 b8 a8 de 0e 69 20 a8 0d f3 a3 3a c5 c2 87 46 73 76 14 0d 94 ac 12 32 fe 51 f5 72 73 a3 5b ed 1d c1 8d 74 6d 47 bb fb 82 73 41 17 b6 8f a8 d8 5e 40 20 84 59 34 27 3c b4 db ca a4 b1 0d 9e 33 f9 82 24 71 81 c3 53 c7 03 5c a6 65 8d c6 a3 c1 70 ae b2 73 a3 5b ed 1f c1 8d 74 6d 47 bb fb 82 81 a1 d2 30 11 70 5c 14 c6 99 b8 8f d0 c6 1b 1b 98 4b 46 70 1a 6c 42 93 0a 68 35 2f 15 0d 64 51 cd c5 dd cb 92 88 92 5b d4 c7 c4 c7 6b cb eb 5c 9b 2b a4 a7 64 53 36 48 e5 be 64 83 45 ad ad 3d 82 9d 96 15 2c a8 f0 83 4b 2c 43 ae 51 c2 5a d9 5e c8 6a 99 c6 11 a6 03 f1 b5 d3 70 d2 60 8e 67 d4 36 28 cb dc d3 9c 3e ed 95 3e 19 18 ab 8e 39 a6 6b 98 e6 67 30 8b 8c f5 55 04 30 38 71 75 0d 92 e4 dc 00 74 27 c8 1e 33 00 24 9d 8a 9f 09 a9 9a ce Data Ascii: <J\|~.i :Fsv2Qrs[tmGsA^@ Y4'<3$qS\eps[tmG0p\KFplBh5/dQ[k\+dS6HdE=,K,CQZ^jp`g6(>>9kg0U08qut'3$
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 95 ff c4 00 45 11 00 01 03 02 02 05 06 0a 09 01 08 03 00 00 00 00 01 00 02 03 04 11 05 12 06 10 21 31 51 13 15 34 41 72 91 14 16 35 53 61 62 81 82 a2 b2 20 22 23 32 40 44 52 54 71 33 07 24 42 43 50 63 92 a1 60 b1 c1 ff da 00 08 01 03 01 01 3f 00 ff 00 c1 2c ac ac ac ac ac ac ac ac ac ac ac ac ac ac ac ad fe 87 65 65 65 65 65 65 65 65 65 65 65 65 65 65 65 65 6f f4 3b 7e 08 ab 8e 21 5c 71 0a e3 88 57 1c 42 b8 e2 15 c7 10 ae 38 85 71 c4 2b 8e 21 5c 71 0a e3 88 57 1c 42 b8 e2 15 c7 10 ae 38 8d 58 f6 25 0d 04 59 a7 9b 93 89 b6 2e 77 f2 86 97 60 47 f3 ff 00 09 43 4a f0 33 f9 ff 00 84 a1 a4 f8 31 fc ff 00 c2 50 d2 5c 23 f7 df 09 43 48 b0 93 f9 df 84 ae 7e c3 0e ea c3 dc 50 c7 30 e3 ba ac f7 14 31 9a 03 f9 93 dc 50 c5 a8 4f e6 4f 71 43 12 a3 3b aa 0f 71 43 10 a6 Data Ascii: E!1Q4Ar5Sab "#2@DRTq3$BCPc`?,eeeeeeeeeeeeeeeeo;~!\qWB8q+!\qWB8X%Y.w`GCJ31P\#CH~P01POOqC;qC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49924	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1294	OUT	GET /cdn-cgi/image/format=auto,w=264/d0e11c60-5f8b-4652-bcd0-33ee2be22093/videos_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1102	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 12707 Connection: close CF-Ray: 86b214acafff392b-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf7CfEkAq9M4K1igKmV2HCdFhTul9FdNgUaancoXMGDQ:9cb16cbb03fa8218a15ed9328f31104a" Last-Modified: Fri, 01 Dec 2023 06:21:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=41+0 c=0+18 v=2024.3.2 l=12707 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(261;u=3;i=?0 1695;u=5;i=?0 5263;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lx9atuPgQuUBYUjQUFZ4NzVjRDua2rBvGljryZf3J%2BTG7nrgjEImyQi8AUwHTjutjn3qz4szj20Bu2TcQ99ap0AVgVpOPFtfa6kv4%2B9ALuMDIHVDiGn5O3HDIKHaE2n6T0xaeowrECVWXCYG4XVms6AbG80%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	267	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 01 02 04 05 06 08 03 09 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 01 02 03 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f4 28 f5 1e ac 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"6(
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 5c b4 51 43 35 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 05 0c d5 41 55 05 54 a1 72 d1 72 d1 72 82 aa 0a a8 2a a0 aa 82 aa 0a a8 2a a0 aa 82 aa 50 b9 68 a2 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d1 72 d0 00 00 00 31 36 ce 5b 4c ea dc b4 c3 72 d3 0d cb 4c 37 2d 30 dc b4 c3 72 d3 0d cb 4c 37 2d 5e d3 40 73 c0 00 51 43 6a a8 2a a0 aa 9c b7 66 16 76 57 57 d3 ca f2 b6 f4 5f 1e 14 5a 37 d3 93 d5 d1 fc b6 1f 6e 9c b5 1f 2e 2b 8c 87 32 63 f9 45 dd 3f 68 dd 4c 39 d8 f9 c6 2c ce 83 b1 88 f5 35 17 3e e0 cf 80 bd 2f e8 7c e6 87 4f da d9 3f 7c 9c e8 ff 00 bf d3 df d5 44 4e b5 50 5a ea d0 e0 f2 8e ac 72 8e Data Ascii: \\\\\\\\\\\\\QC5PUAUTPUAUTPUAUTPUAUTAUTrrr*Phrrrrrrrrrrrrrrrr16[LrL7-0rL7-^@sQCjfvWW_Z7n.+2cE?hL9,5>/\|O?\|DNPZr
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 39 20 d1 94 2d 7d 08 00 00 00 00 00 00 00 00 00 00 00 07 ff c4 00 35 10 00 00 07 00 01 02 05 01 06 06 01 05 00 00 00 00 00 01 02 03 04 05 06 11 13 17 07 10 12 14 16 20 15 21 30 31 33 36 22 23 32 40 41 51 60 26 34 50 61 70 ff da 00 08 01 01 00 01 08 00 ff 00 e0 9c 8e 47 23 91 c8 e4 72 39 1c 8e 47 23 91 c8 e4 72 39 1c 8e 47 23 91 c8 e4 72 39 1c 8e 47 23 91 c8 e4 72 39 1c ff 00 c0 f9 1c 8e 47 23 91 cf d7 c8 e4 72 39 1c 8e 47 23 9f a3 91 c8 e4 72 39 1c 8e 7f e6 12 2c 20 c3 ff 00 b8 f9 15 18 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 15 10 f9 1d 10 f9 15 10 f9 15 10 f9 15 10 66 ee 9d f3 f4 b6 46 46 44 65 f8 9c f1 c9 89 56 b6 57 Data Ascii: 9 9 9 9 9 9 9 9 9 9 -}5 !0136"#2@AQ`&4PapG#r9G#r9G#r9G#r9G#r9G#r9, fFFDeVW
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 3a 24 c5 f0 f6 fa 3c c8 6c 38 c3 0b 25 b7 ea 0f fa 56 68 23 d6 fa 54 54 0b 49 fe 67 e5 07 f5 55 f5 bc d7 50 b9 26 96 36 ff 00 bc f2 81 62 ef 41 53 42 cf 5a c2 76 e2 a9 51 94 4c 68 ee 55 36 ea d2 44 6c 47 49 da 3d 03 0b 97 5f 06 92 f9 3e de ce e9 51 6b 9e 71 31 2d 1a cc 54 1c 89 75 fa 3d 0d 93 0f 1d 6c e8 db c5 36 4f b8 f5 f6 82 b4 8b de 78 49 ba 2a 9b 3b 37 26 dc e3 ef 16 8d 02 0b c6 dd 63 5a 7d 6c 84 c7 f0 96 37 43 29 6f 20 a6 4f 4c c7 6b 9e 1e 30 d5 a1 b6 20 4d 6f 15 61 69 0e c1 b4 56 e5 6f 66 5b 44 90 a7 1b 74 9c 51 20 f5 48 34 b7 9f e4 ff 00 33 f2 83 fa aa f3 ee 16 2c ef 97 9f 3f a1 c2 f4 39 c9 6d cf fe b2 ca 05 2c 68 ab 1e 9d 68 a5 35 7b 48 da 2e 0a be 4d cb 50 9a 9d 31 30 f3 13 7d bb 37 6c 88 7a 47 1d bd 65 a7 da 80 d5 83 67 1d dd 2e 4a c9 c9 b0 5f Data Ascii: :$<l8%Vh#TTIgUP&6bASBZvQLhU6DlGI=_>Qkq1-Tu=l6OxI*;7&cZ}l7C)o OLk0 MoaiVof[DtQ H43,?9m,hh5{H.MP10}7lzGeg.J_
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: fb cc b2 8c cd 5b 95 91 f4 50 dd d3 c2 75 74 f9 64 b4 69 32 33 49 d7 d2 4d b0 91 21 82 b9 82 4d e3 a8 5d fc 19 98 e4 15 64 08 ec c7 c9 36 c4 4d 23 6e b5 85 90 b7 2b cd 45 8a 98 d3 2c b8 f4 3a d8 95 8e 4c 43 24 4d 36 da 78 7a 2f 5a 2d 83 41 2c 93 57 0e c9 13 e8 5a 7e 1d 54 40 8c bc 49 2e ea 59 45 b6 59 9b 77 6b 91 1e a6 91 94 57 54 3e 73 a1 21 e4 5a 48 22 75 2c 42 52 c5 d5 7a 27 55 58 b4 ca b0 52 13 29 e4 08 b8 c9 52 61 d5 c9 29 78 c5 46 85 3a 52 26 50 c3 95 3a bd f9 2d e5 98 80 cd 4f 0d 21 2d 49 9c 66 50 db 3f b3 f9 b2 ce 30 88 56 6f 1b 51 c8 b4 d3 5c 0f 47 85 30 9e ab 76 66 28 a4 48 9a f4 7a cc 73 31 ad 18 39 13 b2 6e 44 af 97 31 79 da 02 87 06 61 4f 95 93 82 db 11 98 2f 89 98 f8 99 88 38 b7 dd 95 18 d5 5d b0 92 c4 9b 39 32 e2 6b 18 7d 79 d6 95 7b a5 9c Data Ascii: [Putdi23IM!M]d6M#n+E,:LC$M6xz/Z-A,WZ~T@I.YEYwkWT>s!ZH"u,BRz'UXR)Ra)xF:R&P:-O!-IfP?0VoQ\G0vf(Hzs19nD1yaO/8]92k}y{
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 98 7c 96 d9 50 e9 6c 61 9f 79 a4 2e 4e fd fb fe c1 57 0f 1d bd ca 1f 92 6c ee fb 9f f9 ad ee 46 39 9a 13 4d 18 38 54 40 44 48 3c 14 54 3a 37 65 b2 77 d0 55 18 e0 bb c9 fb 4d 26 e1 f4 70 08 a4 c7 d4 c2 a7 78 67 81 c3 c7 22 9c 15 22 ad e1 b3 fc a4 8e 32 ed 02 6e 86 f0 77 94 1d d2 54 4e 92 23 15 65 6d c5 48 e2 0d 70 a7 21 e7 1a 22 4f e0 f5 3e 72 dc 90 39 83 ea de 3f dd 15 78 ff 00 74 55 e3 fd d1 57 8f f7 45 5e 3f dd 15 78 ff 00 74 55 e3 7d c1 53 17 d4 33 bc 63 83 1f 51 f4 3b 46 c1 5f dd 24 6e 34 84 4e 93 33 b3 31 d5 90 c7 21 b3 de 0d 6a 3b 27 66 85 92 70 37 34 d2 37 cc 81 7e b6 ab 70 20 2c 31 1f 04 8d 06 e5 8c 7d 40 54 61 55 40 18 03 14 3d 1c 47 11 dc 69 34 9f e0 a0 5e 13 53 34 52 c2 e1 d1 c7 71 14 f0 5c 3e 16 3d a0 60 3e c1 90 8d d2 7d 59 ac 02 5c 0d fc 37 Data Ascii: \|Play.NWlF9M8T@DH<T:7ewUM&pxg""2nwTN#emHp!"O>r9?xtUWE^?xtU}S3cQ;F_$n4N31!j;'fp747~p ,1}@TaU@=Gi4^S4Rq\>=`>}Y\7
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 69 24 79 65 92 69 24 76 d4 ed 23 92 c5 89 f1 2c 68 71 ba b8 63 ce b3 ec cb 9c 1f bc 28 92 1e 20 e3 e2 3d aa 5d 4d 19 3e cf 0c 86 18 61 44 a2 cd 29 9a 55 3b ca 3b 80 0e 7e af 03 44 68 91 78 d7 01 7d 8f ed 5e 27 d1 ee fa 49 39 da 97 67 ed ed 4d 4e 76 b6 cc fd da e9 ce b8 c7 fc a9 6a f8 5b ed 02 32 f6 17 38 49 c7 c3 df f4 f7 35 70 2a 40 fb fe 82 32 96 cc ae 07 8b 30 2a 3e 3b aa 50 12 57 c0 c1 e1 a3 d8 df 4a 33 df 47 18 c8 3f 02 30 45 12 0a 91 c3 ea 34 ad 1c da 01 1a 86 09 1e 34 b9 0c bb c5 44 d1 93 de ae c2 a3 25 bc 5b da fe f4 72 47 cd 14 d9 24 e4 d1 dc 3d 0a 33 24 46 5e a3 13 4a 42 b3 80 bf 10 b4 01 64 40 8d f6 57 b2 82 7c 7c 01 35 23 96 5b 84 53 20 ff 00 80 b9 07 57 c4 56 7b 36 cb 80 31 80 c3 88 5a 07 db bd ce fe fd e3 d3 ee fa 7f f3 2b bf fa a6 be d3 56 Data Ascii: i$yei$v#,hqc( =]M>aD)U;;~Dhx}^'I9gMNvj[28I5p@20>;PWJ3G?0E44D%[rG$=3$F^JBd@W\|\|5#[S WV{61Z+V
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 26 9d ed 27 b9 8a 98 8f 94 31 ed 86 3f 54 9e f0 f1 ab f4 95 53 4b c0 a8 33 ad 09 c6 4d 22 3c 16 f6 ad 13 06 e0 4e e0 bc aa 35 37 11 ed 25 67 90 71 d0 49 20 7c 00 14 37 cf 22 9e 51 e3 fd 29 86 6c c8 e7 d9 e9 a8 07 6e fb 4d 5e 37 ef 08 ce 06 3e 1b e8 6e 3b 3a 15 1f 7c 8a 51 d8 59 ad b4 84 1f 01 93 83 f6 0a ba 8a 18 e5 65 36 69 f4 5f 52 e4 8a 74 ba b5 36 c5 98 91 85 12 67 4e 9a ba 44 78 e5 93 4c 2e 40 d5 12 b6 01 07 c4 d0 8c 49 7f 18 8a 1d e1 b2 a5 0b 60 1f 1a da 91 41 b4 12 34 69 d2 67 f6 4e af 76 b6 ee cd ea 56 dd d9 bd 4a bd b7 9e d7 59 13 3c 0f 9d 20 0c f3 35 97 92 e2 05 54 d0 02 85 74 18 07 15 38 d6 c1 96 f3 3b 82 9d 3a 46 4d 5c 62 d5 e5 01 71 dc 23 18 f6 4f 70 35 72 04 66 d8 2a e0 61 75 a7 0f b4 d4 c4 dc 8b b7 ed 97 f8 74 b0 04 f3 a3 fa 9d dc e1 14 7e Data Ascii: &'1?TSK3M"<N57%gqI \|7"Q)lnM^7>n;:\|QYe6i_Rt6gNDxL.@I`A4igNvVJY< 5Tt8;:FM\bq#Op5rf*aut~
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2f b9 9c c3 55 07 85 92 f2 8b cd 1f 79 0b d7 13 6c 21 95 a0 b6 6e db 89 0b 41 ee 3d 07 77 87 4b fc c7 c2 38 74 bf cc 7c 23 87 4b fc c7 c2 29 73 4c b9 32 a4 a1 5c ad e5 db 65 31 7b 91 b9 30 a5 3a fa f1 0d 77 3a a2 62 75 69 f6 42 ea 03 98 43 8e 3c ad 6a 24 44 bc d6 f7 60 61 b5 85 a7 56 b0 60 a7 09 b4 32 de f4 cb 68 02 da ae 60 2c 83 13 53 2d 35 23 4d df 0d 89 0e db 34 70 e9 7f 98 f8 47 0e 97 f9 8f 87 a9 e8 fd 85 49 07 fc 27 7e c3 0f ba 95 b9 c9 b5 84 24 98 a9 7b 22 b7 7e 64 c3 6e 82 ee 25 1e 78 99 71 b5 24 04 aa e6 05 e2 55 db 10 09 89 54 b6 b5 72 b5 e1 21 5f a7 4c 2a d6 10 62 a8 3f 61 a5 7d 1d fb bd 6a 17 e3 ff 00 90 f7 d8 60 26 00 00 5c c5 59 dd f1 0a 08 3a 82 6d 05 09 c3 ab 15 e1 49 22 d7 80 4a 52 2c a4 da 19 b6 34 fc 6f 0c 24 01 88 9b 03 74 c5 3d 61 f6 Data Ascii: /Uyl!nA=wK8t\|#K)sL2\e1{0:w:buiBC<j$D`aV`2h`,S-5#M4pGI'~${"~dn%xq$UTr!_L*b?a}j`&\Y:mI"JR,4o$t=a
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 00 91 e7 1c 71 a6 6c df ca 3c e3 8e 34 cd 9b f9 47 9c 71 c6 97 b3 7f 28 f3 8e 38 d3 36 6f e5 1e 71 c7 1a 66 cd fc a3 ce 38 e3 4c d9 bf 94 79 c7 1c 69 7b 37 f2 8f 38 e3 8d 2f 66 fe 51 e7 1c 71 a6 6c df ca 3c e3 8e 34 cd 9b f9 47 9c 71 c6 99 b3 7f 28 f3 8e 38 d3 36 6f e5 1e 71 c7 1a 66 cd fc a3 ce 34 68 db 1f 08 d1 a3 6a 72 c6 8d 1b 53 96 34 68 da 9c b1 a3 46 d4 e5 8d 1a 36 a7 2c 68 d1 b5 39 63 46 8d a9 cb 1a 34 6d 4e 58 d1 a3 6a 72 c6 8d 1b 53 96 34 68 da 9c b1 a3 46 d4 e5 8d 1a 36 a7 2c 68 d1 b5 39 63 46 8d a9 cb 1a 34 6d 4e 5f dc bf ff c4 00 3d 11 00 01 03 02 03 06 03 05 04 08 07 00 00 00 00 00 01 00 02 03 04 11 12 21 91 14 15 31 51 52 53 05 13 92 10 20 22 41 b1 30 32 33 71 23 40 61 72 73 81 82 a1 42 44 50 54 62 a2 d1 ff da 00 08 01 03 01 01 3f 00 fd 46 Data Ascii: ql<4Gq(86oqf8Lyi{78/fQql<4Gq(86oqf4hjrS4hF6,h9cF4mNXjrS4hF6,h9cF4mN_=!1QRS "A023q#@arsBDPTb?F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49929	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/2a4d2075fc08cd96.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 928 Connection: close CF-Ray: 86b214acab33826c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "005cf24b11b5b5878d5a5dec81b8fd35" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: x56z9SwYIcgCvGYF8b6L4ymdPJmdFPwo2PqFnvmkY2xtCHb6ZRfL79J/Zeh2OykCVv2OA36Bilk= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F46BBV0WZZHA69 x-amz-server-side-encryption: AES256 x-amz-version-id: uC2mAxqGn2k9md3IIUJLelvC0omLwBZB X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 70 6f 77 25 32 46 74 45 25 32 46 77 75 71 67 41 36 36 47 25 32 46 67 52 30 62 64 33 51 58 70 59 6d 35 4c 52 6e 43 75 36 42 30 63 79 66 4d 57 65 4b 6a 46 58 74 6c 4e 4d 52 50 38 78 61 25 32 42 4f 33 4b 36 4b 4d 70 56 70 52 33 73 62 54 61 25 32 46 6e 56 34 55 63 53 6c 55 52 6a 4b 64 54 39 6d 38 43 53 51 6b 34 39 4b 6c 67 46 59 25 32 46 69 48 4b 74 33 6c 34 36 52 79 32 4c 72 33 4c 38 25 32 46 66 65 6d 68 53 41 77 64 43 78 77 6c 79 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pow%2FtE%2FwuqgA66G%2FgR0bd3QXpYm5LRnCu6B0cyfMWeKjFXtlNMRP8xa%2BO3K6KMpVpR3sbTa%2FnV4UcSlURjKdT9m8CSQk49KlgFY%2FiHKt3l46Ry2Lr3L8%2FfemhSAwdCxwly0%3D"}],"group":"cf-nel","max_age
2024-03-27 20:20:23 UTC	928	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 34 32 30 31 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5439],{/***/ 542011:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49927	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1294	OUT	GET /cdn-cgi/image/format=auto,w=264/f308c024-a5e9-4e05-ab78-c5f4954b62ad/social_en_au_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1102	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 19459 Connection: close CF-Ray: 86b214aca9bd397c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf6uocPS3O5Sv1osvPRN0fkhmEul9FdNgUaancoXMGDQ:a510f8cb4dec5ec36eca35fe85802061" Last-Modified: Thu, 16 Nov 2023 02:55:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=33+0 c=1+26 v=2024.3.2 l=19459 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(262;u=3;i=?0 2228;u=5;i=?0 7543;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K5kDdp1aQTvF5Ch5vuCStwFi897dzn7aeVeuzUY9y9ArZKOzWznN2Lzn389XkEAORblSHRBD%2BZn8WLIsaLY7v2lTP0rqPvGilSafhYMekX1gxvFL6wY2BK5nFlJLRgbfGoohAQItaEQ%2BH3LOkVvsxjTYeZ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	267	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 02 00 06 07 08 03 04 05 01 09 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 02 01 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 cc 85 54 fe 8d 24 28 09 0a 02 42 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"7T$(B
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 f1 02 f3 d3 40 80 d0 20 34 08 0d 02 03 40 80 d0 23 d3 40 80 d0 20 34 08 f0 d0 20 34 08 0d 02 03 40 80 d0 20 34 08 f4 d0 20 14 28 e8 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 50 a3 a2 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 3d 05 e2 f3 df 50 a0 24 28 09 0a 3c 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 80 90 a0 24 28 09 0a 02 42 8f 49 0a 02 42 8f 45 0a 3a 24 28 f0 bc 0f 0f 09 65 ee f6 d1 ba 9c fe f4 83 5d 3a 10 35 d3 a1 03 5d 3a 10 35 d3 a1 03 5d 3a 10 35 d3 a1 03 5d 3a 10 35 d3 a3 c0 6c ae cf 13 87 47 ee 2f 79 71 91 0a 3a 24 28 01 0a e7 df 7c 43 d7 39 e4 fe 83 3e cd 86 bd Data Ascii: $(B$(B@ 4@#@ 4 4@ 4 ($(B$(B$(B$(BPB$(B$(B$(B$(=P$(<$(B$(B$(BIBE:$(e]:5]:5]:5]:5lG/yq:$(\|C9>
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 8b 7e ed 8f 07 bf 5d 59 aa e3 da 9a a2 07 ed a2 89 4d e8 c2 f7 be ae e5 61 b0 5d bc ea d7 4e 87 39 f4 7e 7f 36 02 5f 57 95 ac d5 61 b3 cc 33 8a fb 06 4e 30 65 4b 53 34 2a 32 fc 1e 2f 0f 4a d5 d5 1b 49 2d 9a 4b 9f 37 3e 91 fc ef 9f c3 9c f8 62 7d 18 7b 0c f4 c1 ef 35 5b e9 2e a7 9c 2f 21 76 d2 6b 8a 65 f6 23 ca 1f 6d a7 3f 75 5a 2f 1d b4 66 9e 57 9e b7 de 4d 57 5a c8 46 52 00 6b 1e 47 4c 53 6e 75 67 98 e3 b8 8e 4a 77 06 ce 3e ff 00 3e 66 f9 30 5a 5a c3 67 93 cf ab 5c 33 2d 44 74 cd 9c d0 a6 56 d1 f0 7c f3 a2 b4 d5 5a d4 cb e6 92 f5 00 bf ff 00 3b 2c 18 47 1b 4c 3a 89 4a ba d9 6e ce 35 6f 72 e3 49 f1 ab dd dd 6a c8 ac 0e d7 f9 f9 f3 99 39 59 b8 ea f7 5b 4c 54 95 95 5d ec 26 ca c9 49 6c 56 13 c5 ab fa df de ee 33 5c cc 70 5f d1 db c9 5f 5d ec d9 2e 30 98 b5 Data Ascii: ~]YMa]N9~6_Wa3N0eKS4*2/JI-K7>b}{5[./!vke#m?uZ/fWMWZFRkGLSnugJw>>f0ZZg\3-DtV\|Z;,GL:Jn5orIj9Y[LT]&IlV3\p__].0
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 4e b8 fb e1 2e 38 d3 89 5b 6a b9 b8 0f be fc 87 14 eb fc 75 f9 95 38 e5 3f bd 44 05 dd b2 06 60 be a4 2a 88 d5 8c 61 e4 45 5f 3f 49 1f 2f 9e 0e ba c0 1d 75 80 3a eb 10 75 b6 20 eb 6c 47 cb 6c 81 d6 59 03 ad b1 07 59 64 0e b2 c8 1d 65 90 3a bb 30 75 76 60 ea ad 01 d5 5a 03 aa b4 07 55 6a 0e a6 d4 1d 4d ae 87 ca 6d 41 d4 da 85 54 5b 03 a8 b6 18 0d 75 8b 19 6d 43 8f 72 97 de a2 02 32 d0 d9 77 19 8d fa 8c 6f ec b8 08 25 19 02 52 81 28 c7 52 87 52 c6 cc 75 28 75 28 75 28 75 2c 75 28 75 28 75 28 fe bd 4a 1b 31 d4 b1 d4 a1 d4 b1 d4 b1 d4 a1 d4 a1 d4 a1 d4 a0 6b 58 35 28 4b 52 bc 15 6f 95 7d 2e e1 82 ef 3e ec 6b ec b8 08 5a 8d 08 71 45 1f 98 ac 9e 30 9e 5c 96 5f 55 73 04 a4 04 73 24 a5 1a c8 df e6 e9 ad 28 88 a6 f6 81 9b 14 8c 92 d7 69 09 f2 50 cb 51 d5 da 2e d5 Data Ascii: N.8[ju8?D`*aE_?I/u:u lGlYYde:0uv`ZUjMmAT[umCr2wo%R(RRu(u(u(u,u(u(u(J1kX5(KRo}.>kZqE0\_Uss$(iPQ.
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 76 40 e8 4e ff 00 95 69 5f d4 cd 26 46 66 2a 30 b5 c9 87 02 5c 84 42 88 49 33 4d 53 44 ec 53 29 32 14 d3 4d 41 42 2b a5 a5 a4 f5 3a c4 14 dc 55 38 fb 16 51 8e b6 ce 6b 2f f1 f9 e4 d6 90 ed 61 d7 c9 8f 2e ae 79 45 91 29 09 7d 69 71 bb 54 36 ca 9b 4a 22 4a 53 0a 35 2a bd 0b 42 4c d0 ca cd 2f a3 aa 43 ae 48 79 c5 97 86 a6 dd 22 5f 67 af 5c b6 d5 42 5f b2 63 97 3e fd 08 11 90 d9 77 19 88 47 fb d8 62 e7 ee d4 01 dd 93 2f ea 7b b0 a3 d8 c0 94 db b9 14 79 59 53 33 a4 b1 16 3c d9 ff 00 0b 22 4c 16 99 75 96 53 7b 5e 75 96 4e b4 83 42 96 40 cb 46 64 74 13 0a 56 2f 5b d0 85 2b 5b 18 fb cd 49 ca 1b 4a 6f b1 7b 08 ef 20 eb a0 d1 db 49 6c e3 9c 0a f4 42 86 c3 0d 72 5d 7a 22 ce 9f 25 1c 20 da 09 eb f4 17 2a c2 6e 2e 6f 6c 09 b5 b0 4a e9 51 2d 2d 21 65 f0 ad 49 4a 94 88 Data Ascii: v@Ni_&Ff0\BI3MSDS)2MAB+:U8Qk/a.yE)}iqT6J"JS5BL/CHy"_g\B_c>wGb/{yYS3<"LuS{^uNB@FdtV/[+[IJo{ IlBr]z"% *n.olJQ--!eIJ
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 53 ec b2 66 77 39 ce e6 73 a4 78 97 f6 b5 0e 67 7c b1 7f 68 dc 68 0c 61 72 92 ae 34 35 47 63 9b 70 b5 cb 6e 39 f2 ee 71 67 79 8c 52 c5 9d ce 8b e8 e3 dc 50 71 d5 3b 76 b3 e5 da bf 80 23 a2 35 a8 89 99 c4 72 d1 d8 92 a4 d8 c0 f2 3b 53 c4 3c f6 0b cb 69 6c bd 61 36 c7 2d c4 26 de 76 89 a5 76 49 33 3c b0 cc 12 d7 90 e7 4a 62 b3 87 ab 9d a4 cb 5d ad 7f 93 22 13 5c 97 99 bd 24 dd e8 94 f1 b6 d4 f3 24 6a 64 97 a0 b9 19 52 e1 70 6b ed 48 c9 ac 4d b9 5e d2 87 2d ff 00 59 82 3f e0 42 8d 2b 42 93 8e cd 95 61 51 80 cb 96 ef ab 2f 0a 56 3c 0c aa 31 3b 1e 24 48 d6 52 e5 cb 4a aa 59 b2 ae 79 7c 37 95 47 e3 c5 dd 4f 95 75 60 56 99 05 e5 83 77 8f b5 2a 96 b2 7a 2b 39 16 eb 00 90 72 60 9f 2f e1 4f 2a 35 ac dc eb 3f b8 e5 39 f5 f5 f1 b9 22 fd 39 66 3f 4d 48 f6 34 d3 94 f1 Data Ascii: Sfw9sxg\|hhar45Gcpn9qgyRPq;v#5r;S<ila6-&vvI3<Jb]"\$$jdRpkHM^-Y?B+BaQ/V<1;$HRJYy\|7GOu`Vwz+9r`/O5?9"9f?MH4
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 7a 57 db b5 6f 98 39 01 79 16 51 5d 32 24 9e 41 e1 ae 53 a3 ac 2c c3 3b ae e2 8b 5a 48 4d e2 92 a0 1d 7c 95 b2 bc 6f 27 b2 c7 24 3a e4 6c 35 c5 bd 78 e4 a4 e6 51 d3 65 8f b5 ba d5 b3 1a 5c f7 9f a9 49 45 37 d6 e1 3a 95 a4 48 63 c4 42 f5 c2 c9 d6 4f 60 67 27 d9 50 e6 af c8 ab c1 1f f0 6f d4 61 df 8d f1 d8 78 f4 cb c2 7c b2 94 a7 49 13 8c 89 49 23 a7 7e c1 b6 58 52 51 d2 f4 74 28 f1 9c fa e7 8f a4 58 bb 02 fa 42 ec 2c a4 5a 2d f9 09 55 cd 09 aa fd 2d 2a 2c 28 4a ae 4f 57 5a 12 d4 62 61 e8 6e 9e 48 8e b6 61 92 67 c6 35 ba cb 2a f8 aa 0b 28 d7 ef 4d 45 0c 95 d3 3d 3d 2e 42 5a 54 c2 4a ce ae 13 11 22 bc 52 21 3c 51 dc 52 30 48 29 65 b8 06 20 12 4d 2b 25 e7 b8 5c 39 6a 7e ca 1d 4c 38 76 75 6d bc 67 0e 29 91 32 89 bf 31 ac 84 eb b1 f8 02 5b 93 2e 64 b8 ec 9f 65 Data Ascii: zWo9yQ]2$AS,;ZHM\|o'$:l5xQe\IE7:HcBO`g'Poax\|II#~XRQt(XB,Z-U-,(JOWZbanHag5(ME==.BZTJ"R!<QR0H)e M+%\9j~L8vumg)21[.de
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: d8 bf b2 b6 7d cf d8 bf b2 b6 7d cf d8 bf b2 b6 75 d7 d8 bf b2 b6 75 d7 d8 bf b2 b6 75 d7 d8 bf b2 b6 6d d7 d8 bf b2 b6 6d d7 d8 3f b2 b6 65 df d8 3f b2 b6 65 df d8 3f b2 b6 65 df d8 3f b2 b6 65 df d8 3f b2 b6 5d df d8 3f b2 b6 5d e7 d8 3f b2 b6 5d df d8 3f b2 b6 5d e7 d8 3f b2 b6 55 e7 d8 49 ec ad 95 79 f6 0f ec ab 0b 98 d0 34 99 67 89 d4 0c a1 e6 45 7c 9c fc 2f 9d ea bd 13 e9 a6 3e 9a 63 4c 7d 34 ed e9 a2 69 cf a6 9d bd 34 ed e9 34 ed e9 34 ed e9 34 ed e9 34 c7 d2 69 8f a4 d1 34 ed e9 a7 6f 4d 39 f4 d3 b7 a6 9d bd 34 ed e9 a6 6f 4d 3b 7a 69 db d3 4e de 9a 63 c5 79 d7 c9 cf c2 f9 fe ab d0 ce 90 c7 1e 61 9a f0 7a 00 bd a6 66 ad 87 07 db 3d 6c 28 0f 9e 67 ad 83 07 db 3d 78 3d 6f f6 ef 5e 0d da b3 7f ec 3d 78 25 6e d7 65 88 74 69 e4 08 83 b4 b5 78 25 6a 74 Data Ascii: }}uuumm?e?e?e?e?]?]?]?]?UIy4gE\|/>cL}4i44444i4oM94oM;ziNcyazf=l(g=x=o^=x%netix%jt
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 3c b1 51 89 5d 73 85 6e 02 ac a1 51 c8 04 15 11 86 4e d4 a8 fa 52 19 81 3e 29 dc 29 43 5b 16 21 b1 b8 8f 4f 65 3c 72 45 74 8c ca cb 90 46 1b 49 5e e6 14 84 a0 dc 98 de 46 3b 69 77 00 58 94 ec 15 d5 24 6e 27 88 cf 3a 7d e5 4a ea 1c 0e 79 b5 36 1a 37 f1 c1 e2 bc d4 d6 e4 62 29 89 00 96 39 ed e3 5c 2b 96 ca 62 ad da 3a 55 ae d5 af 93 7c 10 49 24 00 07 12 4d 40 d0 cf 19 65 78 db 8a 9d 0e 70 6b 8f 46 f8 cf 9a ac 6c 26 2a 4e 1d 26 31 1c 03 cd 4d 1b 5b 30 25 79 cb 3e 65 31 87 de 42 d5 f8 bd 91 42 98 a4 b8 3b 90 0e 24 27 01 44 74 46 76 66 9a 42 15 06 58 f3 a9 19 c4 d8 13 cd 8d 3a c0 39 08 a3 c8 cf a6 83 28 ee a6 dd 47 27 80 1d b5 ba 57 1a e4 3d e7 dc 88 69 07 00 9e 66 a3 18 ed 5e 54 46 e4 d4 ad c0 1c 71 cd 00 b0 c8 4e 33 9c 2b 70 a8 de 4b bb 50 d3 bb 3b e7 0c 87 Data Ascii: <Q]snQNR>))C[!Oe<rEtFI^F;iwX$n':}Jy67b)9\+b:U\|I$M@expkFl&*N&1M[0%y>e1BB;$'DtFvfBX:9(G'W=if^TFqN3+pKP;
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 7a 46 e2 62 91 7c 59 47 9a 95 7c 5c a3 f1 57 56 de ae a7 9a 9a 70 12 39 c4 a0 93 bb 35 6e b7 5b 4e 60 24 8e d9 bc 48 55 b7 87 94 73 63 c9 6a ed a4 25 c9 46 e0 14 01 c1 54 6e 15 97 38 39 2c 7b 69 30 c2 dd b5 38 dc c4 46 ec ab bf cc 29 bd f7 6e 37 08 66 62 5f 03 c8 93 88 a9 0e ed 9e 75 c5 20 c4 b1 92 eb c6 bb 45 76 47 f0 46 55 a5 8d 4f 98 b0 06 a0 48 6d e1 9d 96 38 d0 61 54 74 6d c2 b9 23 fe 06 b6 85 bd a4 51 ba ae b9 75 6f 67 ce 00 d0 0f 65 78 5b 6b c0 e7 4d b4 d2 7f 61 5e 10 0b 8b a8 ad e5 9c 46 6d 1e 30 c2 31 92 35 31 a0 48 00 fa 40 ad 59 2b cf 85 2e 0a af a6 b7 b1 04 62 b7 9a de 49 00 81 44 e9 20 0c 1a 9f 1a 03 66 3e 59 a8 ce b9 32 5b b8 9d e3 7d 5c da f4 5a 81 44 13 a1 d2 7b c6 49 a2 8e d3 46 ca ef 8e 3a 86 31 e6 a8 f1 89 08 71 8f 14 83 8a de 0f 0d 3b Data Ascii: zFb\|YG\|\WVp95n[N`$HUscj%FTn89,{i08F)n7fb_u EvGFUOHm8aTtm#Quogex[kMa^Fm0151H@Y+.bID f>Y2[}\ZD{IF:1q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49930	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/0ee21888ed45a29e.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 1713 Connection: close CF-Ray: 86b214acd84a5afe-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "1d8c6631aadd98078ce12a85f470ca59" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: zzsRLrliJlsqyafa7S75c+ZWOugmJGrBu4Acj+zmVh3IZyqiArrYMwkLjWmoAyIRKDOsRE9ciUE= x-amz-replication-status: COMPLETED x-amz-request-id: Z6FC45H69B2NTJV2 x-amz-server-side-encryption: AES256 x-amz-version-id: QqYDDsyuvCwxhykM0n1w6Uw.75KwdbsQ X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 41 71 57 4c 59 42 53 68 25 32 46 31 39 65 79 4c 75 79 58 64 50 76 67 49 4b 76 72 63 62 74 34 4c 39 51 55 25 32 42 34 57 66 74 4e 54 31 38 46 78 77 4f 67 4f 7a 52 4f 56 38 6d 63 54 4c 6e 73 4b 54 44 52 66 75 39 54 32 53 52 76 65 50 34 6d 33 46 6a 34 55 36 31 63 59 75 44 79 41 4f 36 41 56 7a 4b 30 7a 65 25 32 46 38 67 59 51 4e 77 55 63 50 6b 6a 32 52 77 78 6f 30 45 62 56 32 58 47 63 5a 49 43 6a 31 4a 65 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAqWLYBSh%2F19eyLuyXdPvgIKvrcbt4L9QU%2B4WftNT18FxwOgOzROV8mcTLnsKTDRfu9T2SRveP4m3Fj4U61cYuDyAO6AVzK0ze%2F8gYQNwUcPkj2Rwxo0EbV2XGcZICj1Jeo%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:23 UTC	1199	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 34 31 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 31 36 30 33 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2841],{/***/ 716038:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._f
2024-03-27 20:20:23 UTC	514	IN	Data Raw: 73 2e 73 74 6f 72 65 3d 61 7d 61 73 79 6e 63 20 73 65 74 53 74 61 74 75 73 28 61 2c 62 29 7b 62 3d 6e 65 77 20 7a 24 28 7b 73 74 61 74 75 73 3a 62 7d 29 3b 61 77 61 69 74 20 74 68 69 73 2e 73 74 6f 72 65 2e 70 75 74 28 61 2c 62 29 7d 7d 3b 5f 5f 63 2e 58 63 3d 7b 7d 3b 5f 5f 63 2e 58 63 2e 47 31 3d 5f 5f 63 2e 6e 76 3b 0a 5f 5f 63 2e 58 63 2e 6e 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 7b 75 73 65 72 49 64 3a 61 2c 44 62 3a 62 7d 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 6e 65 77 20 5f 5f 63 2e 6d 76 3b 72 65 74 75 72 6e 7b 4b 57 3a 68 44 61 28 64 29 2c 45 78 3a 65 3d 3e 7b 63 6f 6e 73 74 20 66 3d 65 2e 58 6b 2c 67 3d 65 2e 41 61 3b 65 3d 65 2e 43 61 3b 72 65 74 75 72 6e 20 66 2e 6d 68 61 3f 65 44 61 28 64 2c 7b 75 73 65 72 49 64 3a 61 2c 44 62 3a 62 2c 58 6b 3a 66 Data Ascii: s.store=a}async setStatus(a,b){b=new z$({status:b});await this.store.put(a,b)}};__c.Xc={};__c.Xc.G1=__c.nv;__c.Xc.nla=function({userId:a,Db:b},c){const d=new __c.mv;return{KW:hDa(d),Ex:e=>{const f=e.Xk,g=e.Aa;e=e.Ca;return f.mha?eDa(d,{userId:a,Db:b,Xk:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49931	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/efed49dec8868a5f.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 431 Connection: close CF-Ray: 86b214aced8f0849-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 647411 Cache-Control: public, max-age=31556926 ETag: "e07f7c13489aabd41541658ba84bb8f5" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 20 Mar 2024 05:49:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 21 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: O37B4kFZbBfdmzHsQEwRiqyEqY+yI3hIu2oFXFRoJE5fYS2y6EIIlngFEDDJ2/lr6MnpbroMLCI= x-amz-replication-status: COMPLETED x-amz-request-id: B6K17V64VM4WX4AZ x-amz-server-side-encryption: AES256 x-amz-version-id: shTMeLXEt8GWFBTYA0F_swcFhzJTrLo8 X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 76 66 61 4a 66 36 52 6a 58 70 68 66 39 25 32 42 51 62 79 38 64 42 66 46 66 69 37 76 79 5a 78 25 32 46 42 35 51 56 5a 56 52 6a 56 49 38 41 55 67 74 58 59 67 54 67 65 30 68 66 62 38 67 6e 4f 45 5a 49 69 78 67 58 6f 37 56 78 7a 79 70 74 41 6f 64 73 6d 31 6f 6d 57 6d 25 32 42 42 4c 6d 6f 35 68 69 54 79 59 41 31 56 51 57 35 54 41 63 53 54 6d 35 53 74 68 43 4a 31 6d 53 37 4f 54 38 63 76 25 32 46 47 35 33 6a 41 5a 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3vfaJf6RjXphf9%2BQby8dBfFfi7vyZx%2FB5QVZVRjVI8AUgtXYgTge0hfb8gnOEZIixgXo7VxzyptAodsm1omWm%2BBLmo5hiTyYA1VQW5TAcSTm5SthCJ1mS7OT8cv%2FG53jAZM%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:20:23 UTC	431	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 31 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 36 34 32 36 34 33 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2515],{/***/ 642643:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49932	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/8c35b77c9580b755.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 27362 Connection: close CF-Ray: 86b214acfc410590-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "794ede66babe027c711d5c2fbbded23b" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: eNcjGKbBHRgD6VZDkyhtUle8Bcn22MjkzKRmHJTnux9fasKECvUr/zCM2TfRAWoF8GSba+Q63Gw= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F9NEY8BD6BEDWS x-amz-server-side-encryption: AES256 x-amz-version-id: 36PtdRhi.NTqRazXN4JNrkoVuh9D4623 X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 6d 32 5a 54 30 35 51 55 43 50 48 41 6e 78 66 32 56 6e 25 32 42 44 6f 6d 35 58 32 47 41 6f 67 31 4e 70 4a 68 30 4f 4e 33 63 6e 70 7a 66 72 4b 75 45 32 35 33 4f 51 77 4c 38 38 48 42 56 4c 44 5a 6e 69 65 53 51 31 74 7a 47 49 65 49 4f 6b 65 36 66 74 54 6e 52 44 53 76 37 36 45 34 25 32 46 57 68 74 6f 43 52 25 32 42 53 52 4e 30 6b 74 25 32 42 62 52 49 79 73 53 68 70 78 31 44 30 69 25 32 42 46 66 4b 67 39 57 4c 30 70 79 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cm2ZT05QUCPHAnxf2Vn%2BDom5X2GAog1NpJh0ON3cnpzfrKuE253OQwL88HBVLDZnieSQ1tzGIeIOke6ftTnRDSv76E4%2FWhtoCR%2BSRN0kt%2BbRIysShpx1D0i%2BFfKg9WL0pyg%3D"}],"group":"cf-nel","max_age":60
2024-03-27 20:20:23 UTC	1194	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 35 37 33 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 39 35 36 36 33 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[4573],{/***/ 795663:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 76 61 6c 75 65 3a 51 56 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 51 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 62 3f 7b 73 74 72 69 6e 67 56 61 6c 75 65 3a 61 7d 3a 22 6e 75 6d 62 65 72 22 3d 3d 3d 62 3f 4e 75 6d 62 65 72 2e 69 73 49 6e 74 65 67 65 72 28 61 29 3f 7b 69 6e 74 56 61 6c 75 65 3a 61 7d 3a 7b 64 6f 75 62 6c 65 56 61 6c 75 65 3a 61 7d 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 62 3f 7b 62 6f 6f 6c 56 61 6c 75 65 3a 61 7d 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3f 7b 62 79 74 65 73 56 61 6c 75 65 3a 61 7d 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 7b 61 72 72 61 79 56 61 6c 75 65 3a 7b 76 61 6c 75 Data Ascii: ,value:QV(d)});return b};QV=function(a){const b=typeof a;return"string"===b?{stringValue:a}:"number"===b?Number.isInteger(a)?{intValue:a}:{doubleValue:a}:"boolean"===b?{boolValue:a}:a instanceof Uint8Array?{bytesValue:a}:Array.isArray(a)?{arrayValue:{valu
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 61 6e 49 64 3a 71 2c 70 61 72 65 6e 74 53 70 61 6e 49 64 3a 78 2c 6e 61 6d 65 3a 7a 2c 6b 69 6e 64 3a 33 2c 73 74 61 72 74 54 69 6d 65 55 6e 69 78 4e 61 6e 6f 3a 72 2c 65 6e 64 54 69 6d 65 55 6e 69 78 4e 61 6e 6f 3a 74 2c 61 74 74 72 69 62 75 74 65 73 3a 77 2c 64 72 6f 70 70 65 64 41 74 74 72 69 62 75 74 65 73 43 6f 75 6e 74 3a 30 2c 65 76 65 6e 74 73 3a 5b 5d 2c 64 72 6f 70 70 65 64 45 76 65 6e 74 73 43 6f 75 6e 74 3a 30 2c 73 74 61 74 75 73 3a 41 2c 6c 69 6e 6b 73 3a 42 2c 64 72 6f 70 70 65 64 4c 69 6e 6b 73 43 6f 75 6e 74 3a 30 7d 7d 29 7d 29 3b 61 2e 70 75 73 68 28 7b 72 65 73 6f 75 72 63 65 3a 63 2c 73 63 6f 70 65 53 70 61 6e 73 3a 66 7d 29 7d 72 65 74 75 72 6e 7b 72 65 73 6f 75 72 63 65 53 70 61 6e 73 3a 61 7d 7d 3b 5f 5f 63 2e 56 56 3d 66 75 6e 63 Data Ascii: anId:q,parentSpanId:x,name:z,kind:3,startTimeUnixNano:r,endTimeUnixNano:t,attributes:w,droppedAttributesCount:0,events:[],droppedEventsCount:0,status:A,links:B,droppedLinksCount:0}})});a.push({resource:c,scopeSpans:f})}return{resourceSpans:a}};__c.VV=func
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 31 34 30 2c 7b 4d 3a 21 30 7d 2c 31 34 31 2c 7b 4d 3a 21 30 7d 2c 31 34 32 2c 7b 4d 3a 21 30 7d 2c 31 34 33 2c 7b 4d 3a 21 30 7d 2c 31 34 34 2c 7b 4d 3a 21 30 7d 2c 31 34 35 2c 7b 4d 3a 21 30 7d 2c 31 34 36 2c 7b 4d 3a 21 30 7d 2c 31 34 37 2c 7b 4d 3a 21 30 7d 2c 31 34 38 2c 7b 4d 3a 21 30 7d 2c 31 34 39 2c 7b 4d 3a 21 30 7d 2c 31 35 30 2c 7b 4d 3a 21 30 7d 2c 31 35 31 2c 7b 4d 3a 21 30 7d 2c 31 35 32 5d 2c 31 29 3b 5f 5f 63 2e 61 57 3d 79 28 28 29 3d 3e 28 7b 70 61 73 73 77 6f 72 64 3a 54 28 22 70 61 73 73 77 6f 72 64 22 2c 31 29 2c 74 6f 6b 65 6e 3a 54 28 22 74 6f 6b 65 6e 22 2c 32 29 2c 54 61 3a 75 28 22 72 69 73 6b 43 6f 6e 74 65 78 74 22 2c 34 2c 5f 5f 63 2e 48 6b 29 7d 29 29 3b 62 57 3d 28 29 3d 3e 28 7b 63 72 65 64 65 6e 74 69 61 6c 73 3a 75 28 Data Ascii: ,140,{M:!0},141,{M:!0},142,{M:!0},143,{M:!0},144,{M:!0},145,{M:!0},146,{M:!0},147,{M:!0},148,{M:!0},149,{M:!0},150,{M:!0},151,{M:!0},152],1);__c.aW=y(()=>({password:T("password",1),token:T("token",2),Ta:u("riskContext",4,__c.Hk)}));bW=()=>({credentials:u(
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 5f 5f 63 2e 6c 56 28 29 2c 7b 6d 6f 64 65 3a 6e 28 22 41 3f 22 2c 33 2c 22 53 4d 53 5f 43 4f 44 45 22 29 2c 7a 61 3a 54 28 31 31 29 2c 73 74 61 74 65 3a 54 28 31 32 29 2c 57 38 3a 68 62 28 31 33 2c 43 67 61 29 7d 29 29 3b 5f 5f 63 2e 72 57 3d 79 28 28 29 3d 3e 28 7b 79 65 61 72 3a 44 78 28 31 29 2c 6d 6f 6e 74 68 3a 44 78 28 32 29 2c 64 61 79 3a 44 78 28 33 29 7d 29 29 3b 5f 5f 63 2e 73 57 3d 45 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 2c 31 37 2c 31 38 2c 31 39 5d 2c 31 29 3b 5f 5f 63 2e 74 57 3d 45 28 28 29 3d 3e 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 5d 29 3b 44 67 61 3d 45 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 Data Ascii: ,__c.lV(),{mode:n("A?",3,"SMS_CODE"),za:T(11),state:T(12),W8:hb(13,Cga)}));__c.rW=y(()=>({year:Dx(1),month:Dx(2),day:Dx(3)}));__c.sW=E(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19],1);__c.tW=E(()=>[0,1,2,3,4,5,6]);Dga=E(()=>[1,2,3,4,5,6,7,8,9,10,1
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 29 2c 77 4e 3a 48 78 28 33 29 2c 6b 24 3a 48 78 28 34 29 7d 29 29 3b 0a 5f 5f 63 2e 4e 57 3d 45 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 5d 29 3b 5f 5f 63 2e 4f 57 3d 45 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 5d 29 3b 50 57 3d 28 29 3d 3e 28 7b 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3a 67 62 28 31 2c 5f 5f 63 2e 24 56 29 2c 58 62 3a 45 78 28 32 29 2c 69 73 44 65 66 61 75 6c 74 3a 58 28 33 29 2c 52 68 61 3a 48 78 28 34 29 2c 24 62 3a 45 78 28 35 29 7d 29 3b 5f 5f 63 2e 51 57 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 Data Ascii: ),wN:Hx(3),k$:Hx(4)}));__c.NW=E(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16]);__c.OW=E(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15]);PW=()=>({attributeName:gb(1,__c.$V),Xb:Ex(2),isDefault:X(3),Rha:Hx(4),$b:Ex(5)});__c.QW=y(()=>Object.assign({},PW(),{type:n(
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 32 30 2c 22 54 48 45 4d 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 79 63 3a 76 28 31 31 2c 59 57 29 7d 29 29 3b 5f 5f 63 2e 62 58 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 32 31 2c 22 43 4f 4c 4c 41 42 4f 52 41 54 4f 52 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 79 63 3a 76 28 31 31 2c 59 57 29 7d 29 29 3b 5f 5f 63 2e 63 58 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 32 32 2c 22 44 45 45 50 5f 43 41 54 45 47 4f 52 59 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 47 58 3a 76 28 31 32 Data Ascii: )=>Object.assign({},PW(),{type:n("A?",20,"THEME_PREFERENCE"),yc:v(11,YW)}));__c.bX=y(()=>Object.assign({},PW(),{type:n("A?",21,"COLLABORATOR_PREFERENCE"),yc:v(11,YW)}));__c.cX=y(()=>Object.assign({},PW(),{type:n("A?",22,"DEEP_CATEGORY_PREFERENCE"),GX:v(12
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 3a 76 28 31 31 2c 5f 5f 63 2e 6b 58 29 7d 29 29 3b 0a 6d 58 3d 79 28 28 29 3d 3e 28 7b 6b 69 3a 70 28 31 2c 5f 5f 63 2e 45 57 29 2c 76 61 6c 75 65 3a 45 78 28 32 29 7d 29 29 3b 54 67 61 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 33 31 2c 22 43 41 54 45 47 4f 52 59 5f 50 55 42 4c 49 53 48 5f 50 52 4f 46 49 4c 45 22 29 2c 55 56 3a 76 28 31 32 2c 6d 58 29 7d 29 29 3b 55 67 61 3d 79 28 28 29 3d 3e 28 7b 73 75 62 6a 65 63 74 3a 67 62 28 31 2c 5f 5f 63 2e 4e 57 29 2c 76 61 6c 75 65 3a 52 28 32 29 7d 29 29 3b 56 67 61 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 33 32 2c 22 54 45 41 43 48 45 52 5f 53 Data Ascii: :v(11,__c.kX)}));mX=y(()=>({ki:p(1,__c.EW),value:Ex(2)}));Tga=y(()=>Object.assign({},PW(),{type:n("A?",31,"CATEGORY_PUBLISH_PROFILE"),UV:v(12,mX)}));Uga=y(()=>({subject:gb(1,__c.NW),value:R(2)}));Vga=y(()=>Object.assign({},PW(),{type:n("A?",32,"TEACHER_S
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 57 29 2c 66 37 3a 76 28 31 34 2c 5f 5f 63 2e 72 57 29 7d 29 29 3b 0a 5f 5f 63 2e 71 58 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 34 33 2c 22 42 52 41 4e 44 5f 55 53 45 52 5f 41 43 54 49 56 49 54 59 5f 4d 41 52 4b 45 52 22 29 2c 54 4a 3a 51 78 28 31 31 2c 5f 5f 63 2e 43 57 29 2c 65 4e 3a 58 28 31 32 29 7d 29 29 3b 65 68 61 3d 79 28 28 29 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 50 57 28 29 2c 7b 74 79 70 65 3a 6e 28 22 41 3f 22 2c 34 34 2c 22 54 45 41 4d 5f 50 52 4f 50 45 4e 53 49 54 59 5f 54 4f 5f 42 45 43 4f 4d 45 5f 50 41 49 44 22 29 2c 56 47 3a 52 28 31 31 29 2c 5a 44 3a 68 62 28 31 32 2c 44 57 29 2c 61 44 3a 68 62 28 31 33 2c 44 57 29 2c 63 44 3a 68 62 Data Ascii: W),f7:v(14,__c.rW)}));__c.qX=y(()=>Object.assign({},PW(),{type:n("A?",43,"BRAND_USER_ACTIVITY_MARKER"),TJ:Qx(11,__c.CW),eN:X(12)}));eha=y(()=>Object.assign({},PW(),{type:n("A?",44,"TEAM_PROPENSITY_TO_BECOME_PAID"),VG:R(11),ZD:hb(12,DW),aD:hb(13,DW),cD:hb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49933	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/39270ec1591145ae.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 5519 Connection: close CF-Ray: 86b214ad0959399a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "31cc05cd0ccee6393b072c425bfea2ef" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:52 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kdfF7dyjIxD+Tnj9xSLol+y64fj9JbqNZvfdme4OuIPiS+LDwhEbz7zlp4BSsbXNycUcQC3TtH0= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F66PC3JV0AHTFX x-amz-server-side-encryption: AES256 x-amz-version-id: ameuRYCvAnlUJzDSciFVgTG81fGujbVz X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 6c 76 66 62 69 46 68 31 59 46 73 35 34 73 70 52 36 45 48 49 47 4b 64 55 61 4c 67 75 7a 39 51 41 44 43 7a 45 31 35 4c 79 37 77 78 4d 66 6c 50 30 43 6c 43 63 68 71 78 38 52 45 37 39 69 53 6a 4e 78 41 57 6c 52 4b 35 33 7a 49 41 79 32 31 25 32 46 31 48 35 38 37 4d 78 62 55 6f 32 41 37 6b 4a 70 57 58 39 4e 65 6a 65 45 6d 73 46 25 32 42 43 75 4b 25 32 42 62 33 62 4d 70 4f 25 32 46 66 53 25 32 42 56 25 32 42 63 70 62 76 63 36 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlvfbiFh1YFs54spR6EHIGKdUaLguz9QADCzE15Ly7wxMflP0ClCchqx8RE79iSjNxAWlRK53zIAy21%2F1H587MxbUo2A7kJpWX9NejeEmsF%2BCuK%2Bb3bMpO%2FfS%2BV%2Bcpbvc6Q%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:20:23 UTC	1193	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 38 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 34 33 32 38 36 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[3684],{/***/ 143286:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6e 74 72 69 65 73 28 62 2e 61 74 74 72 73 2e 65 6e 74 72 69 65 73 28 29 29 29 3b 65 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 67 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 29 29 66 3d 64 5b 67 5d 2c 65 5b 67 5d 3d 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 29 3a 66 3b 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 28 65 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 28 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 0a 61 2e 55 45 2e 61 64 64 28 62 2e 63 6f 6e 74 65 78 74 2e 73 70 61 6e 49 64 29 7d 2c 53 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 61 2e 47 4c 2e 46 Data Ascii: ntries(b.attrs.entries()));e={};for(const g of Object.keys(d))f=d[g],e[g]=f instanceof Object?JSON.stringify(f):f;console.table(e);console.groupEnd();null===c\|\|void 0===c?void 0:c();console.groupEnd();a.UE.add(b.context.spanId)},S8=function(a){try{a.GL.F
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6f 6e 22 3a 22 78 68 72 22 7d 61 73 79 6e 63 20 46 4c 28 61 29 7b 69 66 28 30 21 3d 3d 61 2e 6c 65 6e 67 74 68 29 69 66 28 74 68 69 73 2e 4c 72 2e 6c 65 6e 67 74 68 3c 74 68 69 73 2e 4c 77 29 7b 74 72 79 7b 5f 5f 63 2e 57 56 28 74 68 69 73 2e 68 76 29 3b 76 61 72 20 62 3d 5f 5f 63 2e 55 56 28 61 2c 63 3d 3e 5f 5f 63 2e 56 56 28 74 68 69 73 2e 68 76 2c 63 29 29 7d 63 61 74 63 68 28 63 29 7b 74 68 69 73 2e 42 2e 65 61 28 63 2c 7b 5a 61 3a 22 4f 54 4c 50 53 70 61 6e 41 64 61 70 74 65 72 3a 20 22 2c 65 78 74 72 61 3a 6e 65 77 20 4d 61 70 28 50 38 28 61 29 29 7d 29 3b 72 65 74 75 72 6e 7d 74 72 79 7b 63 6f 6e 73 74 20 63 3d 74 68 69 73 2e 59 50 3b 28 74 68 69 73 2e 77 41 26 26 6e 75 6c 6c 21 3d 63 3f 28 64 2c 65 2c 66 29 3d 3e 63 28 64 2c 65 2c 66 29 3a 28 64 Data Ascii: on":"xhr"}async FL(a){if(0!==a.length)if(this.Lr.length<this.Lw){try{__c.WV(this.hv);var b=__c.UV(a,c=>__c.VV(this.hv,c))}catch(c){this.B.ea(c,{Za:"OTLPSpanAdapter: ",extra:new Map(P8(a))});return}try{const c=this.YP;(this.wA&&null!=c?(d,e,f)=>c(d,e,f):(d
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2e 73 65 74 28 63 2e 70 61 72 65 6e 74 53 70 61 6e 49 64 2c 61 29 29 3a 62 2e 70 75 73 68 28 63 29 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 6f 66 20 62 29 62 3d 63 2e 63 6f 6e 74 65 78 74 2e 73 70 61 6e 49 64 2c 51 38 28 74 68 69 73 2c 63 29 2c 74 68 69 73 2e 41 77 2e 64 65 6c 65 74 65 28 62 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 7d 7d 3b 76 61 72 20 52 38 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 47 4c 3d 61 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 42 3d 63 3b 74 68 69 73 2e 62 75 66 66 65 72 3d 5b 5d 7d 4d 66 28 29 7b 7d 70 72 6f 63 65 73 73 28 61 29 7b 74 72 79 7b 61 2e 5a 69 28 29 26 26 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 42 67 26 26 28 74 68 69 73 2e 42 67 3d 73 65 74 54 69 Data Ascii: .set(c.parentSpanId,a)):b.push(c);for(const c of b)b=c.context.spanId,Q8(this,c),this.Aw.delete(b)}async flush(){}};var R8=class{constructor(a,b,c){this.GL=a;this.config=b;this.B=c;this.buffer=[]}Mf(){}process(a){try{a.Zi()&&(null==this.Bg&&(this.Bg=setTi
2024-03-27 20:20:23 UTC	219	IN	Data Raw: 3d 3d 61 2e 45 62 26 26 28 7b 52 41 3a 61 7d 3d 61 77 61 69 74 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 65 28 32 39 38 37 31 37 29 2e 74 68 65 6e 28 28 29 3d 3e 28 7b 52 41 3a 5f 5f 63 2e 4e 38 7d 29 29 2c 64 3d 6e 65 77 20 61 28 62 2c 64 29 29 3b 72 65 74 75 72 6e 20 64 7d 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 33 39 32 37 30 65 63 31 35 39 31 31 34 35 61 65 2e 6a 73 2e 6d 61 70 Data Ascii: ==a.Eb&&({RA:a}=await __webpack_require__.me(298717).then(()=>({RA:__c.N8})),d=new a(b,d));return d}};}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}}])//# sourceMappingURL=sourcemaps/39270ec1591145ae.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49936	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	478	OUT	GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:23 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49937	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	2010	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570805638,"utm_s":"editor","utm_m":"link"}; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy
2024-03-27 20:20:23 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214ad8e0b6ffe-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214ad8e0b6ffe X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mp5mvecQBmP1lrjD6Crmp%2FcM4HirUKF79ZzMRLbI9WzptOks2hzFgf1jIQFHg%2FN2RgPwQvy6pCBLzLi%2FUKWxfH0aruknecIyWIH7fCB8nesdLV6AkJNan7f3p6oHUKI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	468	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 6f 72 79 50 Data Ascii: ionsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categoryP
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 22 74 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a Data Ascii: "tACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconUrl":
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 73 4c 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 4e 50 22 2c Data Ascii: sLabel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UUNP",
2024-03-27 20:20:23 UTC	1183	IN	Data Raw: 3a 22 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a Data Ascii: :"Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensions":
2024-03-27 20:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49935	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1291	OUT	GET /cdn-cgi/image/format=auto,w=264/8a1451cf-3ba0-4e8a-b469-f5010862b5cf/prints_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1108	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 10421 Connection: close CF-Ray: 86b214ad89d80625-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfABMDorrHthygnfaC4OEgO_R6ul9FdNgUaancoXMGDQ:63ef491d3d9c3c47dddc45b3677746af" Last-Modified: Sun, 19 Nov 2023 11:14:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=23+0 c=1+22 v=2024.3.2 l=10421 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(260;u=3;i=?0 1812;u=5;i=?0 7806;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKDduPa1iQ%2F3G3NI1oafCT6%2FNW2ntsENMwR1l83G6LOtYwFAPSrmK%2BkoPivGsmwXbi76PGt5bcdpp5dKSbUiXuj2u4cukzFMyEbcxZ%2Bmzmr3wJ%2FjwMTA4RT3D5hzS6wS5EUnlUUI2skpd9tFHqYAgiLBhoE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	261	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 06 07 05 08 01 01 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 08 bb 4d e9 22 24 88 92 22 48 89 22 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"5M"$"H"
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 22 24 88 92 22 48 89 22 24 88 92 22 48 a8 b6 85 72 56 48 d0 9a 02 68 09 a1 52 48 89 22 24 8d 09 a0 26 88 92 34 26 80 9a 15 24 8d 09 a0 26 80 9a 02 08 af ac 91 12 44 49 11 24 44 91 12 44 49 11 24 44 91 12 44 49 11 24 44 91 12 44 49 11 24 45 b5 17 dd 54 6a 55 41 55 05 6b 1a 13 40 49 41 54 44 91 a9 55 05 54 a1 25 28 49 41 54 6a 55 41 55 05 54 10 5b 64 5c 5b 17 16 c5 c5 b1 71 6c 5c 5b 17 16 c5 c5 b1 71 6c 5c 5b 17 16 c5 c5 b1 71 6c 5c 5b 17 16 c5 c5 b1 71 6c 45 05 f5 9a 0a 26 a4 29 49 a1 4a d2 e2 dd 15 ba b4 56 ea d5 54 ba b2 2f 2c d4 ba b4 aa ea d5 55 b8 b6 52 e2 d8 b8 b6 2e 2d a9 5b 8b 75 ad 26 82 95 82 2c 89 46 94 a3 79 d0 7a 0f cc 1c 46 ae 3d ec 27 47 c6 7a 77 f0 b3 b1 e6 b9 77 5b 66 ae d7 7b 4e 56 fd da f6 86 ad fd 0a f7 37 57 27 70 f4 b5 3e bf 07 d5 e9 Data Ascii: "$"H"$"HrVHhRH"$&4&$&DI$DDI$DDI$DDI$ETjUAUk@IATDUT%(IATjUAUT[d\[ql\[ql\[ql\[qlE&)IJVT/,UR.-[u&,FyzF='Gzww[f{NV7W'p>
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 94 74 bf 0b 7f 27 4b d7 f9 ed c9 1c be ff 00 83 39 49 65 f2 ee e7 d7 72 fc 29 65 ab 76 3d c9 d2 cb e5 9d e7 31 dd b5 5b d6 a6 c5 4b f1 bd bf 5b c9 36 2b f5 0e 3c ad 79 94 54 e1 1a 0b 75 f2 2b 5f 46 c6 8f ab 6f e4 eb 5e 07 20 b1 2b 9b 7a d6 fc f9 cb 66 f3 de 8d 64 32 e1 4b 2d 96 b8 b5 c8 18 f4 c9 a5 69 8c c9 a5 18 cc 98 d1 8f 1c aa 51 8a ca 18 d2 be a2 dd d9 4f 25 6a b8 c9 5f a2 70 8f 30 89 d4 f5 73 af de d6 b0 49 dc f9 33 36 6e ad 4a d4 05 02 95 28 a0 14 28 a0 a9 42 da 28 28 14 50 51 29 15 ac c6 5a ff 00 ff c4 00 27 10 00 00 05 05 01 00 03 00 02 03 01 00 00 00 00 00 01 02 03 04 11 00 05 06 10 12 07 13 20 40 14 15 08 30 50 18 ff da 00 08 01 01 00 01 02 00 9f df 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 3b 99 99 a9 99 99 99 9d cc cc ce e6 66 6a 75 Data Ascii: t'K9Ier)ev=1[K[6+<yTu+_Fo^ +zfd2K-iQO%j_p0sI36nJ((B((PQ)Z' @0P33333333333333333;fju
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 38 12 73 c8 14 0a 05 28 14 15 30 98 46 44 cf 6f af 3d 0d de 72 e1 72 34 04 78 e3 9e 79 e7 9e 79 e7 98 e7 9e 79 e7 9e 40 a0 05 28 a8 ea e8 f7 d0 1d e7 ce ae 44 66 08 f1 cf 31 10 21 11 cc 47 3c f3 cf 3c f3 1c f3 cf 30 15 ff c4 00 4c 10 00 01 03 03 01 04 06 06 07 03 08 08 07 00 00 00 01 02 03 04 00 05 11 12 06 10 21 31 13 20 41 51 61 91 07 14 22 42 52 71 30 32 40 81 82 a1 b1 15 23 72 33 43 53 62 92 a2 c1 d1 08 16 24 25 34 44 50 b2 26 64 70 73 93 d2 e1 ff da 00 08 01 01 00 03 3f 00 1f f4 01 ff 00 42 3d 53 47 79 dc 68 ee 34 7a a6 8e e3 47 aa 68 ef 1b c6 f1 b8 7d 08 ea 0a 1b 86 f1 bc 6e 1f fa d8 bc 67 49 c7 cb 79 dc 3e d9 88 91 bf f6 d3 5e a1 1f f6 5c 55 8f 5a 7d 39 75 43 9b 6d ff 00 9a aa 4a 7e ac 97 47 c9 6a 15 70 4f 29 af ff 00 f2 2a ae c9 e5 71 7c 7e 2a bd Data Ascii: 8s(0FDo=rr4xyyy@(Df1!G<<0L!1 AQa"BRq02@#r3CSb$%4DP&dps?B=SGyh4zGh}ngIy>^\UZ}9uCmJ~GjpO)q\|~
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: ec 3c b7 e9 b3 3d e2 e3 63 f3 cf 5b 97 57 4c 48 c3 b9 b1 f6 2d 73 25 ab bd e7 3f ee 35 87 9b f9 ee 75 f3 c0 61 3d aa 34 88 db 3e da 13 cd 52 9a c9 ef c0 3d 66 62 36 16 ea f1 93 80 07 33 4e ab 21 86 82 3c 55 c4 d4 b7 73 ae 42 cf 80 e1 4b f8 d5 e6 6a 54 53 fc a1 5a 07 34 a8 e6 b5 c4 8a ac 63 2d 24 f9 8e a3 bb 03 6a 8b 75 36 37 67 c7 5b fd 0b a1 a7 43 6a 6c a8 65 27 88 39 06 ac 56 ad 89 83 b5 8b d6 b8 52 9b 64 b0 cb 64 17 5c 5b 9e e0 f1 14 8d a9 b2 42 bc 35 02 4c 46 65 02 a6 9b 7c 00 b5 23 b1 7c 3b 15 d4 d9 f6 6f 6d 58 57 77 8e 8b ab a9 05 b8 65 47 a5 50 20 a8 10 07 5f 09 26 b5 3c e9 ef 5a 8f 99 a3 26 52 52 0e 02 41 51 34 c3 7c 48 2a 3e 34 06 00 1c 2b 16 a8 29 f8 a5 7e 89 ae 5d 5f 66 20 f1 59 ea 25 6b 48 59 21 04 80 a2 06 70 0d 69 61 84 f6 25 b4 0f 21 d4 8d Data Ascii: <=c[WLH-s%?5ua=4>R=fb63N!<UsBKjTSZ4c-$ju67g[Cjle'9VRdd\[B5LFe\|#\|;omXWweGP _&<Z&RRAQ4\|H*>4+)~]_f Y%kHY!pia%!
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: b6 81 a9 4a 3a 82 6a 4d af d1 e5 95 99 51 9d 61 f5 2e 4b ae 36 ea 4a 16 92 b7 0f 30 77 81 02 4f 7e 9e ae 6f 50 91 dd 0c 1f 35 9d fa a9 2f 05 1e 47 b0 8a 7a 21 4c 79 c4 94 67 08 7b bb f8 a8 2a 69 20 82 34 23 04 6e 4b 4d ad 6a e4 91 9a 91 23 86 ad 08 f8 45 2c ed 15 9d 21 47 06 42 73 d4 b6 5c 10 84 4d 81 1e 48 46 4a 43 cd a5 c0 9c f3 23 50 35 63 97 3e 35 c1 fb 44 37 26 47 d3 d0 ca 5b 29 53 ad e8 e5 a1 64 64 56 ce de a6 41 97 71 b4 47 95 22 1e 3d 5d d7 01 2a 6f 07 57 0a d9 fd aa 82 d4 1b dd bd 32 da 6d de 95 09 2a 29 d2 bc 63 20 a6 ac fb 31 6b 4d b2 d5 0c 46 88 14 b5 86 c2 89 e2 e7 33 93 5b 39 b1 9f b5 ff 00 65 30 fa 45 c7 47 ac 25 e7 8b a0 e9 d5 df fc 55 b2 7b 31 b4 e8 da 0b 51 94 d3 c8 0f 80 c1 70 29 80 1e 18 35 b3 b3 ee 13 a5 db 6f 53 ed 6c 4a 51 53 f1 58 Data Ascii: J:jMQa.K6J0wO~oP5/Gz!Lyg{i 4#nKMj#E,!GBs\MHFJC#P5c>5D7&G[)SddVAqG"=]oW2m*)c 1kMF3[9e0EG%U{1Qp)5oSlJQSX
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 7b 85 4a bb ba 75 9d 0c 0f a8 d2 79 0f 9f 79 ea 94 36 86 c1 c6 b3 93 d4 55 b6 c8 1d 75 1a 5e 96 ae 94 83 cc 23 92 06 ee 8f 67 ef 2a ee 86 ef e6 31 58 00 57 2e a0 0a 4d 0e fd d8 90 95 77 a3 f4 ea 2f 8e 50 29 4e 28 a8 ef 5c 47 d0 ea 7b 39 8e f1 48 79 b4 38 83 94 a8 64 1d cd 44 61 d7 de 56 96 db 4e a5 1a 7e ed 29 4f 3a 70 81 c1 b4 76 20 75 96 f2 12 b4 0c a9 3d 9d e2 88 38 3c 0f 71 a5 ac e1 29 24 f8 52 1a 9b 15 f9 cc 6a 61 b7 12 a5 b4 7d f1 4d ba db 6e 34 a0 50 a4 82 92 39 63 1b b4 6c b5 f4 f6 fa a9 1e 64 75 78 d6 4e 68 ee 38 a5 0e 4a 34 ea 79 2d 5e 75 23 07 f7 ca a7 47 25 53 c3 b4 79 53 bd c0 d3 bf 0a 69 7f d1 8a 5c 26 d4 da e3 95 a4 9c 8c 2b 18 a8 fd b0 9d 1f 25 24 d7 ed 58 ad 47 8e 85 21 3a f5 39 ac f3 c7 21 c2 9e 1c b4 d3 c3 b0 79 d3 df 05 33 14 65 f7 50 Data Ascii: {Juyy6Uu^#g*1XW.Mw/P)N(\G{9Hy8dDaVN~)O:pv u=8<q)$Rja}Mn4P9clduxNh8J4y-^u#G%SySi\&+%$XG!:9!y3eP
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: b5 d9 2e a1 ee 35 68 10 b2 2d 3d 8d 63 43 5b bc 68 04 06 cc 8f ba 76 c7 6f 51 dd ea 86 c6 9a 05 02 28 2e 5c 8d 8e 89 a4 51 b4 43 77 7a 77 6d 26 f6 68 ad ad 3e 1f 37 14 3a 2a 59 3c a2 3e 7e a3 7e d0 5b a3 97 89 5b a2 af e0 88 1e d5 ad cf 8a dd 15 d6 f9 a3 d4 a3 d0 ed d2 5b 58 18 df a5 01 b3 2b ee fe 6a 57 96 46 f7 0e e0 a1 32 cd 3b 0d 92 6c 5f ab 65 59 45 c4 ec dd 2e f6 5a 2c 9e 81 10 41 20 8a 23 66 9a da c2 c5 1f 80 21 d3 66 69 a6 33 cd 4e 49 86 41 f8 56 1f 15 d2 30 36 f7 43 81 3f 53 86 2f 2a 0f d4 b3 b0 99 2c f8 ce 02 b7 dd ba f5 aa 63 c3 04 91 70 9b 41 cd e6 16 13 6b 17 18 7e 5b 7f 84 06 cc e3 ec c6 a5 17 1c 9f a4 ac 58 9e d9 21 78 b0 09 37 f5 31 99 43 da 61 04 bc 1b 0a 2b 96 28 9d 23 37 5f c8 91 e0 56 a3 3f 1f 29 de 0d f6 42 c6 6d 43 08 f0 63 7f 84 07 Data Ascii: .5h-=cC[hvoQ(.\QCwzwm&h>7:Y<>~~[[[X+jWF2;l_eYE.Z,A #f!fi3NIAV06C?S/,cpAk~[X!x71Ca+(#7_V?)BmCc
2024-03-27 20:20:23 UTC	577	IN	Data Raw: 01 ec 5f 1f 2f 72 8c aa e8 ce 70 a0 82 4d 02 18 02 08 20 f2 23 63 fd e3 79 ed b0 2c b2 96 56 20 81 56 1a 84 e6 ea dd 1c 82 a5 c0 27 1c 6b 5e 92 d6 3b 1b 8e d4 8e d1 a1 61 18 39 3c 71 ee 6e ce 2d a6 fc b5 a6 6a 32 41 69 78 99 ce e2 6f 47 9a d1 2e ee 2e e2 98 cc db db ac 00 38 f1 a3 df 6f 33 b6 c7 bc e6 ac ca 8b ab 62 c7 00 3a e4 fe b5 ae dd c0 f6 5a 8c 0e 50 c8 8a a6 3f 26 c7 b9 0b 03 70 b8 20 44 7b c4 d4 e1 61 9e 74 86 4d e4 e2 37 87 51 5a 45 b0 b6 b1 8f f1 3f ae 7f 5a ea 4e db 11 f7 87 63 d9 cb 3c 64 60 80 d4 fa 5e e7 37 61 e6 2b ea ef 09 7f 6a 3a 7b f4 90 7c ab e8 12 fe 35 a3 61 3f 8a fc eb e8 57 1f 84 7c ea 75 6b 60 0c aa 40 f1 e6 2a 39 52 63 88 c9 6f 20 6a ea d6 e1 e0 91 44 5d 3a f0 14 aa 59 c4 63 89 27 02 a3 4e ce 28 d3 f0 a8 1f 2f b1 63 dc 7f 3a b7 Data Ascii: _/rpM #cy,V V'k^;a9<qn-j2AixoG..8o3b:ZP?&p D{atM7QZE?ZNc<d`^7a+j:{\|5a?W\|uk`@*9Rco jD]:Yc'N(/c:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49934	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1385	OUT	GET /web/1b96dc175117e75c.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 92668 Connection: close CF-Ray: 86b214ad6fc22896-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 657454 Cache-Control: public, max-age=31556926 ETag: "5f33666c18680e5befc0159fdcbe9c37" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 20 Mar 2024 05:42:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 21 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: HGw3UaawqUWyUguwU/NiOL69s7aX2MNt5KUoKG3e/+GOCl0f6NiTFJUSP5eYVljIiy1tHEPyXmk= x-amz-replication-status: PENDING x-amz-request-id: JGM47BPRQMSPWYQ7 x-amz-server-side-encryption: AES256 x-amz-version-id: l8LUpcm30ca_tnqavR5Ao6dcHCMTgUwI X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	346	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 7a 42 74 68 4c 53 70 50 36 42 6b 50 69 6b 43 6b 68 34 4f 42 6a 25 32 46 52 67 4b 68 43 47 35 78 55 50 6b 38 42 4b 54 41 44 37 6f 63 47 46 30 36 31 52 70 51 63 73 31 34 63 5a 30 34 43 72 57 65 70 33 71 77 63 53 4b 37 62 4a 4f 4e 49 6d 74 71 6d 59 62 74 4f 56 76 64 41 54 51 32 6c 48 72 4f 66 4a 6e 38 55 78 44 72 67 7a 4b 31 47 74 76 32 30 76 45 42 36 54 6c 36 4c 58 31 65 50 76 65 78 6b 31 62 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lzBthLSpP6BkPikCkh4OBj%2FRgKhCG5xUPk8BKTAD7ocGF061RpQcs14cZ04CrWep3qwcSK7bJONImtqmYbtOVvdATQ2lHrOfJn8UxDrgzK1Gtv20vEB6Tl6LX1ePvexk1bg%3D"}],"group":"cf-nel","max_age":604800}N
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 33 36 5d 2c 7b 36 36 34 37 35 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 68 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 33 36 38 29 2c 6e 3d 69 28 34 31 32 37 33 30 29 2c 72 3d 69 28 36 35 37 30 37 30 29 2c 6f 3d 69 28 39 34 35 35 32 32 29 2c 61 3d 69 28 39 32 30 33 33 35 29 2c 6c 3d 69 28 38 34 33 32 36 34 29 3b 63 6f 6e 73 74 20 68 3d 7b 62 6e 3a 73 2e 5a 2c 41 3a 6e 2e 47 2c 71 72 3a 6e 2e 72 2c 69 74 3a 72 2e 5a 2c 71 74 3a 6f 2e 5a 2c 78 74 3a 6f 2e 5a 2e 65 70 2c 44 3a 61 2e Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{664751:(t,e,i)=>{i.d(e,{Z:()=>h});var s=i(94368),n=i(412730),r=i(657070),o=i(945522),a=i(920335),l=i(843264);const h={bn:s.Z,A:n.G,qr:n.r,it:r.Z,qt:o.Z,xt:o.Z.ep,D:a.
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 62 72 6f 77 73 65 72 7c 7c 77 69 6e 64 6f 77 2e 6d 73 42 72 6f 77 73 65 72 3b 69 66 28 74 26 26 74 2e 72 75 6e 74 69 6d 65 26 26 74 2e 72 75 6e 74 69 6d 65 2e 69 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 64 2e 69 6e 66 6f 28 22 4e 6f 74 20 75 73 69 6e 67 20 49 6e 64 65 78 65 64 44 42 20 66 6f 72 20 73 74 6f 72 61 67 65 20 62 65 63 61 75 73 65 20 77 65 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 69 6e 73 69 64 65 20 61 6e 20 65 78 74 65 6e 73 69 6f 6e 22 29 2c 21 31 7d 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 64 2e 69 6e 66 6f 28 22 4e 6f 74 20 75 73 69 6e 67 20 49 6e 64 65 78 65 64 44 42 20 66 6f 72 20 73 74 6f 72 61 67 65 20 64 75 65 20 74 6f 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f Data Ascii: indow.browser\|\|window.msBrowser;if(t&&t.runtime&&t.runtime.id)return this.nd.info("Not using IndexedDB for storage because we are running inside an extension"),!1}return!0}catch(t){return this.nd.info("Not using IndexedDB for storage due to following erro
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 65 2b 22 20 69 6e 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 72 2e 65 64 2e 73 64 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 7d 2c 61 2e 6f 6e 73 75 63 63 65 73 73 3d 28 29 3d 3e 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 26 26 73 28 29 7d 7d 29 2c 6e 29 7d 67 65 74 49 74 65 6d 28 74 2c 65 2c 69 29 7b 69 66 28 21 74 68 69 73 2e 72 64 28 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 64 28 28 6e 3d 3e 7b 69 66 28 21 6e 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 72 65 Data Ascii: e+" in "+t+" on indexedDB "+r.ed.sd),"function"==typeof n&&n()},a.onsuccess=()=>{"function"==typeof s&&s()}}),n)}getItem(t,e,i){if(!this.rd())return!1;const s=this;return this.dd((n=>{if(!n.objectStoreNames.contains(t))return void s.nd.error("Could not re
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 69 2e 65 64 2e 73 64 29 7d 3a 69 2e 6e 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 64 65 6c 65 74 65 20 72 65 63 6f 72 64 20 22 2b 65 2b 22 20 66 72 6f 6d 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 69 2e 65 64 2e 73 64 2b 22 20 2d 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 62 6a 65 63 74 53 74 6f 72 65 22 29 7d 29 29 7d 4a 74 28 74 2c 65 29 7b 69 66 28 21 74 68 69 73 2e 72 64 28 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 64 28 28 73 3d 3e 7b 69 66 28 21 73 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 69 2e Data Ascii: n indexedDB "+i.ed.sd)}:i.nd.error("Could not delete record "+e+" from "+t+" on indexedDB "+i.ed.sd+" - "+t+" is not a valid objectStore")}))}Jt(t,e){if(!this.rd())return!1;const i=this;return this.dd((s=>{if(!s.objectStoreNames.contains(t))return void i.
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 75 64 3a 22 66 61 6c 6c 62 61 63 6b 44 65 76 69 63 65 22 2c 4d 74 3a 22 63 61 72 64 55 70 64 61 74 65 73 22 2c 6f 65 3a 22 6f 70 74 4f 75 74 22 2c 24 72 3a 22 70 65 6e 64 69 6e 67 44 61 74 61 22 2c 4b 6e 3a 22 73 64 6b 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 53 69 67 6e 61 74 75 72 65 22 7d 2c 73 65 3a 31 7d 7d 7d 2c 39 32 30 33 33 35 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 76 6f 69 64 20 30 21 3d 3d 73 2e 7a 67 7c 7c 28 73 2e 7a 67 3d 21 21 74 29 2c 73 2e 44 67 7c 7c 28 73 2e 44 67 3d 21 30 29 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 44 67 3d 21 31 2c 73 2e 7a 67 3d Data Ascii: ,ud:"fallbackDevice",Mt:"cardUpdates",oe:"optOut",$r:"pendingData",Kn:"sdkAuthenticationSignature"},se:1}}},920335:(t,e,i)=>{i.d(e,{Z:()=>n});const s={init:function(t){void 0===t&&void 0!==s.zg\|\|(s.zg=!!t),s.Dg\|\|(s.Dg=!0)},destroy:function(){s.Dg=!1,s.zg=
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6e 41 70 70 4d 65 73 73 61 67 65 73 49 6e 4e 65 77 54 61 62 22 2c 65 6e 3a 22 6f 70 65 6e 4e 65 77 73 46 65 65 64 43 61 72 64 73 49 6e 4e 65 77 54 61 62 22 2c 55 69 3a 22 72 65 71 75 69 72 65 45 78 70 6c 69 63 69 74 49 6e 41 70 70 4d 65 73 73 61 67 65 44 69 73 6d 69 73 73 61 6c 22 2c 41 6f 3a 22 64 6f 4e 6f 74 4c 6f 61 64 46 6f 6e 74 41 77 65 73 6f 6d 65 22 2c 53 6f 3a 22 73 64 6b 46 6c 61 76 6f 72 22 2c 74 6e 3a 22 6f 70 65 6e 43 61 72 64 73 49 6e 4e 65 77 54 61 62 22 7d 7d 2c 33 33 34 37 39 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 41 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 73 3d 69 28 34 34 37 39 39 33 29 2c 6e 3d 69 28 38 35 34 38 29 2c 72 3d 69 28 36 36 34 37 35 31 29 2c 6f 3d 69 28 39 31 37 36 31 35 29 2c 61 3d 69 28 37 30 33 39 30 35 Data Ascii: nAppMessagesInNewTab",en:"openNewsFeedCardsInNewTab",Ui:"requireExplicitInAppMessageDismissal",Ao:"doNotLoadFontAwesome",So:"sdkFlavor",tn:"openCardsInNewTab"}},334790:(t,e,i)=>{i.d(e,{A:()=>l});var s=i(447993),n=i(8548),r=i(664751),o=i(917615),a=i(703905
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6a 72 2c 28 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 63 6f 6e 73 74 20 6c 3d 61 2e 6c 61 73 74 43 6c 69 63 6b 2c 68 3d 61 2e 74 72 61 63 6b 69 6e 67 53 74 72 69 6e 67 3b 6e 2e 5a 2e 44 2e 69 6e 66 6f 28 60 46 69 72 69 6e 67 20 70 75 73 68 20 63 6c 69 63 6b 20 74 72 69 67 67 65 72 20 66 72 6f 6d 20 24 7b 68 7d 20 70 75 73 68 20 63 6c 69 63 6b 20 61 74 20 24 7b 6c 7d 60 29 3b 63 6f 6e 73 74 20 75 3d 73 2e 5a 50 2e 6d 72 28 29 2e 6b 72 28 6c 2c 68 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 6e 2e 65 72 28 29 2e 6a 65 28 72 2e 5a 2e 76 72 2c 5b 68 5d 2c 75 29 7d 3b 73 2e 5a 50 2e 6d 72 28 29 2e 7a 72 28 63 2c 63 29 2c 65 2e 62 72 28 74 2e 24 74 2e 6a 72 2c 69 29 7d 29 29 2c 65 2e 4a 74 28 74 2e 24 74 2e 24 72 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: jr,(function(i,a){const l=a.lastClick,h=a.trackingString;n.Z.D.info(`Firing push click trigger from ${h} push click at ${l}`);const u=s.ZP.mr().kr(l,h),c=function(){o.n.er().je(r.Z.vr,[h],u)};s.ZP.mr().zr(c,c),e.br(t.$t.jr,i)})),e.Jt(t.$t.$r,(function(t){
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 24 3d 74 2e 68 74 6d 6c 5f 69 64 2c 4c 3d 74 2e 63 73 73 3b 69 66 28 6e 75 6c 6c 21 3d 24 26 26 22 22 21 3d 3d 24 26 26 6e 75 6c 6c 21 3d 4c 26 26 22 22 21 3d 3d 4c 7c 7c 28 24 3d 76 6f 69 64 20 30 2c 4c 3d 76 6f 69 64 20 30 29 2c 65 3d 3d 3d 6c 2e 5a 2e 65 73 7c 7c 65 3d 3d 3d 73 2e 5a 2e 65 73 2e 79 65 29 55 3d 6e 65 77 20 6c 2e 5a 28 69 2c 63 2c 66 2c 67 2c 70 2c 6d 2c 76 2c 62 2c 5a 2c 79 2c 77 2c 53 2c 44 2c 49 2c 5f 2c 41 2c 6b 2c 52 2c 71 2c 4f 2c 54 2c 4e 2c 45 2c 50 2c 42 2c 24 2c 4c 29 3b 65 6c 73 65 20 69 66 28 65 3d 3d 3d 72 2e 5a 2e 65 73 29 55 3d 6e 65 77 20 72 2e 5a 28 69 2c 63 2c 66 2c 67 2c 70 2c 6d 2c 76 2c 62 2c 5a 2c 79 2c 77 2c 53 2c 44 2c 49 2c 5f 2c 41 2c 6b 2c 52 2c 71 2c 4f 2c 54 2c 4e 2c 45 2c 50 2c 42 2c 78 2c 24 2c 4c 29 3b Data Ascii: ,$=t.html_id,L=t.css;if(null!=$&&""!==$&&null!=L&&""!==L\|\|($=void 0,L=void 0),e===l.Z.es\|\|e===s.Z.es.ye)U=new l.Z(i,c,f,g,p,m,v,b,Z,y,w,S,D,I,_,A,k,R,q,O,T,N,E,P,B,$,L);else if(e===r.Z.es)U=new r.Z(i,c,f,g,p,m,v,b,Z,y,w,S,D,I,_,A,k,R,q,O,T,N,E,P,B,x,$,L);
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6f 64 65 3a 65 7d 3b 72 65 74 75 72 6e 20 68 2e 5a 2e 47 28 66 2e 5a 2e 41 2e 50 65 2c 69 29 7d 47 28 74 2c 65 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 64 2e 5a 3b 6c 65 74 20 61 3b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 2e 5a 29 61 3d 7b 74 72 69 67 67 65 72 5f 69 64 73 3a 5b 74 2e 74 72 69 67 67 65 72 49 64 5d 7d 3b 65 6c 73 65 7b 69 66 28 65 3d 3d 3d 66 2e 5a 2e 41 2e 52 65 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 2e 5a 26 26 65 3d 3d 3d 66 2e 5a 2e 41 2e 48 65 29 7b 69 66 28 21 74 2e 6b 28 73 29 29 72 65 74 75 72 6e 20 66 2e 5a 2e 44 2e 69 6e 66 6f 28 22 54 68 69 73 20 69 6e 2d 61 70 70 20 6d 65 73 73 61 67 65 20 68 61 73 20 61 6c 72 65 61 64 79 20 72 65 63 65 69 76 65 64 20 61 20 63 6c 69 63 6b 2e 20 49 67 6e 6f 72 69 Data Ascii: ode:e};return h.Z.G(f.Z.A.Pe,i)}G(t,e,i,s){const n=new d.Z;let a;if(t instanceof r.Z)a={trigger_ids:[t.triggerId]};else{if(e===f.Z.A.Re\|\|t instanceof o.Z&&e===f.Z.A.He){if(!t.k(s))return f.Z.D.info("This in-app message has already received a click. Ignori

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49939	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1293	OUT	GET /cdn-cgi/image/format=auto,w=264/4d134638-a29e-44d6-af9a-c70eb4c0dd43/websites_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1108	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 13904 Connection: close CF-Ray: 86b214afce436fb6-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cfuG6hbCRrIe5YiBoy4QFHgY_0ul9FdNgUaancoXMGDQ:5cb4ea6b93f6fa69260d1f9412ecec9e" Last-Modified: Wed, 15 Nov 2023 05:47:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=33+0 c=1+28 v=2024.3.2 l=13904 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(261;u=3;i=?0 1861;u=5;i=?0 5639;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4QH5P9%2F95qKu8wZlSlOBulwcCjl4Ava6y78iIIUayfI1FnrLsibZ1yHyG7FtzU8Yy2%2FKeFaHYPFqYMIMt8OOUXdAlS%2FiLCJmrlHLPyR2lklh7gqZJ3FwN9xMeFAMhurNVdUcsMGk%2FCSvjmBjVOtJV7l%2Few8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	261	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 04 06 07 03 08 09 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 04 01 03 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 f4 7d 82 b8 30 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"6}0
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 84 40 00 00 00 00 00 00 00 00 00 00 00 14 51 85 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 01 44 55 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 15 50 55 41 55 05 54 05 ac 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 2e 5a 02 20 0c 8b b1 0c 56 51 8c 56 50 c5 65 0c 56 50 c5 65 0c 56 55 4c 46 58 c4 64 d1 8c 76 4d 4c 56 57 ae 33 80 90 b1 9c 26 45 93 c7 93 d0 cf 9b d0 79 56 d4 26 e9 5c cf b7 ef e2 ec 5b a6 e3 2b c0 a7 f3 ef 8f 5c e4 5e 8b 8f 55 17 aa d5 41 55 05 54 15 ad a2 98 be f1 4a b9 57 e1 e4 4a 8e 6e 74 74 a6 8b 59 1b bc 77 af 1b d1 fb 6a bb 2c 1c a7 a0 40 f4 08 8f 4b cd d2 ef b7 66 e8 ee d6 1b 82 a6 ee 20 a3 cb 7b 6a 77 0e 1d dc ac f0 7b 3f 4f f9 6d cd e7 Data Ascii: @QTPUAUTPUAUTPUAUTPUAUDUPUAUTPUAUTPUAUTPUAUT.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z.Z VQVPeVPeVULFXdvMLVW3&EyV&\[+\^UAUTJWJnttYwj,@Kf {jw{?Om
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 5b 1a 4a 22 d8 c4 a2 2e a4 9a 30 49 a3 7d 59 cd 19 1e 5e 35 b6 e5 b1 2e 84 b2 58 d4 63 29 88 67 2d 87 ef 38 fa 8b 3a 88 4c 33 67 6b 03 f3 ad 4a fa 2b 94 fd 10 fc ee fd 11 e7 6a db 07 3b 47 3d d6 a6 62 2b d7 7a d9 7c 70 af 9d 31 9f 7b a1 e5 f3 8b ab 65 d2 8f 45 93 80 9e d9 73 4d b6 cb 3e 1f f4 1e 75 f3 b6 7c 0f be e0 c6 f7 df 9e 30 ec 69 fd 0d b2 36 4b e6 be 92 ca d9 e7 29 6f da a6 cf a0 7d c3 e7 bc 21 4a 67 45 cd 71 a6 c7 22 1e b2 cb f4 44 e7 eb db 07 3a bf 32 89 2b 56 bf cc 8b e5 fd 7c a1 dc c4 e8 e1 d0 3a 59 73 97 be 4e 96 25 a4 ea c7 c5 3e 83 f3 7f a1 f4 ae 1c 5e bc 46 5f 58 ef 27 ce 7a de 7e 65 5d fb df 39 3e e1 f3 ff 00 95 21 4a 1d 38 a1 aa 7f ff c4 00 38 10 00 00 06 02 01 01 05 05 07 03 05 01 01 00 00 00 00 01 02 03 04 05 06 11 07 10 12 13 14 21 31 Data Ascii: [J".0I}Y^5.Xc)g-8:L3gkJ+j;G=b+z\|p1{eEsM>u\|0i6K)o}!JgEq"D:2+V\|:YsN%>^F_X'z~e]9>!J88!1
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2e 99 9a b0 4f 39 8b df cc aa 94 d3 ec 39 7d c7 d9 aa 1b 4d b3 54 fc 57 4e e7 8a 77 2c cc a2 df d9 d7 bb 05 19 56 17 97 43 69 8b e6 68 f8 c2 b5 c4 4c 5e 75 97 b7 92 49 8c c4 39 37 f4 cb e3 84 56 27 12 ba b8 c6 d3 32 ce 3a b9 23 15 98 ae d4 da c9 1c 7d 98 48 5c 06 51 06 2e 27 9f 42 65 de 48 b6 ae b8 b6 82 fd 79 f9 91 8c eb 21 a6 b3 c5 eb 22 42 fc 9d f5 ad f8 08 41 92 d9 90 8a 47 d9 09 fd 49 19 29 ed 87 cc f1 c7 8d 4c be c1 be e1 c2 b3 6d d4 cf 2d 1a 64 32 6e 13 88 4b c8 ed eb 4b 43 4e 13 a9 d9 75 c3 f3 92 c6 e2 bd 02 43 97 1c 55 62 7d ec 86 b3 0c 0f 1e 4b 8b a5 b6 b3 93 71 63 2e 7c 9f cf ac f8 08 41 82 11 cb b2 82 0d fe e2 06 4a af e9 bc 43 1f 7b ba 94 43 20 6f b0 64 b1 01 ef 13 0c d0 a8 ae aa 3b ee b0 a5 2b b9 74 d0 ac 3e 24 19 f9 1d 7d 7c fc eb 1b 8b 8d Data Ascii: .O99}MTWNw,VCihL^uI97V'2:#}H\Q.'BeHy!"BAGI)Lm-d2nKKCNuCUb}Kqc.\|AJC{C od;+t>$}\|
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 25 97 96 3d 45 91 1b 18 0e 6b 5b 3b 8e 30 b7 9e 97 0e 5e 71 86 51 50 c7 2c 8a 94 ba 98 c7 d1 ba ba e0 5f a7 41 47 d9 49 a8 ee 1c ed 2f b2 08 84 22 db c9 16 aa fc 04 5d 21 79 28 4b 3d bc a0 cf 92 d2 24 fe e2 42 3c da 50 a6 3d f7 c4 27 27 b5 0a 51 0a 9b 03 aa b3 87 34 3d 8a ce 7f 72 28 d8 c7 32 e6 da 75 b4 95 16 66 ae d9 a9 18 f6 5c 4b ef 07 b0 b2 e5 11 12 bd 83 95 2d 04 da fd 83 94 2f c9 6c e3 57 67 e4 e5 94 98 c6 dc 2a f8 a8 2d 6c 86 21 96 2f 01 ba 7e 7b b9 25 6c 46 27 bd 96 cb c9 64 cc 27 ea b1 37 3a 98 c7 4b 75 35 c3 cf d0 4b 5e 99 50 b0 73 bc 7c c1 0a f2 fe a9 18 b2 56 d4 92 e9 0f f5 18 90 7b 79 61 af d4 42 47 ee 10 6f f6 94 29 7f fb 07 cb b4 c3 c9 06 0b f0 a8 94 94 c8 7c 8f 65 df 3d f8 4c 25 e7 82 5e 78 25 d7 82 1e 7b c8 1a 94 bd 1a d1 fd cd 29 33 d0 Data Ascii: %=Ek[;0^qQP,_AGI/"]!y(K=$B<P=''Q4=r(2uf\K-/lWg*-l!/~{%lF'd'7:Ku5K^Ps\|V{yaBGo)\|e=L%^x%{)3
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: cf ba 7f 85 58 5c fb a7 f8 55 85 cf ba 7f 85 58 5c fb a7 f8 55 85 cf ba 7f 85 58 5c fb a7 f8 55 85 cf ba 7f 85 58 5c fb a7 f8 55 85 cf ba 7f 85 58 5c fb a7 f8 55 85 cf ba 7f 85 58 5c fb a7 f8 56 cf b9 27 fc 97 f8 56 ce ba f7 2f f0 ad 9f 73 ee 5f e1 56 37 1e e9 fe 15 65 71 ee 9b e1 56 37 1e e9 be 15 61 73 ee 5f e1 5b 3e eb dc bf c2 b6 4d e3 0e f1 6f 21 fe 42 b6 45 f7 d9 a4 f8 56 cb bb 03 fc 87 f8 55 9c e3 db 1b 0f fd 55 b4 bf c0 6a 09 3f 80 d4 12 7f 01 a8 24 fe 03 e2 46 1e 59 35 88 36 a1 17 bf da 6a dd e6 9d 87 92 bc 00 ef 27 90 a8 ed e4 6c 67 aa 49 b2 d5 13 c5 2a 1c 3a 38 20 83 44 d1 34 4d 13 44 d1 34 4d 13 44 d1 34 c7 34 58 77 6b 4c 69 8d 13 46 89 ac ef 1f ba 9f 74 20 c7 b4 f3 35 36 3d a6 a4 76 61 91 9d 46 94 d4 7a 0f 8b fa 3a 54 4a 64 bb bd 48 e5 91 b8 Data Ascii: X\UX\UX\UX\UX\UX\V'V/s_V7eqV7as_[>Mo!BEVUUj?$FY56j'lgI*:8 D4MD4MD44XwkLiFt 56=vaFz:TJdH
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 56 0d 73 60 5d 62 b9 1a 80 19 46 41 c8 e1 5e 0b 33 3f 36 29 0c 95 b0 84 13 98 d9 c0 31 75 6d 85 e6 19 0d 5d 62 d6 da e9 24 eb 5f 92 32 e7 5a ba 49 e2 4b 40 8c c9 a8 0c 18 9a ee 35 b4 22 9a 78 e5 80 b2 29 d4 05 8c 83 f3 be 89 3a 0d 68 72 28 f1 61 5a 86 1f cb 5a d0 3f 1f 68 ae 5d af aa b8 f3 a3 a5 71 e7 47 a7 67 89 ed 65 90 b9 64 38 70 4f 78 3a 11 5b 3b aa 73 cb a8 74 fc 15 b2 dd e7 29 8c a4 45 3e a2 ef 58 eb 67 6c 90 38 28 1a 05 1e a0 3f c0 7a 15 e9 3c c5 7a 41 47 9d 1d 51 c8 cd 6a 54 7d d4 7b 39 af 21 e8 b8 82 e1 9a 3c a3 6e 9c 91 d9 a3 21 82 68 03 83 23 6f 1d e0 70 68 76 e5 91 51 7d ac 71 4d 39 b9 81 03 e1 9f 78 10 3c ae 86 9c 6e 49 26 e7 56 fb a3 72 31 ad 02 14 92 54 1e ee 5d 39 dc 9a e2 28 df 07 07 0c c0 1a 32 ff 00 6e 25 2f d6 3e f7 93 e3 4a 56 23 1b Data Ascii: Vs`]bFA^3?6)1um]b$_2ZIK@5"x):hr(aZZ?h]qGged8pOx:[;st)E>Xgl8(?z<zAGQjT}{9!<n!h#ophvQ}qM9x<nI&Vr1T]9(2n%/>JV#
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 95 46 80 0a ea 8f 54 f1 ae eb 9c 12 d2 54 b6 cd d6 00 61 c8 75 df 1d 9c 93 bc a3 77 56 1a 1a 9e d8 35 ac c6 29 41 de e2 aa 5f 40 06 48 21 4e 31 dd 4f 6c 31 83 be 72 17 52 e3 bb f5 2a 7b 65 8c 2c c5 99 89 01 3a a6 dd 21 8e 39 d5 c4 18 84 0c a8 0d 92 c1 fa b2 a3 4d 70 79 f0 a3 b8 eb a8 65 d0 8f 58 22 86 f4 f2 99 6d ee 4e 31 bf 24 21 48 93 da ca c3 7b d6 2b 8d 5d 45 b4 61 1b 62 01 7d 69 04 05 26 b1 32 39 82 44 3a 92 e1 01 ed d5 e5 81 9d fc 2c 87 6b 38 68 d0 ca 7e 53 aa da 36 75 22 5c 1a da 19 87 68 ed f8 61 86 d2 dd b7 6d 62 89 91 92 64 44 1a 79 68 4f 8b e8 12 8d 1a ef e9 3e 2f 9b d1 dc 2b d1 35 45 d6 2c 4f db 8b 80 92 36 05 5d 3f d4 a4 8a 46 da 76 2d ac 66 0e dc d1 8f 32 68 fc a5 71 5b 0f 6a a2 b8 d4 2c 12 80 6b 63 ed 72 5c 86 6c c3 2e a4 70 35 b1 76 a0 7d Data Ascii: FTTauwV5)A_@H!N1Ol1rR*{e,:!9MpyeX"mN1$!H{+]Eab}i&29D:,k8h~S6u"\hambdDyhO>/+5E,O6]?Fv-f2hq[j,kcr\l.p5v}
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 78 43 b4 03 e7 39 f9 43 b7 dc 49 a2 86 ea 5d 2d ae 54 05 df 3e 6b 8f 10 e0 a9 cd 7e 72 83 fb e9 ca 4f 34 8b 0c 6f e6 ef 6a 4f b7 02 89 24 f1 3d 07 c4 fa 32 df f0 f4 fe af e1 f1 18 2a 01 92 c7 40 29 d5 94 f0 65 39 06 af 63 8e e6 e4 ff 00 65 11 3d a6 f1 3d 29 af 30 f4 31 0b 1c 6e e4 8e 5b a0 9c d0 79 e5 9a 46 79 1e 53 92 4b 1c d6 91 13 d8 51 c8 52 63 97 1a 90 a4 d0 ba c9 1b 0e 21 94 e4 1a 00 7c a6 da 39 1b 1c 37 88 d4 7e ff 00 13 d1 ad 7e 9c 9f 81 a8 8c a9 c6 39 d4 8a 3d a6 a5 38 2d db c0 d7 1f 5f 89 f4 65 bf e1 e9 fd 5f c3 d2 81 a4 08 c5 14 9c 02 c0 68 0d 42 61 59 63 ea 8c 11 8d c3 1b 29 ce 41 e2 6b 68 dc 46 8a dd 61 8f 88 04 72 19 a2 af 79 bf 1c 83 cd 4d ce 00 0e ea 58 c5 a6 54 49 08 4d 37 79 9c d5 ac f0 5b 49 23 47 05 dc 9e 43 91 df dd 44 10 78 11 a8 af Data Ascii: xC9CI]-T>k~rO4ojO$=2*@)e9ce==)01n[yFySKQRc!\|97~~9=8-_e_hBaYc)AkhFaryMXTIM7y[I#GCDx
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: a4 11 31 8d b6 2c be 13 ce b5 04 9e 7f 27 ad 6e 5a e9 f0 11 43 47 ec 63 c5 8c 9a 8f 47 bd 64 42 35 ab 8e 43 a5 66 b4 53 fc 59 fe 41 fb d4 c7 2d 48 3c 2e 7a 90 28 f2 8e b9 a8 ac f2 3d 2a fb 45 bd 97 5d 2c 91 1f 32 9a 58 e6 91 b6 c6 50 57 94 56 37 77 02 da 6b 48 cb 48 a1 d1 b1 b7 85 c5 5d 69 2d 36 95 6b 6f 19 02 58 02 b2 67 97 10 e7 5e 71 a9 b4 7d da 68 31 ac c4 63 bc 25 78 01 eb 57 d6 7a 8b df 69 73 41 1a f1 43 13 71 11 b2 71 74 f8 1a bd f4 be ac 82 cc e9 c6 da 36 61 de 48 ce 08 c0 e9 57 27 51 b6 97 81 2c 12 ea cf 81 55 50 60 32 e0 63 db 56 9a 7d db 1d 5a e3 cc c5 ba cf 03 24 76 e0 8d ce 39 d3 69 b7 53 79 39 1d 9f 07 0c e1 07 84 f5 0d 9c 52 6a 7a b2 22 29 d0 a4 25 40 04 f7 80 76 68 e7 12 cf f2 53 ee c6 86 c8 83 a9 cd 7f 4a 52 fa a6 87 64 a3 1c 62 bb e8 e3 Data Ascii: 1,'nZCGcGdB5CfSYA-H<.z(=*E],2XPWV7wkHH]i-6koXg^q}h1c%xWzisACqqt6aHW'Q,UP`2cV}Z$v9iSy9Rjz")%@vhSJRdb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49938	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1292	OUT	GET /cdn-cgi/image/format=auto,w=264/122beb6f-66f6-41d6-b594-03ce5147989e/ig_post_en_desktop.jpg HTTP/1.1 Host: content-management-files.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1108	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: image/jpeg Content-Length: 11308 Connection: close CF-Ray: 86b214afc9989c6c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: public, max-age=432000 ETag: "cf6GFgbQY6rk5QOlf3LoAl_2Cbul9FdNgUaancoXMGDQ:e7f0cd66ef02d5f56fda31585754253d" Last-Modified: Wed, 15 Nov 2023 05:41:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept cf-bgj: imgq:85,h2pri cf-resized: internal=ok/h q=0 n=20+0 c=0+21 v=2024.3.2 l=11308 content-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none' priority: u=1;i=?0,cf-chb=(262;u=3;i=?0 1785;u=5;i=?0 5255;u=6;i=?0) x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0u%2FflHT1ieiM4tw53%2Fgr%2FegHPhvoRZZSVQ1J1ZEzQVpB%2BoZHNhx2LOBMrKWwiXsuhqgNZvQt1fz7LVFAI3FMGMEfpWMUgmqIRY6iJGgCQSav83lsstWCzF9x2htwFe6TjOJ5uPY%2FZGXTyejMIAHQMDt74u0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:23 UTC	261	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 68 01 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 37 00 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 06 07 08 03 04 09 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 08 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 de 42 1f b5 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}h"7B
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: a2 a2 50 25 02 50 25 02 50 25 02 50 25 02 50 25 02 50 25 02 50 25 02 50 0a 44 4d 25 d5 29 29 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 28 2b 08 52 b2 85 52 81 28 12 81 28 12 81 28 12 81 28 12 81 28 12 81 28 12 81 28 51 28 51 13 44 ab 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 52 91 2a 41 12 a8 00 00 00 f9 54 fa 98 ad d2 b6 5d 94 57 4b c1 50 00 00 00 00 00 81 4c d3 52 e4 c0 98 00 13 05 30 1e 63 ba 6e 5e 97 c9 f4 b7 c5 bd bc 7a 2e 37 44 5c 73 7e 7b e7 bd 07 7b 64 dc c7 31 73 dd 7d 7e e2 3f a3 1e c7 7e 5c 78 76 ac b9 fb 91 c7 5b 4f 4b 73 79 3c fd 30 c8 26 0a cc 00 10 85 11 34 ca b2 81 28 12 81 30 f8 16 f1 ef 49 69 8d f7 de 7c ed 8a fc 17 bb 2f 47 cd fc f8 f6 43 e3 b7 37 84 58 Data Ascii: P%P%P%P%P%P%P%PDM%))RRRRRRRRRRRRRR(+RR(((((((Q(QDRRRRRRRRRRRRRRR*AT]WKPLR0cn^z.7D\s~{{d1s}~?~\xv[OKsy<0&4(0Ii\|/GC7X
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: c5 2b f0 8b 96 f9 6c 37 1b 0e 96 e6 2f 85 5e ac 98 37 ac 5d 01 cf dd 11 9b 77 d9 0a 6f ca 05 2a 44 7a 79 fa 2e 00 00 00 02 e7 ce fb e6 c1 48 4e 51 b7 e7 36 09 08 fc 7a 8b e5 39 35 ac 9b 6b 01 e9 ab 5b 36 63 e7 d7 ba cd 8b 5d f0 cd 5d dc 7b cb ce 8b 73 da ba 27 9d ba 27 26 f8 53 7c 0a 10 29 f5 15 90 a0 00 00 04 5d c4 7e 37 8b 97 c3 fa fb 18 ee fa f3 61 4f 7f 8c d8 d6 c4 70 c3 57 7a c1 f2 94 c9 66 e9 13 2e ec 8a 48 a0 3c c2 ef ff c4 00 31 10 00 00 06 02 01 02 05 04 02 01 04 03 00 00 00 00 01 02 03 04 05 06 00 11 07 12 13 08 10 14 20 21 15 30 31 41 22 40 33 23 24 50 60 32 34 35 ff da 00 08 01 01 00 01 08 00 ff 00 b1 87 fc 00 e6 f3 79 bc de 6f 37 9b cd e6 f3 79 bc de 6f 37 9b cd e6 f3 79 bc de 6f 37 9b cd e6 f3 79 bc de 6f 37 9b cd e0 8f fc 08 ff 00 d8 c7 fe Data Ascii: +l7/^7]wo*Dzy.HNQ6z95k[6c]]{s''&S\|)]~7aOpWzf.H<1 !01A"@3#$P`245yo7yo7yo7yo7
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: c5 9f 1b 48 a4 1c 26 d8 c7 94 5d 61 f6 6b 3f 1e cd e6 f3 7e cd e3 97 7a 20 86 72 33 f0 f4 6f 8b 9e 17 1a ea 16 d4 ef 2f 4a f7 6c cf 03 13 0c 26 07 92 aa 95 22 18 e6 8a 92 45 f3 30 72 dc e8 30 93 4b 6d 5d cb bf ad 4f 21 22 93 27 08 49 b6 6c f5 bb f6 64 90 66 b3 73 c2 c5 ae 94 d4 60 a9 e2 81 f0 25 5a ae b2 ce 13 40 fe 9a 59 71 cd e6 f3 79 bc 1f 9c d7 96 fe c3 f4 04 e9 9c e5 e4 45 4e 25 54 83 e1 c9 88 36 e3 92 2f 96 35 7b f6 19 93 e2 78 4c 0c de 80 76 a3 e2 2a b8 89 a6 5f 48 53 8c 8c bb 56 16 9a dd 8d 70 04 e5 e1 6d 0e 9b 98 0d c6 16 73 a4 f9 7a f3 b3 06 46 17 6f 8c 7c f1 48 f4 0f 29 54 60 14 79 d6 71 95 56 e2 81 25 e7 d7 33 93 be a8 b8 5d 64 1e 82 be dd 6f 07 ec 06 73 53 04 19 a1 18 ba 5c 38 c8 23 b8 ca aa 4c 5d c0 b8 76 e9 61 4c 70 be 4e 8e 25 41 5d 3a 50 Data Ascii: H&]ak?~z r3o/Jl&"E0r0Km]O!"'Ildfs`%Z@YqyEN%T6/5{xLv*_HSVpmszFo\|H)T`yqV%3]dosS\8#L]vaLpN%A]:P
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: ce 3d 54 01 69 64 bd c7 fd 66 f0 be ee 6a 41 a2 11 d1 87 4f 85 18 0c 7f 19 55 48 3e 6a 20 8a a1 a5 24 29 b5 79 4f 97 8e 38 82 9c a8 1b b0 f3 85 8a 29 1c ac 64 3c 3e 5b 48 27 51 09 be 1d e4 38 d4 8c 74 e4 6b 76 28 cd fd 46 35 31 58 57 28 78 7f 65 e9 a0 25 55 ce 77 7c 0f b9 59 d2 41 c1 11 67 49 84 c4 a9 d3 0d 81 b2 50 c5 29 54 d4 c8 80 ac 6c a9 3c f4 73 e9 14 7d a6 fd 79 06 6f 37 9b cd e6 f3 9c d7 ff 00 4e 05 00 88 7e 8d 47 8d 61 5c af 2f 70 b2 4e bb 32 cb d5 39 26 7a 0d e2 04 76 dd 74 9c a0 8a e9 7b 8d fc 8a 25 17 d5 8a ec 96 fd 64 4c 24 54 1b 73 b6 8c e4 47 60 ff 00 92 ee 6e 49 44 83 1a fd 5a 22 3c eb 98 52 4c c2 0f 8c 1d 26 ea 96 2e d5 36 84 4e dd c2 4b 02 0a 82 c8 a2 a8 6f 37 9b cd e1 bf 5f 63 99 36 a5 9a be 88 df e2 15 90 a3 b9 6a da 29 e9 23 df 22 ba Data Ascii: =TidfjAOUH>j $)yO8)d<>[H'Q8tkv(F51XW(xe%Uw\|YAgIP)Tl<s}yo7N~Ga\/pN29&zvt{%dL$TsG`nIDZ"<RL&.6NKo7_c6j)#"
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: c3 d8 8a 4f 76 da 29 01 e6 64 06 b6 2d b6 4f 3a 2e e7 ed c5 0b 98 0f e0 97 3f ba b6 cb 83 cc 25 8f 3f 2a bb b3 97 f9 8a d6 cb e5 40 e7 89 d5 ab 64 dd 47 8e 39 89 aa 59 21 0f 8d e1 f5 78 53 96 63 c4 93 93 56 41 a4 45 4c 11 23 05 25 06 14 95 d4 69 47 57 99 68 68 96 6e 7f d4 93 cc b8 cd 34 11 7b 4e 6b 8d de d4 b8 7f f4 c0 4a d9 ec e2 29 0a 86 57 c1 38 a8 e7 8b d6 a1 87 ba af e3 07 a1 b2 bf 3a b9 8d ff 00 2b 83 e0 ea 3a 0d 6c fb 79 41 fb f1 a9 ad 87 02 9e 98 81 8c fb 56 a5 bc b7 27 a2 40 e3 d8 d5 b4 9e e7 be de 77 c3 a0 52 a2 2a fe ea da 31 ec 2f e6 47 ed 6f b2 7f 91 6b 8c d0 4b 72 7f 55 c9 af 4a 67 3e fa b7 77 18 cf 8a 33 4a 71 9c 64 8d 2b 43 d5 a5 59 5d 80 a7 0a c6 60 01 a7 89 d1 08 0d 83 ca e0 9e 92 28 da 4a 54 03 bb 93 1b 55 a4 aa e3 57 44 35 7e d1 1c e3 Data Ascii: Ov)d-O:.?%?@dG9Y!xScVAEL#%iGWhhn4{NkJ)W8:+:lyAV'@wR1/GokKrUJg>w3Jqd+CY]`(JTUWD5~
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: e2 68 e3 35 a9 2f 1a 0e d3 8a 38 11 6c e1 10 ec 40 94 6b 3e 3c ed 71 22 fd f4 39 24 1e c6 ad 6c 2e ad e4 bb 8d 87 00 c4 00 47 6e f6 6a 49 fb cf be e5 dc 8e 01 99 24 3b d5 3d ca 1d 9a 10 dd da dc 60 30 46 e7 15 75 df ed b5 63 86 e2 13 c9 ee 63 94 6c 00 69 22 96 ed d5 1d 39 06 25 18 49 9c 6a c0 54 66 39 ed ca ab 0c 83 82 75 e6 a3 ac 77 27 de a2 b4 e5 a0 93 1d 82 9b c7 b4 b9 96 2f 6e a0 d7 a4 68 16 10 5c de cc 3d 7b fc 90 ae 60 4d 64 11 9c 11 52 16 e4 66 ca e7 a1 c7 96 3c 45 31 c8 06 86 56 7d a9 6a 08 fc 25 c1 a3 8e 52 48 a3 f6 b5 1a b5 68 56 c2 dc c5 ab 03 bc 74 19 15 33 2c 90 a4 82 d5 b7 0b 64 30 38 5c 8c e3 06 b6 c2 6c dd a3 14 c6 48 65 7c 04 94 36 a4 57 d2 ad 91 28 bb c4 11 d9 c4 aa f3 3c 4d c4 87 5a 28 f3 58 7d 17 4b 5b 38 fa 6e a6 c2 2b 53 87 36 ff 00 Data Ascii: h5/8l@k><q"9$l.GnjI$;=`0Fuccli"9%IjTf9uw'/nh\={`MdRf<E1V}j%RHhVt3,d08\lHe\|6W(<MZ(X}K[8n+S6
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 40 8a 3a 87 4d 5f 3d ca 58 48 90 a3 b0 c6 f3 02 c0 d1 fb 1b 1b 96 18 e9 08 71 51 84 98 c0 25 9f ae 49 75 39 a1 a1 18 34 28 f7 3a 2b fe de 3f 97 95 4d e8 65 5e d5 3c cc 3a c5 46 2f 76 4d c1 cc b1 90 5a 19 3a ce 35 57 af a2 d7 51 3f 4d b4 aa e2 ae 6f 6c cf f8 d0 57 d2 cb 06 6f b8 f2 72 67 e3 ab a8 67 53 cf 14 8b 20 f8 49 f0 ac 52 49 63 d1 25 c1 0c 3d 4c a4 1a 87 75 72 48 03 27 53 ce 4b 64 93 41 59 a5 d6 5c ea 31 5c 28 65 08 a1 91 f2 ee 1e e7 34 11 fc bc b0 05 4f 10 46 41 ad 89 6c ec 78 b0 5d d3 f0 d2 dd 5b 13 f7 24 c8 1d 8d 5b 79 c1 e6 13 42 08 ad a5 13 e3 81 82 e1 a1 35 f4 8b 68 44 63 f4 1e 55 99 7e 2c d4 16 17 89 ce 25 b6 dc 27 b6 3a fa 14 9d 66 0b b2 bf bd 6a c7 69 d9 74 96 8d 66 1f 01 af a5 76 a8 c7 9a 70 d0 fe f1 5b 56 ce e0 7f 85 3a 3f c8 d3 aa 80 33 Data Ascii: @:M_=XHqQ%Iu94(:+?Me^<:F/vMZ:5WQ?MolWorggS IRIc%=LurH'SKdAY\1\(e4OFAlx][$[yB5hDcU~,%':fjitfvp[V:?3
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: e1 dd 76 da c2 09 ed 2e d5 bb 17 6d c1 97 a1 af 89 75 bb 6d 4c 5b c1 6a a4 c5 16 4e f3 d4 9f a6 e9 b0 81 7a b5 38 c2 e2 80 ef 56 78 0f 9e 7e 80 48 20 8a 8e f8 80 03 af e6 85 ec 3d 49 14 b7 11 37 27 15 b8 74 3f 22 78 54 92 76 8e 4f 41 ca a4 34 28 f2 1e 16 48 65 c0 e5 49 26 40 c1 ae d7 f7 d4 97 07 66 01 a1 ca 9c e4 e3 e4 79 0f 09 4f 7a 80 e3 44 90 69 39 d7 e9 34 c7 bd 42 8f d1 ff c4 00 3b 11 00 01 04 01 01 04 07 05 05 07 05 00 00 00 00 00 01 00 02 03 11 04 05 12 13 21 31 06 10 20 32 41 51 61 22 30 52 71 91 42 62 92 a1 b1 14 15 24 33 34 40 72 43 50 63 64 82 ff da 00 08 01 03 01 01 3f 00 ff 00 62 a1 ef e9 50 fe ca 95 2a 54 a9 52 a5 4a 95 2a 54 a9 52 a5 4a bb 44 80 2c 9a 42 58 c9 a1 23 7e bf d8 74 db a5 d3 69 93 47 8d 8c d0 e9 5f 64 5f 26 80 b1 3a 65 ac 58 db Data Ascii: v.mumL[jNz8Vx~H =I7't?"xTvOA4(HeI&@fyOzDi94B;!1 2AQa"0RqBb$34@rCPcd?bPTRJTRJD,BX#~tiG_d_&:eX
2024-03-27 20:20:23 UTC	95	IN	Data Raw: ec 59 85 fb 07 82 2c 70 e0 42 a3 e5 d5 0c 7b b6 01 e2 79 a8 82 0b 0b bd 21 f4 1e ea 48 c6 3c b2 07 1a 6b bb aa 58 7d ae 49 d8 c0 fd 84 31 1a d2 1c 5b 48 8b 72 89 bd 58 3c a4 3e a3 ae 91 ed 6a 4c 6b a0 0f 23 88 72 6c 8f 02 b6 90 73 8f 12 54 b7 c3 8a 6f 79 45 c9 05 81 ca 5e b0 bf ff d9 Data Ascii: Y,pB{y!H<kX}I1[HrX<>jLk#rlsToyE^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49941	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1397	OUT	GET /web/f164963776d698c2.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/css Content-Length: 651 Connection: close CF-Ray: 86b214afd98939b0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792661 Cache-Control: public, max-age=31556926 ETag: "b9e07ebf3a495afdc191d92549c39214" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Tue, 12 Mar 2024 01:38:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 13 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: cM4QmsxQJsOoaEvlbrO2vCuOxnkLWRpKUmEOvWp68TuENXAw4uS+unt2nreO2OQIugMDASDNTXo= x-amz-replication-status: COMPLETED x-amz-request-id: 9Z755GQR6KPM62ER x-amz-server-side-encryption: AES256 x-amz-version-id: pcm27QpOwFuXFQl1AmUykpKwxkD.XEfH X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 76 62 45 67 33 52 77 48 4e 6c 47 30 56 31 39 38 77 45 61 42 77 4c 4a 45 77 6e 53 4a 5a 43 69 49 31 6b 31 5a 75 76 70 6c 6f 66 4b 55 77 51 68 6b 66 49 68 67 6d 36 51 41 48 6a 57 69 72 39 70 35 76 69 79 72 48 47 65 65 25 32 46 36 35 41 6b 78 43 6e 59 65 67 4c 7a 4b 69 66 57 6d 4e 58 43 70 77 56 74 72 67 6b 34 54 72 34 53 7a 5a 4d 4e 74 25 32 46 6c 45 61 79 59 62 78 6c 39 65 4b 4b 6b 52 44 4d 52 41 58 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vbEg3RwHNlG0V198wEaBwLJEwnSJZCiI1k1ZuvplofKUwQhkfIhgm6QAHjWir9p5viyrHGee%2F65AkxCnYegLzKifWmNXCpwVtrgk4Tr4SzZMNt%2FlEayYbxl9eKKkRDMRAX8%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:23 UTC	651	IN	Data Raw: 2e 5f 34 62 54 6c 30 77 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 31 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 4d 50 6d 52 48 41 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 38 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 7d 2e 70 38 6c 38 54 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 Data Ascii: ._4bTl0w{grid-row-gap:16px;background-color:var(--TlUudQ);border-radius:8px;box-shadow:var(--MPmRHA);box-sizing:border-box;display:grid;max-width:368px;padding:24px;-webkit-user-select:text;-moz-user-select:text;user-select:text}.p8l8Tw{display:flex;justi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49944	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/9f94f4b468b3b76d.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 15398 Connection: close CF-Ray: 86b214b04e3159d9-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "e58b61adeecee3e9fcd6534bed8cf3ee" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vfN6CKIaIM18VNXek/mJPG/J8FuYsBnEuEAb9DLWEG5m6ELbmYZSvGgOFLGUQLWkGCO66/Dpow8= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F4NNKCWZW203F3 x-amz-server-side-encryption: AES256 x-amz-version-id: nhZEJTgdCVvOmDEof_KIBjGVqAFcl0bY X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 32 32 4c 33 4a 70 4d 46 33 52 61 7a 6f 78 6b 37 4e 64 25 32 42 35 73 51 79 43 62 66 46 41 76 7a 68 64 71 69 38 44 73 35 62 64 58 55 56 33 56 68 4c 34 35 74 79 74 4d 33 47 46 43 4d 30 64 42 65 4c 70 4d 76 76 45 4a 58 33 51 5a 6b 6c 61 4a 41 52 6c 5a 35 37 35 4d 79 62 51 61 25 32 42 58 25 32 46 4d 77 4c 4a 39 66 43 51 37 55 31 35 74 65 71 52 38 67 4c 39 66 54 7a 4f 54 58 39 78 55 58 51 35 54 57 68 49 4b 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k22L3JpMF3Razoxk7Nd%2B5sQyCbfFAvzhdqi8Ds5bdXUV3VhL45tytM3GFCM0dBeLpMvvEJX3QZklaJARlZ575MybQa%2BX%2FMwLJ9fCQ7U15teqR8gL9fTzOTX9xUXQ5TWhIKs%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:23 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 39 34 31 31 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{/***/ 294112:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 28 29 3d 3e 7b 65 28 76 6f 69 64 20 30 29 7d 29 7d 29 3b 61 2e 45 48 2e 74 68 65 6e 28 65 3d 3e 7b 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 3d 28 66 3d 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 75 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 63 61 6c 6c 28 65 2c 22 53 65 6e 73 6f 72 73 43 68 61 6e 6e 65 6c 22 29 3b 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 61 2e 42 75 2e 63 77 26 26 6e 75 6c 6c 21 3d 65 2e 69 64 65 6e 74 69 66 79 26 26 65 2e 69 64 65 6e 74 69 66 79 28 61 2e 42 75 2e 63 77 2c 21 30 29 7d 29 7d 72 65 74 75 72 6e 20 61 2e 45 48 7d 2c 0a 46 6f 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 28 61 77 61 69 74 20 61 2e 64 62 29 2e 74 72 61 6e 73 Data Ascii: ()=>{e(void 0)})});a.EH.then(e=>{var f;null===(f=null===e\|\|void 0===e?void 0:e.use)\|\|void 0===f?void 0:f.call(e,"SensorsChannel");null!=e&&null!=a.Bu.cw&&null!=e.identify&&e.identify(a.Bu.cw,!0)})}return a.EH},Foa=async function(a,b){a=(await a.db).trans
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 70 6f 70 28 29 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 63 29 7b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 62 2b 3d 49 6f 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 62 2b 3d 63 2e 6c 65 6e 67 74 68 2a 4a 6f 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 62 2b 3d 4b 6f 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 63 6f 6e 73 74 20 64 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 63 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 64 7c 7c 61 2e 70 75 73 68 28 65 29 2c 61 2e 70 75 73 68 28 63 5b 65 5d 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 Data Ascii: .length;){const c=a.pop();switch(typeof c){case "boolean":b+=Ioa;break;case "string":b+=c.length*Joa;break;case "number":b+=Koa;break;case "object":const d=Array.isArray(c);for(const e in c)c.hasOwnProperty(e)&&(d\|\|a.push(e),a.push(c[e]));break;default:th
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 3d 6e 61 76 69 67 61 74 6f 72 2e 6c 6f 63 6b 73 2c 62 3d 52 31 3b 72 65 74 75 72 6e 20 63 3d 3e 0a 6e 65 77 20 50 72 6f 6d 69 73 65 28 64 3d 3e 7b 61 2e 72 65 71 75 65 73 74 28 62 28 63 29 2c 28 29 3d 3e 7b 64 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 29 3d 3e 7b 7d 29 7d 29 7d 29 7d 2c 52 31 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 20 22 73 74 61 74 69 63 22 3a 72 65 74 75 72 6e 20 61 2e 6e 61 6d 65 3b 63 61 73 65 20 22 64 79 6e 61 6d 69 63 22 3a 72 65 74 75 72 6e 20 61 2e 70 72 65 66 69 78 2b 61 2e 73 75 66 66 69 78 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 5f 5f 63 2e 68 28 61 29 3b 7d 7d 2c 50 6f 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: =navigator.locks,b=R1;return c=>new Promise(d=>{a.request(b(c),()=>{d();return new Promise(()=>{})})})},R1=function(a){switch(a.type){case "static":return a.name;case "dynamic":return a.prefix+a.suffix;default:throw new __c.h(a);}},Poa=async function(a){
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 55 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 4b 65 29 7b 63 6f 6e 73 74 20 62 3d 5f 5f 63 2e 53 6b 28 5f 5f 63 2e 52 6b 28 5f 5f 63 2e 51 6b 28 5b 22 68 6d 2e 6a 73 22 5d 29 2c 61 2e 63 6f 6e 66 69 67 2e 44 65 2c 21 30 29 29 3b 61 2e 4b 65 3d 61 2e 46 4e 28 61 2e 64 6f 63 75 6d 65 6e 74 2c 60 24 7b 54 6f 61 7d 24 7b 62 7d 60 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 61 2e 4b 65 3d 76 6f 69 64 20 30 7d 29 7d 7d 2c 58 31 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 63 6f 6e 73 65 6e 74 5f 73 74 61 74 65 22 2c 0a 63 6f 6e 73 65 6e 74 3a 7b 65 73 73 65 6e 74 69 61 6c 3a 22 79 65 73 22 2c 66 75 6e 63 74 69 6f 6e 61 6c 69 74 Data Ascii: endChild(e)})},Uoa=function(a){if(!a.Ke){const b=__c.Sk(__c.Rk(__c.Qk(["hm.js"]),a.config.De,!0));a.Ke=a.FN(a.document,`${Toa}${b}`).catch(()=>{a.Ke=void 0})}},X1=function(a,b){a.dataLayer.push({event:"consent_state",consent:{essential:"yes",functionalit
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 2c 56 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 2e 66 6f 72 45 61 63 68 28 28 5b 63 2c 64 5d 29 3d 3e 7b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 62 5b 63 5d 3d 64 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5a 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 58 6f 61 28 61 29 3b 72 65 74 75 72 6e 20 59 6f 61 28 61 29 7d 2c 58 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 2e 72 65 64 75 63 65 28 28 62 2c 5b 63 2c 64 5d 29 3d 3e 7b 22 6e 61 6d 65 22 21 3d 3d 63 26 26 6e 75 6c 6c 21 3d 64 26 26 28 63 3d 63 2e 72 65 70 6c 61 63 65 28 2f 5b 2d 2e 5d 2f 67 2c 22 5f 22 29 2c 62 5b 63 5d 3d 64 29 3b 72 65 74 Data Ascii: ,Voa=function(a){const b={};Object.entries(a).forEach(([c,d])=>{void 0!==d&&(b[c]=d)});return b},Zoa=function(a){a=Xoa(a);return Yoa(a)},Xoa=function(a){return Object.entries(a).reduce((b,[c,d])=>{"name"!==c&&null!=d&&(c=c.replace(/[-.]/g,"_"),b[c]=d);ret
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 3a 31 2c 45 77 3a 21 30 2c 46 77 3a 21 30 7d 7d 2c 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 61 32 28 61 29 7d 61 73 79 6e 63 20 70 75 74 28 61 29 7b 63 6f 6e 73 74 20 62 3d 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 2c 0a 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2c 63 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 29 2c 64 3d 4f 31 28 61 29 3b 69 66 28 21 61 77 61 69 74 20 48 6f 61 28 64 2c 62 29 29 74 68 72 6f 77 20 6e 65 77 20 62 70 61 3b 61 77 61 69 74 20 63 2e 70 75 74 28 64 2c 61 2e 53 62 2e 65 76 65 6e 74 49 64 Data Ascii: :1,Ew:!0,Fw:!0}},a);return new a2(a)}async put(a){const b=(await this.db).transaction(["analytics_event_v2","analytics_event_metadata"],"readwrite"),c=b.objectStore("analytics_event_v2"),d=O1(a);if(!await Hoa(d,b))throw new bpa;await c.put(d,a.Sb.eventId
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 77 72 3d 61 7d 61 73 79 6e 63 20 53 43 28 61 29 7b 61 77 61 69 74 20 45 6f 61 28 74 68 69 73 2e 77 72 2c 6e 65 77 20 4c 31 28 7b 65 76 65 6e 74 3a 61 7d 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 7d 7d 3b 76 61 72 20 64 70 61 3d 6e 65 77 20 53 65 74 28 22 64 65 73 69 67 6e 5f 63 72 65 61 74 65 20 64 65 73 69 67 6e 5f 66 69 72 73 74 5f 65 64 69 74 65 64 20 64 65 73 69 67 6e 5f 6f 70 65 6e 20 64 65 73 69 67 6e 5f 6f 70 65 6e 65 64 20 64 65 73 69 67 6e 5f 70 75 62 6c 69 73 68 20 65 64 69 74 6f 72 5f 74 65 6d 70 6c 61 74 65 5f 61 70 70 6c 69 65 64 20 6d 6f 62 69 6c 65 5f 64 65 73 69 67 6e 5f 63 72 65 61 74 65 5f 65 6e 72 69 63 68 65 64 20 6e 65 77 5f 65 76 65 6e 74 5f 70 61 72 74 6e 65 72 73 68 69 Data Ascii: nstructor(a){this.wr=a}async SC(a){await Eoa(this.wr,new L1({event:a}))}async flush(){}};var dpa=new Set("design_create design_first_edited design_open design_opened design_publish editor_template_applied mobile_design_create_enriched new_event_partnershi
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 61 29 7d 61 73 79 6e 63 20 72 65 73 65 74 28 29 7b 74 68 69 73 2e 56 4a 2e 66 6c 75 73 68 28 29 7d 61 73 79 6e 63 20 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 61 29 7b 61 77 61 69 74 20 74 68 69 73 2e 56 4a 2e 53 43 28 61 29 7d 57 66 28 29 7b 7d 7d 3b 76 61 72 20 54 6f 61 3b 5f 5f 63 2e 56 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 3d 53 6f 61 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 61 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 46 4e 3d 63 7d 61 73 79 6e 63 20 74 72 61 63 6b 28 29 7b 7d 61 73 79 6e 63 20 72 65 73 65 74 28 29 7b 7d 73 74 61 74 69 63 20 63 72 65 61 74 65 28 61 2c 62 2c 63 29 7b 61 3d 6e 65 77 20 5f 5f 63 2e 56 74 28 61 2c Data Ascii: n this.dispatchEvent(a)}async reset(){this.VJ.flush()}async dispatchEvent(a){await this.VJ.SC(a)}Wf(){}};var Toa;__c.Vt=class{constructor(a,b,c=Soa){this.document=a;this.config=b;this.FN=c}async track(){}async reset(){}static create(a,b,c){a=new __c.Vt(a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49940	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/a022fff96ad93c0b.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 4279 Connection: close CF-Ray: 86b214afedf78199-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64176 Cache-Control: public, max-age=31556926 ETag: "b2c2eff5a155b675ac04e00a28db44c8" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: dEVEKXpqeKOLVkUXqSWUBYid5MxEUD4g8aZP/2BJqRLXsZuTA4WB9xBHSSeu1tvwxH9JxEtQbYU= x-amz-replication-status: COMPLETED x-amz-request-id: JTW6641GGHBHVMT5 x-amz-server-side-encryption: AES256 x-amz-version-id: tE3W7LzLcqEUaKMBMgQv1hz8.yJ2tg1c X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 4a 54 5a 6b 32 57 69 71 34 46 58 73 46 6a 70 72 78 59 55 59 71 76 56 39 61 46 62 47 6c 78 72 33 70 70 30 79 37 50 48 49 38 6b 52 6d 49 55 4e 43 7a 75 47 66 63 49 50 75 7a 73 57 46 69 32 33 36 64 32 69 68 33 45 49 30 63 63 44 35 65 59 46 73 51 49 77 76 4e 36 79 7a 50 41 30 76 6e 25 32 42 41 51 36 63 6a 53 4e 7a 4b 35 5a 58 43 75 70 42 48 30 46 39 6b 25 32 42 71 66 69 34 4c 6a 6b 5a 6b 77 30 47 42 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJTZk2Wiq4FXsFjprxYUYqvV9aFbGlxr3pp0y7PHI8kRmIUNCzuGfcIPuzsWFi236d2ih3EI0ccD5eYFsQIwvN6yzPA0vn%2BAQ6cjSNzK5ZXCupBH0F9k%2Bqfi4LjkZkw0GB0%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:20:23 UTC	1201	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 33 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 38 35 39 37 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6232],{/***/ 885971:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 4f 3a 65 2c 78 4f 3a 65 2c 56 65 3a 28 29 3d 3e 21 30 2c 71 4a 3a 76 6f 69 64 20 30 2c 50 62 3a 41 2c 50 61 3a 61 2c 5a 47 3a 76 6f 69 64 20 30 2c 50 46 3a 76 6f 69 64 20 30 2c 51 46 3a 76 6f 69 64 20 30 7d 29 3b 63 6f 6e 73 74 20 4d 3d 5f 5f 63 2e 79 56 28 7b 6c 6f 63 61 74 69 6f 6e 3a 31 2c 62 62 3a 62 2c 24 66 3a 67 7d 29 2c 4f 3d 5f 5f 63 2e 4f 55 28 7b 6c 6f 63 61 74 69 6f 6e 3a 22 61 75 74 68 5f 70 6f 70 5f 75 70 22 2c 50 61 3a 61 2c 50 62 3a 41 2c 44 3a 47 2c 50 3a 6d 7d 29 2c 53 3d 28 29 3d 3e 6b 38 28 4f 2c 7b 75 6f 3a 4d 2c 65 6d 61 69 6c 3a 76 6f 69 64 20 30 7d 29 2c 55 3d 5f 5f 63 2e 55 55 28 7b 6a 68 3a 77 2c 0a 62 63 3a 63 2c 75 62 3a 6b 2e 75 62 2c 72 61 3a 22 73 74 61 72 74 22 7d 29 3b 6c 65 74 20 50 2c 56 3b 69 66 28 76 6f 69 64 20 30 21 Data Ascii: O:e,xO:e,Ve:()=>!0,qJ:void 0,Pb:A,Pa:a,ZG:void 0,PF:void 0,QF:void 0});const M=__c.yV({location:1,bb:b,$f:g}),O=__c.OU({location:"auth_pop_up",Pa:a,Pb:A,D:G,P:m}),S=()=>k8(O,{uo:M,email:void 0}),U=__c.UU({jh:w,bc:c,ub:k.ub,ra:"start"});let P,V;if(void 0!
2024-03-27 20:20:23 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 46 6d 3d 6e 75 6c 6c 7d 7d 2c 4f 41 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 59 41 61 3b 74 68 69 73 2e 53 4d 3d 61 3b 74 68 69 73 2e 73 74 6f 72 65 3d 62 3b 74 68 69 73 2e 71 45 28 7b 73 74 6f 72 65 3a 62 7d 29 7d 73 65 74 44 61 74 65 28 29 7b 63 6f 6e 73 74 20 61 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 73 74 6f 72 65 2e 46 6d 3d 61 3b 74 68 69 73 2e 53 4d 2e 73 65 74 28 61 29 7d 71 45 28 7b 73 74 6f 72 65 3a 61 7d 29 7b 76 61 72 20 62 3b 61 2e 46 6d 3d 6e 75 6c 6c 3d 3d 3d 28 62 3d 74 68 69 73 2e 53 4d 2e 67 65 74 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 76 6f 69 64 20 30 3a 62 2e 46 6d 7d 7d 3b 76 61 72 20 53 41 61 3d 72 Data Ascii: constructor(){this.Fm=null}},OAa=class{constructor(a){var b=new YAa;this.SM=a;this.store=b;this.qE({store:b})}setDate(){const a=Date.now();this.store.Fm=a;this.SM.set(a)}qE({store:a}){var b;a.Fm=null===(b=this.SM.get())\|\|void 0===b?void 0:b.Fm}};var SAa=r
2024-03-27 20:20:23 UTC	340	IN	Data Raw: 7b 7a 65 3a 76 6f 69 64 20 30 2c 6c 6b 3a 66 2c 4b 67 3a 63 2c 43 64 3a 62 2c 42 3a 64 2c 24 45 3a 28 29 3d 3e 67 28 7b 7d 29 2c 49 3a 65 2c 73 6f 75 72 63 65 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 2c 49 68 3a 6b 2c 79 61 3a 6c 2c 61 63 3a 6c 2c 67 5a 3a 21 30 7d 29 2c 7b 63 53 3a 71 2c 4e 6e 3a 72 7d 3d 62 42 61 28 7b 61 61 3a 61 2e 4c 64 7d 29 2c 74 3d 6d 3f 28 29 3d 3e 6b 38 28 71 2c 7b 63 68 69 6c 64 72 65 6e 3a 6b 38 28 6d 2c 7b 7d 29 7d 29 3a 76 6f 69 64 20 30 2c 77 3d 74 3f 72 38 28 28 29 3d 3e 6b 38 28 72 2c 7b 64 49 3a 21 30 2c 63 49 3a 21 30 7d 29 29 3a 76 6f 69 64 20 30 3b 56 41 61 28 28 29 3d 3e 7b 61 2e 79 76 3d 74 3b 61 2e 4e 6e 3d 77 7d 29 7d 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 Data Ascii: {ze:void 0,lk:f,Kg:c,Cd:b,B:d,$E:()=>g({}),I:e,source:"anon_home",Ih:k,ya:l,ac:l,gZ:!0}),{cS:q,Nn:r}=bBa({aa:a.Ld}),t=m?()=>k8(q,{children:k8(m,{})}):void 0,w=t?r8(()=>k8(r,{dI:!0,cI:!0})):void 0;VAa(()=>{a.yv=t;a.Nn=w})}};}).call(self, self._fe4d99ebe0d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49943	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1378	OUT	GET /web/c9e61293500ca151.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:23 GMT Content-Type: text/javascript Content-Length: 2249 Connection: close CF-Ray: 86b214b04f6f57f4-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 64183 Cache-Control: public, max-age=31556926 ETag: "6fafc2da0891da962edc1c3f2b18683d" Expires: Fri, 28 Mar 2025 02:09:09 GMT Last-Modified: Wed, 27 Mar 2024 02:20:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: v++/CEjMOyG4BGbujiBA0ufp14hB1Ao3PFsZRrxVwbIkWU4bX+stw5QtvVkFw35Gn0j1iynVpDY= x-amz-replication-status: COMPLETED x-amz-request-id: Z6F9MGHCDEPZXS8K x-amz-server-side-encryption: AES256 x-amz-version-id: 76MX9rkdW_Mj92ePH9p3fm.QN416WvYP X-Content-Type-Options: nosniff
2024-03-27 20:20:23 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 63 48 4f 75 78 6c 33 6a 4b 5a 47 47 79 25 32 46 62 75 42 58 72 75 6a 51 6b 31 69 6a 31 46 34 4e 78 65 65 75 61 69 41 72 4a 79 54 55 6a 44 78 25 32 42 43 65 73 43 57 63 4f 70 63 5a 53 41 71 66 50 70 4c 47 5a 38 68 6d 54 34 44 6c 54 4b 36 34 50 35 74 52 33 34 25 32 42 33 42 30 41 6a 7a 62 50 50 33 67 59 50 77 6d 59 45 45 59 6e 62 33 32 53 69 44 56 37 36 65 51 59 78 6c 59 6a 5a 6c 38 4e 45 68 67 5a 49 43 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcHOuxl3jKZGGy%2FbuBXrujQk1ij1F4NxeeuaiArJyTUjDx%2BCesCWcOpcZSAqfPpLGZ8hmT4DlTK64P5tR34%2B3B0AjzbPP3gYPwmYEEYnb32SiDV76eQYxlYjZl8NEhgZICc%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:20:23 UTC	1199	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 37 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 32 30 35 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 65 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[7772],{/***/ 12058:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe
2024-03-27 20:20:23 UTC	1050	IN	Data Raw: 2c 34 2c 35 2c 36 2c 37 5d 29 3b 5f 5f 63 2e 47 31 3d 79 28 28 29 3d 3e 28 7b 75 72 6c 3a 54 28 22 75 72 6c 22 2c 31 29 2c 77 69 64 74 68 3a 5f 5f 63 2e 44 78 28 22 77 69 64 74 68 22 2c 32 29 2c 68 65 69 67 68 74 3a 5f 5f 63 2e 44 78 28 22 68 65 69 67 68 74 22 2c 33 29 2c 76 61 3a 57 28 22 76 69 64 65 6f 55 72 6c 22 2c 34 29 7d 29 29 3b 5f 5f 63 2e 48 31 3d 79 28 28 29 3d 3e 28 7b 74 6f 6b 65 6e 3a 54 28 22 74 6f 6b 65 6e 22 2c 31 29 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 54 28 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 2c 32 29 2c 4a 47 3a 57 28 22 70 6c 75 72 61 6c 4e 61 6d 65 22 2c 39 29 2c 67 62 3a 54 28 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 2c 33 29 2c 47 61 3a 57 28 22 69 63 6f 6e 55 72 6c 22 2c 34 29 2c 74 68 75 6d 62 6e 61 69 6c 3a 5f 5f Data Ascii: ,4,5,6,7]);__c.G1=y(()=>({url:T("url",1),width:__c.Dx("width",2),height:__c.Dx("height",3),va:W("videoUrl",4)}));__c.H1=y(()=>({token:T("token",1),displayName:T("displayName",2),JG:W("pluralName",9),gb:T("dimensionsLabel",3),Ga:W("iconUrl",4),thumbnail:__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49945	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:23 UTC	1449	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 2676 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572604579%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570804579%7D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D
2024-03-27 20:20:23 UTC	2676	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 7d 7d 2c 7b 22 Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| performance.navigation_timing"}},{"
2024-03-27 20:20:24 UTC	863	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:24 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b214b1ba2f397a-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoJsAcvKssPaX7tZb1XeIYgdnk%2FYABynam9uPkbIz58JKai7H1nhGE4SpbMCQlvzYfTKL45nb%2F%2BIhnKpYPIAoSCXtWQxTQyLPw%2BpH93BvcVokb%2BlHiGSkCoa%2BI3HCT63TD2RCuA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:24 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49948	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:24 UTC	666	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:25 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 1dc65e49-5e9d-41f6-a240-064074016e2c Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49951	31.13.66.19	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	534	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	2007	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
2024-03-27 20:20:25 UTC	772	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a Data Ascii: cross-origin-resource-policy: cross-origincross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200
2024-03-27 20:20:25 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-03-27 20:20:25 UTC	15023	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-03-27 20:20:25 UTC	16384	IN	Data Raw: 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 63 6f 6e 74 65 78 74 3a 62 2c 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 63 2c 76 61 6c 75 65 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 65 28 61 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 63 Data Ascii: =""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&c!=null&&a!=null?{context:b,parameter_type:c,value:a}:null}function m(a){var b=e(a);if(b==null\|\|a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var c
2024-03-27 20:20:25 UTC	16384	IN	Data Raw: 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 22 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 44 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 65 6e 74 22 29 2c 45 3d 71 2e 65 61 63 68 2c 46 3d 71 2e 6b 65 79 73 2c 47 3d 71 2e 6d 61 70 2c 48 3d 71 2e 73 6f 6d 65 2c 49 3d 64 2e 6c 6f 67 45 72 72 6f 72 2c 4a 3d 64 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 2c 4b 3d 7b 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e Data Ascii: SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings"),C=f.getFbeventsModules("SignalsParamList"),D=f.getFbeventsModules("signalsFBEventsSendEvent"),E=q.each,F=q.keys,G=q.map,H=q.some,I=d.logError,J=d.logUserError,K={AutomaticMatchin
2024-03-27 20:20:25 UTC	16384	IN	Data Raw: 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 6e 61 6d 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6e 75 6d 62 65 72 28 29 29 2c 65 6e 61 62 6c 65 46 6f 72 50 69 78 65 6c 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 2c 63 6f 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 70 61 73 73 65 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 Data Ascii: Modules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({name:b.allowNull(b.string()),passRate:b.allowNull(b.number()),enableForPixels:b.allowNull(b.arrayOf(b.string())),code:b.allowNull(b.string()),passed:b.allowNull(b
2024-03-27 20:20:25 UTC	1500	IN	Data Raw: 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 3b 61 3d 61 2e 54 79 70 65 64 3b 61 3d 61 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 74 61 72 67 65 74 3a 61 2e 73 74 72 69 6e 67 28 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 49 49 41 75 74 6f 6d 61 74 63 68 65 64 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 Data Ascii: var a=f.getFbeventsModules("SignalsFBEventsTyped");a=a.Typed;a=a.objectWithFields({target:a.string()});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsPIIAutomatchedEvent",function(){return function(g,h,i,j){var k={ex
2024-03-27 20:20:25 UTC	14884	IN	Data Raw: 76 61 72 20 6d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6d 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 62 3d 61 2e 6c 6f 67 45 72 72 6f 72 2c 63 3d 22 66 62 22 2c 64 3d 34 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 29 7b 6e 28 74 68 69 73 2c 61 29 2c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 74 68 69 73 2e 6d 61 79 62 65 55 70 64 61 74 65 50 61 79 6c 6f 61 64 28 62 29 3a 28 74 68 69 73 2e 73 75 62 64 6f 6d 61 69 6e 49 6e 64 65 78 3d 62 2e 73 75 62 64 6f 6d 61 69 6e 49 6e 64 65 78 2c 74 68 Data Ascii: var m={exports:{}};m.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsLogging"),b=a.logError,c="fb",d=4;a=function(){function a(b){n(this,a),typeof b==="string"?this.maybeUpdatePayload(b):(this.subdomainIndex=b.subdomainIndex,th
2024-03-27 20:20:25 UTC	16384	IN	Data Raw: 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 65 6e 74 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 3b 66 Data Ascii: b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEventEvent",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsParamList");f
2024-03-27 20:20:25 UTC	16384	IN	Data Raw: 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 5b 65 5d 2c 66 3d 62 28 66 2c 65 2c 61 29 2c 64 5b 65 5d 3d 66 29 3b 65 2b 2b 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 65 3d 4f 62 6a 65 Data Ascii: n");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a[e],f=b(f,e,a),d[e]=f);e++}return d}function w(a,b,c,d){if(a==null)throw new TypeError(" array is null or not defined");if(typeof b!=="function")throw new TypeError(b+" is not a function");var e=Obje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49949	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	644	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:25 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:20:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:20:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:25 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49950	151.101.129.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	529	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	1014	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8702 Last-Modified: Thu, 15 Feb 2024 20:38:48 GMT ETag: "9a680c8c475d8bba600d4d87b4fa7ee5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:25 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 99 c8 80 b1 93 80 b5 29 02 38 66 63 63 17 0f 67 b7 5c 2c 25 4b 03 28 11 12 47 12 71 7c 41 f7 b7 df 9e a7 46 32 4e 9c b3 e7 7c b8 55 bb 41 33 dd d3 ef ee e9 19 c9 07 f3 4d e0 24 5e 18 94 22 1d a3 00 25 c6 56 ce 84 ba 87 e6 c6 d6 9b eb 07 c1 9d 37 65 4f 98 3e 7d b3 a3 92 63 69 02 55 b3 ac e4 71 8d c3 79 29 c2 ff da 78 11 2e 97 f9 43 8b ac 99 97 cb 8e 11 e1 64 13 05 25 07 88 1e 54 0d 32 bf 11 73 1b 3e 47 a8 da 56 80 1f 4a bd 28 0a 23 5d eb d8 41 10 26 a5 b9 17 b8 a5 55 e8 6e 7c 5c fa a7 56 f1 2a da 3f 35 a3 95 2c a3 f0 a1 64 9b 4e e8 62 4b bb ba ee 4e 2e 7b b3 c1 f5 78 76 7e 3d 19 74 35 64 a7 84 de da 22 b2 5b 5b fc 7d 1d 46 49 dc dc a6 69 8b e8 70 57 9d 9a 8e ed fb fa da e4 20 24 b4 d1 23 Data Ascii: ;ksN8)8fccg\,%K(Gq\|AF2N\|UA3M$^"%V7eO>}ciUqy)x.Cd%T2s>GVJ(#]A&Un\|\V*?5,dNbKN.{xv~=t5d"[[}FIipW $#
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: e9 42 d6 30 54 42 01 30 60 5d a6 3c 1b 5f b2 68 62 03 1e 5b a8 e0 45 15 93 f8 b2 6e 64 da 1d 43 92 52 46 c4 83 9c 0a 6c 9e 60 7f 38 0b d6 0d 04 32 d2 dc f5 5e bd 3d 6c fc d4 bf 2a a7 a3 3a a9 f5 97 d0 91 05 35 ee 5a 3e f8 af 79 d7 a7 f4 ff be 83 15 3a cc 79 cc 61 e6 3c 0a 57 64 b6 03 db 00 75 7b e6 3f 75 c9 b3 2e 64 48 39 2f ca 29 ee 48 39 7e c6 97 05 7c aa 94 aa ca ce d2 41 83 72 46 c6 e1 f2 b6 13 dd 33 84 2f 41 d1 9f fa b2 c0 89 38 73 92 cc df 72 57 d2 c7 9f 38 52 69 ed 5d 4c b6 ce c9 b0 df 09 57 6b a8 44 10 6c 38 76 ec 35 d6 59 4c 28 bb 69 46 c0 90 ed 3e d0 2a b6 fa 57 b6 0f 36 5c 41 37 3f 19 9f bf 7e 5b 72 ed c4 d6 88 90 05 9b 6f 40 50 6a 71 2e 09 e7 47 b1 f4 4d c0 a5 60 5b 7b 4e 3e b1 d0 20 44 3f 6c e6 73 1c 61 f7 83 1f 3a 5f db fe 22 8c bc 64 b9 12 Data Ascii: B0TB0`]<_hb[EndCRFl`82^=l:5Z>y:ya<Wdu{?u.dH9/)H9~\|ArF3/A8srW8Ri]LWkDl8v5YL(iF>W6\A7?~[ro@Pjq.GM`[{N> D?lsa:_"d
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: a1 a3 e3 29 8d 8b 8a 4b 47 8d 29 0d 8f 0a a6 a3 93 29 8d 92 ca 9c 8e 4e a7 34 58 2a 0b 3a 7a 33 a5 31 53 59 ee aa 34 5c cf 9f f4 43 ac da bd e8 54 13 90 14 1c 87 89 ed 5b 6f 0f 8b c7 2a 06 bd c4 f3 04 80 b9 06 5b f4 02 92 e6 9d 44 05 a3 9e c0 c9 be 56 7f 4b cf ef 72 fe d5 71 3d 13 e1 ae d6 a8 e8 12 54 39 6d c0 aa 77 67 67 0d 63 ca 2a e3 dc 0f 21 c9 32 e1 8e b2 e2 65 a8 54 4e 9e a3 92 2d cd 9f 0c ac c6 61 76 92 e0 b7 16 fb da 4c 96 d5 3f 3c 04 f0 ba f3 93 63 00 2d 3a 4a 9d c8 1f 03 a0 cb ea 14 ea 58 ae d5 d4 19 8c b4 65 a4 1f dc 8f 29 1b 45 81 cd 1b 36 24 fb 04 36 ff ff b1 4d 38 79 61 9b e0 b9 a8 73 3d 18 8d db 83 f1 c8 ca 89 4b df 7b 25 b1 66 20 f2 66 18 20 38 4e e8 2e f0 c7 d5 e5 45 92 ac f9 14 8a dc 44 bc 48 87 c7 16 fc 0f 9b 9c e7 5a f0 60 ae bd ef d8 Data Ascii: )KG))N4X:z31SY4\CT[o[DVKrq=T9mwggc*!2eTN-avL?<c-:JXe)E6$6M8yas=K{%f f 8N.EDHZ`
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: b9 97 e0 be 49 a1 1e b9 68 21 17 38 13 20 73 4e de 31 53 e8 6d 3d 93 c2 61 33 24 a0 f9 c7 7c 6b df 4b 2c 65 9a be c3 81 86 c5 d4 e4 71 89 ce f0 13 d9 59 fd bd 82 dc a4 20 38 45 a7 52 04 d6 f7 3c e5 2c ef ba f6 29 a0 33 8b eb a4 81 13 84 c0 32 fb a8 c8 bb 3a 2a 78 d6 6e 51 54 21 7c 0b dc 11 fa 2e 30 e1 56 a3 1f 42 b2 19 c9 dc aa 1d 55 c5 bb 7d 45 c3 ec fd fe 57 fc 08 5a 5a 4c 47 6f 2a 88 5b ec 7c 51 3b 63 70 be 8c dc 04 f2 58 30 e1 67 a5 33 28 74 56 86 65 59 59 ff b9 a7 89 60 dc a0 ca 90 f2 1f 5b 7c 61 6d aa ba 82 32 14 28 82 25 eb 39 a5 3e f2 fb 0b 81 47 ee bb 6a 55 a3 75 e0 c5 03 7b a0 4b 4c f2 91 a5 78 3e 2b 58 05 0e 1c 45 3b 49 dc bc 4d a5 9c e4 ed 84 f8 fe 53 41 e0 3d 28 b5 49 3f 06 b9 f0 02 47 99 2b 63 11 11 9a 56 19 d0 6f 66 61 0a 4c 15 67 09 50 5c Data Ascii: Ih!8 sN1Sm=a3$\|kK,eqY 8ER<,)32:xnQT!\|.0VBU}EWZZLGo[\|Q;cpX0g3(tVeYY`[\|am2(%9>GjUu{KLx>+XE;IMSA=(I?G+cVofaLgP\
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: 33 16 87 99 48 79 05 69 18 2e 42 a5 67 34 57 29 92 26 9b 11 0d 80 84 d3 4c 6c 75 19 b5 46 ca ee 72 34 10 6c 41 db 2c fd 86 e3 44 17 b7 40 17 27 ef c9 2e 20 6f 04 3b 3f 9e 64 9b a3 21 2c e2 68 fa c0 b1 61 80 06 e6 bc 72 a1 b9 05 ba 48 e5 e2 90 f1 fe f8 f6 16 c4 a7 04 cb f7 c2 10 2b 81 0a 46 e4 3a 03 4c 43 05 fb 64 42 47 4b 56 46 b2 00 d1 53 94 80 52 9f 54 b1 cb bc 6a 7f 9b a5 93 07 55 0b 28 40 be da 66 0d f4 97 d9 e8 7a 08 0b 24 46 d4 65 07 06 f9 e8 f9 b4 3f 01 4e 99 7a a0 b9 de 82 00 f2 7c 5e e5 35 67 01 03 27 02 09 be ef fd 8c 2a 7c f1 60 1c 51 ea c6 b0 7e 7a 9d f6 b3 74 2d bd cd b0 ca f7 61 3c 5b fb dc ff 86 95 96 83 eb d9 10 ab 80 3f 63 6d f0 64 02 8b cb fa f7 1a 6b 1f 28 fa 00 1a 2b 6c fa 00 d5 bf 2a dc 5e fb 0d 29 1a fe de cf de 8d a7 5d 45 40 96 0e Data Ascii: 3Hyi.Bg4W)&LluFr4lA,D@'. o;?d!,harH+F:LCdBGKVFSRTjU(@fz$Fe?Nz\|^5g'\|`Q~zt-a<[?cmdk(+l^)]E@
2024-03-27 20:20:25 UTC	1378	IN	Data Raw: 7a 9b 57 42 e1 57 df 5a d2 dc 7d 49 a1 37 be 8e 05 cc 7a fd f9 56 83 7b 0c 66 0d da 93 78 bb 32 99 bf 76 6f 0b b1 1e b3 55 12 78 cb 25 bf 94 fa 79 0f 98 ef f6 32 eb ef eb 65 9e 9b 92 14 b4 d9 ad d1 a4 0e 39 a0 a7 f9 db 6d c7 e3 c2 97 8a 85 b9 7d 39 16 bf 1c a5 d7 c3 e4 89 51 58 6d 44 80 eb e5 22 b4 ee 64 5c a2 93 fb ee e1 08 c7 74 2f 4f b1 14 1b e4 06 a1 88 5c ca f3 af a8 93 68 0a 10 94 ce 9d cb ce 7c 72 96 e8 59 e8 65 12 e7 6a a8 7f d7 6d 34 47 39 6a 9d 33 fa 34 56 63 b3 9a 33 da 5f 38 76 0a e5 de cb 32 16 6f c0 14 f4 c9 74 1a 71 40 17 38 0a 1b f1 6c e2 06 bc b0 8c 00 ce a9 a3 97 70 b3 7a a2 8b b9 fc b7 f3 27 78 ea 55 ec 94 7e 17 4c 0e 33 ff ae f5 34 c6 17 56 7d 30 4d 0c 80 17 76 24 65 03 80 fc dc 32 5a ea 7d 32 41 ba 2f e7 76 7c 05 7f 10 95 3e 8e e0 37 Data Ascii: zWBWZ}I7zV{fx2voUx%y2e9m}9QXmD"d\t/O\h\|rYejm4G9j34Vc3_8v2otq@8lpz'xU~L34V}0Mv$e2Z}2A/v\|>7
2024-03-27 20:20:25 UTC	434	IN	Data Raw: 2f 16 a2 57 6d c7 f6 a9 d6 7b 6c 44 bb cd 85 e8 0f db 00 f1 a1 fe ac 11 e1 cb 17 9b fa d5 5d be 72 1a 9f cd 55 f3 b9 f7 b2 f5 69 9a 4d d5 70 b3 d8 28 27 fd 09 a9 cd b9 3f 51 08 70 fc 90 b0 29 da dd b1 58 ba 20 34 7c 2c d4 66 b0 a0 58 b1 58 b0 cb a3 19 db dc 2d a3 21 66 0a e2 1b 6f 8a 12 5e 5a 6f 2c d8 6b f5 1e 0e 34 bc 9d 85 d2 99 74 a2 92 93 74 a4 b2 89 0a 4a d6 dd aa 74 c3 be 93 4c 89 da e7 31 63 fe 13 c7 56 f7 33 59 28 81 ed 8a 13 29 b0 45 2e af 6e b3 8c 60 9a 72 dc 60 7a f2 54 38 9f a5 44 bb e0 83 e0 79 fb 97 c7 8f ad 58 2b 78 77 67 df d2 59 6a 97 82 48 2e bb db 65 b2 49 c6 66 0b 84 6c 50 4b 27 bf 18 b9 70 82 5f f8 bd 04 8f 7a f4 48 50 87 1a d1 61 d5 14 e3 cc f2 34 1e cb 7f 6c 9b d1 e3 7c ae 75 c5 75 47 d7 9a cf d7 dd d1 3c ce fd 6f 1c 2c 43 7b 81 64 Data Ascii: /Wm{lD]rUiMp('?Qp)X 4\|,fXX-!fo^Zo,k4ttJtL1cV3Y()E.n`r`zT8DyX+xwgYjH.eIflPK'p_zHPa4l\|uuG<o,C{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49952	151.101.129.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	604	OUT	GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:25 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-27 20:20:25 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49953	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	433	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570823791&gtmcb=1547475928 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:25 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 5237b874-e9e2-412d-b8f6-da354c751151 Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49954	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	889	OUT	GET /rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:25 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:25 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49956	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	2985	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2904 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:20:25 UTC	2904	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 30 35 61 35 63 63 36 37 2d 31 65 30 62 2d 34 32 35 31 2d 62 39 32 62 2d 61 38 62 38 61 61 31 63 63 34 63 32 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 32 31 2e 36 30 33 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 32 35 2e 31 37 34 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"05a5cc67-1e0b-4251-b92b-a8b8aa1cc4c2","E":"2024-03-27T20:20:21.603Z","F":"2024-03-27T20:20:25.174Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:25 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:25 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214bcd9a112c9-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214bcd9a112c9 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXBBE%2FvrSph1Ku0%2BQVlhMeaUN4ZGmp1q36R%2Fkg37%2FG2Hqp2TmZ1T3RVJMgVz03egjw8IxvbYkEMePZxPcv2mK3P9bAtCZkReW3ZFMcU4oEJFBFVz%2FjPHQwf6mtRMeMU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:25 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49955	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:25 UTC	491	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
2024-03-27 20:20:25 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:25 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:20:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:20:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:25 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49957	31.13.66.19	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1299	OUT	GET /signals/config/844585682227065?v=2.9.151&r=stable&domain=www.canva.com&hme=8ce74e881727851b4427183947937854816d72704925561b9de6420cd43214ee&ex_m=66%2C111%2C98%2C102%2C57%2C3%2C92%2C65%2C15%2C90%2C83%2C48%2C50%2C157%2C160%2C171%2C167%2C168%2C170%2C28%2C93%2C49%2C72%2C169%2C152%2C155%2C164%2C165%2C172%2C120%2C14%2C47%2C176%2C175%2C122%2C17%2C32%2C36%2C1%2C40%2C61%2C62%2C63%2C67%2C87%2C16%2C13%2C89%2C86%2C85%2C99%2C101%2C35%2C100%2C29%2C25%2C153%2C156%2C129%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C53%2C58%2C60%2C70%2C94%2C26%2C71%2C8%2C7%2C75%2C45%2C20%2C96%2C95%2C9%2C19%2C18%2C77%2C82%2C44%2C43%2C81%2C37%2C39%2C80%2C52%2C78%2C31%2C41%2C34%2C69%2C0%2C88%2C4%2C84%2C76%2C79%2C2%2C33%2C59%2C38%2C97%2C42%2C74%2C64%2C103%2C56%2C55%2C30%2C91%2C54%2C51%2C46%2C73%2C68%2C23%2C104 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	2007	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
2024-03-27 20:20:26 UTC	800	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a Data Ascii: cross-origin-resource-policy: cross-origincross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200
2024-03-27 20:20:26 UTC	700	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 0a 2a 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 53 20 4f 52 0a 2a 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 Data Ascii: ED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWIS
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 64 3d 21 30 29 7b 63 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 3b 69 66 28 62 26 26 63 2e 6c 65 6e 67 74 68 3d 3d 3d 62 29 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 61 29 7b 65 3d 21 30 2c 66 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 64 26 26 67 5b 22 72 65 74 75 72 6e 22 5d 26 26 67 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 72 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: next()).done);d=!0){c.push(a.value);if(b&&c.length===b)break}}catch(a){e=!0,f=a}finally{try{!d&&g["return"]&&g["return"]()}finally{if(e)throw f}}return c}return function(b,c){if(Array.isArray(b))return b;else if((typeof Symbol==="function"?Symbol.iterator
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 2c 63 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 Data Ascii: ;var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a};function b(b,c){if(b==null)return null;var d=Object.keys(b).some(function(a){return Ob
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 74 29 26 26 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 21 3d 3d 22 22 26 26 28 64 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 61 2e 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 69 66 28 64 2e 74 61 67 3d 3d 3d 22 69 6e 70 75 74 22 29 7b 64 2e 69 6e 70 75 74 54 79 70 65 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 3b 69 66 28 63 26 26 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 29 29 7b 63 3d 62 28 64 2c 61 29 3b 63 21 3d 6e 75 6c 6c 26 26 28 65 3d 63 29 7d 7d 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 3d 3d 3d 21 31 26 26 61 2e 76 61 6c 75 65 3d 3d 3d 22 Data Ascii: t)&&a.placeholder!==""&&(d.placeholder=a.placeholder);if(d.tag==="input"){d.inputType=a.getAttribute("type");if(c&&(a instanceof HTMLInputElement\|\|a instanceof HTMLTextAreaElement)){c=b(d,a);c!=null&&(e=c)}}a instanceof HTMLButtonElement===!1&&a.value==="
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 6e 74 73 53 68 61 72 65 64 22 29 2c 62 3d 61 2e 75 6e 69 63 6f 64 65 53 61 66 65 54 72 75 6e 63 61 74 65 2c 63 3d 35 30 30 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 Data Ascii: ntsShared"),b=a.unicodeSafeTruncate,c=500;function d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFeatureCounter",function(){return function(f,g,i
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 65 6e 64 21 3d 3d 61 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 64 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 26 26 61 2e 70 75 73 68 28 62 29 29 2c 62 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 28 62 3d 6e 75 6c 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 Data Ascii: end!==a.lastDotIndex}function i(a){var b=null,d=a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.length)&&a.push(b)),b.end!=null&&(b=null));c(a.reverse(),function(a){var b=a.start;a=a.end;if(
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 65 64 3b 62 2e 70 69 69 41 75 74 6f 6d 61 74 63 68 65 64 3b 76 61 72 20 64 3d 62 2e 70 69 69 43 6f 6e 66 6c 69 63 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 Data Ascii: e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fired;b.piiAutomatched;var d=b.piiConflicting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEv
2024-03-27 20:20:26 UTC	1500	IN	Data Raw: 6f 6e 46 65 61 74 75 72 65 73 3a 6b 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 66 6f 72 6d 3a 6a 2c 70 69 78 65 6c 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d 29 3b 6a 3d 3d 6e 75 6c 6c 26 26 64 2e 74 72 69 67 67 65 72 28 63 29 3b 68 26 26 6a 21 3d 6e 75 6c 6c 26 26 43 28 62 2c 63 2c 6a 29 3b 69 66 28 67 26 26 28 63 2e 75 73 65 72 44 61 74 61 46 6f 72 6d 46 69 65 6c 64 73 3d 3d 6e 75 6c 6c 7c 7c 7a 28 63 2e 75 73 65 72 44 61 74 61 46 6f 72 6d 46 69 65 6c 64 73 29 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 29 72 65 74 75 72 6e 3b 62 2e 74 72 61 63 6b 53 69 6e 67 6c 65 53 79 73 74 65 6d 28 22 61 75 74 6f 6d 61 74 69 63 22 2c 63 2c Data Ascii: onFeatures:k,buttonText:l,form:j,pixel:c,shouldExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={});j==null&&d.trigger(c);h&&j!=null&&C(b,c,j);if(g&&(c.userDataFormFields==null\|\|z(c.userDataFormFields).length===0))return;b.trackSingleSystem("automatic",c,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49961	151.101.193.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	404	OUT	GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:26 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-03-27 20:20:26 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49960	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2654	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086144&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=7012&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780; _ga=GA1.1.1352771599.1711570825
2024-03-27 20:20:26 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=rF%2B0veVjg3vUBH2VDflEfFBD2Hxr1aIZZxnbbIewwwHj8WYnwETBxUIbQWqfwiERITNnKHSFB6DbkzixXeIjcqxYGVzy51YVTnNwl%2BYDnGGPMkoaTeVwHg4UXzyKyw%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:26 UTC	541	IN	Data Raw: 32 31 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 30 30 35 32 33 37 32 37 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 Data Ascii: 216event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gue
2024-03-27 20:20:26 UTC	478	IN	Data Raw: 31 64 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 30 30 35 32 33 37 32 37 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 Data Ascii: 1d7event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa
2024-03-27 20:20:26 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49958	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2681	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=9&tfd=7026&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780
2024-03-27 20:20:26 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=FMsgpwqJIMiMjiLgqp4txPUK45AxQvuRLhM7OwD3m%2FWJshEnx7acfdwGdHzF6gf4O6pQCgNyMog6dvcApVoI9Bn15Sd3AiBM6d2lE2c9xmOcpn50yfi5k96oAbxotw%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:26 UTC	484	IN	Data Raw: 31 64 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 31 33 39 30 39 30 34 37 31 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1ddevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:20:26 UTC	421	IN	Data Raw: 31 39 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 31 33 39 30 39 30 34 37 31 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 19eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:20:26 UTC	485	IN	Data Raw: 31 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 31 37 32 34 30 36 33 39 38 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 Data Ascii: 1deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%252
2024-03-27 20:20:26 UTC	422	IN	Data Raw: 31 39 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 31 37 32 34 30 36 33 39 38 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 Data Ascii: 19fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.1
2024-03-27 20:20:26 UTC	1162	IN	Data Raw: 34 38 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 30 34 34 34 31 37 33 30 30 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 36 32 36 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 483event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1044417300&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:20:26 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49959	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2674	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086182&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=4&tfd=7036&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.0.1711570825.0.0.1176296780
2024-03-27 20:20:26 UTC	679	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=Q98doK%2ByrhcuPXpv1dtQ0SYbV%2BBMLtn14ANA7hUiesOypGdJtWtoACX%2F1DX1sKZjp0vRW4R%2BFi9a4xCqzN0U%2BwYfievIZo%2FQ046thTT9L9NoN51Jq2kwfqWPs%2BlbGw%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:26 UTC	729	IN	Data Raw: 34 36 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 31 34 38 34 31 34 38 37 38 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 36 32 38 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 46aevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1148414878&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:20:26 UTC	408	IN	Data Raw: 74 79 70 65 5f 62 79 5f 75 73 65 72 5f 69 64 25 33 44 67 75 65 73 74 25 33 42 65 76 65 6e 74 5f 61 63 74 69 6f 6e 25 33 44 76 69 73 69 74 25 33 42 63 75 73 74 6f 6d 5f 64 61 74 61 5f 6e 65 77 53 65 73 73 69 6f 6e 25 33 44 79 65 73 25 33 42 63 75 73 74 6f 6d 5f 64 61 74 61 5f 70 61 67 65 25 33 44 31 25 33 42 63 75 73 74 6f 6d 5f 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 25 33 44 77 65 62 2d 32 26 72 64 70 3d 31 26 62 74 74 79 70 65 3d 70 75 72 63 68 61 73 65 26 64 6d 61 3d 30 26 6e 70 61 3d 30 26 75 69 70 3d 31 30 32 2e 31 36 35 2e 34 38 2e 30 26 75 61 61 3d 78 38 36 26 75 61 62 3d 36 34 26 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 Data Ascii: type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%25
2024-03-27 20:20:26 UTC	539	IN	Data Raw: 32 31 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 38 34 39 32 35 32 32 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 Data Ascii: 214event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest
2024-03-27 20:20:26 UTC	476	IN	Data Raw: 31 64 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 38 34 39 32 35 32 32 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 Data Ascii: 1d5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0
2024-03-27 20:20:26 UTC	541	IN	Data Raw: 32 31 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 39 32 33 39 39 38 34 34 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 Data Ascii: 216event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gue
2024-03-27 20:20:26 UTC	478	IN	Data Raw: 31 64 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 39 32 33 39 39 38 34 34 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 Data Ascii: 1d7event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa
2024-03-27 20:20:26 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:20:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49962	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	656	OUT	GET /rp.gif?ts=1711570825005&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:26 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49964	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2296	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780
2024-03-27 20:20:26 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214c1798b1fd9-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214c1798b1fd9 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m9mAdNidvkQ%2Bq7FlwPFVb0eyrZi9luXZ1k%2Bmt0ISyIGFwhtBYy5FkO0TNDyEByAfcc44aBUA6E2ngyCRzZuirYzybZSkpM9IWiGPhwrDzdzIHBbEknH7Va4PApgXrNw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:26 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49965	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2631	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711570990861100&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=3&tfd=7549&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780
2024-03-27 20:20:26 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=stwaICg9tQ5ULTGuya%2BecWPHhSkLikwqvm%2BMAljKOijAgYlYpKpyVuDXukdQJKNsJuu8vTjbt%2FHzCP7Ds6nXDhoFgbUqwpFLrHwHV%2F6bF30e%2FFpzXh3ftiQuqDvIhA%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7776000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:26 UTC	512	IN	Data Raw: 31 66 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 36 32 35 37 39 36 38 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 Data Ascii: 1f9event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520C
2024-03-27 20:20:26 UTC	449	IN	Data Raw: 31 62 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 36 32 35 37 39 36 38 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 Data Ascii: 1baevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132
2024-03-27 20:20:26 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 33 34 3d 79 65 73 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:20:26 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 33 34 3d 79 65 73 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:20:26 UTC	552	IN	Data Raw: 32 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 30 33 39 37 38 34 32 37 39 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 36 36 33 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 Data Ascii: 221event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1039784279&fst=1711570826632&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&u
2024-03-27 20:20:26 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49967	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1117	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	2354	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8956775919272103080"}],"aggregatable_trigger_data":[{"filters":{"14":["10904904"]},"key_piece":"0x9e6200e166627282","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1439bee2f15b1841","not_filters":{"14":["10904904"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["10904904"]},"key_piece":"0xb69d7e55e3f89744","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xe483366751c230bb","not_filters":{"14":["10904904"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5660689950741201527","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8956775919272103080","filters":{"14":["10904904"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8956775919272103080","filters":{"14":["10904904"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8956775919272103080","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8956775919272103080","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49969	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1017	OUT	GET /activity;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	1131	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49974	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2638	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=9&tfd=7026&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=rF%2B0veVjg3vUBH2VDflEfFBD2Hxr1aIZZxnbbIewwwHj8WYnwETBxUIbQWqfwiERITNnKHSFB6DbkzixXeIjcqxYGVzy51YVTnNwl%2BYDnGGPMkoaTeVwHg4UXzyKyw%3D%3D
2024-03-27 20:20:26 UTC	583	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=u1%2BgWN%2B1k0CIdxFJEgnmP2t677g65qmC%2BrMsmvSQ9KFefWGu1Oj6cE%2BkQZHJxa1Q8J6HzH7tHUoLyC9CZpZkL%2BDwA9bKtW3PqhxY3jW8ixWjTakwC5hv51ffK5Lijw%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:26 UTC	483	IN	Data Raw: 31 64 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 38 30 31 38 37 31 33 31 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 Data Ascii: 1dcevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=801871314;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520C
2024-03-27 20:20:26 UTC	420	IN	Data Raw: 31 39 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 38 30 31 38 37 31 33 31 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 Data Ascii: 19devent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=801871314;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132
2024-03-27 20:20:27 UTC	485	IN	Data Raw: 31 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 31 33 31 32 30 32 39 37 35 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 Data Ascii: 1deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1312029752;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%252
2024-03-27 20:20:27 UTC	422	IN	Data Raw: 31 39 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 31 33 31 32 30 32 39 37 35 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 Data Ascii: 19fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=1312029752;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.1
2024-03-27 20:20:27 UTC	1162	IN	Data Raw: 34 38 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 30 31 33 34 36 31 36 39 31 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 36 39 35 34 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 483event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1013461691&fst=1711570826954&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:20:27 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49975	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2623	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086182&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=4&tfd=7036&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=Q98doK%2ByrhcuPXpv1dtQ0SYbV%2BBMLtn14ANA7hUiesOypGdJtWtoACX%2F1DX1sKZjp0vRW4R%2BFi9a4xCqzN0U%2BwYfievIZo%2FQ046thTT9L9NoN51Jq2kwfqWPs%2BlbGw%3D%3D
2024-03-27 20:20:27 UTC	585	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=9bupPLzBf22a9wArt4hewnuU%2BKYcDqNVjfWYA49Y%2Fb88kGsSsUC%2BDuQeFdnw%2BCgGop8RQ7Q5z0Mle1l1sM5w1gjUgIt1lkxI84Eddk%2Fgft7epy8MHrAIVdzv%2B1C6tg%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:27 UTC	823	IN	Data Raw: 34 36 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 38 34 38 34 39 30 39 33 36 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 36 39 34 34 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 46aevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1848490936&fst=1711570826944&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:20:27 UTC	314	IN	Data Raw: 67 65 25 33 44 31 25 33 42 63 75 73 74 6f 6d 5f 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 25 33 44 77 65 62 2d 32 26 72 64 70 3d 31 26 62 74 74 79 70 65 3d 70 75 72 63 68 61 73 65 26 64 6d 61 3d 30 26 6e 70 61 3d 30 26 75 69 70 3d 31 30 32 2e 31 36 35 2e 34 38 2e 30 26 75 61 61 3d 78 38 36 26 75 61 62 3d 36 34 26 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 26 75 61 6d 62 3d 30 26 75 61 6d 3d 26 75 61 70 3d 57 69 6e 64 6f 77 73 26 75 61 70 76 3d 31 30 2e 30 2e 30 26 75 61 77 3d 30 26 70 73 63 64 6c 3d Data Ascii: ge%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&bttype=purchase&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=
2024-03-27 20:20:27 UTC	540	IN	Data Raw: 32 31 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 34 34 37 30 32 39 37 31 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 Data Ascii: 215event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=447029718;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gues
2024-03-27 20:20:27 UTC	477	IN	Data Raw: 31 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 34 34 37 30 32 39 37 31 38 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d Data Ascii: 1d6event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=447029718;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=
2024-03-27 20:20:27 UTC	538	IN	Data Raw: 32 31 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 38 30 32 30 32 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b Data Ascii: 213event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=802025;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;
2024-03-27 20:20:27 UTC	475	IN	Data Raw: 31 64 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 38 30 32 30 32 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b Data Ascii: 1d4event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=802025;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;
2024-03-27 20:20:27 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49971	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1118	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	2358	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13221357374245071212"}],"aggregatable_trigger_data":[{"filters":{"14":["10904907"]},"key_piece":"0x59c0c21913a51db1","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x7e8ae2804c4c03c8","not_filters":{"14":["10904907"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["10904907"]},"key_piece":"0x998c0c22a5b79e76","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x21522d5dd2a7883","not_filters":{"14":["10904907"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"8206523954719195693","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13221357374245071212","filters":{"14":["10904907"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"13221357374245071212","filters":{"14":["10904907"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"13221357374245071212","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"13221357374245071212","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49968	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1018	OUT	GET /activity;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	1132	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49966	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1167	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:26 UTC	2357	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11111930030020207875"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"403643767450414605","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"11111930030020207875","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"11111930030020207875","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"11111930030020207875","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"11111930030020207875","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49976	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	2608	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&_fv=1&_nsi=1&_ss=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086144&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=7012&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; FPLC=Q98doK%2ByrhcuPXpv1dtQ0SYbV%2BBMLtn14ANA7hUiesOypGdJtWtoACX%2F1DX1sKZjp0vRW4R%2BFi9a4xCqzN0U%2BwYfievIZo%2FQ046thTT9L9NoN51Jq2kwfqWPs%2BlbGw%3D%3D
2024-03-27 20:20:27 UTC	585	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:26 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=Q1tJ5Tkj9yWyaieie8FdUm1qKshCj%2BhsoDeayysmxr3biDXKU%2F9qxA0aKx9KKI9nrYwcZ5dwIhyE88ArMR0%2F%2BJeDmNLk7951%2BQjiox3J%2B4LgCjvE8CPnKY3Duh7pmQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:27 UTC	540	IN	Data Raw: 32 31 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 31 37 31 31 36 36 35 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 Data Ascii: 215event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=117116656;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gues
2024-03-27 20:20:27 UTC	477	IN	Data Raw: 31 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 31 37 31 31 36 36 35 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d Data Ascii: 1d6event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=117116656;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=
2024-03-27 20:20:27 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49970	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:26 UTC	1072	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	1186	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 27-Mar-2024 20:35:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49978	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	859	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49977	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	969	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:27 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:27 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:27 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49979	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	2680	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570823614&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&_fplc=0&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570823614&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711570990861100&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&_et=3&tfd=7549&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPLC=stwaICg9tQ5ULTGuya%2BecWPHhSkLikwqvm%2BMAljKOijAgYlYpKpyVuDXukdQJKNsJuu8vTjbt%2FHzCP7Ds6nXDhoFgbUqwpFLrHwHV%2F6bF30e%2FFpzXh3ftiQuqDvIhA%3D%3D; FPAU=1.2.1649447272.1711570827
2024-03-27 20:20:27 UTC	682	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:27 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7776000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:27 UTC	511	IN	Data Raw: 31 66 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 37 36 30 37 33 32 35 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 Data Ascii: 1f8event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=76073253;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Ch
2024-03-27 20:20:27 UTC	448	IN	Data Raw: 31 62 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 37 36 30 37 33 32 35 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 Data Ascii: 1b9event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=76073253;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%
2024-03-27 20:20:27 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 33 34 3d 79 65 73 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:20:27 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 33 34 3d 79 65 73 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:20:27 UTC	551	IN	Data Raw: 32 32 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 35 32 39 31 31 32 37 36 39 26 66 73 74 3d 31 37 31 31 35 37 30 38 32 37 33 33 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 72 Data Ascii: 220event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=529112769&fst=1711570827330&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&ur
2024-03-27 20:20:27 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 37 71 5a 6b 58 74 68 77 39 6a 37 6e 7a 5a 51 41 61 57 35 38 33 6a 64 34 35 43 45 56 45 4c 6d 52 42 25 32 46 5a 25 32 42 6d 6e 4f 4d 69 77 4c 46 37 57 79 44 79 57 76 6a 4c 6d 38 47 4f 4e 34 32 6b 37 6b 66 62 74 67 53 62 6a 6b 6a 72 64 71 46 30 54 63 61 78 30 35 66 58 66 4f 39 75 41 59 32 75 30 62 63 38 49 76 4b 73 4e 75 31 54 53 73 4d 4e 35 57 66 58 50 72 68 43 32 25 32 46 71 50 4c 52 35 4f 4d 72 50 6a 47 62 79 51 4c 72 25 32 46 5a 6f 4b 53 4c 4c 51 25 32 42 65 61 56 74 31 70 37 6e 49 39 4c 39 6f 49 6c 68 4b 79 41 4d 43 43 46 63 70 52 Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=7qZkXthw9j7nzZQAaW583jd45CEVELmRB%2FZ%2BmnOMiwLF7WyDyWvjLm8GON42k7kfbtgSbjkjrdqF0Tcax05fXfO9uAY2u0bc8IvKsNu1TSsMN5WfXPrhC2%2FqPLR5OMrPjGbyQLr%2FZoKSLLQ%2BeaVt1p7nI9L9oIlhKyAMCCFcpR
2024-03-27 20:20:27 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49980	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1203	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2526	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16705588585820907820"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4274425783180083292","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16705588585820907820","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16705588585820907820","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16705588585820907820","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16705588585820907820","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnwEfCT2piLU_kFN2ElHcHoWEZWq3ifXWoC2bikTR9ezG30tyJPZwiRVqvQ; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49981	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1126	OUT	GET /activity;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	1360	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUluJXulik7Rhg81yME91Bw3YWk9s5oWhCKY1o7duEHp8fDEpq6ntGQoVntz6Yg; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49982	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1226	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2528	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12943615347450657560"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"16449190417584852967","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12943615347450657560","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"12943615347450657560","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"12943615347450657560","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"12943615347450657560","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkgIzxJ7qimOYaz-4OfX9KtXr94qRfPAOkYzszPX_99LYCf_uw5AAMa_6a8; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49985	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	858	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2522	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8956775919272103080"}],"aggregatable_trigger_data":[{"filters":{"14":["10904904"]},"key_piece":"0x9e6200e166627282","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x1439bee2f15b1841","not_filters":{"14":["10904904"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["10904904"]},"key_piece":"0xb69d7e55e3f89744","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xe483366751c230bb","not_filters":{"14":["10904904"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"564521066757564218","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8956775919272103080","filters":{"14":["10904904"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8956775919272103080","filters":{"14":["10904904"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8956775919272103080","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8956775919272103080","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnraRb8QHbJmykfIbGYwEp2tQtPezDIRXXNFwmZmobjujIjMMljDUA3rtbt; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49983	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	859	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2527	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13221357374245071212"}],"aggregatable_trigger_data":[{"filters":{"14":["10904907"]},"key_piece":"0x59c0c21913a51db1","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x7e8ae2804c4c03c8","not_filters":{"14":["10904907"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["10904907"]},"key_piece":"0x998c0c22a5b79e76","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x21522d5dd2a7883","not_filters":{"14":["10904907"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"2079662450998616604","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13221357374245071212","filters":{"14":["10904907"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"13221357374245071212","filters":{"14":["10904907"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"13221357374245071212","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"13221357374245071212","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnWrdGxzQZmvWlf8ovf_JUo9EA6JXgpgiJrAgE7n7_TROet7AXy8K3XgLiQ; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49984	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	913	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2528	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11111930030020207875"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15916065851548703649","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"11111930030020207875","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"11111930030020207875","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"11111930030020207875","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"11111930030020207875","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUm8yX8ji9HoCTF7el-TfDCdaqnhMx2ibFbGvgcv077sFpDKX-LfGE5KugDk; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49986	172.253.122.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 35 36 36 30 36 38 39 39 35 30 37 34 31 32 30 31 35 32 37 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"5660689950741201527"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:27 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49993	142.251.16.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 30 33 36 34 33 37 36 37 34 35 30 34 31 34 36 30 35 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"403643767450414605"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:27 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49989	142.250.31.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 32 30 36 35 32 33 39 35 34 37 31 39 31 39 35 36 39 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"8206523954719195693"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:27 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49992	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1208	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:27 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49991	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1209	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:27 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49988	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	2143	OUT	GET /pagead/viewthroughconversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_00p8afkXpP46RAKltXZ4hiAXCgR3ReYwQ&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2341	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtq6IR1iFPBDaY8WN0JGDE9CSWty8jwPFFSE28sAYho4kU6maro&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_091mBLyYvn7OhNxedcHp4YT-zF-ajjU8Q&random=1169061180 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkz3ZYX83LmD1enmm2GX6oZm8QIUqPmhSco3tVg34Yl0icMt9J5QKtw-7B9; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49987	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	2156	OUT	GET /pagead/viewthroughconversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2FI8xmuJD3kZSFaHIHk9o3VBItZM9x3Cc&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-03-27 20:20:27 UTC	2359	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqHSDc512rv7of-jfhG4CrEb7i5efVtlwSTOzJQXT7Ilf-1Jgb&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2Be_Eeq9TvwAo3szNqlbn0c8duVy2QsAM&random=3186697809 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr; expires=Fri, 27-Mar-2026 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49994	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	862	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49995	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	972	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:27 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:27 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:27 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49997	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	626	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49996	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	663	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826309&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086160&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:27 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:27 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49998	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1164	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnwEfCT2piLU_kFN2ElHcHoWEZWq3ifXWoC2bikTR9ezG30tyJPZwiRVqvQ
2024-03-27 20:20:27 UTC	1039	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49999	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	953	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnwEfCT2piLU_kFN2ElHcHoWEZWq3ifXWoC2bikTR9ezG30tyJPZwiRVqvQ
2024-03-27 20:20:27 UTC	2218	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16705588585820907820"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"2608457572027547755","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16705588585820907820","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16705588585820907820","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16705588585820907820","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16705588585820907820","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50000	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	859	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50001	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	956	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUluJXulik7Rhg81yME91Bw3YWk9s5oWhCKY1o7duEHp8fDEpq6ntGQoVntz6Yg
2024-03-27 20:20:27 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12943615347450657560"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5262040128995598749","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12943615347450657560","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"12943615347450657560","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"12943615347450657560","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"12943615347450657560","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50002	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1263	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50003	142.250.31.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 32 37 34 34 32 35 37 38 33 31 38 30 30 38 33 32 39 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"4274425783180083292"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:28 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50005	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	629	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50004	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	969	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:28 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:28 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:28 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50006	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 137 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:27 UTC	137	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 34 34 39 31 39 30 34 31 37 35 38 34 38 35 32 39 36 37 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"16449190417584852967"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:28 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:28 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50007	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1230	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8179796457511855076"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8179796457511855076","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8179796457511855076","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8179796457511855076","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8179796457511855076","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50008	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1135	OUT	GET /activity;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	990	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50012	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	666	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826311&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:28 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:28 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50010	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	2351	OUT	GET /pagead/1p-conversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtq6IR1iFPBDaY8WN0JGDE9CSWty8jwPFFSE28sAYho4kU6maro&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_091mBLyYvn7OhNxedcHp4YT-zF-ajjU8Q&random=1169061180 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50009	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	2364	OUT	GET /pagead/1p-conversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqHSDc512rv7of-jfhG4CrEb7i5efVtlwSTOzJQXT7Ilf-1Jgb&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2Be_Eeq9TvwAo3szNqlbn0c8duVy2QsAM&random=3186697809 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50011	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:27 UTC	1236	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50014	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	975	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1390904710;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50013	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	976	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=1724063982;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50016	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	626	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50017	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1265	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50015	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1238	OUT	GET /pagead/viewthroughconversion/804757079/?random=1039784279&fst=1711570826632&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	969	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50018	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	663	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570826312&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_171157099086182&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:28 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:28 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50019	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1136	OUT	GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	991	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50020	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1030	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=84925227;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	49990	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1265	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50021	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	924	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8179796457511855076"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8179796457511855076","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8179796457511855076","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8179796457511855076","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8179796457511855076","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50022	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1216	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50023	172.253.62.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:28 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:28 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50024	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	925	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:28 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:28 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50025	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	2040	OUT	GET /pagead/1p-conversion/804757079/?random=1807749265&fst=1711570826283&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086182%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJKAs-WwjLH_ggEiEwjCyJWZopWFAxXdN9AEHU7FBzQyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtq6IR1iFPBDaY8WN0JGDE9CSWty8jwPFFSE28sAYho4kU6maro&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_091mBLyYvn7OhNxedcHp4YT-zF-ajjU8Q&random=1169061180 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50026	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	2058	OUT	GET /pagead/1p-conversion/804757079/?random=1622295223&fst=1711570826261&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157099086168%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CIGpp-bw_c7MOyITCJv3lpmilYUDFdQV0AQdCroOCDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqHSDc512rv7of-jfhG4CrEb7i5efVtlwSTOzJQXT7Ilf-1Jgb&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2Be_Eeq9TvwAo3szNqlbn0c8duVy2QsAM&random=3186697809 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50027	142.250.31.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:28 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:28 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:28 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50028	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1209	OUT	GET /pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50029	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1032	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=923998444;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:28 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50030	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1217	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:29 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50031	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:28 UTC	1032	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1005237275;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:29 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50032	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	983	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=662579688;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:29 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	49855	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	622	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=693465576 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:29 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	49849	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	740	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1380918839 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:20:29 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:29 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50033	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	976	OUT	GET /pagead/1p-user-list/804757079/?random=1039784279&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqD_Alb2BU3PaCwMM9qrgFbACddRfhzyfQ3ev-3fFTuuG2fTR5&random=486087710 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:29 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50035	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	2876	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 37082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D
2024-03-27 20:20:29 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 39 33 30 38 34 32 33 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 30 36 37 32 31 30 33 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 34 35 65 63 33 37 36 62 65 64 39 61 31 39 66 63 2e 6c 74 72 2e 63 73 73 22 2c 22 73 22 3a 35 39 30 2e 31 2c 22 64 22 3a 36 32 35 2e 38 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 35 39 30 2e 31 2c 22 64 73 22 3a 36 31 36 2e 35 2c 22 64 65 22 3a Data Ascii: {"memory":{"totalJSHeapSize":39308423,"usedJSHeapSize":20672103,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.canva.com/web/45ec376bed9a19fc.ltr.css","s":590.1,"d":625.8,"i":"link","p":"http/1.1","rs":0,"re":0,"fs":590.1,"ds":616.5,"de":
2024-03-27 20:20:29 UTC	16384	OUT	Data Raw: 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 26 64 72 3d 26 73 69 64 3d 31 37 31 31 35 37 30 38 32 35 26 73 63 74 3d 31 26 73 65 67 3d 30 26 64 74 3d 43 61 6e 76 61 25 33 41 25 32 30 56 69 73 75 61 6c 25 32 30 53 75 69 74 65 25 32 30 66 6f 72 25 32 30 45 76 65 72 79 6f 6e 65 26 65 6e 3d 63 75 73 74 6f 6d 2e 75 73 65 72 2e 65 6e 67 61 67 65 6d 65 6e 74 26 5f 63 3d 31 26 65 70 2e 67 74 6d 5f 77 65 62 5f 64 65 74 61 69 6c 73 3d 47 54 4d 2d 54 5a 50 54 4b 52 52 25 32 30 25 37 43 25 32 30 32 36 31 26 65 70 2e 65 76 65 6e 74 5f 69 64 3d 31 37 31 31 35 37 31 37 31 37 38 38 36 5f 31 37 31 31 35 37 30 39 39 30 38 36 31 36 38 26 65 70 2e 63 75 73 74 6f 6d 5f 64 69 63 62 6f 3d 6e 6f 74 25 32 30 73 65 74 26 65 70 2e 63 75 73 74 6f 6d Data Ascii: s%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=0&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157099086168&ep.custom_dicbo=not%20set&ep.custom
2024-03-27 20:20:29 UTC	4314	OUT	Data Raw: 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 61 75 69 64 64 63 3d 31 36 34 39 34 34 37 32 37 32 2e 31 37 31 31 35 37 30 38 32 37 3b 73 33 70 3d 31 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3f 22 2c 22 73 22 3a 38 30 33 30 2e 34 2c 22 64 22 3a 31 34 37 32 2e 36 2c 22 69 22 3a 22 69 6d 67 22 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 38 30 33 30 2e 34 2c 22 64 73 22 3a 39 30 32 34 Data Ascii: DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F?","s":8030.4,"d":1472.6,"i":"img","p":"http/1.1","rs":0,"re":0,"fs":8030.4,"ds":9024
2024-03-27 20:20:29 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:29 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b214d33f962099-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50034	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	984	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u34=yes;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:29 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50037	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	910	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50038	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	1002	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	1227	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Set-Cookie: ps_n=0; expires=Thu, 01-May-2025 20:20:29 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: ps_l=0; expires=Thu, 01-May-2025 20:20:29 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=Lax Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:29 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:29 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:29 UTC	54	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 Data Ascii: 43PNGIHDRIDATxc
2024-03-27 20:20:29 UTC	24	IN	Data Raw: 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: -IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50036	108.139.47.50	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	833	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:29 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:29 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 dedf8f82a63be28fe4cc799f6c4bfc08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: KRrpOcDd6MUGkp-v0UrqB4k4jz0Py3pyUej2YKHc0wctBDxVmb_EjA==
2024-03-27 20:20:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50039	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	887	OUT	GET /rp.gif?ts=1711570828774&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:29 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50041	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1380918839 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:20:29 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:29 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	49963	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	654	OUT	GET /rp.gif?ts=1711570828774&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:29 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50042	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	677	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:29 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50043	18.154.227.51	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	522	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1519974211 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:29 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:29 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A1d522ce503e36f3ccfd6c1711570829; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 af714cbe72276e767e61cd6e1fa5ed48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: CrzFFtPhEad_JpWdZo-A2-Wjah1FDunLTSfzS9gkRR0I0UXVUM6Ehw==
2024-03-27 20:20:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50044	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:29 UTC	730	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570828771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570825418&coo=false&eid=1711571717886_1711570990861115&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:30 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:30 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:30 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50047	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	634	OUT	GET /web/e52281db47fdc3ea.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:30 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:30 GMT Content-Type: text/javascript Content-Length: 270114 Connection: close CF-Ray: 86b214da0a485791-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62264 Cache-Control: public, max-age=31556926 ETag: "a09f34063ae381fa73a4e8afc6100da0" Expires: Fri, 28 Mar 2025 02:09:16 GMT Last-Modified: Wed, 27 Mar 2024 02:57:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: YdFQrZe/W1vkCXHL6vzlpDialJj8ShAL49c0GcDvMZAcEsy/q2Dz6u4G3xfHBEX7jxHSHBGEuuY= x-amz-replication-status: PENDING x-amz-request-id: 66BNEDFY9SF05XJB x-amz-server-side-encryption: AES256 x-amz-version-id: Tvgz9wD_.SdRKJsDzPph9TZv5VrkBCj. X-Content-Type-Options: nosniff
2024-03-27 20:20:30 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 46 67 61 42 7a 39 37 35 6d 55 55 6f 71 47 58 2e 42 39 58 47 4a 55 57 7a 57 61 68 36 4c 57 77 4e 35 52 45 68 76 6a 55 36 2e 55 73 2d 31 37 31 31 35 37 30 38 33 30 2d 31 2e 30 2e 31 2e 31 2d 6c 4c 39 79 42 51 54 6b 6a 46 6c 64 4e 45 75 33 59 37 37 69 5a 62 43 5f 78 5f 57 76 31 59 4d 50 68 4e 43 35 53 5f 70 30 6e 71 32 71 66 6b 38 52 33 49 52 4e 79 35 31 6b 32 38 41 4a 72 45 67 5f 47 56 5a 59 39 68 72 41 5a 43 74 37 5a 70 51 71 6e 54 6a 32 4d 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=FgaBz975mUUoqGX.B9XGJUWzWah6LWwN5REhvjU6.Us-1711570830-1.0.1.1-lL9yBQTkjFldNEu3Y77iZbC_x_Wv1YMPhNC5S_p0nq2qfk8R3IRNy51k28AJrEg_GVZY9hrAZCt7ZpQqnTj2MQ; path=/; expires=Wed, 27-Mar-24 20:50:30 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:30 UTC	606	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 65 2c 66 2c 74 2c 73 2c 63 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 72 29 7b 76 61 72 20 65 3d 6e 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 6e 5b 72 5d 3d 7b 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 72 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 69 29 2c 66 2e 6c 6f 61 64 65 64 3d 21 30 2c 66 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 63 2c 69 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var r,e,f,t,s,c={},n={};function i(r){var e=n[r];if(void 0!==e)return e.exports;var f=n[r]={id:r,loaded:!1,exports:{}};return c[r].call(f.exports,f,f.exports,i),f.loaded=!0,f.exports}i.m=c,i.amdD=function(){throw new Error("define canno
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 72 5b 75 2d 31 5d 3b 72 5b 75 5d 3d 5b 66 2c 74 2c 73 5d 7d 7d 2c 69 2e 6e 3d 72 3d 3e 7b 76 61 72 20 65 3d 72 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 72 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 72 3b 72 65 74 75 72 6e 20 69 2e 64 28 65 2c 7b 61 3a 65 7d 29 2c 65 7d 2c 66 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 72 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 72 29 3a 72 3d 3e 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 69 66 28 31 26 74 29 72 3d 74 68 69 73 28 72 29 3b 69 66 28 38 26 74 29 72 65 74 75 72 6e 20 72 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 29 7b 69 66 28 34 26 74 26 26 72 2e 5f 5f 65 73 4d 6f Data Ascii: r[u-1];r[u]=[f,t,s]}},i.n=r=>{var e=r&&r.__esModule?()=>r.default:()=>r;return i.d(e,{a:e}),e},f=Object.getPrototypeOf?r=>Object.getPrototypeOf(r):r=>r.__proto__,i.t=function(r,t){if(1&t)r=this(r);if(8&t)return r;if("object"==typeof r&&r){if(4&t&&r.__esMo
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 32 36 31 37 38 61 35 33 34 62 66 34 63 64 64 65 2e 6a 73 22 3b 69 66 28 35 37 34 39 37 3d 3d 3d 72 29 72 65 74 75 72 6e 22 64 33 34 65 65 34 65 62 39 30 37 66 64 32 62 65 2e 6a 73 22 3b 69 66 28 33 39 39 32 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 37 65 64 37 39 37 32 31 61 35 35 39 62 66 61 33 2e 6a 73 22 3b 69 66 28 34 30 33 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 62 39 34 37 36 64 64 32 63 62 38 61 32 33 36 34 2e 6a 73 22 3b 69 66 28 35 36 32 32 32 3d 3d 3d 72 29 72 65 74 75 72 6e 22 33 62 36 33 63 66 38 32 36 63 66 34 36 33 30 38 2e 6a 73 22 3b 69 66 28 31 33 38 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 34 65 64 63 36 38 32 62 62 65 64 63 30 61 62 66 2e 6a 73 22 3b 69 66 28 35 39 34 34 39 3d 3d 3d 72 29 72 65 74 75 72 Data Ascii: 5===r)return"26178a534bf4cdde.js";if(57497===r)return"d34ee4eb907fd2be.js";if(39925===r)return"7ed79721a559bfa3.js";if(4035===r)return"b9476dd2cb8a2364.js";if(56222===r)return"3b63cf826cf46308.js";if(1385===r)return"4edc682bbedc0abf.js";if(59449===r)retur
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 22 64 65 66 39 31 34 38 63 35 36 34 36 33 34 33 66 2e 6a 73 22 3b 69 66 28 38 34 37 31 34 3d 3d 3d 72 29 72 65 74 75 72 6e 22 34 66 37 36 31 36 66 36 30 64 61 62 66 32 64 64 2e 6a 73 22 3b 69 66 28 33 37 39 33 38 3d 3d 3d 72 29 72 65 74 75 72 6e 22 33 64 65 35 63 39 32 62 39 64 32 30 31 34 35 38 2e 6a 73 22 3b 69 66 28 37 38 30 33 30 3d 3d 3d 72 29 72 65 74 75 72 6e 22 39 37 37 31 37 35 32 33 38 34 63 65 61 33 36 30 2e 6a 73 22 3b 69 66 28 31 34 32 33 36 3d 3d 3d 72 29 72 65 74 75 72 6e 22 33 30 36 39 39 65 65 31 34 61 38 37 36 66 38 61 2e 6a 73 22 3b 69 66 28 36 35 39 39 30 3d 3d 3d 72 29 72 65 74 75 72 6e 22 64 37 31 63 37 39 35 32 64 30 62 37 34 62 66 36 2e 6a 73 22 3b 69 66 28 33 34 39 32 37 3d 3d 3d 72 29 72 65 74 75 72 6e 22 34 64 37 38 37 65 35 61 Data Ascii: "def9148c5646343f.js";if(84714===r)return"4f7616f60dabf2dd.js";if(37938===r)return"3de5c92b9d201458.js";if(78030===r)return"9771752384cea360.js";if(14236===r)return"30699ee14a876f8a.js";if(65990===r)return"d71c7952d0b74bf6.js";if(34927===r)return"4d787e5a
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 39 39 37 65 66 61 62 36 2e 6a 73 22 3b 69 66 28 39 34 38 38 32 3d 3d 3d 72 29 72 65 74 75 72 6e 22 30 37 39 66 35 30 36 65 63 64 36 34 62 34 32 37 2e 6a 73 22 3b 69 66 28 38 32 33 31 39 3d 3d 3d 72 29 72 65 74 75 72 6e 22 35 33 39 33 66 34 34 38 34 63 39 38 34 39 65 65 2e 6a 73 22 3b 69 66 28 38 34 31 30 34 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 34 39 32 62 31 63 36 39 64 39 36 31 39 32 64 2e 6a 73 22 3b 69 66 28 38 38 37 33 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 62 31 62 32 61 34 66 33 36 62 63 33 63 64 37 37 2e 6a 73 22 3b 69 66 28 36 35 35 34 33 3d 3d 3d 72 29 72 65 74 75 72 6e 22 34 63 63 64 64 32 62 32 61 32 65 62 34 62 32 39 2e 6a 73 22 3b 69 66 28 39 30 33 31 33 3d 3d 3d 72 29 72 65 74 75 72 6e 22 37 36 61 34 65 39 31 62 62 32 63 62 62 62 66 64 2e Data Ascii: 997efab6.js";if(94882===r)return"079f506ecd64b427.js";if(82319===r)return"5393f4484c9849ee.js";if(84104===r)return"6492b1c69d96192d.js";if(88735===r)return"b1b2a4f36bc3cd77.js";if(65543===r)return"4ccdd2b2a2eb4b29.js";if(90313===r)return"76a4e91bb2cbbbfd.
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 39 31 30 32 35 39 34 61 61 36 34 63 38 62 63 63 2e 6a 73 22 3b 69 66 28 33 39 34 36 34 3d 3d 3d 72 29 72 65 74 75 72 6e 22 38 37 34 32 38 63 33 31 63 36 32 37 62 61 61 37 2e 6a 73 22 3b 69 66 28 34 30 33 34 34 3d 3d 3d 72 29 72 65 74 75 72 6e 22 31 63 33 38 35 37 61 61 66 33 38 39 61 36 64 38 2e 6a 73 22 3b 69 66 28 31 30 38 38 32 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 36 31 36 64 35 39 37 39 31 62 32 65 32 66 37 2e 6a 73 22 3b 69 66 28 36 36 31 35 37 3d 3d 3d 72 29 72 65 74 75 72 6e 22 35 64 62 32 32 37 31 35 36 39 30 65 39 66 38 62 2e 6a 73 22 3b 69 66 28 35 39 34 39 31 3d 3d 3d 72 29 72 65 74 75 72 6e 22 62 34 31 61 37 65 65 30 36 37 37 36 63 64 32 62 2e 6a 73 22 3b 69 66 28 35 34 39 32 32 3d 3d 3d 72 29 72 65 74 Data Ascii: 5===r)return"9102594aa64c8bcc.js";if(39464===r)return"87428c31c627baa7.js";if(40344===r)return"1c3857aaf389a6d8.js";if(10882===r)return"6616d59791b2e2f7.js";if(66157===r)return"5db22715690e9f8b.js";if(59491===r)return"b41a7ee06776cd2b.js";if(54922===r)ret
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 22 36 62 63 31 39 66 62 63 66 30 37 39 64 30 37 61 2e 6a 73 22 3b 69 66 28 35 31 30 39 34 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 35 35 32 62 61 36 39 32 61 61 35 33 62 36 65 2e 6a 73 22 3b 69 66 28 38 32 34 39 32 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 62 63 64 66 64 31 39 62 33 64 30 33 30 65 36 2e 6a 73 22 3b 69 66 28 31 30 38 39 31 3d 3d 3d 72 29 72 65 74 75 72 6e 22 34 34 65 38 63 39 32 31 31 34 66 31 35 34 66 61 2e 6a 73 22 3b 69 66 28 34 31 36 37 38 3d 3d 3d 72 29 72 65 74 75 72 6e 22 37 61 34 63 63 66 63 62 61 38 66 30 39 63 32 66 2e 6a 73 22 3b 69 66 28 36 34 31 35 30 3d 3d 3d 72 29 72 65 74 75 72 6e 22 62 62 36 32 37 64 33 39 39 39 34 37 36 31 30 32 2e 6a 73 22 3b 69 66 28 31 33 34 34 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 39 Data Ascii: )return"6bc19fbcf079d07a.js";if(51094===r)return"6552ba692aa53b6e.js";if(82492===r)return"6bcdfd19b3d030e6.js";if(10891===r)return"44e8c92114f154fa.js";if(41678===r)return"7a4ccfcba8f09c2f.js";if(64150===r)return"bb627d3999476102.js";if(13445===r)return"9
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 74 75 72 6e 22 65 33 39 66 34 63 61 66 61 36 33 33 35 31 35 38 2e 6a 73 22 3b 69 66 28 38 33 33 35 36 3d 3d 3d 72 29 72 65 74 75 72 6e 22 35 39 66 37 63 35 38 39 63 39 36 66 66 30 35 38 2e 6a 73 22 3b 69 66 28 38 31 35 31 33 3d 3d 3d 72 29 72 65 74 75 72 6e 22 61 32 33 62 63 32 61 31 38 61 37 61 37 65 34 64 2e 6a 73 22 3b 69 66 28 31 33 32 38 39 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 61 35 38 62 38 65 65 35 66 62 39 62 64 35 30 2e 6a 73 22 3b 69 66 28 35 30 39 30 39 3d 3d 3d 72 29 72 65 74 75 72 6e 22 63 64 65 66 33 38 61 39 38 66 39 62 65 35 61 30 2e 6a 73 22 3b 69 66 28 33 33 33 30 30 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 66 30 35 39 32 36 66 36 64 63 61 34 34 33 65 2e 6a 73 22 3b 69 66 28 31 37 30 34 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 38 65 64 30 Data Ascii: turn"e39f4cafa6335158.js";if(83356===r)return"59f7c589c96ff058.js";if(81513===r)return"a23bc2a18a7a7e4d.js";if(13289===r)return"6a58b8ee5fb9bd50.js";if(50909===r)return"cdef38a98f9be5a0.js";if(33300===r)return"6f05926f6dca443e.js";if(17045===r)return"8ed0
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 37 62 64 38 64 65 65 38 32 37 37 39 64 31 33 30 2e 6a 73 22 3b 69 66 28 31 34 30 39 31 3d 3d 3d 72 29 72 65 74 75 72 6e 22 32 36 39 66 66 63 31 32 66 63 64 61 33 39 34 31 2e 6a 73 22 3b 69 66 28 36 37 36 33 31 3d 3d 3d 72 29 72 65 74 75 72 6e 22 36 36 33 35 32 61 65 34 61 61 34 35 33 66 36 63 2e 6a 73 22 3b 69 66 28 33 35 36 38 31 3d 3d 3d 72 29 72 65 74 75 72 6e 22 37 65 38 39 32 39 30 36 36 35 63 31 31 62 37 66 2e 6a 73 22 3b 69 66 28 37 31 35 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 64 39 33 39 62 33 30 64 30 34 35 33 34 30 61 30 2e 6a 73 22 3b 69 66 28 33 32 36 37 35 3d 3d 3d 72 29 72 65 74 75 72 6e 22 66 32 36 31 33 36 36 65 35 36 62 31 35 33 65 64 2e 6a 73 22 3b 69 66 28 33 33 32 32 30 3d 3d 3d 72 29 72 65 74 75 72 6e 22 62 30 39 39 33 62 66 35 33 65 Data Ascii: 7bd8dee82779d130.js";if(14091===r)return"269ffc12fcda3941.js";if(67631===r)return"66352ae4aa453f6c.js";if(35681===r)return"7e89290665c11b7f.js";if(7155===r)return"d939b30d045340a0.js";if(32675===r)return"f261366e56b153ed.js";if(33220===r)return"b0993bf53e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50050	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	633	OUT	GET /web/32c7909a0316c8d5.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:30 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:30 GMT Content-Type: text/javascript Content-Length: 86568 Connection: close CF-Ray: 86b214da1e5605b0-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 150305 Cache-Control: public, max-age=31556926 ETag: "0d9a1ae7e118abdf0ed427bb3e933af1" Expires: Fri, 28 Mar 2025 02:09:16 GMT Last-Modified: Tue, 26 Mar 2024 02:20:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vTOC8v8ZT3JzTk+DLvBJRQKgK2ZWCNssQWncgY0sWAZ+B5k29EASAB8jpRMd0rMFdEVax7huPYk= x-amz-replication-status: COMPLETED x-amz-request-id: 18YCJ608B6YKKSV5 x-amz-server-side-encryption: AES256 x-amz-version-id: gRKJzFnYlLODTwqDMm8N03d7VvvxehsN X-Content-Type-Options: nosniff
2024-03-27 20:20:30 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 30 50 38 62 73 4d 79 34 30 54 58 39 45 6f 51 44 4c 55 41 41 55 4a 70 6f 32 5a 53 50 38 38 75 68 5f 59 4a 4d 52 51 66 35 6b 69 34 2d 31 37 31 31 35 37 30 38 33 30 2d 31 2e 30 2e 31 2e 31 2d 67 63 73 56 74 68 54 47 47 5f 31 41 65 73 49 54 63 43 73 42 4e 72 62 42 53 52 33 70 37 6f 5f 57 52 61 33 6a 68 69 6c 73 70 50 43 63 70 34 62 56 4d 46 41 79 4f 61 6b 4c 30 54 44 51 55 4c 62 79 46 68 38 35 41 31 69 6b 65 32 62 7a 38 51 5f 6f 57 4c 44 78 35 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=0P8bsMy40TX9EoQDLUAAUJpo2ZSP88uh_YJMRQf5ki4-1711570830-1.0.1.1-gcsVthTGG_1AesITcCsBNrbBSR3p7o_WRa3jhilspPCcp4bVMFAyOakL0TDQULbyFh85A1ike2bz8Q_oWLDx5A; path=/; expires=Wed, 27-Mar-24 20:50:30 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:30 UTC	604	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 34 33 36 5d 2c 7b 33 35 33 36 31 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 49 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 37 31 32 33 34 33 29 3b 63 6c 61 73 73 20 69 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 73 74 61 74 69 63 20 5f 5f 69 6e 69 74 53 74 61 74 69 63 28 29 7b 74 68 69 73 2e 69 64 3d 22 44 65 64 75 70 65 22 7d 5f 5f 69 6e 69 74 28 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 69 2e 69 64 7d Data Ascii: (self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[25436],{353610:(t,e,n)=>{"use strict";n.d(e,{I:()=>i});var r=n(712343);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2e 76 61 6c 75 65 21 3d 3d 72 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 61 28 74 2c 65 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 6f 28 74 2c 65 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 28 74 2c 65 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 28 74 2c 6e 2e 5f 70 72 65 76 69 6f 75 73 45 76 65 6e 74 29 29 72 65 74 75 72 6e 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 29 26 26 72 2e 6b 67 2e 77 61 72 6e 28 22 45 76 65 6e 74 20 64 72 6f 70 70 65 64 20 64 75 65 20 74 6f 20 62 65 69 6e 67 20 61 20 64 75 70 6c 69 63 61 74 65 20 6f 66 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 70 74 75 72 65 Data Ascii: .value!==r.value)return!1;if(!a(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;return!1}(t,n._previousEvent))return("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&r.kg.warn("Event dropped due to being a duplicate of previously capture
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 7c 7c 21 28 30 2c 72 2e 56 5a 29 28 65 2e 6f 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 29 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 2e 6e 61 6d 65 7c 7c 65 2e 6f 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 2c 61 3d 74 68 69 73 2e 5f 65 78 74 72 61 63 74 45 72 72 6f 72 44 61 74 61 28 65 2e 6f 72 69 67 69 6e 61 6c 45 78 63 65 70 74 69 6f 6e 29 3b 69 66 28 61 29 7b 63 6f 6e 73 74 20 65 3d 7b 2e 2e 2e 74 2e 63 6f 6e 74 65 78 74 73 7d 2c 73 3d 28 30 2c 69 2e 46 76 29 28 61 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 64 65 70 74 68 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 50 4f 29 28 73 Data Ascii: riginalException\|\|!(0,r.VZ)(e.originalException))return t;const n=e.originalException.name\|\|e.originalException.constructor.name,a=this._extractErrorData(e.originalException);if(a){const e={...t.contexts},s=(0,i.Fv)(a,this._options.depth);return(0,r.PO)(s
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 20 74 2e 65 78 63 65 70 74 69 6f 6e 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 29 26 26 28 65 3d 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 45 78 63 65 70 74 69 6f 6e 73 45 76 65 6e 74 28 65 29 29 2c 65 7d 5f 5f 69 6e 69 74 33 28 29 7b 74 68 69 73 2e 5f 69 74 65 72 61 74 65 65 3d 74 3d 3e 7b 69 66 28 21 74 2e 66 69 6c 65 6e 61 6d 65 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 65 3d 2f 5e 5b 41 2d 5a 5d 3a 5c 5c 2f 2e 74 65 73 74 28 74 2e 66 69 6c 65 6e 61 6d 65 29 2c 6e 3d 2f 5e 5c 2f 2f 2e 74 65 73 74 28 74 2e 66 69 6c 65 6e 61 6d 65 29 3b 69 66 28 65 7c 7c 6e 29 7b 63 6f 6e 73 74 20 6e 3d 65 3f 74 2e 66 69 6c 65 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 41 2d 5a 5d 3a 2f 2c 22 22 29 2e 72 Data Ascii: t.exception&&Array.isArray(t.exception.values)&&(e=this._processExceptionsEvent(e)),e}__init3(){this._iteratee=t=>{if(!t.filename)return t;const e=/^[A-Z]:\\/.test(t.filename),n=/^\//.test(t.filename);if(e\|\|n){const n=e?t.filename.replace(/^[A-Z]:/,"").r
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 2e 70 75 73 68 28 60 2e 24 7b 61 5b 75 5d 7d 60 29 3b 63 6f 6e 73 74 20 64 3d 5b 22 74 79 70 65 22 2c 22 6e 61 6d 65 22 2c 22 74 69 74 6c 65 22 2c 22 61 6c 74 22 5d 3b 66 6f 72 28 75 3d 30 3b 75 3c 64 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 73 3d 64 5b 75 5d 2c 63 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 73 29 2c 63 26 26 69 2e 70 75 73 68 28 60 5b 24 7b 73 7d 3d 22 24 7b 63 7d 22 5d 60 29 3b 72 65 74 75 72 6e 20 69 2e 6a 6f 69 6e 28 22 22 29 7d 7d 2c 31 36 34 33 30 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 6c 65 74 20 65 2c 6e 3d 74 5b 30 5d 2c 72 3d 31 3b 66 6f 72 28 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 69 3d 74 5b 72 Data Ascii: length;u++)i.push(`.${a[u]}`);const d=["type","name","title","alt"];for(u=0;u<d.length;u++)s=d[u],c=n.getAttribute(s),c&&i.push(`[${s}="${c}"]`);return i.join("")}},164307:(t,e,n)=>{"use strict";function r(t){let e,n=t[0],r=1;for(;r<t.length;){const i=t[r
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 6b 67 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 39 37 31 32 33 35 29 3b 63 6f 6e 73 74 20 69 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 6c 65 74 20 74 3d 21 31 3b 63 6f 6e 73 74 20 65 3d 7b 65 6e 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 30 7d 2c 64 69 73 61 62 6c 65 3a 28 29 3d 3e 7b 74 3d 21 31 7d 7d 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 3f 69 2e 66 6f 72 45 61 63 68 28 28 6e 3d 3e 7b 65 5b 6e 5d 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 26 26 66 75 6e Data Ascii: kg:()=>a});var r=n(971235);const i=["debug","info","warn","error","log","assert","trace"];function o(){let t=!1;const e={enable:()=>{t=!0},disable:()=>{t=!1}};return"undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?i.forEach((n=>{e[n]=(...e)=>{t&&fun
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 6f 6d 61 69 6e 22 3d 3d 3d 74 26 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 5f 65 76 65 6e 74 73 3f 22 5b 44 6f 6d 61 69 6e 5d 22 3a 22 64 6f 6d 61 69 6e 45 6d 69 74 74 65 72 22 3d 3d 3d 74 3f 22 5b 44 6f 6d 61 69 6e 45 6d 69 74 74 65 72 5d 22 3a 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 26 26 65 3d 3d 3d 6e 2e 67 3f 22 5b 47 6c 6f 62 61 6c 5d 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 65 3d 3d 3d 77 69 6e 64 6f 77 3f 22 5b 57 69 6e 64 6f 77 5d 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 65 3d 3d 3d 64 6f 63 75 6d 65 6e 74 3f 22 5b 44 6f 63 75 6d 65 6e 74 5d 22 3a 28 30 2c 72 2e 43 79 29 28 65 29 3f 22 5b 53 79 6e 74 68 65 74 69 Data Ascii: omain"===t&&e&&"object"==typeof e&&e._events?"[Domain]":"domainEmitter"===t?"[DomainEmitter]":void 0!==n.g&&e===n.g?"[Global]":"undefined"!=typeof window&&e===window?"[Window]":"undefined"!=typeof document&&e===document?"[Document]":(0,r.Cy)(e)?"[Syntheti
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 2e 2e 2e 63 28 74 29 7d 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 28 30 2c 69 2e 56 39 29 28 74 2c 43 75 73 74 6f 6d 45 76 65 6e 74 29 26 26 28 65 2e 64 65 74 61 69 6c 3d 74 2e 64 65 74 61 69 6c 29 2c 65 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 69 2e 6b 4b 29 28 74 29 3f 28 30 2c 72 2e 52 74 29 28 74 29 3a 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 22 3c 75 6e 6b 6e 6f 77 6e 3e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d Data Ascii: urrentTarget),...c(t)};return"undefined"!=typeof CustomEvent&&(0,i.V9)(t,CustomEvent)&&(e.detail=t.detail),e}return t}function s(t){try{return(0,i.kK)(t)?(0,r.Rt)(t):Object.prototype.toString.call(t)}catch(e){return"<unknown>"}}function c(t){if("object"==
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 26 26 6e 2e 73 75 62 73 74 72 28 2d 31 2a 65 2e 6c 65 6e 67 74 68 29 3d 3d 3d 65 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 65 2e 6c 65 6e 67 74 68 29 29 2c 6e 7d 7d 2c 31 33 30 33 36 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 24 50 3a 28 29 3d 3e 69 7d 29 3b 6e 28 31 36 34 33 30 37 29 3b 63 6f 6e 73 74 20 72 3d 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 6e 61 6d 65 7c 7c 72 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 38 35 37 33 32 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 Data Ascii: eturn e&&n.substr(-1*e.length)===e&&(n=n.substr(0,n.length-e.length)),n}},130360:(t,e,n)=>{"use strict";n.d(e,{$P:()=>i});n(164307);const r="<anonymous>";function i(t){try{return t&&"function"==typeof t&&t.name\|\|r}catch(e){return r}}},857321:(t,e,n)=>{"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50048	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	633	OUT	GET /web/527f411d8cbc0878.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:30 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:30 GMT Content-Type: text/javascript Content-Length: 54722 Connection: close CF-Ray: 86b214da28b86fb3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 777360 Cache-Control: public, max-age=31556926 ETag: "05b9c89ec10da17aea465da7508e5afb" Expires: Fri, 28 Mar 2025 02:09:16 GMT Last-Modified: Wed, 13 Mar 2024 01:05:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 14 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: JGIjLdXGB4frsatPfbgiuumUzxQvnvblZHxqLAySDsLc6Q/m7AX4+rRHXoA0QwU68Z7dfQESN/Y= x-amz-replication-status: COMPLETED x-amz-request-id: KYW9VJX8EB5BJDNC x-amz-server-side-encryption: AES256 x-amz-version-id: 1YkXoR0WBNyyOgetbtfw8UVJCyKP7ks1 X-Content-Type-Options: nosniff
2024-03-27 20:20:30 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 46 33 42 47 78 52 67 6d 4f 6e 35 52 5a 65 36 71 78 61 33 4a 41 47 6e 6a 33 37 69 66 78 39 59 57 43 75 39 48 72 49 5a 73 33 75 59 2d 31 37 31 31 35 37 30 38 33 30 2d 31 2e 30 2e 31 2e 31 2d 2e 36 32 37 54 72 66 42 69 48 77 73 6e 51 70 57 42 4f 4e 4a 42 57 4a 49 68 73 79 59 6d 66 57 62 31 46 54 61 78 49 46 72 36 38 62 4e 42 6c 36 55 65 75 49 6c 30 67 76 39 41 6e 68 49 76 50 6c 4b 65 4a 2e 66 64 30 44 31 62 5a 75 6f 43 69 58 31 77 47 50 4b 6f 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=F3BGxRgmOn5RZe6qxa3JAGnj37ifx9YWCu9HrIZs3uY-1711570830-1.0.1.1-.627TrfBiHwsnQpWBONJBWJIhsyYmfWb1FTaxIFr68bNBl6UeuIl0gv9AnhIvPlKeJ.fd0D1bZuoCiX1wGPKog; path=/; expires=Wed, 27-Mar-24 20:50:30 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:30 UTC	604	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 31 36 38 39 34 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 24 24 3a 28 29 3d 3e 49 65 2c 45 48 3a 28 29 3d 3e 49 74 2c 45 69 3a 28 29 3d 3e 7a 6e 2c 46 6c 3a 28 29 3d 3e 56 65 2c 47 66 3a 28 29 3d 3e 51 74 2c 4c 47 3a 28 29 3d 3e 4d 74 2c 4c 4a 3a 28 29 3d 3e 51 6e 2c 4c 4f 3a 28 29 3d 3e 45 65 2c 4d 35 3a 28 29 3d 3e 6c 6e 2c 4e 37 3a 28 29 3d 3e 62 6e 2c 50 53 3a 28 29 3d 3e 4f 6e 2c 50 62 3a 28 29 3d 3e 63 72 2c 53 42 3a 28 29 3d 3e 4f 74 2c 53 57 3a 28 29 3d 3e 5a 65 2c 55 35 Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{168949:(e,t,n)=>{n.d(t,{$$:()=>Ie,EH:()=>It,Ei:()=>zn,Fl:()=>Ve,Gf:()=>Qt,LG:()=>Mt,LJ:()=>Qn,LO:()=>Ee,M5:()=>ln,N7:()=>bn,PS:()=>On,Pb:()=>cr,SB:()=>Ot,SW:()=>Ze,U5
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2b 2b 29 6e 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 5b 4d 6f 62 58 5d 20 6d 69 6e 69 66 69 65 64 20 65 72 72 6f 72 20 6e 72 3a 20 22 2b 65 2b 28 6e 2e 6c 65 6e 67 74 68 3f 22 20 22 2b 6e 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 22 2c 22 29 3a 22 22 29 2b 22 2e 20 46 69 6e 64 20 74 68 65 20 66 75 6c 6c 20 65 72 72 6f 72 20 61 74 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 6f 62 78 6a 73 2f 6d 6f 62 78 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 70 61 63 6b 61 67 65 73 2f 6d 6f 62 78 2f 73 72 63 2f 65 72 72 6f 72 73 2e 74 73 22 3a 22 5b 4d 6f 62 58 5d 20 22 2b 65 29 7d 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 Data Ascii: ++)n[r-1]=arguments[r];throw new Error("number"==typeof e?"[MobX] minified error nr: "+e+(n.length?" "+n.map(String).join(","):"")+". Find the full error at: https://github.com/mobxjs/mobx/blob/main/packages/mobx/src/errors.ts":"[MobX] "+e)}var i={};funct
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 69 73 4d 6f 62 58 22 2b 65 3b 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6e 5d 3d 21 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 79 28 65 29 26 26 21 30 3d 3d 3d 65 5b 6e 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 7d 76 61 72 20 45 3d 76 6f 69 64 20 30 21 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3b 76 61 72 20 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 Data Ascii: urable:!0,value:n})}function S(e,t){var n="isMobX"+e;return t.prototype[n]=!0,function(e){return y(e)&&!0===e[n]}}function x(e){return e instanceof Map}function j(e){return e instanceof Set}var E=void 0!==Object.getOwnPropertySymbols;var k="undefined"!=ty
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 Data Ascii: 't been initialised - super() hasn't been called");return e}function M(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function I(e,t){var n="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 6f 69 64 20 30 2c 74 68 69 73 2e 6f 6e 42 55 4f 4c 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6e 61 6d 65 5f 3d 65 7d 76 61 72 20 74 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6f 6e 42 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 6e 42 4f 4c 26 26 74 68 69 73 2e 6f 6e 42 4f 4c 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 2c 74 2e 6f 6e 42 55 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 6e 42 55 4f 4c 26 26 74 68 69 73 2e 6f 6e 42 55 4f 4c 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 2c 74 2e 72 65 70 6f 72 74 4f 62 73 65 72 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: oid 0,this.onBUOL=void 0,this.name_=e}var t=e.prototype;return t.onBO=function(){this.onBOL&&this.onBOL.forEach((function(e){return e()}))},t.onBUO=function(){this.onBUOL&&this.onBUOL.forEach((function(e){return e()}))},t.reportObserved=function(){return
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 28 69 3d 68 74 2e 73 61 66 65 44 65 73 63 72 69 70 74 6f 72 73 29 2c 66 3d 72 2c 74 2e 61 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 5f 2c 66 2e 76 61 6c 75 65 3b 76 61 72 20 5f 2c 76 3d 72 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 28 6f 3d 74 2e 6f 70 74 69 6f 6e 73 5f 29 26 26 6f 2e 62 6f 75 6e 64 26 26 28 76 3d 76 2e 62 69 6e 64 28 6e 75 6c 6c 21 3d 28 5f 3d 65 2e 70 72 6f 78 79 5f 29 3f 5f 3a 65 2e 74 61 72 67 65 74 5f 29 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 42 65 28 6e 75 6c 6c 21 3d 28 61 3d 6e 75 6c 6c 3d 3d 28 73 3d 74 2e 6f 70 74 69 6f 6e 73 5f 29 3f 76 6f 69 64 20 30 3a 73 2e 6e 61 6d 65 29 3f 61 3a 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 76 2c 6e 75 6c 6c 21 3d 28 75 3d 6e 75 6c 6c 3d 3d 28 63 3d 74 2e 6f 70 74 69 6f 6e 73 5f 29 3f 76 6f 69 64 Data Ascii: (i=ht.safeDescriptors),f=r,t.annotationType_,f.value;var _,v=r.value;null!=(o=t.options_)&&o.bound&&(v=v.bind(null!=(_=e.proxy_)?_:e.target_));return{value:Be(null!=(a=null==(s=t.options_)?void 0:s.name)?a:n.toString(),v,null!=(u=null==(c=t.options_)?void
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 70 65 72 74 79 5f 28 74 2c 52 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5f 2c 7b 67 65 74 3a 6e 2e 67 65 74 2c 73 65 74 3a 6e 2e 73 65 74 7d 29 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 75 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 61 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 5f 3a 65 2c 6f 70 74 69 6f 6e 73 5f 3a 74 2c 6d 61 6b 65 5f 3a 63 65 2c 65 78 74 65 6e 64 5f 3a 6c 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 65 78 74 65 6e 64 5f 28 65 2c 74 2c 6e 2c 21 31 29 3f 30 3a 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 74 2e 61 6e 6e 6f 74 61 74 69 6f 6e 54 Data Ascii: perty_(t,R({},this.options_,{get:n.get,set:n.set}),r)}function ue(e,t){return{annotationType_:e,options_:t,make_:ce,extend_:le}}function ce(e,t,n){return null===this.extend_(e,t,n,!1)?0:1}function le(e,t,n,r){var i,o;return function(e,t,n,r){t.annotationT
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2e 76 61 6c 75 65 3d 6e 2e 76 61 6c 75 65 2e 62 69 6e 64 28 6e 75 6c 6c 21 3d 28 61 3d 65 2e 70 72 6f 78 79 5f 29 3f 61 3a 65 2e 74 61 72 67 65 74 5f 29 29 3b 72 65 74 75 72 6e 28 21 31 3d 3d 3d 28 6e 75 6c 6c 3d 3d 28 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5f 29 3f 76 6f 69 64 20 30 3a 6f 2e 64 65 65 70 29 3f 45 65 2e 72 65 66 3a 45 65 29 2e 65 78 74 65 6e 64 5f 28 65 2c 74 2c 6e 2c 72 29 7d 76 61 72 20 70 65 3d 7b 64 65 65 70 3a 21 30 2c 6e 61 6d 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 44 65 63 6f 72 61 74 6f 72 3a 76 6f 69 64 20 30 2c 70 72 6f 78 79 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 70 65 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 70 65 29 3b 76 61 72 20 67 65 3d 75 65 28 22 6f 62 73 Data Ascii: .value=n.value.bind(null!=(a=e.proxy_)?a:e.target_));return(!1===(null==(o=this.options_)?void 0:o.deep)?Ee.ref:Ee).extend_(e,t,n,r)}var pe={deep:!0,name:void 0,defaultDecorator:void 0,proxy:!0};function be(e){return e\|\|pe}Object.freeze(pe);var ge=ue("obs
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2c 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3b 72 65 74 75 72 6e 20 76 28 29 2c 65 3d 61 72 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 28 72 3d 28 6e 3d 65 5b 71 5d 29 2e 70 72 6f 78 79 5f 29 3f 72 3a 6e 2e 70 72 6f 78 79 5f 3d 6e 65 77 20 50 72 6f 78 79 28 65 2c 78 6e 29 7d 28 7b 7d 2c 6e 29 2c 65 2c 74 29 7d 2c 72 65 66 3a 4b 28 79 65 29 2c 73 68 61 6c 6c 6f 77 3a 4b 28 6d 65 29 2c 64 65 65 70 3a 77 65 2c 73 74 72 75 63 74 3a 4b 28 4f 65 29 7d 29 2c 6b 65 3d 22 63 6f 6d 70 75 74 65 64 22 2c 50 65 3d 6f 65 28 6b 65 29 2c 54 65 3d 6f 65 28 22 63 6f 6d 70 75 74 65 64 2e 73 74 72 75 63 74 22 2c 7b 65 71 75 61 6c 73 3a 58 2e 73 74 72 75 63 74 75 72 61 6c 7d 29 2c 56 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 67 28 74 29 Data Ascii: ,n):function(e,t){var n,r;return v(),e=ar(e,t),null!=(r=(n=e[q]).proxy_)?r:n.proxy_=new Proxy(e,xn)}({},n),e,t)},ref:K(ye),shallow:K(me),deep:we,struct:K(Oe)}),ke="computed",Pe=oe(ke),Te=oe("computed.struct",{equals:X.structural}),Ve=function(e,t){if(g(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50049	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	631	OUT	GET /web/499b6c2ee03238ef.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:30 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:30 GMT Content-Type: text/css Content-Length: 29606 Connection: close CF-Ray: 86b214da3f386fd3-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 497016 Cache-Control: public, max-age=31556926 ETag: "8464d0689f94b457463e301836b2250d" Expires: Fri, 28 Mar 2025 02:09:16 GMT Last-Modified: Fri, 22 Mar 2024 02:09:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: /UWx2S9EsXkSDNLRw10TMwb5xX5wqheQQFPMxuO1GB59b0E1lmtG5/sM2TIRwEBrUZ30RYhXdYc= x-amz-replication-status: COMPLETED x-amz-request-id: V7YVPQ5MCD06NYYB x-amz-server-side-encryption: AES256 x-amz-version-id: WTqagxknzZ3aOYRimKbItb2x4tJoNWcA X-Content-Type-Options: nosniff
2024-03-27 20:20:30 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 71 4f 36 6e 39 53 6e 55 72 66 59 58 34 53 4e 71 33 39 4e 38 73 64 6f 4d 34 42 52 41 36 51 70 36 77 56 61 44 30 56 66 4b 31 56 4d 2d 31 37 31 31 35 37 30 38 33 30 2d 31 2e 30 2e 31 2e 31 2d 6d 33 61 4d 2e 30 6d 5a 51 67 6f 4a 71 37 72 35 72 59 53 4d 63 77 7a 49 53 47 43 44 44 50 38 39 36 6d 67 42 44 44 79 38 50 72 67 33 49 39 4a 61 39 4b 6e 74 46 44 75 4b 71 69 48 6b 48 34 49 56 58 68 4f 63 43 78 4e 72 44 76 75 39 41 34 65 78 31 2e 58 50 7a 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=qO6n9SnUrfYX4SNq39N8sdoM4BRA6Qp6wVaD0VfK1VM-1711570830-1.0.1.1-m3aM.0mZQgoJq7r5rYSMcwzISGCDDP896mgBDDy8Prg3I9Ja9KntFDuKqiHkH4IVXhOcCxNrDvu9A4ex1.XPzQ; path=/; expires=Wed, 27-Mar-24 20:50:30 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:30 UTC	611	IN	Data Raw: 2e 63 63 32 34 7b 2d 2d 66 4b 67 71 4a 41 3a 38 70 78 3b 2d 2d 36 49 7a 38 6a 67 3a 31 32 70 78 3b 2d 2d 67 67 32 42 55 67 3a 31 36 70 78 3b 2d 2d 5a 62 50 74 42 41 3a 76 61 72 28 2d 2d 66 4b 67 71 4a 41 2c 34 70 78 29 3b 2d 2d 6c 75 42 6f 6f 51 3a 76 61 72 28 2d 2d 67 67 32 42 55 67 2c 31 32 70 78 29 3b 2d 2d 62 68 63 42 45 67 3a 76 61 72 28 2d 2d 36 49 7a 38 6a 67 2c 34 70 78 29 3b 2d 2d 41 46 4d 58 56 67 3a 76 61 72 28 2d 2d 66 4b 67 71 4a 41 2c 34 70 78 29 3b 2d 2d 53 61 74 71 79 51 3a 76 61 72 28 2d 2d 66 4b 67 71 4a 41 2c 34 70 78 29 7d 68 74 6d 6c 7b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 74 6f 70 3a 30 70 78 3b 2d 2d 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 2d 2d 73 61 66 65 2d 61 72 65 61 2d Data Ascii: .cc24{--fKgqJA:8px;--6Iz8jg:12px;--gg2BUg:16px;--ZbPtBA:var(--fKgqJA,4px);--luBooQ:var(--gg2BUg,12px);--bhcBEg:var(--6Iz8jg,4px);--AFMXVg:var(--fKgqJA,4px);--SatqyQ:var(--fKgqJA,4px)}html{--safe-area-inset-top:0px;--safe-area-inset-bottom:0px;--safe-area-
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 41 3a 23 30 30 63 34 63 63 3b 2d 2d 5f 6d 48 4c 72 41 3a 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 72 67 62 61 28 35 33 2c 37 31 2c 39 30 2c 2e 32 29 3b 2d 2d 63 74 47 44 33 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 30 Data Ascii: A:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 34 3b 2d 2d 50 33 62 65 6d 67 3a 23 66 66 66 3b 2d 2d 37 4a 73 6a 33 41 3a 23 30 64 31 32 31 36 3b 2d 2d 52 64 32 35 6c 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 44 50 36 71 71 51 3a 23 31 61 36 32 66 66 3b 2d 2d 57 4a 39 78 78 51 3a 23 33 64 38 62 66 66 3b 2d 2d 6b 4a 46 69 7a 51 3a 23 31 38 35 35 64 38 3b 2d 2d 59 4f 79 31 6b 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 61 78 63 6b 56 67 3a 23 63 63 65 31 66 66 3b 2d 2d 54 6a 5a 34 67 67 3a 23 66 66 66 3b 2d 2d 79 70 41 76 62 51 3a 23 30 64 31 32 31 36 3b 2d 2d 79 75 44 57 31 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 78 51 4f 6d 41 77 3a 23 61 64 35 61 30 30 3b 2d 2d 53 50 4b 6f 42 51 3a 23 64 31 37 36 30 30 3b 2d 2d 66 4e 4e 46 Data Ascii: 4;--P3bemg:#fff;--7Jsj3A:#0d1216;--Rd25lA:rgba(36,49,61,.4);--DP6qqQ:#1a62ff;--WJ9xxQ:#3d8bff;--kJFizQ:#1855d8;--YOy1kQ:rgba(64,87,109,.07);--axckVg:#cce1ff;--TjZ4gg:#fff;--ypAvbQ:#0d1216;--yuDW1w:rgba(36,49,61,.4);--xQOmAw:#ad5a00;--SPKoBQ:#d17600;--fNNF
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 51 59 41 5f 2d 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 63 74 47 44 33 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 30 64 31 32 31 36 3b 2d 2d 6f 58 6a 65 6b 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 68 6a 56 73 72 77 3a 23 66 31 65 62 66 66 3b 2d 2d 6f 6e 32 31 61 77 3a 23 66 31 65 62 66 66 3b 2d 2d 46 4e 55 51 34 67 3a 23 65 37 64 62 66 66 3b 2d 2d 36 52 64 37 55 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 6e 66 75 5f 6f 67 3a 23 36 31 32 64 61 65 3b 2d 2d 75 78 33 64 Data Ascii: -K12xjw:rgba(13,18,22,0);--B2THfg:rgba(64,87,109,.07);--QYA_-A:rgba(57,76,96,.15);--ctGD3w:rgba(13,18,22,0);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:#f1ebff;--on21aw:#f1ebff;--FNUQ4g:#e7dbff;--6Rd7UQ:rgba(64,87,109,.07);--nfu_og:#612dae;--ux3d
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 51 45 72 68 6c 67 3a 23 66 66 66 3b 2d 2d 36 6b 44 4e 6c 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 70 79 6f 43 59 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 73 58 67 69 74 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 3b 2d 2d 58 47 4e 57 4d 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 6d 67 4e 62 39 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 47 5a 77 51 46 77 3a 23 66 66 66 3b 2d 2d 42 62 50 36 76 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 43 4f 58 67 73 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 45 75 44 4c 59 41 3a Data Ascii: rgba(17,23,29,.6);--QErhlg:#fff;--6kDNlA:hsla(0,0%,100%,.4);--pyoCYg:hsla(0,0%,100%,.15);--sXgitQ:hsla(0,0%,100%,.3);--XGNWMw:hsla(0,0%,100%,.15);--mgNb9w:hsla(0,0%,100%,.15);--GZwQFw:#fff;--BbP6vg:hsla(0,0%,100%,.4);--COXgsg:hsla(0,0%,100%,.07);--EuDLYA:
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 28 30 2c 30 25 2c 31 30 30 25 2c 2e 38 29 3b 2d 2d 66 53 66 68 33 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 66 7a 58 50 44 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 2d 2d 2d 56 6b 4c 63 41 3a 23 36 31 62 64 36 32 3b 2d 2d 32 73 59 4a 61 41 3a 23 36 62 61 39 66 66 3b 2d 2d 75 59 4f 56 6f 67 3a 23 65 63 39 39 30 39 3b 2d 2d 30 35 74 76 6a 51 3a 23 66 64 34 39 35 38 3b 2d 2d 55 38 49 70 69 41 3a 23 66 66 38 30 38 38 3b 2d 2d 67 49 48 75 6e 77 3a 23 66 64 34 39 35 38 3b 2d 2d 74 6b 62 79 4e 67 3a 23 61 35 37 30 66 66 3b 2d 2d 65 6c 46 46 70 77 3a 23 62 63 39 37 66 63 3b 2d 2d 33 7a 52 6c 61 67 3a 23 61 35 37 30 66 66 3b 2d 2d 37 68 6e 73 49 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 3b 2d 2d 68 Data Ascii: (0,0%,100%,.8);--fSfh3A:hsla(0,0%,100%,.7);--fzXPDA:hsla(0,0%,100%,.5);---VkLcA:#61bd62;--2sYJaA:#6ba9ff;--uYOVog:#ec9909;--05tvjQ:#fd4958;--U8IpiA:#ff8088;--gIHunw:#fd4958;--tkbyNg:#a570ff;--elFFpw:#bc97fc;--3zRlag:#a570ff;--7hnsIg:hsla(0,0%,100%,.3);--h
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 2c 31 30 39 2c 2e 30 37 29 2c 30 20 32 70 78 20 38 70 78 20 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 76 5f 6a 49 53 51 3a 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 2c 30 20 32 70 78 20 31 32 70 78 20 72 67 62 61 28 35 33 2c 37 31 2c 39 30 2c 2e 32 29 3b 2d 2d 4d 50 6d 52 48 41 3a 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 2c 30 20 32 70 78 20 31 38 70 78 20 72 67 62 61 28 34 33 2c 35 39 2c 37 34 2c 2e 33 29 7d 2e 64 61 72 6b 7b 2d 2d 34 43 6c 47 43 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 23 33 62 33 63 33 64 2c 30 70 78 20 36 70 78 20 32 30 70 78 20 2d 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 35 29 3b 2d 2d 53 47 6a 6a 7a Data Ascii: ,109,.07),0 2px 8px rgba(57,76,96,.15);--v_jISQ:0 0 0 1px rgba(64,87,109,.07),0 2px 12px rgba(53,71,90,.2);--MPmRHA:0 0 0 1px rgba(64,87,109,.07),0 2px 18px rgba(43,59,74,.3)}.dark{--4ClGCw:0px 0px 0px 1px #3b3c3d,0px 6px 20px -4px rgba(0,0,0,.45);--SGjjz
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 65 78 3a 31 7d 2e 52 7a 39 37 34 77 2e 5f 39 66 55 4c 42 41 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 54 51 6d 76 59 51 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 77 69 64 74 68 3a 32 36 30 70 78 7d 2e 41 4b 37 32 6d 41 7b 67 72 69 64 2d 72 6f 77 3a 32 2f 33 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 41 4b 37 32 6d 41 2c 2e 5f 73 4f 42 71 51 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 2f 33 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 73 4f 42 71 51 7b 67 72 69 64 2d 72 6f 77 3a 33 2f 34 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 5f 44 54 55 52 51 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 Data Ascii: ex:1}.Rz974w._9fULBA{display:none}.TQmvYQ{position:sticky;width:260px}.AK72mA{grid-row:2/3;z-index:2}.AK72mA,._sOBqQ{grid-column:2/3;position:relative;width:100%}._sOBqQ{grid-row:3/4;z-index:1}._DTURQ{height:100%;overflow:auto;position:absolute;width:100%
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 4b 46 69 6a 77 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 72 4b 46 69 6a 77 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 42 5a 7a 5f 4a 67 20 2e 41 4b 37 32 6d 41 2c 2e 42 5a 7a 5f 4a 67 20 2e 5f 73 4f 42 71 51 2c 2e 67 4b 6d 64 45 41 20 2e 41 4b 37 32 6d 41 2c 2e 67 4b 6d 64 45 41 20 2e 5f 73 4f 42 71 51 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 2f 33 7d 2e 42 5a 7a 5f 4a 67 20 2e 5f 31 63 59 57 46 41 2c 2e 67 4b 6d 64 45 41 20 2e 5f 31 63 59 57 46 41 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 34 43 6c 47 43 77 29 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 2f 33 7d 2e 46 71 4a 41 48 67 20 2e 41 4b 37 32 6d 41 2e 53 47 49 69 31 67 2c 2e Data Ascii: n-right:8px}.rKFijw:last-child{margin-right:16px}.rKFijw:empty{display:none}.BZz_Jg .AK72mA,.BZz_Jg ._sOBqQ,.gKmdEA .AK72mA,.gKmdEA ._sOBqQ{grid-column:1/3}.BZz_Jg ._1cYWFA,.gKmdEA ._1cYWFA{box-shadow:var(--4ClGCw);grid-column:1/3}.FqJAHg .AK72mA.SGIi1g,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50051	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	626	OUT	GET /web/40e534873816858c.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:30 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:30 GMT Content-Type: text/javascript Content-Length: 131778 Connection: close CF-Ray: 86b214da3ce686f1-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62264 Cache-Control: public, max-age=31556926 ETag: "98efbd307dd0c6da0dafe0c4ca4bdc0b" Expires: Fri, 28 Mar 2025 02:09:16 GMT Last-Modified: Wed, 27 Mar 2024 02:55:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 97h9eOCGxW7irAMWd+ycT2j7pM+tGgeo8zRaCF5N9XD2wSzazbz2U9sjkWvTIWICbJw1j8GQqYM= x-amz-replication-status: PENDING x-amz-request-id: 66BW631JPBTT6BZV x-amz-server-side-encryption: AES256 x-amz-version-id: n6mR_dDaHHElAv.yobHn1gSzbx5L5JfI X-Content-Type-Options: nosniff
2024-03-27 20:20:30 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 58 52 44 55 56 65 4a 31 6f 4d 39 52 4d 71 45 68 57 46 35 53 34 67 78 47 62 38 69 74 55 4c 52 45 59 55 57 38 44 41 53 53 6b 52 49 2d 31 37 31 31 35 37 30 38 33 30 2d 31 2e 30 2e 31 2e 31 2d 74 73 6e 48 39 47 55 63 49 71 4c 5f 37 79 6c 4f 5f 43 79 62 65 43 70 5f 72 57 41 2e 5f 4a 57 68 4a 6a 73 5f 69 4b 51 56 57 41 64 39 39 56 32 37 6a 49 51 41 74 61 4b 69 62 43 4b 4b 5a 58 35 4d 35 61 4c 64 79 6c 76 37 50 65 37 58 56 79 64 77 6e 31 6c 47 6c 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 30 3a 33 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=XRDUVeJ1oM9RMqEhWF5S4gxGb8itULREYUW8DASSkRI-1711570830-1.0.1.1-tsnH9GUcIqL_7ylO_CybeCp_rWA._JWhJjs_iKQVWAd99V27jIQAtaKibCKKZX5M5aLdylv7Pe7XVydwn1lGlQ; path=/; expires=Wed, 27-Mar-24 20:50:30 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:20:30 UTC	604	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 33 38 39 2c 37 33 38 31 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 65 37 63 32 34 66 63 34 39 36 35 37 35 62 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[21389,73817],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._e7c24fc496575b
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 76 61 72 20 4c 3b 76 61 72 20 78 3b 76 61 72 20 4b 3b 76 61 72 20 59 61 3b 76 61 72 20 6b 63 61 3b 76 61 72 20 6a 63 61 3b 76 61 72 20 4d 61 3b 76 61 72 20 71 3b 76 61 72 20 6e 61 3b 0a 76 61 72 20 62 61 61 2c 63 61 61 2c 6a 61 2c 67 61 61 2c 6c 61 2c 76 61 61 2c 75 61 61 2c 74 61 61 2c 41 61 61 2c 43 61 61 2c 44 61 61 2c 45 61 61 2c 46 61 61 2c 47 61 61 2c 79 61 2c 48 61 61 2c 4d 61 61 2c 4c 61 61 2c 49 61 61 2c 4a 61 61 2c 4b 61 61 2c 43 61 2c 45 61 2c 4e 61 61 2c 78 61 2c 54 61 61 2c 56 61 61 2c 50 61 61 2c 58 61 61 2c 59 61 61 2c 5a 61 61 2c 24 61 61 2c 61 62 61 2c 64 62 61 2c 65 62 61 2c 66 62 61 2c 68 62 61 2c 6d 62 61 2c 6e 62 61 2c 6f 62 61 2c 70 62 61 2c 71 62 61 2c 72 62 61 2c 73 62 61 2c 74 62 61 2c 75 62 61 2c 77 62 61 2c 76 62 61 2c 78 62 61 Data Ascii: var L;var x;var K;var Ya;var kca;var jca;var Ma;var q;var na;var baa,caa,ja,gaa,la,vaa,uaa,taa,Aaa,Caa,Daa,Eaa,Faa,Gaa,ya,Haa,Maa,Laa,Iaa,Jaa,Kaa,Ca,Ea,Naa,xa,Taa,Vaa,Paa,Xaa,Yaa,Zaa,$aa,aba,dba,eba,fba,hba,mba,nba,oba,pba,qba,rba,sba,tba,uba,wba,vba,xba
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 29 3b 7d 3b 0a 67 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 4d 61 74 68 2e 74 72 75 6e 63 28 61 29 7c 7c 30 3b 30 3e 61 26 26 28 61 2b 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 28 30 3e 61 7c 7c 61 3e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 29 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 3b 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 67 61 61 7d 3b 6e 61 3d 5f 5f 63 2e 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 69 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 22 3a 5f 5f 63 2e 68 61 61 28 62 2c 2e 2e 2e 63 29 29 3b 7d 3b 5f 5f 63 2e 68 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 2e 2e 2e 62 29 7b 6c 65 Data Ascii: );};gaa=function(a){a=Math.trunc(a)\|\|0;0>a&&(a+=this.length);if(!(0>a\|\|a>=this.length))return this[a]};la=function(a){return a?a:gaa};na=__c.na=function(a,b,...c){if(!a)throw Error(null==b?"invalid argument":__c.haa(b,...c));};__c.haa=function(a,...b){le
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 63 7d 3b 76 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 63 6f 6e 73 74 20 62 3d 7b 7d 3b 5b 22 62 61 73 65 22 2c 22 70 61 67 65 22 2c 22 75 69 22 5d 2e 66 6f 72 45 61 63 68 28 63 3d 3e 7b 63 6f 6e 73 74 20 64 3d 75 61 61 28 61 2c 60 62 6f 6f 74 73 74 72 61 70 2e 24 7b 63 7d 2e 60 29 3b 30 3c 64 2e 73 69 7a 65 26 26 28 62 5b 63 5d 3d 64 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 75 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 6e 65 77 20 4d 61 70 3b 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 61 29 29 2e 66 6f 72 45 61 63 68 28 28 64 2c 65 29 3d 3e 7b 65 2e 73 74 61 72 74 73 57 69 Data Ascii: void 0;return c};vaa=function(){var a=window.location.search;const b={};["base","page","ui"].forEach(c=>{const d=uaa(a,`bootstrap.${c}.`);0<d.size&&(b[c]=d)});return b};uaa=function(a,b){const c=new Map;(new URLSearchParams(a)).forEach((d,e)=>{e.startsWi
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 6f 62 61 3a 32 2c 4a 44 3a 62 2c 64 65 66 61 75 6c 74 3a 6e 75 6c 6c 21 3d 64 3f 64 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 77 79 3a 61 2e 77 79 7d 7d 3b 46 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 6f 62 61 3a 33 2c 4a 44 3a 62 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 77 79 3a 61 2e 77 79 7d 7d 3b 47 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 7b 74 61 67 3a 63 2c 6f 62 61 3a 34 2c 4a 44 3a 62 2c 77 79 3a 61 2e 77 79 7d 7d 3b 79 61 3d 66 75 6e Data Ascii: function(a,b,c,d){return{tag:c,oba:2,JD:b,default:null!=d?d:a.defaultValue,defaultValue:a.defaultValue,wy:a.wy}};Faa=function(a,b,c){return{tag:c,oba:3,JD:b,defaultValue:a.defaultValue,wy:a.wy}};Gaa=function(a,b,c){return{tag:c,oba:4,JD:b,wy:a.wy}};ya=fun
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 63 61 73 65 20 33 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 3a 67 5b 66 2e 74 61 67 5d 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 2c 7b 6e 61 6d 65 3a 6b 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 71 28 66 29 3b 7d 72 65 74 75 72 6e 7b 74 79 70 65 3a 31 2c 66 69 65 6c 64 73 3a 65 2c 74 69 64 3a 48 61 61 28 65 2c 62 2e 76 44 29 2c 44 4e 68 3a 67 2c 63 6b 68 3a 68 7d 7d 29 3b 63 6c 61 73 73 20 64 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 7b 7d 29 7b 76 61 72 20 7b 74 69 64 3a 66 7d 3d 63 28 29 3b 66 6f 72 28 63 6f 6e 73 74 20 67 20 6f 66 20 66 29 7b 66 3d 67 2e 63 6f 6e 66 69 67 3b 63 6f 6e 73 74 20 68 3d 67 2e 6e 61 6d 65 2c 6b 3d 65 5b 68 5d 3b 73 77 69 74 63 68 Data Ascii: break;case 2:case 3:case 4:case 5:g[f.tag]=Object.assign({},f,{name:k});break;default:throw new q(f);}return{type:1,fields:e,tid:Haa(e,b.vD),DNh:g,ckh:h}});class d{constructor(e={}){var {tid:f}=c();for(const g of f){f=g.config;const h=g.name,k=e[h];switch
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 69 6e 67 69 66 79 28 67 29 7d 20 24 7b 43 61 28 66 29 7d 60 29 3b 0a 63 61 73 65 20 34 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 68 5b 7a 5d 3d 5b 5d 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 67 29 29 74 68 72 6f 77 20 4c 61 61 28 7b 79 36 3a 6b 2c 6e 41 61 3a 6c 7d 2c 67 2c 77 2e 77 79 2c 66 29 3b 69 66 28 70 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 2e 6f 62 6a 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 59 38 61 29 7b 76 61 72 20 74 3d 41 72 72 61 79 28 67 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 75 3d 30 3b 75 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 75 29 7b 69 66 28 74 79 70 65 6f 66 20 67 5b 75 5d 21 3d 3d 77 2e 77 79 29 74 68 72 6f 77 20 4a 61 61 28 7b 79 36 3a 6b 2c 6e 41 61 3a Data Ascii: ingify(g)} ${Ca(f)}`);case 4:if(null==g){h[z]=[];break}else if(!Array.isArray(g))throw Laa({y6:k,nAa:l},g,w.wy,f);if(p=null===(r=w.obj)\|\|void 0===r?void 0:r.Y8a){var t=Array(g.length);for(var u=0;u<g.length;++u){if(typeof g[u]!==w.wy)throw Jaa({y6:k,nAa:
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 61 29 7b 63 61 73 65 20 31 3a 69 66 28 70 21 3d 3d 6b 2e 76 61 6c 75 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 76 61 6c 75 65 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6b 2e 76 61 6c 75 65 29 7d 20 66 6f 72 20 6b 65 79 20 22 24 7b 6d 7d 22 2c 20 66 6f 75 6e 64 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 29 7d 20 24 7b 43 61 28 66 29 7d 60 29 3b 6c 5b 75 5d 3d 74 2e 51 7a 64 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 66 28 6e 75 6c 6c 21 3d 6b 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 26 26 70 3d 3d 3d 6b 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 62 72 65 61 6b 3b 0a 66 2e 70 75 73 68 28 75 29 3b 76 61 72 20 72 3d 6b 2e 6f 62 6a 3f 6b 2e 6f 62 6a 2e 4c 77 62 28 70 2c 66 29 3a Data Ascii: a){case 1:if(p!==k.value)throw new TypeError(`Expected value ${JSON.stringify(k.value)} for key "${m}", found: ${JSON.stringify(p)} ${Ca(f)}`);l[u]=t.Qzd;break;case 2:if(null!=k.defaultValue&&p===k.defaultValue)break;f.push(u);var r=k.obj?k.obj.Lwb(p,f):
2024-03-27 20:20:30 UTC	1369	IN	Data Raw: 77 20 71 28 6b 29 3b 7d 7d 72 65 74 75 72 6e 20 6c 7d 3b 72 65 74 75 72 6e 20 64 7d 3b 0a 46 61 3d 5f 5f 63 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 3d 7b 7d 29 7b 63 6f 6e 73 74 20 64 3d 5f 5f 63 2e 77 61 28 28 29 3d 3e 7b 76 61 72 20 67 3d 61 28 29 3b 63 6f 6e 73 74 20 68 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 67 29 5b 30 5d 3b 6c 65 74 20 6b 3b 63 6f 6e 73 74 20 6c 3d 6e 65 77 20 4d 61 70 2c 6d 3d 6e 65 77 20 4d 61 70 2c 70 3d 6e 65 77 20 4d 61 70 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 67 5b 68 5d 2e 6c 65 6e 67 74 68 3b 72 2b 3d 32 29 7b 76 61 72 20 74 3d 67 5b 68 5d 5b 72 5d 3b 63 6f 6e 73 74 20 77 3d 67 5b 68 5d 5b 72 2b 31 5d 2c 7a 3d 77 2e 69 6e 69 74 28 29 2e 66 69 65 6c 64 73 5b 68 5d 3b 69 66 28 21 7a 29 74 68 72 6f 77 20 6e Data Ascii: w q(k);}}return l};return d};Fa=__c.Fa=function(a,b,c={}){const d=__c.wa(()=>{var g=a();const h=Object.keys(g)[0];let k;const l=new Map,m=new Map,p=new Map;for(var r=0;r<g[h].length;r+=2){var t=g[h][r];const w=g[h][r+1],z=w.init().fields[h];if(!z)throw n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50052	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:30 UTC	2959	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1488 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:30 UTC	1488	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 33 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 65 33 32 34 37 38 31 63 2d 37 63 63 37 2d 34 32 32 62 2d 62 39 33 63 2d 32 31 64 38 36 33 38 62 61 65 37 66 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 31 35 37 30 38 31 38 33 34 37 2e 35 2c 22 73 69 74 65 54 6f 6b 65 6e 22 3a 22 65 66 38 38 65 32 62 32 65 32 38 39 34 65 38 35 39 66 61 37 35 35 33 64 63 38 64 30 34 34 31 63 22 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2024.3.0"},"pageloadId":"e324781c-7cc7-422b-b93c-21d8638bae7f","location":"https://www.canva.com/","landingPath":"/","startTime":1711570818347.5,"siteToken":"ef88e2b2e2894e859fa7553dc8d0441c"
2024-03-27 20:20:31 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:31 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b214dd7d7e82a2-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50053	52.21.33.16	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:31 UTC	721	OUT	GET /6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document HTTP/1.1 Host: akkadaindevelopment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:31 UTC	212	IN	HTTP/1.1 404 Not Found X-Content-Type-Options: nosniff X-Powered-By: Short.io/Edge Date: Wed, 27 Mar 2024 20:20:31 GMT Content-Type: text/html; charset=utf-8 Connection: close Transfer-Encoding: chunked
2024-03-27 20:20:31 UTC	974	IN	Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 69 6e 6b 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 Data Ascii: 800<!DOCTYPE html><html><head> <title>Link is not found</title> <link rel="preconnect" href="https://d2te5kruq0pvbl.cloudfront.net"> <meta name="viewport" content="width=device-width, initial-scale=1"/> <link rel="shortcut ic
2024-03-27 20:20:31 UTC	2372	IN	Data Raw: 74 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b Data Ascii: t:inherit;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:'';
2024-03-27 20:20:31 UTC	538	IN	Data Raw: 72 61 75 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 45 38 31 36 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 36 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 Data Ascii: raud { color: #FE8161; font-weight: bold; } @media (max-width: 420px) { .content { width: calc(100% - 16px); margin: 8px; } } </style></head><body>
2024-03-27 20:20:31 UTC	768	IN	Data Raw: 67 20 63 6c 61 73 73 3d 22 6d 61 69 6e 5f 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 0d 0a 32 31 32 0d 0a 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e Data Ascii: g class="main_image" src="https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png" srcset=" https://d2te5kruq0pvbl.cloudfront.net/redirecto212r/link-does-not-exist.pn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50057	3.162.125.95	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:31 UTC	630	OUT	GET /redirector/link-does-not-exist.png HTTP/1.1 Host: d2te5kruq0pvbl.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://akkadaindevelopment.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:31 UTC	550	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 236198 Connection: close Last-Modified: Mon, 21 Aug 2023 10:33:06 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 27 Mar 2024 19:50:11 GMT ETag: "bf335fb11417efec74606befd718a6d2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 69ceaf2914bd01ec0e3201288b80afe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: C5rxse0oS6b-SKnmv-yGLUYusr22eGGpmG6yjXbFpWL21tBqftZDaw== Age: 1821
2024-03-27 20:20:31 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 ac 08 06 00 00 00 9a 83 52 46 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 03 9a 3b 49 44 41 54 78 01 ec 9d 05 60 1c d7 d5 b6 df 99 e5 5d 31 b3 64 5b 16 98 62 c7 0e 93 c3 d8 34 69 9b af dc a6 94 94 31 6d be b2 53 e6 f6 2f 37 6d da a6 6d fa b5 49 39 0d 93 43 0e 98 49 96 0c 32 48 b2 98 56 cb 30 f3 9f 33 33 2b ad 65 d9 96 51 b2 7d 9e e4 fa ce cc 0e ed 68 77 ef 7d ef 39 f7 1c 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 Data Ascii: PNGIHDRRFpHYs%%IR$sRGBgAMAa;IDATx`]1d[b4i1mS/7mmI9CI2HV033+eQ}hw}9@AAAAAAAAAAAAAAAAAAAAAAA
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: b7 7c c2 93 3d 12 fa 36 14 fd 23 a9 6d 3a 19 11 15 7d 72 53 92 5c 39 3e 94 5f b5 10 6f 7a f3 9b a8 bc 19 cd 2d cd c6 f6 94 88 e4 1c 8f cc d1 b8 b4 1e 6f 74 2b 55 c7 d1 c2 2e a6 4c b1 3b 1b e7 17 36 4e ea 98 86 f3 16 e2 dc 9b af 84 bf 6f 00 b9 24 1c cb 66 57 1b a1 6f 47 ef 27 55 a7 59 72 43 c3 23 d8 bd 79 3b 4a 66 56 1a 56 c9 e6 57 37 e0 1f cf 3d 82 67 5f 7c 7e f4 39 2b 66 7e 0f b2 4d ea a9 37 c6 27 e0 39 90 77 35 35 35 fd 00 e2 ca 2a 4c 33 44 40 0a a7 15 fa b2 65 2a d4 5d 73 e9 d7 ba 18 36 e5 73 b8 28 b9 04 39 c8 40 ea bb a0 23 49 4b 66 0b ca 71 06 5e 50 75 b8 69 6b 0e 09 ca 11 98 02 d1 49 f5 7c d2 7f 79 a3 bf e7 ba f5 af 86 88 62 c3 b3 24 20 79 f0 95 5f b7 d3 fe c3 dc 18 db 7a 6c f6 c4 df 07 e7 67 dc de 55 9b b7 7d 8b ab e6 6d 45 f1 e1 ee 8b 66 7d 7c 0f Data Ascii: \|=6#m:}rS\9>_oz-ot+U.L;6No$fWoG'UYrC#y;JfVVW7=g_\|~9+f~M7'9w555L3D@e]s6s(9@#IKfq^PuikI\|yb$ y_zlgU}mEf}\|
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: ed ec ca ea f5 7a 51 5a 5c 82 e7 5f 59 81 4a 6f 01 66 65 96 60 57 90 f6 d1 0e e8 5a ab 93 70 4c d2 f1 ff a0 f2 7a 5a b6 59 db fe 4d eb ff 0f 82 20 ec 87 58 20 85 29 e1 47 6f 2d 38 3b 2f 36 70 3d cc cf 60 12 66 6e c2 c9 7d 1e 55 1b 9e da 9c c0 3f 9e ed 47 30 ac 19 16 47 c6 66 e9 2e 56 a2 1a bb be e8 1c 7b c7 0e c5 4e 23 9c 34 6a e9 2b ca 43 e3 f5 e7 e1 bd 6f af c3 9d d7 7b 51 98 6d 37 5c 57 ed b6 23 88 ca c6 f3 1d 3b 4d d7 51 3d aa 20 5e 64 c7 16 cc c4 f3 73 ce c0 86 d9 b5 e8 cd cd 85 46 62 55 57 70 40 f1 68 40 75 81 cd 83 eb 32 6a b0 d8 53 8c 42 9b 77 82 8b d1 01 9d 7f a2 6b a6 05 4f e5 f7 ea b7 4e ce 6d 39 e7 bc ac 80 e9 52 cb 45 33 83 e9 28 bc 9c 1b 50 91 15 d5 31 e2 d8 89 a0 72 df 5d cf ac 95 bc 55 82 20 08 c2 01 59 b1 6d 65 e0 82 a2 79 2b a2 e1 58 56 Data Ascii: zQZ\_YJofe`WZpLzZYM X )Go-8;/6p=`fn}U?G0Gf.V{N#4j+Co{Qm7\W#;MQ= ^dsFbUWp@h@u2jSBwkONm9RE3(P1r]U Ymey+XV
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: f2 d6 39 31 b7 db fd 4f fd fd fd 51 9c 07 7c e8 43 1f ca ed de bd fb ef 38 fb 2e 58 66 b4 fb d9 b6 bf c3 ef 43 c7 e0 e0 60 0a 1a 1a 1a 1a 1a 1a e7 01 da 84 55 43 43 63 ce 60 ff fe fd 83 24 84 e2 07 79 1b 89 e4 67 b8 aa 9b e5 52 96 b7 92 24 be 49 4c 54 3f f5 a9 4f ed 21 49 f4 b2 23 3d d4 4d 54 56 56 2e e0 fe ee ef 7d ef 7b 4e ae 17 55 12 ec f0 83 e4 d1 95 c9 64 5a d8 d9 6e e1 be 1b 59 76 2d 5d ba f4 09 9e ab 3f 9b cd 7e db e5 72 0d ca 67 b2 83 ae 3b e2 1a 0a 6c 5f db 4c 0b 61 ce 7b 39 8d b3 0d d5 73 d3 00 ce 03 7e f0 83 1f c8 6f f4 ab 58 0f 3f eb 53 c2 f9 1c a7 3f 62 db 4e 42 43 e3 3c 62 e3 c6 8d 2e 0e d8 19 5b b7 6e 4d 43 43 43 e3 a2 83 01 0d 0d 0d 8d 39 06 c9 bd 97 4c 26 5b 49 fa de cc c5 0f c1 1a ec 4a b3 23 7d b4 ad ad 2d f6 da d7 be 76 d1 cd 37 df 2c Data Ascii: 91OQ\|C8.XfC`UCCc`$ygR$ILT?O!I#=MTVV.}{NUdZnYv-]?~rg;l_La{9s~oX?S?bNBC<b.[nMCCC9L&[IJ#}-v7,
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: 6d 95 2e 1f 59 d4 78 11 e6 38 79 98 81 fa 3b 36 20 bc e3 00 d2 fd a3 4a 81 dc 39 7a 18 09 aa a8 2e 87 13 a9 9c 09 4f 69 11 6a ae 5d 03 a7 9d 6a 24 1f 18 c9 4b c2 26 49 d1 33 54 47 45 6d f4 52 ad 73 3a 4e 3d 55 73 21 f7 9d bd fa 26 49 b4 c9 cf 70 28 1f d2 f6 e6 f9 68 ea eb c7 bc 9e 5e 8c 16 17 a1 a7 ba fa 98 23 dc 7c 06 12 38 a7 28 17 9f 1e 51 97 1f 32 5a 1a 42 cf 92 2a cc 7f ba 0f ee 54 7a 52 5f 6a 70 05 51 ea 14 1f 4d 3e 63 37 b7 95 86 ad d8 ce 02 ea e9 26 55 68 b3 88 44 92 ed 63 c2 15 40 9f ab cc dc 16 68 db e3 cb a5 fe f7 f2 62 43 08 ce ef 71 fe 20 03 4d eb cc 82 08 b5 62 ae c9 f2 8d fd fb f7 9f 37 62 7b 12 90 3c b2 21 b6 ab 0d c8 67 60 35 8c ad bb 76 ed fa 68 e1 3e f6 36 51 5b 6b b8 6f 84 6d 33 90 4e a7 55 24 2a 12 b3 58 24 12 89 75 77 77 27 17 2c 58 Data Ascii: m.Yx8y;6 J9z.Oij]j$K&I3TGEmRs:N=Us!&Ip(h^#\|8(Q2ZBTzR_jpQM>c7&UhDc@hbCq Mb7b{<!g`5vh>6Q[kom3NU$X$uww',X
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: 5f da 5b 4b 4b 8b a8 ff b0 a3 53 4b 63 5b c6 f6 7d 2b e7 bf 8e d3 c0 6b 5e f3 1a 27 df df 62 a2 5a 91 0f 40 22 ea 1e 07 5a 92 d5 d5 d5 62 c2 ba cc ce a3 2a 83 44 e7 2d b9 a2 28 51 b1 58 4c a2 7e e7 07 71 f2 ef 9e 2e de 87 ff 3a d9 60 2b 1a 73 0f f2 3b c2 36 26 2a a4 c3 1e 90 ab 65 7b f7 9f e8 f1 a2 40 b3 dd ca 8b 51 bd f0 78 7c 8f 0c 6c 72 76 37 34 34 ce 22 34 81 d4 d0 78 11 f0 87 5a 24 17 29 25 36 69 18 61 e7 e6 b4 fd 1e 05 8b 17 2f 6e e3 cb fe 6d c8 87 fb b0 3a 33 3b 39 fd 87 17 4a 20 ac 71 ee 91 4e a7 1f 62 5b f8 2b 3e fb 4f f2 f9 b8 ec 5c 9d ef 0c 85 42 d7 70 fa c7 38 be 81 e1 39 01 3b 1d 92 af 31 5d 5e 5e 9e 1b 1c 1c 74 92 00 66 25 cd 1d 07 22 42 ac f7 46 9c 44 60 06 01 95 97 42 13 3f 35 b8 71 c9 25 97 c8 39 1d f6 b2 61 13 49 e3 85 ce 23 c1 51 ae 74 Data Ascii: _[KKSKc[}+k^'bZ@"ZbD-(QXL~q.:`+s;6&e{@Qx\|lrv744"4xZ$)%6ia/nm:3;9J qNb[+>O\Bp89;1]^^tf%"BFD`B?5q%9aI#Qt
2024-03-27 20:20:31 UTC	16384	IN	Data Raw: b9 9a b7 23 f9 39 9c 5d 6d 67 7b fe 1f 79 78 c6 38 b7 72 db d5 ff 01 fb 40 8e 34 2c 9f e3 74 9b e0 b3 d5 d7 c3 67 90 87 ff b9 2e d9 01 62 6c 4b 54 52 d9 cf d1 71 64 d6 2e d8 b9 8e cb 3e c5 ec 5b 8c 6d bf a8 dd 58 f1 c7 4a 4b 5e 5e 9e 5c 74 d1 45 bb 50 ee 63 cc 09 89 77 a3 96 f9 24 b1 dd 31 eb 83 c8 bc 8f 18 7d d1 b3 88 17 4e e5 b3 0b e4 f1 0f 62 60 70 94 40 39 8a 8b 81 c1 9b 00 43 20 0d 0c b2 b0 7e fd fa 7f 83 a1 ff 47 7c 98 8f 99 5b 93 c1 df 24 68 0d d3 bd 8e 81 3b ae d0 d1 51 19 48 83 11 22 df d5 d2 d2 42 52 d9 26 23 08 18 cb 3d 49 92 13 cb 6a e0 ec 8e 1d 3b e6 c0 a8 b5 ce 3f ff fc ba 6f 7f fb db 2d 83 ed 5b 5f 5f 4f 05 de cd 59 97 21 8d 43 e6 81 54 d5 4a 16 43 ec a3 34 72 d0 e4 10 24 c5 4e 07 c5 4a e6 63 31 88 44 0a 84 aa 87 c2 50 8a 31 32 21 af 45 74 Data Ascii: #9]mg{yx8r@4,tg.blKTRqd.>[mXJK^^\tEPcw$1}Nb`p@9C ~G\|[$h;QH"BR&#=Ij;?o-[__OY!CTJC4r$NJc1DP12!Et
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 6e bf fd b2 d9 ff fc 59 19 04 f5 f5 f5 f3 f1 ad fd 11 be d7 1d cc 4d 57 53 53 b3 e6 e0 c1 83 17 60 d9 a5 98 67 12 74 7e bb b7 61 9e 65 84 e4 ae 1d e3 b6 2d 5b b6 9c 76 c3 0d 37 fc fb 81 03 07 c2 68 20 14 ba b3 52 85 fc d2 97 be 64 83 78 da 3a 82 2a 4f 71 08 ef c0 99 20 a1 3b bd e7 9d 35 6b d6 c7 b0 fe 47 d8 ee 19 8c 2f 17 e7 fd e0 1f 42 9f e3 7f d8 b0 61 c3 ed 62 60 60 60 60 90 13 86 40 1a 9c f4 60 ff 15 8c fe c0 b4 04 18 62 4c d9 91 48 24 de b3 75 eb d6 57 b9 1e ea e4 42 10 46 e6 7e ac 14 c7 32 63 44 be 3f c1 40 f8 94 f7 38 50 22 37 62 34 96 ae 7c 38 4e 08 c3 17 40 32 7f 27 06 06 6f 01 e0 3d b9 1c 46 fa 76 18 e2 8b 51 b6 c7 c0 e0 7e 14 d3 9b f0 1e 50 6e 3b 26 2a 4b 5b 5b 1b 55 fd 72 bc 8f 01 18 f1 09 aa 45 f1 78 5c a5 46 08 85 42 e9 68 34 9a 86 f1 1f c3 Data Ascii: nYMWSS`gt~ae-[v7h Rdx:Oq ;5kG/Bab````@`bLH$uWBF~2cD?@8P"7b4\|8N@2'o=FvQ~Pn;&K[[UrEx\FBh4
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: c4 bd da 20 8d f6 cd 37 df ac fa ef d1 75 0f 8a 57 3b 8c c6 42 f6 43 fb ca 57 be f2 4c 6d 6d 6d 27 ca 95 ed 21 8f ae 11 eb d3 ee 78 6c 74 60 10 10 ba a9 d2 0d 8e 29 44 e8 aa fc 12 86 85 e2 71 95 cd 52 ee ec 6c 32 af af cf 1b 28 35 25 7d 73 73 ba d7 2f 59 d3 d6 00 e7 90 37 1b 50 ff e5 c6 1b 6f 14 10 29 e5 da ea 82 ee ac bb 77 ef 56 64 66 fe fc f9 72 dd 75 d7 c9 b4 69 d3 32 2a 23 49 22 df f3 5c 2a 66 61 61 a1 fa 78 58 4e 8a 94 3e 11 62 c5 79 16 7c 86 54 93 5e c1 b0 41 9c ff 63 05 06 f6 5f 6f 19 ea 9a b3 1b a2 8e 10 ae 52 16 02 99 0c e0 be 48 a2 4e c5 3b fc 36 7c bb 3e 8d 65 75 20 8d 31 bc 97 f6 2d b7 dc 72 1e be 6f 7d fa e3 56 56 56 c6 9b 9b 9b f1 d9 0a 58 50 6b 2d bc 8f cc b7 d9 5e 55 55 d5 7e fa e9 a7 6f 98 31 63 46 23 9e 57 bb 0e de 94 39 5f f6 45 b8 ee Data Ascii: 7uW;BCWLmmm'!xlt`)DqRl2(5%}ss/Y7Po)wVdfrui2#I"\faaxXN>by\|T^Ac_oRHN;6\|>eu 1-ro}VVVXPk-^UU~o1cF#W9_E
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 08 79 16 36 6a 82 4c b6 34 4c 6d 5b 0f 71 95 d1 e4 10 14 64 b5 df 9e 69 cd 92 11 a9 79 8e 72 e4 17 61 1b 01 6f f7 d8 63 8f 79 03 0b 92 16 12 70 ac 51 bf 9f fe ed 6f 7f fb a5 b6 6d db 56 16 83 c6 e0 91 f2 a8 30 fb 0e b8 88 8b 8c 07 89 df 75 9f 33 ac 6d db 98 f2 7a 94 81 9b c4 3c 59 80 8b f1 2e 0b 7b 1c ec ca d2 10 e1 51 bc ad f7 7d bc 79 fa 78 f6 3c 73 00 59 33 f3 08 fa 50 56 6b 73 c0 64 8d 3e 1f 1b 08 8a c0 23 b9 69 6d b4 8e 5c e3 a1 5a 85 61 70 52 9a 85 dd f7 d3 77 bc 9b 6f ea fb 32 1b d3 2a cc a8 53 65 e3 64 95 8d 63 8c 31 94 7c a0 4f 31 ce 50 73 f4 bf 67 9c 71 46 6b cd 2b df 91 92 7d a4 d6 b5 89 ae c7 7f 6a 2c 76 ff ef ff fd 3f 0f 68 ea d1 10 39 70 a4 6b 26 25 00 f2 10 18 b4 2f d7 dc f0 92 db b6 25 84 8c 6e 56 74 85 0c 46 a7 3c f4 d0 43 27 08 50 1e 3f Data Ascii: y6jL4Lm[qdiyraocypQomV0u3mz<Y.{Q}yx<sY3PVksd>#im\ZapRwo2*Sedc1\|O1PsgqFk+}j,v?h9pk&%/%nVtF<C'P?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50058	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:31 UTC	3458	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 8241 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:31 UTC	8241	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 32 39 38 39 62 61 63 36 2d 37 39 65 34 2d 34 64 64 33 2d 62 37 33 38 2d 61 34 39 65 30 32 36 33 34 32 65 34 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 33 30 2e 33 39 35 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 33 31 2e 33 38 37 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"2989bac6-79e4-4dd3-b738-a49e026342e4","E":"2024-03-27T20:20:30.395Z","F":"2024-03-27T20:20:31.387Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:32 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:32 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214e3ac0c093e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214e3ac0c093e X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vyV%2FcjomV1zIF4Ls69Q8yAtLWlYenabI5uDXlKj0YGVFGDXJQbkhGceOYuD6I%2BKSIuVJRPx%2BztKzX38D%2FG9MWQUjhz6dHTO6FDgygU3yeLAxpQmON5z7SI0IbxenV8c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:32 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50059	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:31 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 6950 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:31 UTC	6950	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:20:32 UTC	863	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:32 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b214e3b8825935-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSqnJbjDOCS8P2HdcWbNXW1M2ZcygzqoYoYNNKWcSghrgr%2Bt%2Fq5P8je33kCyi9tfF3GmT0g%2BkpZcoVyTt01lk6djKzymUSZ6%2BGc8kIchwEvlzM6xINQ7EVOlM6bh%2B%2FEEXrskg20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:32 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50062	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:32 UTC	2673	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:32 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:32 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214e7183f2058-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b214e7183f2058 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9jIfcgkfFW2e%2BZMmGmwVCi6LHlJ7Fd%2Feo09Jh7v4SMhdu937djHiXSnzJRC8GsDPSOxYbqS8PbCfz5mtcYVW4c7JmPXlCP0eIB17q%2FnQV25mAF%2FIfevWRtkQIAvXYdk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:32 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50063	3.162.125.100	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:32 UTC	387	OUT	GET /redirector/link-does-not-exist.png HTTP/1.1 Host: d2te5kruq0pvbl.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:32 UTC	550	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 236198 Connection: close Last-Modified: Mon, 21 Aug 2023 10:33:06 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 27 Mar 2024 19:50:11 GMT ETag: "bf335fb11417efec74606befd718a6d2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10d8c7e85dc4bacbe46fc8920b2edbc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xgjE8cn9K2nTNv9s5ecsUYFjE-m57bhOOhfuveAwmqlkQ7_lnkWNbQ== Age: 1822
2024-03-27 20:20:32 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 02 ac 08 06 00 00 00 9a 83 52 46 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 03 9a 3b 49 44 41 54 78 01 ec 9d 05 60 1c d7 d5 b6 df 99 e5 5d 31 b3 64 5b 16 98 62 c7 0e 93 c3 d8 34 69 9b af dc a6 94 94 31 6d be b2 53 e6 f6 2f 37 6d da a6 6d fa b5 49 39 0d 93 43 0e 98 49 96 0c 32 48 b2 98 56 cb 30 f3 9f 33 33 2b ad 65 d9 96 51 b2 7d 9e e4 fa ce cc 0e ed 68 77 ef 7d ef 39 f7 1c 40 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 04 41 10 Data Ascii: PNGIHDRRFpHYs%%IR$sRGBgAMAa;IDATx`]1d[b4i1mS/7mmI9CI2HV033+eQ}hw}9@AAAAAAAAAAAAAAAAAAAAAAA
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: b7 7c c2 93 3d 12 fa 36 14 fd 23 a9 6d 3a 19 11 15 7d 72 53 92 5c 39 3e 94 5f b5 10 6f 7a f3 9b a8 bc 19 cd 2d cd c6 f6 94 88 e4 1c 8f cc d1 b8 b4 1e 6f 74 2b 55 c7 d1 c2 2e a6 4c b1 3b 1b e7 17 36 4e ea 98 86 f3 16 e2 dc 9b af 84 bf 6f 00 b9 24 1c cb 66 57 1b a1 6f 47 ef 27 55 a7 59 72 43 c3 23 d8 bd 79 3b 4a 66 56 1a 56 c9 e6 57 37 e0 1f cf 3d 82 67 5f 7c 7e f4 39 2b 66 7e 0f b2 4d ea a9 37 c6 27 e0 39 90 77 35 35 35 fd 00 e2 ca 2a 4c 33 44 40 0a a7 15 fa b2 65 2a d4 5d 73 e9 d7 ba 18 36 e5 73 b8 28 b9 04 39 c8 40 ea bb a0 23 49 4b 66 0b ca 71 06 5e 50 75 b8 69 6b 0e 09 ca 11 98 02 d1 49 f5 7c d2 7f 79 a3 bf e7 ba f5 af 86 88 62 c3 b3 24 20 79 f0 95 5f b7 d3 fe c3 dc 18 db 7a 6c f6 c4 df 07 e7 67 dc de 55 9b b7 7d 8b ab e6 6d 45 f1 e1 ee 8b 66 7d 7c 0f Data Ascii: \|=6#m:}rS\9>_oz-ot+U.L;6No$fWoG'UYrC#y;JfVVW7=g_\|~9+f~M7'9w555L3D@e]s6s(9@#IKfq^PuikI\|yb$ y_zlgU}mEf}\|
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: ed ec ca ea f5 7a 51 5a 5c 82 e7 5f 59 81 4a 6f 01 66 65 96 60 57 90 f6 d1 0e e8 5a ab 93 70 4c d2 f1 ff a0 f2 7a 5a b6 59 db fe 4d eb ff 0f 82 20 ec 87 58 20 85 29 e1 47 6f 2d 38 3b 2f 36 70 3d cc cf 60 12 66 6e c2 c9 7d 1e 55 1b 9e da 9c c0 3f 9e ed 47 30 ac 19 16 47 c6 66 e9 2e 56 a2 1a bb be e8 1c 7b c7 0e c5 4e 23 9c 34 6a e9 2b ca 43 e3 f5 e7 e1 bd 6f af c3 9d d7 7b 51 98 6d 37 5c 57 ed b6 23 88 ca c6 f3 1d 3b 4d d7 51 3d aa 20 5e 64 c7 16 cc c4 f3 73 ce c0 86 d9 b5 e8 cd cd 85 46 62 55 57 70 40 f1 68 40 75 81 cd 83 eb 32 6a b0 d8 53 8c 42 9b 77 82 8b d1 01 9d 7f a2 6b a6 05 4f e5 f7 ea b7 4e ce 6d 39 e7 bc ac 80 e9 52 cb 45 33 83 e9 28 bc 9c 1b 50 91 15 d5 31 e2 d8 89 a0 72 df 5d cf ac 95 bc 55 82 20 08 c2 01 59 b1 6d 65 e0 82 a2 79 2b a2 e1 58 56 Data Ascii: zQZ\_YJofe`WZpLzZYM X )Go-8;/6p=`fn}U?G0Gf.V{N#4j+Co{Qm7\W#;MQ= ^dsFbUWp@h@u2jSBwkONm9RE3(P1r]U Ymey+XV
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: f2 d6 39 31 b7 db fd 4f fd fd fd 51 9c 07 7c e8 43 1f ca ed de bd fb ef 38 fb 2e 58 66 b4 fb d9 b6 bf c3 ef 43 c7 e0 e0 60 0a 1a 1a 1a 1a 1a 1a e7 01 da 84 55 43 43 63 ce 60 ff fe fd 83 24 84 e2 07 79 1b 89 e4 67 b8 aa 9b e5 52 96 b7 92 24 be 49 4c 54 3f f5 a9 4f ed 21 49 f4 b2 23 3d d4 4d 54 56 56 2e e0 fe ee ef 7d ef 7b 4e ae 17 55 12 ec f0 83 e4 d1 95 c9 64 5a d8 d9 6e e1 be 1b 59 76 2d 5d ba f4 09 9e ab 3f 9b cd 7e db e5 72 0d ca 67 b2 83 ae 3b e2 1a 0a 6c 5f db 4c 0b 61 ce 7b 39 8d b3 0d d5 73 d3 00 ce 03 7e f0 83 1f c8 6f f4 ab 58 0f 3f eb 53 c2 f9 1c a7 3f 62 db 4e 42 43 e3 3c 62 e3 c6 8d 2e 0e d8 19 5b b7 6e 4d 43 43 43 e3 a2 83 01 0d 0d 0d 8d 39 06 c9 bd 97 4c 26 5b 49 fa de cc c5 0f c1 1a ec 4a b3 23 7d b4 ad ad 2d f6 da d7 be 76 d1 cd 37 df 2c Data Ascii: 91OQ\|C8.XfC`UCCc`$ygR$ILT?O!I#=MTVV.}{NUdZnYv-]?~rg;l_La{9s~oX?S?bNBC<b.[nMCCC9L&[IJ#}-v7,
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 6d 95 2e 1f 59 d4 78 11 e6 38 79 98 81 fa 3b 36 20 bc e3 00 d2 fd a3 4a 81 dc 39 7a 18 09 aa a8 2e 87 13 a9 9c 09 4f 69 11 6a ae 5d 03 a7 9d 6a 24 1f 18 c9 4b c2 26 49 d1 33 54 47 45 6d f4 52 ad 73 3a 4e 3d 55 73 21 f7 9d bd fa 26 49 b4 c9 cf 70 28 1f d2 f6 e6 f9 68 ea eb c7 bc 9e 5e 8c 16 17 a1 a7 ba fa 98 23 dc 7c 06 12 38 a7 28 17 9f 1e 51 97 1f 32 5a 1a 42 cf 92 2a cc 7f ba 0f ee 54 7a 52 5f 6a 70 05 51 ea 14 1f 4d 3e 63 37 b7 95 86 ad d8 ce 02 ea e9 26 55 68 b3 88 44 92 ed 63 c2 15 40 9f ab cc dc 16 68 db e3 cb a5 fe f7 f2 62 43 08 ce ef 71 fe 20 03 4d eb cc 82 08 b5 62 ae c9 f2 8d fd fb f7 9f 37 62 7b 12 90 3c b2 21 b6 ab 0d c8 67 60 35 8c ad bb 76 ed fa 68 e1 3e f6 36 51 5b 6b b8 6f 84 6d 33 90 4e a7 55 24 2a 12 b3 58 24 12 89 75 77 77 27 17 2c 58 Data Ascii: m.Yx8y;6 J9z.Oij]j$K&I3TGEmRs:N=Us!&Ip(h^#\|8(Q2ZBTzR_jpQM>c7&UhDc@hbCq Mb7b{<!g`5vh>6Q[kom3NU$X$uww',X
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 5f da 5b 4b 4b 8b a8 ff b0 a3 53 4b 63 5b c6 f6 7d 2b e7 bf 8e d3 c0 6b 5e f3 1a 27 df df 62 a2 5a 91 0f 40 22 ea 1e 07 5a 92 d5 d5 d5 62 c2 ba cc ce a3 2a 83 44 e7 2d b9 a2 28 51 b1 58 4c a2 7e e7 07 71 f2 ef 9e 2e de 87 ff 3a d9 60 2b 1a 73 0f f2 3b c2 36 26 2a a4 c3 1e 90 ab 65 7b f7 9f e8 f1 a2 40 b3 dd ca 8b 51 bd f0 78 7c 8f 0c 6c 72 76 37 34 34 ce 22 34 81 d4 d0 78 11 f0 87 5a 24 17 29 25 36 69 18 61 e7 e6 b4 fd 1e 05 8b 17 2f 6e e3 cb fe 6d c8 87 fb b0 3a 33 3b 39 fd 87 17 4a 20 ac 71 ee 91 4e a7 1f 62 5b f8 2b 3e fb 4f f2 f9 b8 ec 5c 9d ef 0c 85 42 d7 70 fa c7 38 be 81 e1 39 01 3b 1d 92 af 31 5d 5e 5e 9e 1b 1c 1c 74 92 00 66 25 cd 1d 07 22 42 ac f7 46 9c 44 60 06 01 95 97 42 13 3f 35 b8 71 c9 25 97 c8 39 1d f6 b2 61 13 49 e3 85 ce 23 c1 51 ae 74 Data Ascii: _[KKSKc[}+k^'bZ@"ZbD-(QXL~q.:`+s;6&e{@Qx\|lrv744"4xZ$)%6ia/nm:3;9J qNb[+>O\Bp89;1]^^tf%"BFD`B?5q%9aI#Qt
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: b9 9a b7 23 f9 39 9c 5d 6d 67 7b fe 1f 79 78 c6 38 b7 72 db d5 ff 01 fb 40 8e 34 2c 9f e3 74 9b e0 b3 d5 d7 c3 67 90 87 ff b9 2e d9 01 62 6c 4b 54 52 d9 cf d1 71 64 d6 2e d8 b9 8e cb 3e c5 ec 5b 8c 6d bf a8 dd 58 f1 c7 4a 4b 5e 5e 9e 5c 74 d1 45 bb 50 ee 63 cc 09 89 77 a3 96 f9 24 b1 dd 31 eb 83 c8 bc 8f 18 7d d1 b3 88 17 4e e5 b3 0b e4 f1 0f 62 60 70 94 40 39 8a 8b 81 c1 9b 00 43 20 0d 0c b2 b0 7e fd fa 7f 83 a1 ff 47 7c 98 8f 99 5b 93 c1 df 24 68 0d d3 bd 8e 81 3b ae d0 d1 51 19 48 83 11 22 df d5 d2 d2 42 52 d9 26 23 08 18 cb 3d 49 92 13 cb 6a e0 ec 8e 1d 3b e6 c0 a8 b5 ce 3f ff fc ba 6f 7f fb db 2d 83 ed 5b 5f 5f 4f 05 de cd 59 97 21 8d 43 e6 81 54 d5 4a 16 43 ec a3 34 72 d0 e4 10 24 c5 4e 07 c5 4a e6 63 31 88 44 0a 84 aa 87 c2 50 8a 31 32 21 af 45 74 Data Ascii: #9]mg{yx8r@4,tg.blKTRqd.>[mXJK^^\tEPcw$1}Nb`p@9C ~G\|[$h;QH"BR&#=Ij;?o-[__OY!CTJC4r$NJc1DP12!Et
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 6e bf fd b2 d9 ff fc 59 19 04 f5 f5 f5 f3 f1 ad fd 11 be d7 1d cc 4d 57 53 53 b3 e6 e0 c1 83 17 60 d9 a5 98 67 12 74 7e bb b7 61 9e 65 84 e4 ae 1d e3 b6 2d 5b b6 9c 76 c3 0d 37 fc fb 81 03 07 c2 68 20 14 ba b3 52 85 fc d2 97 be 64 83 78 da 3a 82 2a 4f 71 08 ef c0 99 20 a1 3b bd e7 9d 35 6b d6 c7 b0 fe 47 d8 ee 19 8c 2f 17 e7 fd e0 1f 42 9f e3 7f d8 b0 61 c3 ed 62 60 60 60 60 90 13 86 40 1a 9c f4 60 ff 15 8c fe c0 b4 04 18 62 4c d9 91 48 24 de b3 75 eb d6 57 b9 1e ea e4 42 10 46 e6 7e ac 14 c7 32 63 44 be 3f c1 40 f8 94 f7 38 50 22 37 62 34 96 ae 7c 38 4e 08 c3 17 40 32 7f 27 06 06 6f 01 e0 3d b9 1c 46 fa 76 18 e2 8b 51 b6 c7 c0 e0 7e 14 d3 9b f0 1e 50 6e 3b 26 2a 4b 5b 5b 1b 55 fd 72 bc 8f 01 18 f1 09 aa 45 f1 78 5c a5 46 08 85 42 e9 68 34 9a 86 f1 1f c3 Data Ascii: nYMWSS`gt~ae-[v7h Rdx:Oq ;5kG/Bab````@`bLH$uWBF~2cD?@8P"7b4\|8N@2'o=FvQ~Pn;&K[[UrEx\FBh4
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: c4 bd da 20 8d f6 cd 37 df ac fa ef d1 75 0f 8a 57 3b 8c c6 42 f6 43 fb ca 57 be f2 4c 6d 6d 6d 27 ca 95 ed 21 8f ae 11 eb d3 ee 78 6c 74 60 10 10 ba a9 d2 0d 8e 29 44 e8 aa fc 12 86 85 e2 71 95 cd 52 ee ec 6c 32 af af cf 1b 28 35 25 7d 73 73 ba d7 2f 59 d3 d6 00 e7 90 37 1b 50 ff e5 c6 1b 6f 14 10 29 e5 da ea 82 ee ac bb 77 ef 56 64 66 fe fc f9 72 dd 75 d7 c9 b4 69 d3 32 2a 23 49 22 df f3 5c 2a 66 61 61 a1 fa 78 58 4e 8a 94 3e 11 62 c5 79 16 7c 86 54 93 5e c1 b0 41 9c ff 63 05 06 f6 5f 6f 19 ea 9a b3 1b a2 8e 10 ae 52 16 02 99 0c e0 be 48 a2 4e c5 3b fc 36 7c bb 3e 8d 65 75 20 8d 31 bc 97 f6 2d b7 dc 72 1e be 6f 7d fa e3 56 56 56 c6 9b 9b 9b f1 d9 0a 58 50 6b 2d bc 8f cc b7 d9 5e 55 55 d5 7e fa e9 a7 6f 98 31 63 46 23 9e 57 bb 0e de 94 39 5f f6 45 b8 ee Data Ascii: 7uW;BCWLmmm'!xlt`)DqRl2(5%}ss/Y7Po)wVdfrui2#I"\faaxXN>by\|T^Ac_oRHN;6\|>eu 1-ro}VVVXPk-^UU~o1cF#W9_E
2024-03-27 20:20:32 UTC	16384	IN	Data Raw: 08 79 16 36 6a 82 4c b6 34 4c 6d 5b 0f 71 95 d1 e4 10 14 64 b5 df 9e 69 cd 92 11 a9 79 8e 72 e4 17 61 1b 01 6f f7 d8 63 8f 79 03 0b 92 16 12 70 ac 51 bf 9f fe ed 6f 7f fb a5 b6 6d db 56 16 83 c6 e0 91 f2 a8 30 fb 0e b8 88 8b 8c 07 89 df 75 9f 33 ac 6d db 98 f2 7a 94 81 9b c4 3c 59 80 8b f1 2e 0b 7b 1c ec ca d2 10 e1 51 bc ad f7 7d bc 79 fa 78 f6 3c 73 00 59 33 f3 08 fa 50 56 6b 73 c0 64 8d 3e 1f 1b 08 8a c0 23 b9 69 6d b4 8e 5c e3 a1 5a 85 61 70 52 9a 85 dd f7 d3 77 bc 9b 6f ea fb 32 1b d3 2a cc a8 53 65 e3 64 95 8d 63 8c 31 94 7c a0 4f 31 ce 50 73 f4 bf 67 9c 71 46 6b cd 2b df 91 92 7d a4 d6 b5 89 ae c7 7f 6a 2c 76 ff ef ff fd 3f 0f 68 ea d1 10 39 70 a4 6b 26 25 00 f2 10 18 b4 2f d7 dc f0 92 db b6 25 84 8c 6e 56 74 85 0c 46 a7 3c f4 d0 43 27 08 50 1e 3f Data Ascii: y6jL4Lm[qdiyraocypQomV0u3mz<Y.{Q}yx<sY3PVksd>#im\ZapRwo2*Sedc1\|O1PsgqFk+}j,v?h9pk&%/%nVtF<C'P?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50064	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:33 UTC	2914	OUT	GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1 Host: www.canva.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:33 UTC	1168	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:33 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b214ec8854241a-IAD CF-Cache-Status: MISS Cache-Control: no-cache, no-store, no-cache Content-Language: en Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Wed, 27 Mar 2024 20:20:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin service-worker-allowed: / X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 86b214ec8854241a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ei6gcLArDxrxE5Kr6OTXOCUulGMo3CjYvXd2hkRSPrZcEzx19Fjs7AvtUOTSQYUjIy9kv7R3kjA3nTKnX0aARJcE3x6aJPA6IIm32BCsAl%2F7l5OF%2BYYM2j%2FgOXYKa68%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:33 UTC	201	IN	Data Raw: 33 62 61 0d 0a 73 65 6c 66 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 2f 77 65 62 2f 27 3b 0a 73 65 6c 66 5b 27 62 6f 6f 74 73 74 72 61 70 27 5d 20 3d 20 7b 20 70 61 67 65 3a 20 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 66 65 35 65 38 34 64 62 63 32 31 34 34 31 38 38 30 31 30 38 31 61 62 33 37 65 35 38 64 61 35 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 Data Ascii: 3baself['__canva_public_path__'] = 'https:\/\/static.canva.com\/web/';self['bootstrap'] = { page: {"A?":"B","A":{"A?":"C","b":"https:\u002F\u002Fdfe5e84dbc214418801081ab37e58da5@o13855.ingest.sentry
2024-03-27 20:20:33 UTC	760	IN	Data Raw: 2e 69 6f 5c 75 30 30 32 46 35 35 34 36 36 38 33 22 2c 22 64 22 3a 6e 75 6c 6c 2c 22 68 22 3a 6e 75 6c 6c 2c 22 63 22 3a 30 2e 32 2c 22 65 22 3a 6e 75 6c 6c 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 48 22 3a 22 41 22 2c 22 4b 22 3a 22 4e 22 2c 22 4c 22 3a 22 4e 22 2c 22 47 22 3a 22 4e 22 2c 22 4e 22 3a 6e 75 6c 6c 2c 22 52 22 3a 33 30 30 30 30 2c 22 53 22 3a 30 2e 30 30 31 2c 22 54 22 3a 66 61 6c 73 65 2c 22 55 22 3a 74 72 75 65 2c 22 61 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 Data Ascii: .io\u002F5546683","d":null,"h":null,"c":0.2,"e":null,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":true,"B":100,"C":30,"D":10},"l":[]},"H":"A","K":"N","L":"N","G":"N","N":null,"R":30000,"S":0.001,"T":false,"U":true,"a":"https:\u002F\u002Fstatic.canva.c
2024-03-27 20:20:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50065	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:35 UTC	2882	OUT	GET /_online?1711570834515 HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:35 UTC	641	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:35 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 2 Connection: close Cache-Control: no-store Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pr2Dt6PdoAI9nQ1EFn8%2FK1uX6j4tLZvF7GVIEYK2QxVSRLP7%2BMUv6IWLk4dyXnMQiHZPgulEjvsBNw%2FIVKrkNrYZ9M26v9kaDeMs8uHVzx4VIjImOoB5AaB%2BMa5CxNY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b214f7cb190822-IAD
2024-03-27 20:20:35 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50066	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:35 UTC	2674	OUT	GET /_online?1711570834515 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:35 UTC	639	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:35 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 2 Connection: close Cache-Control: no-store Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3HRqn3PQq41IWuriQCHkauVv1ZAZxowjiiyAO%2BN0zjuqeqtOzp1EYJXSxeqm1FgOxlHQh%2BDlaPfXlzOvS5vgS9EzMNOCNTAdtnHcfzJZQEfx%2FbxFgXR8YcQsWsCMzU0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b214fa682d2f24-IAD
2024-03-27 20:20:35 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50067	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:36 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1528 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:36 UTC	1528	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:20:36 UTC	857	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:36 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b215023fa059bb-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=78FMtgibXWA7YF2VkNkapQqst%2BtoPzrDLvDv9n%2FciioLmBjAULX5i47ay7wlBxA70r3hN0n69nlOtqxmWgKoEPTb4TtFBxVxNndMw%2FNxu2EO10IOeD8Tg7Jb21V0fbS9CG2j9BY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:36 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50068	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:37 UTC	3458	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1523 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:37 UTC	1523	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 64 64 31 35 65 64 38 30 2d 64 31 63 39 2d 34 37 65 34 2d 39 65 61 30 2d 36 39 65 32 64 61 37 34 65 62 31 35 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 33 34 2e 35 35 33 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 33 37 2e 31 37 31 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"dd15ed80-d1c9-47e4-9ea0-69e2da74eb15","E":"2024-03-27T20:20:34.553Z","F":"2024-03-27T20:20:37.171Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:37 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:37 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21507cc2c05ad-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21507cc2c05ad X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ix3SCq7kyOH4egMd2eSy268%2FzOgMDWaQ3oLfBm%2Bojq0cJOLPnIsx8WLFtrwICI49GsLZFBJ0hP9gL8cwt5SiA9ZZbb44FPISb80f1UAtBxKNvE18kVBrrv1HaCkOh%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:37 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50069	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:38 UTC	2673	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:38 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:38 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2150b2dfb827b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2150b2dfb827b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1W33aeowj2%2Fr9PqplVvBWfxiT%2FPLTtoHhBBRCIVYmKD4ZXasPV4EFuYGtuDom757WzUah00vXJqCOyFJjkXYFo%2BTPoYpa8TtZ3R9eBilOg8BBPiSTlMTVnu%2FIPet4Bs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:38 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50071	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:41 UTC	2990	OUT	GET / HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:41 UTC	1296	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:41 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215210dcf07e0-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-FpCb6tgvJHgUODEbaB9TNg'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=86b215210dcf07e0&app=anon_home&policyHash=40c65cba Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-Request-ID: 86b215210dcf07e0 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vW617HPWfEMhp%2BTvK7%2BRfsfPPeHDEq7Uo11e9s%2BCPl09cD8uY9ZJCRawc7FJq1gE8TdAs%2FzT6P2WZUdFpopUHlpYyukL97REB%2BD%2F%2FYQIMipKqO2Ha%2FQuWRH6wLcw1T4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 37 66 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 43 61 6e 76 61 3a 20 56 69 73 75 61 6c 20 53 75 69 74 65 20 66 6f 72 20 45 76 65 72 79 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6e 6f 6e 5f 68 6f 6d 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 Data Ascii: 7fb8<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>Canva: Visual Suite for Everyone</title><meta name="app-name" content="anon_home" /><meta name="viewport" content="width=device-width, initial-sc
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 75 2b 30 30 64 38 2d 30 30 66 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d Data Ascii: u+00d8-00f6,u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:norm
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 48 67 55 4f 44 45 62 61 42 39 54 4e 67 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 61 64 64 69 74 69 6f 6e 61 6c 54 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 47 72 61 70 68 69 63 73 5f 73 6f 66 74 77 61 72 65 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6e 76 61 22 2c 22 6c 65 67 61 6c 4e 61 6d 65 22 3a 22 43 61 6e 76 61 20 50 74 79 20 4c 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 6e 6f 6e 5f 68 6f 6d 65 2f 63 Data Ascii: HgUODEbaB9TNg">{"@context":"https://schema.org","@type":"Organization","additionalType":"https://en.wikipedia.org/wiki/Graphics_software","name":"Canva","legalName":"Canva Pty Ltd","url":"https://www.canva.com","logo":"https://static.canva.com/anon_home/c
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 61 20 70 6f 73 74 73 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 2c 20 70 6f 73 74 65 72 73 2c 20 76 69 64 65 6f 73 2c 20 6c 6f 67 6f 73 20 61 6e 64 20 6d 6f 72 65 2e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 66 5f 7a 61 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 66 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 72 5f 65 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 72 22 3e 3c Data Ascii: a posts, presentations, posters, videos, logos and more."><link rel="canonical" href="https://www.canva.com/"><link rel="alternate" href="https://www.canva.com/af_za/" hreflang="af"><link rel="alternate" href="https://www.canva.com/ar_eg/" hreflang="ar"><
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 61 72 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 41 52 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 63 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 43 4f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 65 73 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 6d 78 2f 22 20 68 72 65 66 Data Ascii: ttps://www.canva.com/es_ar/" hreflang="es-AR"><link rel="alternate" href="https://www.canva.com/es_co/" hreflang="es-CO"><link rel="alternate" href="https://www.canva.com/es_es/" hreflang="es"><link rel="alternate" href="https://www.canva.com/es_mx/" href
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 75 5f 68 75 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 75 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 79 5f 61 6d 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 64 5f 69 64 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 Data Ascii: lternate" href="https://www.canva.com/hu_hu/" hreflang="hu"><link rel="alternate" href="https://www.canva.com/hy_am/" hreflang="hy"><link rel="alternate" href="https://www.canva.com/id_id/" hreflang="id"><link rel="alternate" href="https://www.canva.com/i
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 6e 5f 6d 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 72 5f 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 73 5f 6d 79 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 79 Data Ascii: ternate" href="https://www.canva.com/mn_mn/" hreflang="mn"><link rel="alternate" href="https://www.canva.com/mr_in/" hreflang="mr"><link rel="alternate" href="https://www.canva.com/ms_my/" hreflang="ms"><link rel="alternate" href="https://www.canva.com/my
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6c 5f 73 69 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6c 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6e 5f 7a 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6f 5f 73 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 Data Ascii: rel="alternate" href="https://www.canva.com/sl_si/" hreflang="sl"><link rel="alternate" href="https://www.canva.com/sn_zw/" hreflang="sn"><link rel="alternate" href="https://www.canva.com/so_so/" hreflang="so"><link rel="alternate" href="https://www.canv
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 79 6f 5f 6e 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 79 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 68 6b 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 48 4b 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 74 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 54 57 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 Data Ascii: rel="alternate" href="https://www.canva.com/yo_ng/" hreflang="yo"><link rel="alternate" href="https://www.canva.com/zh_hk/" hreflang="zh-HK"><link rel="alternate" href="https://www.canva.com/zh_tw/" hreflang="zh-TW"><link rel="alternate" href="https://www
2024-03-27 20:20:41 UTC	1369	IN	Data Raw: 61 62 6c 65 3d 22 66 61 6c 73 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 4e 30 30 52 65 67 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 46 43 45 59 62 41 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 7a 52 38 78 77 22 20 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 33 22 3e 3c 64 69 76 20 69 64 3d 22 67 6f 6f 67 6c 65 5f 6f 6e 65 5f 74 61 70 5f 73 69 67 6e 5f 75 70 22 20 63 6c 61 73 73 3d 22 5f 37 6f 66 42 76 41 20 66 34 71 4a 6e 67 20 66 73 2d 68 69 64 65 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 37 32 70 78 3b 72 69 67 68 74 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 69 6e 68 65 72 69 Data Ascii: able="false"><span class="N00Reg">Skip to main content</span></a></p></div><div><div class="FCEYbA"></div></div><div class="mzR8xw" style="z-index:3"><div id="google_one_tap_sign_up" class="_7ofBvA f4qJng fs-hide" style="top:72px;right:24px;z-index:inheri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50074	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:43 UTC	740	OUT	POST /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:43 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 32 2e 39 38 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 62 62 30 65 33 33 32 34 33 38 34 61 34 31 39 38 62 32 65 35 39 61 63 65 39 65 30 34 65 38 64 64 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 32 2e 39 38 35 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 32 2e 39 38 35 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:20:42.985Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"bb0e3324384a4198b2e59ace9e04e8dd","init":true,"started":"2024-03-27T20:20:42.985Z","timestamp":"2024-03-27T20:20:42.985Z","stat
2024-03-27 20:20:44 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:20:44 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:44 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.4	50070	104.17.239.159	443

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:45 UTC	3137	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: anon_home sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: searchdesignspecsapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572623309%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570823309%7D; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570823821,"utm_s":"editor","utm_m":"link"}; _ga=GA1.1.1352771599.1711570825; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570825.0.0.1176296780; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:45 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:45 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215368c30242b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215368c30242b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X7tI%2FCx1VDMDrk9jdirYQcqF1znTYD2wmBvxNjhJQcz3SCjf45PEd92jLaJCwJx2gW3rJ5SuwxiQu6gZd%2Fa6z5efoJbMNqkWF9UWDhP4vFmTtwG8WXoaoBlGk93mDuY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:45 UTC	470	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:20:45 UTC	1369	IN	Data Raw: 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 Data Ascii: nsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categoryPlu
2024-03-27 20:20:45 UTC	1369	IN	Data Raw: 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 Data Ascii: ACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconUrl":"h
2024-03-27 20:20:45 UTC	1369	IN	Data Raw: 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 4e 50 22 2c 22 64 Data Ascii: abel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UUNP","d
2024-03-27 20:20:45 UTC	1181	IN	Data Raw: 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 Data Ascii: Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensions":{"
2024-03-27 20:20:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50077	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	666	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570845680&gtmcb=1214763953 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:46 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:46 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 849c0ccf-c508-4d0e-8292-e90057105bac Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50078	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	724	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
2024-03-27 20:20:46 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:46 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:20:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:20:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:46 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50079	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	889	OUT	GET /rp.gif?ts=1711570845945&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:46 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:46 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50080	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	3015	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558044&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&_et=6&up.custom_country_code=US&tfd=5230&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source=navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:47 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:47 UTC	568	IN	Data Raw: 32 33 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 33 36 37 35 30 33 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 Data Ascii: 231event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest
2024-03-27 20:20:47 UTC	505	IN	Data Raw: 31 66 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 33 36 37 35 30 33 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 Data Ascii: 1f2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0
2024-03-27 20:20:47 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50081	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	2967	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558068&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&_et=4&tfd=5231&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:47 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:47 UTC	943	IN	Data Raw: 34 35 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 34 33 33 33 38 34 32 30 35 26 66 73 74 3d 31 37 31 31 35 37 30 38 34 37 30 34 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 Data Ascii: 450event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=433384205&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z984
2024-03-27 20:20:47 UTC	168	IN	Data Raw: 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 26 75 61 6d 62 3d 30 26 75 61 6d 3d 26 75 61 70 3d 57 69 6e 64 6f 77 73 26 75 61 70 76 3d 31 30 2e 30 2e 30 26 75 61 77 3d 30 26 70 73 63 64 6c 3d 6e 6f 61 70 69 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: %7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1"],"options":{"attribution_reporting":true}}
2024-03-27 20:20:47 UTC	572	IN	Data Raw: 32 33 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 35 37 35 33 36 34 37 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 Data Ascii: 235event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=g
2024-03-27 20:20:47 UTC	509	IN	Data Raw: 31 66 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 35 37 35 33 36 34 37 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e Data Ascii: 1f6event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;n
2024-03-27 20:20:47 UTC	573	IN	Data Raw: 32 33 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 36 32 36 30 39 34 36 34 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d Data Ascii: 236event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=
2024-03-27 20:20:47 UTC	510	IN	Data Raw: 31 66 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 36 32 36 30 39 34 36 34 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b Data Ascii: 1f7event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;
2024-03-27 20:20:47 UTC	290	IN	Data Raw: 31 31 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 77 41 48 4a 44 71 61 61 25 32 42 38 41 51 69 46 64 6e 25 32 42 73 25 32 42 6f 78 37 30 67 35 6c 31 46 25 32 42 4b 77 33 74 76 6d 53 74 48 6c 33 61 44 6a 32 73 6e 4b 54 4b 75 54 68 6b 42 50 4c 79 35 4c 4a 71 75 70 6a 4f 6d 56 73 46 54 72 34 79 35 71 58 63 75 47 49 4b 69 67 4d 4f 6e 72 4f 63 45 63 79 63 30 4c 4c 79 41 7a 67 4c 45 48 45 63 53 6b 64 7a 30 4c 74 67 79 78 73 74 42 41 58 67 32 69 55 25 32 42 59 4d 75 45 57 33 6c 43 6c 6a 4f 35 51 73 53 4b 7a 5a 33 35 6d 61 63 31 36 55 58 67 56 4b 59 6d 48 25 32 42 39 4a 63 6f 70 4e 73 48 7a Data Ascii: 11bevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=wAHJDqaa%2B8AQiFdn%2Bs%2Box70g5l1F%2BKw3tvmStHl3aDj2snKTKuThkBPLy5LJqupjOmVsFTr4y5qXcuGIKigMOnrOcEcyc0LLyAzgLEHEcSkdz0LtgyxstBAXg2iU%2BYMuEW3lCljO5QsSKzZ35mac16UXgVKYmH%2B9JcopNsHz
2024-03-27 20:20:47 UTC	284	IN	Data Raw: 31 31 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 32 4f 4d 59 30 69 78 69 61 6a 36 49 78 36 72 55 48 43 43 37 41 4a 66 4c 61 42 65 73 4e 53 46 6e 61 56 41 38 77 6e 4b 54 52 47 68 74 69 46 34 37 77 37 66 6b 64 30 30 61 64 4a 46 70 66 66 69 61 41 6f 68 6f 50 42 4c 6b 79 76 56 46 62 66 31 37 31 59 48 75 25 32 46 68 30 46 61 4d 56 78 64 36 51 4e 39 35 34 70 75 35 34 69 4d 41 45 74 33 32 53 36 55 45 4f 44 43 58 71 37 77 74 35 75 59 6f 58 4e 55 63 67 36 39 68 64 6e 6b 4c 6d 32 68 43 43 31 51 25 32 42 75 71 54 33 50 4e 74 62 46 48 58 6a 31 6c 4b 52 77 65 38 43 6f 59 25 32 46 64 78 72 31 48 Data Ascii: 115event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=2OMY0ixiaj6Ix6rUHCC7AJfLaBesNSFnaVA8wnKTRGhtiF47w7fkd00adJFpffiaAohoPBLkyvVFbf171YHu%2Fh0FaMVxd6QN954pu54iMAEt32S6UEODCXq7wt5uYoXNUcg69hdnkLm2hCC1Q%2BuqT3PNtbFHXj1lKRwe8CoY%2Fdxr1H
2024-03-27 20:20:47 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:20:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50082	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	875	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50087	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	967	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:47 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:47 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:47 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50083	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	878	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50086	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	993	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:47 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:47 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:47 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50085	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	875	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50084	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	967	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:47 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:47 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:47 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-03-27 20:20:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50088	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2904 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:46 UTC	2904	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 32 32 30 66 31 66 34 39 2d 61 33 64 38 2d 34 33 66 30 2d 38 64 63 65 2d 37 37 38 36 33 31 34 66 61 34 33 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 34 2e 38 30 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 36 2e 33 38 32 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"220f1f49-a3d8-43f0-8dce-7786314fa43f","E":"2024-03-27T20:20:44.806Z","F":"2024-03-27T20:20:46.382Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:47 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215419ece8284-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215419ece8284 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=taoAMf5f9twElYtKmrTr%2FH8Vp96%2FdjdOIa7kqswfO5twvvYNTEujxG70IMLjZ305RWdgqZQdpx7tvMqcSLRn72Dznt8eDxN3k9yVdvKd35YNGCtcUDWVcHYyl%2BuWdL4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:47 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50090	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	2696	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:47 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2154299015a70-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2154299015a70 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XUF5Ku4iJ9x3HSmrxRZUq25VHpEcFcrrWY3wFzXZHR8UfUVCidgBN0iPz2Yq9gqYLEYf%2B7brBLUasslq%2Be8OZlTg4PB2BsySDzBTC2n%2FWPjn8ZWeypPUQCzcMVW4eUc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:47 UTC	468	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:20:47 UTC	1369	IN	Data Raw: 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 6f 72 79 50 Data Ascii: ionsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categoryP
2024-03-27 20:20:47 UTC	1369	IN	Data Raw: 22 74 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a Data Ascii: "tACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconUrl":
2024-03-27 20:20:47 UTC	1369	IN	Data Raw: 73 4c 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 4e 50 22 2c Data Ascii: sLabel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UUNP",
2024-03-27 20:20:47 UTC	1183	IN	Data Raw: 3a 22 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a Data Ascii: :"Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensions":
2024-03-27 20:20:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50089	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:46 UTC	478	OUT	GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:47 UTC	550	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50095	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	656	OUT	GET /rp.gif?ts=1711570845945&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:47 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:47 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50094	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	491	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
2024-03-27 20:20:47 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:20:47 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:20:47 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:47 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50096	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	433	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570845680&gtmcb=1214763953 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:47 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:20:47 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 5ba89e8f-ddd4-42c2-ad63-b77c945d737d Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:20:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50097	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	642	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50098	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	645	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:47 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50106	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1290	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:47 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"921740799757460044"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"921740799757460044","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"921740799757460044","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"921740799757460044","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"921740799757460044","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50103	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1195	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:47 UTC	1050	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50101	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1291	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2218	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14980434461003962044"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14980434461003962044","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14980434461003962044","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14980434461003962044","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14980434461003962044","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50102	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1196	OUT	GET /activity;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	1051	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50100	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1286	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5584736808975561278"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5584736808975561278","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"5584736808975561278","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"5584736808975561278","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"5584736808975561278","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50105	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	2170	OUT	GET /_set_cookie?val=wAHJDqaa%2B8AQiFdn%2Bs%2Box70g5l1F%2BKw3tvmStHl3aDj2snKTKuThkBPLy5LJqupjOmVsFTr4y5qXcuGIKigMOnrOcEcyc0LLyAzgLEHEcSkdz0LtgyxstBAXg2iU%2BYMuEW3lCljO5QsSKzZ35mac16UXgVKYmH%2B9JcopNsHzXttVRPmd2xIfb6efBUCcjw%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:47 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:20:47 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50104	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	2164	OUT	GET /_set_cookie?val=2OMY0ixiaj6Ix6rUHCC7AJfLaBesNSFnaVA8wnKTRGhtiF47w7fkd00adJFpffiaAohoPBLkyvVFbf171YHu%2Fh0FaMVxd6QN954pu54iMAEt32S6UEODCXq7wt5uYoXNUcg69hdnkLm2hCC1Q%2BuqT3PNtbFHXj1lKRwe8CoY%2Fdxr1HtemeE0V1g81efyQg%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:47 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:47 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:20:47 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50107	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:47 UTC	1191	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	1046	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50114	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	2714	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558068&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&_et=4&tfd=5231&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:48 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:48 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:48 UTC	1035	IN	Data Raw: 34 34 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 30 33 38 31 36 39 31 36 34 26 66 73 74 3d 31 37 31 31 35 37 30 38 34 38 32 33 30 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 44fevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1038169164&fst=1711570848230&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:20:48 UTC	75	IN	Data Raw: 30 2e 30 26 75 61 77 3d 30 26 70 73 63 64 6c 3d 6e 6f 61 70 69 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 0.0&uaw=0&pscdl=noapi&s3p=1"],"options":{"attribution_reporting":true}}
2024-03-27 20:20:48 UTC	569	IN	Data Raw: 32 33 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 37 37 31 30 33 34 37 32 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 Data Ascii: 232event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=771034725;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gues
2024-03-27 20:20:48 UTC	506	IN	Data Raw: 31 66 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 37 37 31 30 33 34 37 32 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d Data Ascii: 1f3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=771034725;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=
2024-03-27 20:20:48 UTC	571	IN	Data Raw: 32 33 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 32 35 33 38 38 34 35 39 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 Data Ascii: 234event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1253884597;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gu
2024-03-27 20:20:48 UTC	508	IN	Data Raw: 31 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 32 35 33 38 38 34 35 39 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 Data Ascii: 1f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1253884597;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;np
2024-03-27 20:20:48 UTC	286	IN	Data Raw: 31 31 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 65 63 37 77 35 33 63 77 65 4a 36 59 7a 50 53 34 31 52 47 41 51 5a 65 6b 77 61 66 4f 32 73 38 6b 4c 63 6d 57 6a 43 76 61 56 46 57 66 6d 6c 76 6e 64 7a 4a 63 71 32 4e 62 71 52 77 64 55 57 6f 74 58 6c 73 37 6e 68 46 48 73 38 4e 32 79 78 7a 63 73 42 34 50 41 4d 4b 65 61 71 4d 57 31 70 5a 64 42 25 32 42 76 4a 47 7a 39 30 4a 32 38 65 45 30 50 51 46 51 51 47 65 35 49 32 41 46 45 6a 7a 6e 56 6f 57 59 67 65 55 6c 25 32 42 31 68 62 6b 42 35 74 39 61 36 66 36 6e 54 4e 68 6d 4e 32 6e 76 44 6a 34 6e 4a 52 4a 50 78 54 79 65 49 41 75 4f 68 54 62 4c Data Ascii: 117event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=ec7w53cweJ6YzPS41RGAQZekwafO2s8kLcmWjCvaVFWfmlvndzJcq2NbqRwdUWotXls7nhFHs8N2yxzcsB4PAMKeaqMW1pZdB%2BvJGz90J28eE0PQFQQGe5I2AFEjznVoWYgeUl%2B1hbkB5t9a6f6nTNhmN2nvDj4nJRJPxTyeIAuOhTbL
2024-03-27 20:20:48 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4f 6f 71 78 54 52 43 4d 6e 4f 52 72 58 76 45 67 31 6d 77 68 4d 39 33 55 75 78 64 71 39 59 61 36 4f 41 47 51 74 4a 55 4c 6d 45 44 4d 50 25 32 46 71 71 64 32 25 32 46 37 42 35 74 71 59 76 56 45 37 50 4d 78 69 50 30 64 50 4d 55 57 38 56 32 6b 4e 71 6b 71 35 30 36 56 53 6d 30 4c 6c 61 38 57 37 52 6b 32 63 63 43 4c 46 56 52 4a 30 68 57 49 68 6b 69 64 74 64 34 47 48 45 71 73 75 53 75 66 43 33 65 62 65 55 74 41 69 4b 4b 74 75 7a 36 71 45 43 5a 66 4f 25 32 46 4f 56 52 75 25 32 42 76 6b 42 5a 47 51 35 56 6b 54 68 74 62 4e 67 73 33 37 75 6b 4a Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=OoqxTRCMnORrXvEg1mwhM93Uuxdq9Ya6OAGQtJULmEDMP%2Fqqd2%2F7B5tqYvVE7PMxiP0dPMUW8V2kNqkq506VSm0Lla8W7Rk2ccCLFVRJ0hWIhkidtd4GHEqsuSufC3ebeUtAiKKtuz6qECZfO%2FOVRu%2BvkBZGQ5VkThtbNgs37ukJ
2024-03-27 20:20:48 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.4	50109	157.240.229.35	443

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	679	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846335&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558060&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:48 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:48 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:48 UTC	1527	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50111	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	642	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:48 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50110	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:48 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:48 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21548fdec0575-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21548fdec0575 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8B7rE5O7BM%2FVP6FPaxVtMK48L1QWsuru2irAJNRNLn78CLoBNmD6vhXZQW5Ks3LKYLOtG6CQPWIRGKPYKGJB6Ec9Dsu77gqLg8FAfAbQtP3J6nGd7na2ue%2BnuuIn6QE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:48 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50108	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	682	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846338&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:48 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:48 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:48 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50112	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	679	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570846340&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_171157157558068&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:48 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:48 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:48 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50113	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	2739	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558044&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&_et=6&up.custom_country_code=US&tfd=5230&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:48 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:48 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:48 UTC	570	IN	Data Raw: 32 33 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 35 39 32 36 38 32 35 34 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 Data Ascii: 233event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1592682549;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gue
2024-03-27 20:20:48 UTC	507	IN	Data Raw: 31 66 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 35 39 32 36 38 32 35 34 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 Data Ascii: 1f4event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1592682549;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa
2024-03-27 20:20:48 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50117	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1276	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:48 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50118	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	984	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"921740799757460044"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"921740799757460044","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"921740799757460044","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"921740799757460044","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"921740799757460044","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50115	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1272	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:48 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50116	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	2154	OUT	GET /pagead/viewthroughconversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2VFcGjjrtgqIJIwlTBBcQluB8VF3F2c5o&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2006	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqONv_nzwppJTqFIkzajuDUKv5R6vSvzZP1gMWx8eZLLV7_Jx-&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_1zlSLz4o_XNm05DcuMapsn8njN0oFMygs&random=3605106406 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50119	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1277	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:48 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50121	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	980	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5584736808975561278"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5584736808975561278","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"5584736808975561278","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"5584736808975561278","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"5584736808975561278","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50120	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	985	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:48 UTC	2218	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14980434461003962044"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14980434461003962044","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14980434461003962044","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14980434461003962044","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14980434461003962044","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50122	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:48 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50123	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:48 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50124	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:48 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:48 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50125	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1039	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=63675039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:49 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50126	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	2324	OUT	GET /pagead/1p-conversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqONv_nzwppJTqFIkzajuDUKv5R6vSvzZP1gMWx8eZLLV7_Jx-&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_1zlSLz4o_XNm05DcuMapsn8njN0oFMygs&random=3605106406 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:49 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50127	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1043	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1657536477;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:49 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50128	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:48 UTC	1044	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1626094647;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:49 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50129	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	2959	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 28110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780
2024-03-27 20:20:49 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 31 36 32 35 35 33 38 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 37 36 33 39 31 31 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 34 35 65 63 33 37 36 62 65 64 39 61 31 39 66 63 2e 6c 74 72 2e 63 73 73 22 2c 22 73 22 3a 36 33 33 2e 31 2c 22 64 22 3a 31 30 38 2e 37 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 36 33 33 2e 31 2c 22 64 73 22 3a 36 33 33 2e 31 2c 22 64 65 22 3a 36 33 33 2e 31 2c 22 63 Data Ascii: {"memory":{"totalJSHeapSize":41625538,"usedJSHeapSize":27639110,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.canva.com/web/45ec376bed9a19fc.ltr.css","s":633.1,"d":108.7,"i":"link","p":"","rs":0,"re":0,"fs":633.1,"ds":633.1,"de":633.1,"c
2024-03-27 20:20:49 UTC	11726	OUT	Data Raw: 2c 22 70 65 22 3a 36 31 35 32 2e 32 2c 22 77 73 22 3a 30 2c 22 73 73 22 3a 30 2c 22 74 73 22 3a 30 2c 22 65 63 22 3a 30 2c 22 64 63 22 3a 30 7d 2c 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 74 2e 63 61 6e 76 61 2e 63 6f 6d 2f 67 2f 63 6f 6c 6c 65 63 74 3f 76 3d 32 26 74 69 64 3d 47 2d 45 50 57 45 4d 48 36 37 31 37 26 67 74 6d 3d 34 35 6a 65 34 33 70 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 61 32 30 30 26 5f 70 3d 31 37 31 31 35 37 30 38 34 35 34 32 30 26 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 26 6e 70 61 3d 30 26 64 6d 61 3d 30 26 63 69 64 3d 31 33 35 32 37 37 31 35 39 39 2e 31 37 31 31 35 37 30 38 32 35 26 65 63 69 64 3d 31 31 37 36 32 39 36 37 38 30 26 75 6c 3d 65 6e 2d 75 73 26 73 72 3d 31 32 38 30 78 31 30 32 34 26 75 Data Ascii: ,"pe":6152.2,"ws":0,"ss":0,"ts":0,"ec":0,"dc":0},{"n":"https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&u
2024-03-27 20:20:49 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:49 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215502dd20818-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50131	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	623	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=2138878269 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:49 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:49 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50130	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	2013	OUT	GET /pagead/1p-conversion/804757079/?random=489288770&fst=1711570847045&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157157558068%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CJqKwsSlg4yyOyITCK3glaOilYUDFSou0AQdVCEMUDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQB7FLtqONv_nzwppJTqFIkzajuDUKv5R6vSvzZP1gMWx8eZLLV7_Jx-&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_1zlSLz4o_XNm05DcuMapsn8njN0oFMygs&random=3605106406 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:49 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50134	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	926	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:49 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50135	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	1041	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:49 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:49 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:49 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:20:49 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50136	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	887	OUT	GET /rp.gif?ts=1711570848773&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:49 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:49 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50133	108.139.47.50	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	832	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=163421805 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:49 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:49 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 667392b7601b2f20a44ef149f6859dae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: IpnRVjLF_YjeLwTblfJ0E2r7s-tdLBZItb9CGK4VQgwKB5VJ6Z4nTA==
2024-03-27 20:20:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50132	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	740	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:20:49 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:49 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50139	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	693	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:49 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=96, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:20:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50140	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	654	OUT	GET /rp.gif?ts=1711570848773&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:49 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:20:49 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:20:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50141	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	730	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F&rl=&if=false&ts=1711570848771&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570846158&coo=false&eid=1711571717886_1711571575580101&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:20:50 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:20:50 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:20:50 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50142	18.154.227.51	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	599	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=163421805 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:20:49 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:20:49 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A1d522ce503e36f3ccfd6c1711570829; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 a170450d5cd56debfea916e005590e76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: SmWdj2hM-mvxXQTEL-X1QmWwNwErcL6cXpDzTQ7bHgbEIFNT8AWAIA==
2024-03-27 20:20:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50138	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:49 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1074358526 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:20:49 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:20:49 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:20:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50144	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:50 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2235 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:50 UTC	2235	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 61 65 35 38 61 39 37 38 2d 65 31 63 65 2d 34 32 65 66 2d 38 35 66 36 2d 31 63 36 38 32 32 63 37 34 63 30 61 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 34 39 2e 31 35 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 35 30 2e 31 36 38 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"ae58a978-e1ce-42ef-85f6-1c6822c74c0a","E":"2024-03-27T20:20:49.154Z","F":"2024-03-27T20:20:50.168Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:50 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:50 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2155908ea8790-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2155908ea8790 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R4BucuXfszEruAmu7aysuZ%2BRZllIUxsUqFuP3tBAPg8%2FkSTLQrZZfz6Ze7qQyk2EAyVuaRI7JEKpB%2BQv8BbzTD6zV0zKZFw2memCb7agEQgew30plsuaXBLl8rGnfFY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:50 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50143	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:50 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 4364 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:50 UTC	4364	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:20:50 UTC	857	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:50 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b215590a8005ad-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0uEWizM4uD%2FrMy6HTlD21KTGD3J4xXQPr2wt4et%2BYyHXr017uVFztrN5DWuXWvoJIM0430n629jHAHjpPogT0PfI4um0opSofJA14NsGP9WmiNNxI3ngMrJPE%2BRoJu4MuizFMYc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:50 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50054	52.21.33.16	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:50 UTC	721	OUT	GET /6a380606e3ed414fbb&design=DAGAtXAJufM&accessRole=viewer&linkSource=document HTTP/1.1 Host: akkadaindevelopment.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:50 UTC	183	IN	HTTP/1.1 404 Not Found X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:50 GMT Content-Type: text/html; charset=utf-8 Connection: close Transfer-Encoding: chunked
2024-03-27 20:20:50 UTC	1003	IN	Data Raw: 38 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 69 6e 6b 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 Data Ascii: 800<!DOCTYPE html><html><head> <title>Link is not found</title> <link rel="preconnect" href="https://d2te5kruq0pvbl.cloudfront.net"> <meta name="viewport" content="width=device-width, initial-scale=1"/> <link rel="shortcut ic
2024-03-27 20:20:50 UTC	2372	IN	Data Raw: 6c 69 6e 65 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c Data Ascii: line}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:'';content:none}table{border-col
2024-03-27 20:20:50 UTC	538	IN	Data Raw: 31 36 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 30 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 31 36 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 Data Ascii: 161; font-weight: bold; } @media (max-width: 420px) { .content { width: calc(100% - 16px); margin: 8px; } } </style></head><body> <div></div>
2024-03-27 20:20:50 UTC	739	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 64 32 74 65 35 6b 72 75 71 30 70 76 62 6c 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 72 65 64 69 72 65 63 74 6f 0d 0a 32 31 32 0d 0a 72 2f 6c 69 6e 6b 2d 64 6f 65 73 2d 6e 6f 74 2d 65 78 69 73 74 2e 70 6e 67 20 31 78 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: src="https://d2te5kruq0pvbl.cloudfront.net/redirector/link-does-not-exist.png" srcset=" https://d2te5kruq0pvbl.cloudfront.net/redirecto212r/link-does-not-exist.png 1x,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50147	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:50 UTC	2958	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:50 UTC	1175	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 33 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 61 38 35 37 38 32 38 32 2d 30 62 38 38 2d 34 65 36 64 2d 62 64 63 39 2d 31 30 36 35 31 66 35 30 36 66 32 61 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 31 35 37 30 38 34 31 30 35 31 2e 36 2c 22 73 69 74 65 54 6f 6b 65 6e 22 3a 22 65 66 38 38 65 32 62 32 65 32 38 39 34 65 38 35 39 66 61 37 35 35 33 64 63 38 64 30 34 34 31 63 22 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2024.3.0"},"pageloadId":"a8578282-0b88-4e6d-bdc9-10651f506f2a","location":"https://www.canva.com/","landingPath":"/","startTime":1711570841051.6,"siteToken":"ef88e2b2e2894e859fa7553dc8d0441c"
2024-03-27 20:20:51 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:20:51 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b2155a6aa20587-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50150	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:51 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:51 UTC	926	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:51 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2155c6aca879a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2155c6aca879a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OJkHaahioeL8D%2BEWpM8uDLvg9HTrCbwQ2LEmhJzCJxDf7spb34QezEFrYOyyhR%2B3HjyIKWaGHDQrUYLBh%2BFo5Gt9mQP%2B7UQ%2FuWQHDAOMYE4TD9LXcsw8skVAgI8GEzk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:51 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50151	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:51 UTC	2913	OUT	GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1 Host: www.canva.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:51 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:51 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2155dad553b12-IAD CF-Cache-Status: MISS Cache-Control: no-cache, no-store, no-cache Content-Language: en Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Wed, 27 Mar 2024 20:20:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin service-worker-allowed: / X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 86b2155dad553b12 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2GVLmeijbefaJGqDwbz6D3WYJMYEraZ9zLakcfPRlfn3TI9W85S%2BtA%2FrSx4FXHwitAtDMA8%2BF5O%2FyEdkiJpqqcgimh5gX0yP%2FremNjcZkxXEdW%2BHzbhv1kBb9phfFFQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:51 UTC	195	IN	Data Raw: 33 62 61 0d 0a 73 65 6c 66 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 2f 77 65 62 2f 27 3b 0a 73 65 6c 66 5b 27 62 6f 6f 74 73 74 72 61 70 27 5d 20 3d 20 7b 20 70 61 67 65 3a 20 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 66 65 35 65 38 34 64 62 63 32 31 34 34 31 38 38 30 31 30 38 31 61 62 33 37 65 35 38 64 61 35 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e Data Ascii: 3baself['__canva_public_path__'] = 'https:\/\/static.canva.com\/web/';self['bootstrap'] = { page: {"A?":"B","A":{"A?":"C","b":"https:\u002F\u002Fdfe5e84dbc214418801081ab37e58da5@o13855.ingest.
2024-03-27 20:20:51 UTC	766	IN	Data Raw: 73 65 6e 74 72 79 2e 69 6f 5c 75 30 30 32 46 35 35 34 36 36 38 33 22 2c 22 64 22 3a 6e 75 6c 6c 2c 22 68 22 3a 6e 75 6c 6c 2c 22 63 22 3a 30 2e 32 2c 22 65 22 3a 6e 75 6c 6c 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 48 22 3a 22 41 22 2c 22 4b 22 3a 22 4e 22 2c 22 4c 22 3a 22 4e 22 2c 22 47 22 3a 22 4e 22 2c 22 4e 22 3a 6e 75 6c 6c 2c 22 52 22 3a 33 30 30 30 30 2c 22 53 22 3a 30 2e 30 30 31 2c 22 54 22 3a 66 61 6c 73 65 2c 22 55 22 3a 74 72 75 65 2c 22 61 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 74 61 74 69 63 2e 63 Data Ascii: sentry.io\u002F5546683","d":null,"h":null,"c":0.2,"e":null,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":true,"B":100,"C":30,"D":10},"l":[]},"H":"A","K":"N","L":"N","G":"N","N":null,"R":30000,"S":0.001,"T":false,"U":true,"a":"https:\u002F\u002Fstatic.c
2024-03-27 20:20:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50153	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:52 UTC	2948	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558086&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&_et=16&tfd=11108&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:52 UTC	560	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:52 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775974; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:20:52 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 39 32 38 38 35 34 34 31 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:20:52 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 39 32 38 38 35 34 34 31 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:20:52 UTC	505	IN	Data Raw: 31 66 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 1f2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:20:52 UTC	442	IN	Data Raw: 31 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 1b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:20:52 UTC	552	IN	Data Raw: 32 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 35 33 31 33 34 38 31 38 36 26 66 73 74 3d 31 37 31 31 35 37 30 38 35 32 38 39 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 Data Ascii: 221event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1531348186&fst=1711570852898&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&u
2024-03-27 20:20:53 UTC	284	IN	Data Raw: 31 31 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 61 34 59 49 45 36 6f 48 36 31 4f 50 46 25 32 42 66 41 47 76 37 58 4b 59 74 71 65 75 75 68 53 5a 37 32 30 78 78 54 33 39 57 37 45 6d 44 59 69 4b 67 42 77 58 75 73 53 32 39 58 6f 25 32 46 64 6d 61 75 36 63 32 62 36 55 39 49 4a 54 59 4d 75 78 46 77 69 54 67 57 4a 34 49 69 49 6b 70 39 77 41 79 51 47 32 69 63 6a 4b 45 59 44 41 32 57 32 4b 39 6b 67 4a 6f 56 46 59 77 6d 32 52 68 25 32 42 74 4b 6b 42 56 46 76 57 62 63 6c 5a 36 75 45 73 6a 54 34 54 54 68 79 67 66 62 64 6e 48 4f 31 41 6f 42 74 57 6c 4d 76 43 75 4b 5a 51 38 74 4a 31 6b 73 59 43 Data Ascii: 115event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYC
2024-03-27 20:20:53 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50154	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:52 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:52 UTC	1711	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:20:53 UTC	853	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:52 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b215665fe36ff5-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UFlfcNtNB1NL6zlNrGBXMjtA0zThrcaKNGgCloJYqKDzsuHd6VLe85WL8oN9FbdrMPGNbux0LQ3k7im8TwHWAB7dvB3Km%2FXGGvOWh4opp6dDFPF3jUmfbuMfrmEuvVJOoKPTqBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:53 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50156	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1231	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:53 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5006214783609325117"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5006214783609325117","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"5006214783609325117","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"5006214783609325117","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"5006214783609325117","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50155	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1136	OUT	GET /activity;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:53 UTC	991	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50157	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1205	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:53 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50158	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 4829 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:53 UTC	4829	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 33 65 63 37 34 32 61 62 2d 34 35 33 32 2d 34 63 62 65 2d 38 31 62 39 2d 36 63 39 37 64 63 63 30 66 30 38 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 35 30 2e 33 38 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 30 3a 35 33 2e 31 36 31 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"3ec742ab-4532-4cbe-81b9-6c97dcc0f08f","E":"2024-03-27T20:20:50.386Z","F":"2024-03-27T20:20:53.161Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:20:53 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:53 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2156c19e11729-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2156c19e11729 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MDitfRbf04ysA1DuNVjfJF8sj13joBSq4twAktNIAwiaC3N%2FBLu%2FGS1qoy27TBUFjZuGBuizDzLwcJKhhtPU6ST38yfEtUYxlhcU5PzAXVGbFOC0YbDYnTOiIeLf6F8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:53 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:20:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50160	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1217	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:54 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50159	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1128	OUT	GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:54 UTC	983	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50163	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	925	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:54 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5006214783609325117"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5006214783609325117","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"5006214783609325117","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"5006214783609325117","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"5006214783609325117","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50162	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	2708	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570845420&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570845420&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157157558086&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&_et=16&tfd=11108&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:54 UTC	468	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:53 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775973; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:20:54 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 30 38 34 33 36 34 39 31 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1084364917;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:20:54 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 30 38 34 33 36 34 39 31 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1084364917;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:20:54 UTC	505	IN	Data Raw: 31 66 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 1f2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:20:54 UTC	442	IN	Data Raw: 31 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 1b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:20:54 UTC	551	IN	Data Raw: 32 32 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 31 36 33 33 36 35 39 39 26 66 73 74 3d 31 37 31 31 35 37 30 38 35 33 39 37 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 72 Data Ascii: 220event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=116336599&fst=1711570853975&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&ur
2024-03-27 20:20:54 UTC	294	IN	Data Raw: 31 31 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 49 36 78 6b 48 35 30 54 62 25 32 42 30 52 54 43 79 47 25 32 46 77 39 6a 64 50 7a 53 77 31 34 51 52 46 66 37 46 71 33 79 67 39 72 58 61 25 32 42 67 6a 62 41 65 44 4d 53 61 50 4e 44 25 32 46 38 54 55 59 62 64 70 47 33 63 4b 59 77 6b 66 51 5a 36 7a 6c 61 38 69 25 32 42 46 79 4b 77 57 39 67 53 75 36 64 57 46 58 4d 62 73 5a 36 75 4e 76 4f 46 54 33 64 78 33 65 6b 74 56 6c 41 75 69 70 4e 41 68 41 25 32 46 74 74 6c 38 32 36 48 7a 66 5a 70 4c 62 4a 43 68 67 6d 46 38 43 42 67 6f 45 38 73 64 57 49 77 69 43 69 5a 25 32 46 62 63 34 57 38 25 32 46 Data Ascii: 11fevent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=I6xkH50Tb%2B0RTCyG%2Fw9jdPzSw14QRFf7Fq3yg9rXa%2BgjbAeDMSaPND%2F8TUYbdpG3cKYwkfQZ6zla8i%2BFyKwW9gSu6dWFXMbsZ6uNvOFT3dx3ektVlAuipNAhA%2Fttl826HzfZpLbJChgmF8CBgoE8sdWIwiCiZ%2Fbc4W8%2F
2024-03-27 20:20:54 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50164	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	917	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:54 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:20:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50161	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	1238	OUT	GET /pagead/viewthroughconversion/804757079/?random=1531348186&fst=1711570852898&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:20:54 UTC	970	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/804757079/?random=1531348186&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqtmnsQxryheyAOPfUiZ1GtbXKWkzzIQ5ag9fei3uoV6A41N8N&random=3542408461 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50166	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:53 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:54 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50165	172.253.62.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:53 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:20:53 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:20:54 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:20:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50167	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:54 UTC	930	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:20:54 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2156f8d173908-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2156f8d173908 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aRl0NbqRIoUbXdSmr0ai%2FOTHBfOKUw7O4izLxSNoINms9%2BiZECMiz6t0Z4fy%2BxIOPvYl%2Fz9liJi%2FoXq5uZZxck5ocgkbEJ%2B4Hyvkg7beW9MLae%2BBVCuJdFYeCSKayzs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:20:54 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:20:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50168	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	2164	OUT	GET /_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:54 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:54 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:20:54 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50169	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	1209	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:54 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50170	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	984	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1928854413;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:54 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50171	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	1210	OUT	GET /pagead/1p-user-list/804757079/?random=1531348186&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqtmnsQxryheyAOPfUiZ1GtbXKWkzzIQ5ag9fei3uoV6A41N8N&random=3542408461 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:54 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50172	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:54 UTC	1932	OUT	GET /_set_cookie?val=a4YIE6oH61OPF%2BfAGv7XKYtqeuuhSZ720xxT39W7EmDYiKgBwXusS29Xo%2Fdmau6c2b6U9IJTYMuxFwiTgWJ4IiIkp9wAyQG2icjKEYDA2W2K9kgJoVFYwm2Rh%2BtKkBVFvWbclZ6uEsjT4TThygfbdnHO1AoBtWlMvCuKZQ8tJ1ksYCvGKBVoNDJv4oAGXQ%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:20:54 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:20:54 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:20:54 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50173	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:55 UTC	977	OUT	GET /pagead/1p-user-list/804757079/?random=1531348186&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqtmnsQxryheyAOPfUiZ1GtbXKWkzzIQ5ag9fei3uoV6A41N8N&random=3542408461 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50174	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:20:55 UTC	976	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:20:55 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:20:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:20:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50176	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:00 UTC	2989	OUT	GET / HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:01 UTC	1292	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:01 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21599cdd587a2-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-Nsodm++4NqxWxO3CPwOMqQ'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=86b21599cdd587a2&app=anon_home&policyHash=044fbf40 Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: deny X-Request-ID: 86b21599cdd587a2 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2B8VeiKvmBjk5QQlod%2FDsczlLavyxlRI2ecpFrejlHt9Akh0tYCSOb3nPxd9sA%2FsbfRMhXLa81Wxt4n0rYYXmL%2BQLAHQDd8%2BGqcrebttAEFuN6CiuVIIIuypoFiX%2FQ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:01 UTC	77	IN	Data Raw: 37 61 39 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 Data Ascii: 7a98<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><h
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 43 61 6e 76 61 3a 20 56 69 73 75 61 6c 20 53 75 69 74 65 20 66 6f 72 20 45 76 65 72 79 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 6e 6f 6e 5f 68 6f 6d 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 34 35 65 63 33 37 36 62 65 64 39 61 31 39 66 63 2e 6c 74 72 2e 63 73 73 22 20 72 65 6c Data Ascii: ead><meta charset="utf-8"><title>Canva: Visual Suite for Everyone</title><meta name="app-name" content="anon_home" /><meta name="viewport" content="width=device-width, initial-scale=1"><link href="https://static.canva.com/web/45ec376bed9a19fc.ltr.css" rel
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 20 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 69 6d 61 67 65 73 2f 63 66 66 31 34 39 65 65 31 65 Data Ascii: b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:normal;font-weight:400 700;src:url(https://static.canva.com/web/images/cff149ee1e
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 69 6f 6e 61 6c 54 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 47 72 61 70 68 69 63 73 5f 73 6f 66 74 77 61 72 65 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6e 76 61 22 2c 22 6c 65 67 61 6c 4e 61 6d 65 22 3a 22 43 61 6e 76 61 20 50 74 79 20 4c 74 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 6e 6f 6e 5f 68 6f 6d 65 2f 63 61 6e 76 61 2d 6c 6f 67 6f 2e 70 6e 67 22 2c 22 63 6f 6e 74 61 63 74 50 6f 69 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 43 6f 6e 74 61 63 74 50 6f 69 6e 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e Data Ascii: ionalType":"https://en.wikipedia.org/wiki/Graphics_software","name":"Canva","legalName":"Canva Pty Ltd","url":"https://www.canva.com","logo":"https://static.canva.com/anon_home/canva-logo.png","contactPoint":[{"@type":"ContactPoint","url":"https://www.can
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 66 5f 7a 61 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 66 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 72 5f 65 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 73 5f 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 73 22 3e 3c 6c 69 6e 6b 20 Data Ascii: l" href="https://www.canva.com/"><link rel="alternate" href="https://www.canva.com/af_za/" hreflang="af"><link rel="alternate" href="https://www.canva.com/ar_eg/" hreflang="ar"><link rel="alternate" href="https://www.canva.com/as_in/" hreflang="as"><link
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 63 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 43 4f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 65 73 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 6d 78 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 75 73 2f 22 20 68 72 65 66 6c 61 Data Ascii: ps://www.canva.com/es_co/" hreflang="es-CO"><link rel="alternate" href="https://www.canva.com/es_es/" hreflang="es"><link rel="alternate" href="https://www.canva.com/es_mx/" hreflang="es-MX"><link rel="alternate" href="https://www.canva.com/es_us/" hrefla
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 79 5f 61 6d 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 64 5f 69 64 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 64 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 67 5f 6e 67 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 69 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 74 5f 69 74 2f Data Ascii: ate" href="https://www.canva.com/hy_am/" hreflang="hy"><link rel="alternate" href="https://www.canva.com/id_id/" hreflang="id"><link rel="alternate" href="https://www.canva.com/ig_ng/" hreflang="ig"><link rel="alternate" href="https://www.canva.com/it_it/
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 72 5f 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 73 5f 6d 79 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 79 5f 6d 6d 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6e 62 5f 6e 6f 2f 22 Data Ascii: te" href="https://www.canva.com/mr_in/" hreflang="mr"><link rel="alternate" href="https://www.canva.com/ms_my/" hreflang="ms"><link rel="alternate" href="https://www.canva.com/my_mm/" hreflang="my"><link rel="alternate" href="https://www.canva.com/nb_no/"
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6e 5f 7a 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 6f 5f 73 6f 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 71 5f 61 6c 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 71 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: "alternate" href="https://www.canva.com/sn_zw/" hreflang="sn"><link rel="alternate" href="https://www.canva.com/so_so/" hreflang="so"><link rel="alternate" href="https://www.canva.com/sq_al/" hreflang="sq"><link rel="alternate" href="https://www.canva.com
2024-03-27 20:21:01 UTC	1369	IN	Data Raw: 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 68 6b 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 48 4b 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 68 5f 74 77 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 68 2d 54 57 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 7a 75 5f 7a 61 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 7a 75 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 Data Ascii: alternate" href="https://www.canva.com/zh_hk/" hreflang="zh-HK"><link rel="alternate" href="https://www.canva.com/zh_tw/" hreflang="zh-TW"><link rel="alternate" href="https://www.canva.com/zu_za/" hreflang="zu"><link rel="alternate" href="https://www.canv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50181	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:01 UTC	740	OUT	POST /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:01 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 31 2e 32 34 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 66 63 35 36 65 66 32 32 39 34 36 38 34 39 36 38 38 33 35 33 64 61 64 32 36 32 38 31 62 32 65 39 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 31 2e 32 34 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 31 2e 32 34 37 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:21:01.247Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"fc56ef22946849688353dad26281b2e9","init":true,"started":"2024-03-27T20:21:01.247Z","timestamp":"2024-03-27T20:21:01.247Z","stat
2024-03-27 20:21:02 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:21:02 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50177	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	3136	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: anon_home sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: searchdesignspecsapi sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572645497%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570845497%7D; gtm_custom_user_engagement={"lock":"yes","page":2,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570845853,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570846.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:02 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:02 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215a15f794b8a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215a15f794b8a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jMCGudYQakCXK%2Fxom38A41dZ46NtidkjBSs6Wl%2BNghAuNTamCfVRljYy5DpxYU4gh7m9JORRH9XBcjcJgzt%2Bjz%2F5tONmRSwedExIjB6NTBOKen8oGT%2BKsQH56GCeDh4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:02 UTC	464	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:21:02 UTC	1369	IN	Data Raw: 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 Data Ascii: mensionsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categ
2024-03-27 20:21:02 UTC	1369	IN	Data Raw: 72 79 22 3a 22 74 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 Data Ascii: ry":"tACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconU
2024-03-27 20:21:02 UTC	1369	IN	Data Raw: 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 Data Ascii: sionsLabel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UU
2024-03-27 20:21:02 UTC	1187	IN	Data Raw: 61 6d 65 22 3a 22 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f Data Ascii: ame":"Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensio
2024-03-27 20:21:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50185	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	724	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
2024-03-27 20:21:02 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:02 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:21:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:21:02 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:02 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50184	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	665	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570862163&gtmcb=917437882 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:02 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:21:02 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: d2ea6fd6-dfc3-4d28-8df5-786378b0a271 Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:21:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50188	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	889	OUT	GET /rp.gif?ts=1711570862268&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:02 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:02 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50186	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	3009	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932844&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=1914&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780
2024-03-27 20:21:03 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:02 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:03 UTC	571	IN	Data Raw: 32 33 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 35 31 36 33 32 34 34 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 Data Ascii: 234event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gu
2024-03-27 20:21:03 UTC	508	IN	Data Raw: 31 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 35 31 36 33 32 34 34 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 Data Ascii: 1f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;np
2024-03-27 20:21:03 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50187	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	2971	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932876&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&tfd=1915&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780
2024-03-27 20:21:03 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:03 UTC	943	IN	Data Raw: 34 34 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 39 36 33 35 37 38 36 37 36 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 33 31 33 39 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 44fevent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1963578676&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848
2024-03-27 20:21:03 UTC	167	IN	Data Raw: 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 26 75 61 6d 62 3d 30 26 75 61 6d 3d 26 75 61 70 3d 57 69 6e 64 6f 77 73 26 75 61 70 76 3d 31 30 2e 30 2e 30 26 75 61 77 3d 30 26 70 73 63 64 6c 3d 6e 6f 61 70 69 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1"],"options":{"attribution_reporting":true}}
2024-03-27 20:21:03 UTC	570	IN	Data Raw: 32 33 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 34 33 33 30 35 38 32 31 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 Data Ascii: 233event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gue
2024-03-27 20:21:03 UTC	507	IN	Data Raw: 31 66 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 34 33 33 30 35 38 32 31 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 Data Ascii: 1f4event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa
2024-03-27 20:21:03 UTC	571	IN	Data Raw: 32 33 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 33 38 35 39 38 37 33 30 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 Data Ascii: 234event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gu
2024-03-27 20:21:03 UTC	508	IN	Data Raw: 31 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 33 38 35 39 38 37 33 30 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 Data Ascii: 1f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;np
2024-03-27 20:21:03 UTC	286	IN	Data Raw: 31 31 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 38 70 72 7a 72 35 7a 36 66 62 63 35 35 37 67 64 38 72 55 46 50 74 39 67 59 4e 74 42 5a 47 32 43 78 66 51 7a 71 31 42 37 31 32 64 73 4f 7a 70 6c 52 4b 6c 52 59 5a 4a 6e 6e 54 54 44 6e 4a 4d 62 4e 6a 55 45 74 6e 30 63 43 69 66 6b 57 66 79 25 32 46 61 61 62 46 62 51 32 4c 57 6f 6a 4c 45 4d 55 56 37 56 25 32 42 6e 54 36 55 6e 49 47 65 37 31 6c 5a 52 63 46 61 25 32 46 30 76 32 46 67 61 51 68 71 79 57 68 64 32 4d 37 79 78 6c 6b 4d 32 78 30 47 76 31 47 32 72 39 43 49 4b 65 41 33 7a 69 64 46 45 74 53 25 32 46 37 45 5a 57 41 58 38 49 61 77 55 Data Ascii: 117event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawU
2024-03-27 20:21:03 UTC	298	IN	Data Raw: 31 32 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 68 6c 38 65 70 75 31 73 25 32 46 53 46 6e 32 6b 49 78 59 51 25 32 42 4d 4c 73 73 33 5a 4e 33 5a 63 33 71 54 25 32 46 63 36 4d 65 38 66 75 76 75 71 4f 50 65 65 6f 78 6e 43 61 50 66 72 63 68 57 7a 39 49 67 71 53 41 48 55 68 42 50 6e 25 32 42 38 30 41 7a 46 72 54 41 6d 32 6a 42 31 43 65 30 55 54 44 53 41 4a 73 49 25 32 42 4f 4a 62 56 25 32 42 72 71 30 74 71 44 48 66 66 4b 53 59 69 47 6f 34 55 77 44 59 4f 71 7a 48 36 4e 77 6c 4b 78 4a 25 32 46 33 56 65 75 25 32 46 4e 55 4a 62 6a 62 52 38 68 79 4a 32 47 4a 35 73 72 6a 25 32 46 55 25 32 46 Data Ascii: 123event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=hl8epu1s%2FSFn2kIxYQ%2BMLss3ZN3Zc3qT%2Fc6Me8fuvuqOPeeoxnCaPfrchWz9IgqSAHUhBPn%2B80AzFrTAm2jB1Ce0UTDSAJsI%2BOJbV%2Brq0tqDHffKSYiGo4UwDYOqzH6NwlKxJ%2F3Veu%2FNUJbjbR8hyJ2GJ5srj%2FU%2F
2024-03-27 20:21:03 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50189	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	884	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50190	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	999	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:03 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50193	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	887	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50192	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	997	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:03 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50194	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	884	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50196	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	2696	OUT	GET /_ajax/designspec/spec/search?query=&limit=15 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570862181,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:03 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215a5ff413b1d-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215a5ff413b1d X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CO9w3yJ%2BkHpD3I1vXb4O7WKaVt2BsaCBOSVpLgd2aji7BKc5lRLOeDX2C5IWuegmWTnOtTzyeaGP3ON0OlYnMS5gFjvMmKqf7ijgKfK%2FldoskcQSPMsCCg8rFwLQ4II%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:03 UTC	470	IN	Data Raw: 31 36 37 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 47 53 7a 4a 6d 63 46 52 43 56 6c 45 36 4d 31 56 42 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 44 6f 63 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 41 75 74 6f 20 73 69 7a 65 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 64 6f 63 73 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 4a 69 35 46 58 4d 53 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a Data Ascii: 1676'"])}while(1);</x>//{"results":[{"token":"djE6dEFGSzJmcFRCVlE6M1VB","displayName":"Doc","pluralName":"Doc","dimensionsLabel":"Auto size","iconUrl":"https://category-public.canva.com/icons/icon-docs.svg","doctype":"TAFJi5FXMSs","dimensions":{"width":
2024-03-27 20:21:03 UTC	1369	IN	Data Raw: 6e 73 4c 61 62 65 6c 22 3a 22 55 6e 6c 69 6d 69 74 65 64 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 77 68 69 74 65 62 6f 61 72 64 2d 69 6e 6c 69 6e 65 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 45 77 4a 48 36 54 74 41 38 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 2d 31 2e 30 2c 22 68 65 69 67 68 74 22 3a 2d 31 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 45 76 38 48 68 35 6f 6e 30 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 57 68 69 74 65 62 6f 61 72 64 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 Data Ascii: nsLabel":"Unlimited","iconUrl":"https://category-public.canva.com/icons/icon-whiteboard-inline.svg","doctype":"TAEwJH6TtA8","dimensions":{"width":-1.0,"height":-1.0,"units":"PIXELS"},"category":"tAEv8Hh5on0","categoryDisplayName":"Whiteboard","categoryPlu
2024-03-27 20:21:03 UTC	1369	IN	Data Raw: 41 43 46 61 75 52 42 34 66 55 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 20 43 6f 76 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 71 52 56 6c 56 51 55 30 36 55 55 4a 53 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 20 28 53 71 75 61 72 65 29 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 73 74 61 67 72 61 6d 20 50 6f 73 74 73 20 28 53 71 75 61 72 65 29 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 31 30 38 30 20 c3 97 20 31 30 38 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 Data Ascii: ACFauRB4fU","categoryDisplayName":"Facebook Cover","categoryPluralName":"Facebook Covers"},{"token":"djE6dEFDRmFqRVlVQU06UUJS","displayName":"Instagram Post (Square)","pluralName":"Instagram Posts (Square)","dimensionsLabel":"1080 1080 px","iconUrl":"h
2024-03-27 20:21:03 UTC	1369	IN	Data Raw: 61 62 65 6c 22 3a 22 37 39 34 20 c3 97 20 31 31 32 33 20 70 78 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 46 59 4b 34 48 48 41 69 77 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 37 39 34 2e 30 2c 22 68 65 69 67 68 74 22 3a 31 31 32 33 2e 30 2c 22 75 6e 69 74 73 22 3a 22 50 49 58 45 4c 53 22 7d 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 41 43 5a 43 76 75 63 47 4e 67 22 2c 22 63 61 74 65 67 6f 72 79 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 22 2c 22 63 61 74 65 67 6f 72 79 50 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 45 6d 61 69 6c 20 4e 65 77 73 6c 65 74 74 65 72 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 57 6b 4e 30 54 46 52 44 58 30 45 36 55 55 4e 50 22 2c 22 64 Data Ascii: abel":"794 1123 px","doctype":"TAFYK4HHAiw","dimensions":{"width":794.0,"height":1123.0,"units":"PIXELS"},"category":"tACZCvucGNg","categoryDisplayName":"Email Newsletter","categoryPluralName":"Email Newsletters"},{"token":"djE6dEFDWkN0TFRDX0E6UUNP","d
2024-03-27 20:21:03 UTC	1181	IN	Data Raw: 59 6f 75 72 20 53 74 6f 72 69 65 73 22 7d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 64 6a 45 36 64 45 46 44 52 6d 46 6f 65 6b 35 6f 56 44 51 36 55 55 46 59 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 22 2c 22 70 6c 75 72 61 6c 4e 61 6d 65 22 3a 22 49 6e 66 6f 67 72 61 70 68 69 63 73 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 4c 61 62 65 6c 22 3a 22 38 30 30 20 c3 97 20 32 30 30 30 20 70 78 22 2c 22 69 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 74 65 67 6f 72 79 2d 70 75 62 6c 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 69 63 6f 6e 73 2f 69 63 6f 6e 2d 63 68 61 72 74 2d 63 6f 6c 75 6d 6e 2e 73 76 67 22 2c 22 64 6f 63 74 79 70 65 22 3a 22 54 41 42 51 71 74 4f 37 74 59 51 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 Data Ascii: Your Stories"},{"token":"djE6dEFDRmFoek5oVDQ6UUFY","displayName":"Infographic","pluralName":"Infographics","dimensionsLabel":"800 2000 px","iconUrl":"https://category-public.canva.com/icons/icon-chart-column.svg","doctype":"TABQqtO7tYQ","dimensions":{"
2024-03-27 20:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50191	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	999	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:03 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50198	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 4794 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570862181,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:02 UTC	4794	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 36 62 64 39 35 35 64 2d 32 66 64 35 2d 34 65 63 39 2d 62 31 64 62 2d 39 30 61 30 32 34 62 32 39 37 62 64 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 31 2e 39 33 39 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 32 2e 33 39 30 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"46bd955d-2fd5-4ec9-b1db-90a024b297bd","E":"2024-03-27T20:21:01.939Z","F":"2024-03-27T20:21:02.390Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:21:03 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215a57e696fb6-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215a57e696fb6 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PTWpPN7V0KLrWO6D4XqA3CILtwVPqzWLU6j22NWNbPZjATYXACtslLM6AZCpYo3B6xHcFSjKz9U%2FFdHWGPvs3SUiAQiek8w3ZfSIa62FsDkxVbv%2BlNCWGG74M1nzQmY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:03 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50195	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:02 UTC	478	OUT	GET /api/5862012/envelope/?sentry_key=3e6b0deb414549c8901b5382885e478b&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:03 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50200	35.186.225.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	491	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1711570825253; TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb
2024-03-27 20:21:03 UTC	1034	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1711570825253;Expires=Sun, 26 May 2024 20:21:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=213cbde3-f91c-4db2-9541-c66e28a807fb;Expires=Sun, 26 May 2024 20:21:03 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:03 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50202	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	656	OUT	GET /rp.gif?ts=1711570862268&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:03 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:03 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50204	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	651	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50205	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	654	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50203	18.190.43.29	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	432	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570862163&gtmcb=917437882 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:03 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:21:03 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 81b8e6ef-f594-474c-9c6c-6feb687d6769 Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:21:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50206	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	651	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50207	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	688	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862289&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932860&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50209	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1294	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8095806831384697025"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8095806831384697025","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8095806831384697025","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8095806831384697025","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8095806831384697025","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50210	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	691	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862294&sw=1280&sh=1024&v=2.9.151&r=stable&ec=1&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50208	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1194	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	1049	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50212	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570862181,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:03 UTC	938	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215a8cd9c2d0b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215a8cd9c2d0b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lIy0VKdLRTsj%2ByUNw5RuTZM%2FCKdQ00bKQ%2FxPupP%2FRxyZA%2FwXYT%2B%2FGBM%2Bmhog%2BkZ7YyrJ%2FFok%2BAR1JQ2SUdTfl5uDby0ruBg68llAjtQy4IMrlkcoXNVR5FNmwhyjFdg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:03 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50211	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2733	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932844&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&up.custom_country_code=US&tfd=1914&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:03 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:03 UTC	569	IN	Data Raw: 32 33 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 39 38 34 37 34 30 36 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 Data Ascii: 232event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=298474064;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gues
2024-03-27 20:21:03 UTC	506	IN	Data Raw: 31 66 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 39 38 34 37 34 30 36 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d Data Ascii: 1f3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=298474064;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=
2024-03-27 20:21:03 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50213	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	688	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570862295&sw=1280&sh=1024&v=2.9.151&r=stable&ec=2&o=4125&fbp=fb.1.1711570826308.1623701546&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_171157127932876&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:03 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:03 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50215	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1270	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"15162770723782492559"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"15162770723782492559","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"15162770723782492559","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"15162770723782492559","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"15162770723782492559","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50216	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1193	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	1048	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50218	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1271	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	2218	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14975553544166979200"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14975553544166979200","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14975553544166979200","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14975553544166979200","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14975553544166979200","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50217	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1194	OUT	GET /activity;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:03 UTC	1049	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50219	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2166	OUT	GET /_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawUj2PeoZcv4DduF0hLAw%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:03 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:03 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50221	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2708	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=homepage_visit&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932876&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&tfd=1915&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:04 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:04 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:04 UTC	1035	IN	Data Raw: 34 34 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 37 31 32 36 36 30 30 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 34 37 33 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 Data Ascii: 44devent: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=17126600&fst=1711570864736&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z984834
2024-03-27 20:21:04 UTC	73	IN	Data Raw: 30 26 75 61 77 3d 30 26 70 73 63 64 6c 3d 6e 6f 61 70 69 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 0&uaw=0&pscdl=noapi&s3p=1"],"options":{"attribution_reporting":true}}
2024-03-27 20:21:04 UTC	569	IN	Data Raw: 32 33 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 33 31 35 30 34 38 30 34 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 Data Ascii: 232event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=315048040;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gues
2024-03-27 20:21:04 UTC	506	IN	Data Raw: 31 66 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 33 31 35 30 34 38 30 34 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 61 3d Data Ascii: 1f3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=315048040;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=
2024-03-27 20:21:04 UTC	571	IN	Data Raw: 32 33 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 32 35 35 31 36 34 38 35 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 Data Ascii: 234event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1255164850;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=gu
2024-03-27 20:21:04 UTC	508	IN	Data Raw: 31 66 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 32 35 35 31 36 34 38 35 30 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 61 6c 73 65 3b 64 6d 61 3d 30 3b 6e 70 Data Ascii: 1f5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1255164850;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;np
2024-03-27 20:21:05 UTC	296	IN	Data Raw: 31 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 4d 41 66 74 48 74 54 59 41 4a 36 62 53 55 39 74 25 32 42 78 56 69 4d 31 42 4a 4e 65 51 4b 68 46 41 6a 59 4e 36 35 25 32 42 37 6e 76 39 68 25 32 46 25 32 46 72 32 32 30 32 61 73 56 5a 5a 77 52 54 51 59 79 7a 61 4e 67 58 50 76 6a 71 7a 39 43 5a 56 37 33 52 6a 35 53 50 63 68 36 25 32 42 7a 36 76 53 33 70 6a 67 6e 36 6a 44 6e 30 45 4a 79 52 73 53 41 54 42 36 5a 57 53 31 25 32 46 48 53 6c 73 25 32 42 30 74 71 52 71 4d 4a 4b 4f 78 67 56 33 6b 4a 70 74 4a 64 53 67 48 51 54 33 47 50 6f 44 64 71 75 76 54 6e 68 65 30 43 5a 4e 25 32 46 50 71 34 Data Ascii: 121event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=MAftHtTYAJ6bSU9t%2BxViM1BJNeQKhFAjYN65%2B7nv9h%2F%2Fr2202asVZZwRTQYyzaNgXPvjqz9CZV73Rj5SPch6%2Bz6vS3pjgn6jDn0EJyRsSATB6ZWS1%2FHSls%2B0tqRqMJKOxgV3kJptJdSgHQT3GPoDdquvTnhe0CZN%2FPq4
2024-03-27 20:21:05 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 62 6b 6a 56 4c 69 4d 54 47 73 42 54 31 55 39 33 4a 51 44 70 57 35 25 32 46 61 4f 41 65 4f 48 38 31 63 47 48 4a 70 6b 73 6f 4a 59 25 32 42 56 33 62 4d 34 69 25 32 42 45 39 59 57 56 36 51 65 54 7a 38 63 46 46 7a 54 44 66 4a 6b 52 38 72 73 59 38 38 46 41 42 51 47 70 49 75 66 54 63 75 54 32 4c 48 4f 78 6a 49 4a 7a 50 66 79 48 4d 45 53 52 51 6c 4f 4a 48 71 31 7a 63 4a 6f 45 31 4c 36 53 33 37 38 44 25 32 42 68 50 38 69 76 76 69 30 76 62 72 75 68 52 59 57 74 78 33 47 62 70 25 32 42 45 79 32 67 69 4d 4c 75 36 50 59 57 74 25 32 46 53 77 71 67 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=bkjVLiMTGsBT1U93JQDpW5%2FaOAeOH81cGHJpksoJY%2BV3bM4i%2BE9YWV6QeTz8cFFzTDfJkR8rsY88FABQGpIufTcuT2LHOxjIJzPfyHMESRQlOJHq1zcJoE1L6S378D%2BhP8ivvi0vbruhRYWtx3Gbp%2BEy2giMLu6PYWt%2FSwqg
2024-03-27 20:21:05 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50220	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2178	OUT	GET /_set_cookie?val=hl8epu1s%2FSFn2kIxYQ%2BMLss3ZN3Zc3qT%2Fc6Me8fuvuqOPeeoxnCaPfrchWz9IgqSAHUhBPn%2B80AzFrTAm2jB1Ce0UTDSAJsI%2BOJbV%2Brq0tqDHffKSYiGo4UwDYOqzH6NwlKxJ%2F3Veu%2FNUJbjbR8hyJ2GJ5srj%2FU%2FpKVjtOiRb1FFuIFAE6Tdu7Z4NZrDEQ%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:04 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:03 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:04 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50222	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	983	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:04 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8095806831384697025"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"8095806831384697025","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"8095806831384697025","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"8095806831384697025","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"8095806831384697025","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50223	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	1275	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50225	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:03 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:04 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50226	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	983	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:04 UTC	2218	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14975553544166979200"}],"aggregatable_trigger_data":[{"filters":{"14":["16304094"]},"key_piece":"0x6f943bd1c3068a22","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9207d5afa49027fe","not_filters":{"14":["16304094"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16304094"]},"key_piece":"0x3236fe90d6f43609","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xa617f2728a3181","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14975553544166979200","filters":{"14":["16304094"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14975553544166979200","filters":{"14":["16304094"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14975553544166979200","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14975553544166979200","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50224	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	2153	OUT	GET /pagead/viewthroughconversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_2BATBoFnuRXhMD8dcDv547foOSCwLEXrA&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:04 UTC	2003	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqroynL8k7_OgKgfYwD75bHb5O0mhhOWM4Cyf8403CJAZF208d&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3Dw5dlkwTrR6Aa4u7n1Py2EkzHWHiAFl8&random=69166483 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50227	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:03 UTC	982	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:04 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"15162770723782492559"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"15162770723782492559","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"15162770723782492559","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"15162770723782492559","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"15162770723782492559","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50228	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:04 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50229	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1274	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50230	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1275	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50231	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:04 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50232	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1934	OUT	GET /_set_cookie?val=8przr5z6fbc557gd8rUFPt9gYNtBZG2CxfQzq1B712dsOzplRKlRYZJnnTTDnJMbNjUEtn0cCifkWfy%2FaabFbQ2LWojLEMUV7V%2BnT6UnIGe71lZRcFa%2F0v2FgaQhqyWhd2M7yxlkM2x0Gv1G2r9CIKeA3zidFEtS%2F7EZWAX8IawUj2PeoZcv4DduF0hLAw%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31
2024-03-27 20:21:04 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:04 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:04 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50233	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1042	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=251632440;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50234	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	2321	OUT	GET /pagead/1p-conversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqroynL8k7_OgKgfYwD75bHb5O0mhhOWM4Cyf8403CJAZF208d&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3Dw5dlkwTrR6Aa4u7n1Py2EkzHWHiAFl8&random=69166483 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50235	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1041	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1433058210;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50236	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	1042	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1385987301;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:04 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50237	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	546	OUT	OPTIONS /report/v4?s=lIy0VKdLRTsj%2ByUNw5RuTZM%2FCKdQ00bKQ%2FxPupP%2FRxyZA%2FwXYT%2B%2FGBM%2Bmhog%2BkZ7YyrJ%2FFok%2BAR1JQ2SUdTfl5uDby0ruBg68llAjtQy4IMrlkcoXNVR5FNmwhyjFdg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 27 Mar 2024 20:21:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50240	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:04 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50239	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	403	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://www.redditstatic.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	650	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://www.redditstatic.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:04 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50238	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	528	OUT	OPTIONS /report/v4?s=PTWpPN7V0KLrWO6D4XqA3CILtwVPqzWLU6j22NWNbPZjATYXACtslLM6AZCpYo3B6xHcFSjKz9U%2FFdHWGPvs3SUiAQiek8w3ZfSIa62FsDkxVbv%2BlNCWGG74M1nzQmY%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 27 Mar 2024 20:21:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50241	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	2010	OUT	GET /pagead/1p-conversion/804757079/?random=620513420&fst=1711570863139&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_171157127932876%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2&auid=1649447272.1711570827&rdp=1&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COG1n-jt94e5oAEiEwi9otSqopWFAxWEHNAEHZkWDqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqroynL8k7_OgKgfYwD75bHb5O0mhhOWM4Cyf8403CJAZF208d&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3Dw5dlkwTrR6Aa4u7n1Py2EkzHWHiAFl8&random=69166483 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:05 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50242	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	2959	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 27931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570862.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}
2024-03-27 20:21:04 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 31 36 33 33 38 31 30 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 37 38 33 30 37 32 36 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 34 35 65 63 33 37 36 62 65 64 39 61 31 39 66 63 2e 6c 74 72 2e 63 73 73 22 2c 22 73 22 3a 35 37 31 2e 39 2c 22 64 22 3a 34 2e 38 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 35 37 31 2e 39 2c 22 64 73 22 3a 35 37 31 2e 39 2c 22 64 65 22 3a 35 37 31 2e 39 2c 22 63 73 22 Data Ascii: {"memory":{"totalJSHeapSize":41633810,"usedJSHeapSize":27830726,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.canva.com/web/45ec376bed9a19fc.ltr.css","s":571.9,"d":4.8,"i":"link","p":"","rs":0,"re":0,"fs":571.9,"ds":571.9,"de":571.9,"cs"
2024-03-27 20:21:04 UTC	11547	OUT	Data Raw: 32 43 31 32 39 25 32 43 32 37 25 32 43 31 30 25 32 43 31 31 25 32 43 31 32 25 32 43 35 25 32 43 36 25 32 43 32 34 25 32 43 32 31 25 32 43 32 32 25 32 43 35 33 25 32 43 35 38 25 32 43 36 30 25 32 43 37 30 25 32 43 39 34 25 32 43 32 36 25 32 43 37 31 25 32 43 38 25 32 43 37 25 32 43 37 35 25 32 43 34 35 25 32 43 32 30 25 32 43 39 36 25 32 43 39 35 25 32 43 39 25 32 43 31 39 25 32 43 31 38 25 32 43 37 37 25 32 43 38 32 25 32 43 34 34 25 32 43 34 33 25 32 43 38 31 25 32 43 33 37 25 32 43 33 39 25 32 43 38 30 25 32 43 35 32 25 32 43 37 38 25 32 43 33 31 25 32 43 34 31 25 32 43 33 34 25 32 43 36 39 25 32 43 30 25 32 43 38 38 25 32 43 34 25 32 43 38 34 25 32 43 37 36 25 32 43 37 39 25 32 43 32 25 32 43 33 33 25 32 43 35 39 25 32 43 33 38 25 32 43 39 37 25 32 43 Data Ascii: 2C129%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C53%2C58%2C60%2C70%2C94%2C26%2C71%2C8%2C7%2C75%2C45%2C20%2C96%2C95%2C9%2C19%2C18%2C77%2C82%2C44%2C43%2C81%2C37%2C39%2C80%2C52%2C78%2C31%2C41%2C34%2C69%2C0%2C88%2C4%2C84%2C76%2C79%2C2%2C33%2C59%2C38%2C97%2C
2024-03-27 20:21:05 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:05 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215b1de2f2057-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50247	108.139.47.50	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	832	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=645617859 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:05 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:05 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 500a5a4e72d986068e53ce22c8372bde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: nPDZ7yToPYVBFhEVOxP-JP76qtLYOqC8FMWEH1-uUJWD0tqcjEE-QQ==
2024-03-27 20:21:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50245	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	622	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=446255025 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:05 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50249	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:04 UTC	935	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:05 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50246	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	740	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:05 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:05 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50250	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	887	OUT	GET /rp.gif?ts=1711570864360&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:05 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50248	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1045	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:05 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:05 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:05 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:05 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50243	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	2958	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932894&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&tfd=4059&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780
2024-03-27 20:21:05 UTC	560	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:05 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775962; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:05 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 38 32 35 32 32 30 37 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:21:05 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 38 32 35 32 32 30 37 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:21:05 UTC	507	IN	Data Raw: 31 66 34 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 Data Ascii: 1f4event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome
2024-03-27 20:21:05 UTC	444	IN	Data Raw: 31 62 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f Data Ascii: 1b5event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNo
2024-03-27 20:21:05 UTC	554	IN	Data Raw: 32 32 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 32 34 39 31 38 31 31 34 34 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 35 34 32 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 31 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 Data Ascii: 223event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1249181144&fst=1711570865423&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200
2024-03-27 20:21:05 UTC	298	IN	Data Raw: 31 32 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 70 61 59 66 58 76 35 66 65 69 77 35 34 48 56 62 36 7a 36 39 54 59 30 68 73 56 74 68 4f 25 32 42 78 36 4d 43 35 33 37 51 78 4a 74 76 35 46 50 7a 78 77 48 38 4e 72 25 32 46 79 45 74 4d 69 25 32 46 48 66 6d 38 56 63 67 58 74 56 25 32 42 4e 54 38 68 74 35 4f 7a 53 39 47 67 59 74 63 73 47 50 75 68 7a 59 70 4d 53 32 31 42 25 32 42 67 6a 46 73 4e 58 59 4e 78 75 25 32 46 34 77 61 34 50 65 72 49 72 59 47 5a 57 75 25 32 42 6f 6f 72 68 31 25 32 46 36 47 34 54 48 75 46 51 25 32 42 70 62 31 6e 75 57 4f 78 44 4f 73 75 66 4c 53 55 41 37 74 79 58 65 Data Ascii: 123event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXe
2024-03-27 20:21:05 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50244	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	3045	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=qualified_session&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571279328122&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=qualified&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=session&ep.custom_product_variant=web-2&ep.custom_qs_audience=Desktop%20web%20session%20with%203%20page%20views&tfd=4060&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780
2024-03-27 20:21:05 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:05 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:05 UTC	515	IN	Data Raw: 31 66 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 31 3b 6f 72 64 3d 31 30 38 30 38 37 35 39 37 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 Data Ascii: 1fcevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%25
2024-03-27 20:21:05 UTC	452	IN	Data Raw: 31 62 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 31 3b 6f 72 64 3d 31 30 38 30 38 37 35 39 37 33 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e Data Ascii: 1bdevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.
2024-03-27 20:21:05 UTC	1183	IN	Data Raw: 34 39 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 39 36 31 36 30 33 30 37 36 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 35 33 39 34 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 51 4b 52 66 43 4c 4b 79 74 62 41 44 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 Data Ascii: 498event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=961603076&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z98483
2024-03-27 20:21:05 UTC	292	IN	Data Raw: 31 31 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 7a 58 72 6b 54 5a 43 65 75 4e 57 37 63 39 4e 43 4a 75 63 74 46 32 25 32 46 67 76 48 76 25 32 42 64 63 31 76 44 72 68 4b 63 6a 78 63 52 61 33 68 34 31 35 64 25 32 42 45 65 50 45 37 5a 25 32 46 57 4d 53 30 36 74 56 74 31 56 25 32 46 61 4d 32 65 74 77 43 38 38 57 74 76 73 53 54 38 72 25 32 46 38 64 6f 67 42 38 73 66 73 72 6c 31 50 4b 46 61 52 59 44 50 53 59 36 53 70 55 63 42 61 6f 65 67 31 42 47 35 72 48 70 33 6d 76 77 4b 46 34 6a 64 43 70 62 31 43 71 48 55 45 64 48 33 32 51 41 45 64 78 55 6f 35 25 32 42 37 48 37 37 51 43 31 48 4c 31 50 Data Ascii: 11devent: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P
2024-03-27 20:21:05 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50254	151.101.192.84	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	637	OUT	GET /v3/?tid=2613301643430&event=checkout&noscript=1&gtmcb=1689516742 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	1078	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT location: https://www.pinterest.com/.well-known/attribution-reporting/trigger-attribution/redirect?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Thu, 27 Mar 2025 20:21:05 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZxQ1MwcXdrLzl4Y2dOTXR0SDQvdThjQlo0ajlVMFh4d1ZocnlyMFJLellsb1VGOHhJUy8yaFFaK0p6M0NISUROMzRSR0duWklCK0R5TkthWXNRcXdPaXZYWWYvK2l1QVR2bExlVW8yZkoyQT0mQWJ0a3k0QTQ4MlRRQ1VXbFBQcXhIT0tZdjJvPQ=="; Expires=Thu, 27 Mar 2025 20:21:05 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5181166120218468 Date: Wed, 27 Mar 2024 20:21:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: e55cd6245ba0a9b4bc845e73c8628057727dd4c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50255	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	491	OUT	POST /report/v4?s=lIy0VKdLRTsj%2ByUNw5RuTZM%2FCKdQ00bKQ%2FxPupP%2FRxyZA%2FwXYT%2B%2FGBM%2Bmhog%2BkZ7YyrJ%2FFok%2BAR1JQ2SUdTfl5uDby0ruBg68llAjtQy4IMrlkcoXNVR5FNmwhyjFdg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 7116 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	7116	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 38 39 36 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 32 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 32 32 34 2e 31 34 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 Data Ascii: [{"age":48966,"body":{"elapsed_time":427,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.16.224.149","status_code":404,"type":"http.error"},"type":"network-error","url":"https://www.canva.c
2024-03-27 20:21:05 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 27 Mar 2024 20:21:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50251	104.244.42.195	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	665	OUT	GET /i/adsct?txn_id=o85fi&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0&gtmcb=2049824514 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	572	IN	HTTP/1.1 200 OK date: Wed, 27 Mar 2024 20:21:04 GMT perf: 7469935968 server: tsa_b set-cookie: personalization_id="v1_MtrNrVS5CHMlwILoQoCsOg=="; Max-Age=63072000; Expires=Fri, 27 Mar 2026 20:21:05 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2cb4a2a25b8539bf strict-transport-security: max-age=631138519 x-response-time: 68 x-connection-hash: 75d049f21a5c272413b7dc1a324788c36550f3d8d9ef0f3f3ba66d6a60960b11 connection: close
2024-03-27 20:21:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50256	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 1436 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	1436	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 34 33 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 38 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: [{"age":1436,"body":{"elapsed_time":388,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.canva.com/","sampling_fraction":0.3,"server_ip":"151.101.1.140","status_code":200,"type":"ok"},"type":"network-error","url":"https:/
2024-03-27 20:21:05 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:05 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50257	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 423 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	423	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 39 31 30 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 32 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: [{"age":39101,"body":{"elapsed_time":595,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.canva.com/","sampling_fraction":0.02,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"htt
2024-03-27 20:21:05 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:05 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50258	35.190.80.1	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	472	OUT	POST /report/v4?s=PTWpPN7V0KLrWO6D4XqA3CILtwVPqzWLU6j22NWNbPZjATYXACtslLM6AZCpYo3B6xHcFSjKz9U%2FFdHWGPvs3SUiAQiek8w3ZfSIa62FsDkxVbv%2BlNCWGG74M1nzQmY%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 446 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	446	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 39 39 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 33 39 2e 31 35 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":1996,"body":{"elapsed_time":166,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.canva.com/","sampling_fraction":0.01,"server_ip":"104.17.239.159","status_code":200,"type":"ok"},"type":"network-error","url":"https
2024-03-27 20:21:05 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 27 Mar 2024 20:21:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50261	18.154.227.51	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	599	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=645617859 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:05 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:05 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A1d522ce503e36f3ccfd6c1711570829; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 ccabfbceff64477665e33f03003a399c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P5 X-Amz-Cf-Id: fFkQfsSAkRUqXREmhslOkzqwOZeNuW_iVkPp9QiaunVdIMNyqIsT3Q==
2024-03-27 20:21:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50262	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	702	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:05 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50263	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	654	OUT	GET /rp.gif?ts=1711570864360&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:05 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:05 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50266	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	739	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F%23mainId&rl=&if=false&ts=1711570864358&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=3&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570862275&coo=false&eid=1711571717886_1711571279328109&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:05 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:05 UTC	1333	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 Data Ascii: content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'wasm-unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' conne
2024-03-27 20:21:05 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:05 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50267	151.101.0.84	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	743	OUT	GET /.well-known/attribution-reporting/trigger-attribution/redirect?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1 Host: www.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-03-27 20:21:05 UTC	719	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT location: https://www.pinterest.com/.well-known/attribution-reporting/trigger-attribution?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 access-control-allow-origin: * x-envoy-upstream-service-time: 1 referrer-policy: origin set-cookie: _routing_id="506f9c08-f82b-4652-835c-8ed653ae325d"; Max-Age=86400; Path=/; HttpOnly x-pinterest-rid: 3751456969592971 Date: Wed, 27 Mar 2024 20:21:05 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: e55cd6245ba0a9b4bc845e73c8628057727dd4c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50264	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1564557189 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:05 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:05 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50270	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1136	OUT	GET /activity;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:05 UTC	991	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50268	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1231	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:05 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9738743155889965989"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9738743155889965989","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"9738743155889965989","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"9738743155889965989","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"9738743155889965989","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50269	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1238	OUT	GET /activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:05 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14653909986324022136"}],"aggregatable_trigger_data":[{"filters":{"14":["12480411"]},"key_piece":"0x55195f18b07a6b40","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xcd443c5aa95a764a","not_filters":{"14":["12480411"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["12480411"]},"key_piece":"0x2643a4fa8783cc4","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7d76a9d85191d605","not_filters":{"14":["12480411"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14653909986324022136","filters":{"14":["12480411"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14653909986324022136","filters":{"14":["12480411"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14653909986324022136","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14653909986324022136","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50272	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1225	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:05 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50271	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	1138	OUT	GET /activity;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:05 UTC	993	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50273	104.244.42.131	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	490	OUT	GET /i/adsct?txn_id=o85fi&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0&gtmcb=2049824514 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_MtrNrVS5CHMlwILoQoCsOg=="
2024-03-27 20:21:06 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 27 Mar 2024 20:21:05 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2dda73a2b942a0c9 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 62d7e357ac5fab11fcd0090cd1745dbe6fad3dee10a88159b95edd397a94dadd connection: close
2024-03-27 20:21:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50274	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 2210 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:05 UTC	2210	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 65 66 35 31 65 34 66 33 2d 35 36 30 34 2d 34 31 38 32 2d 39 30 30 37 2d 65 37 63 30 35 33 37 34 38 66 64 33 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 34 2e 39 34 39 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 35 2e 32 33 33 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"ef51e4f3-5604-4182-9007-e7c053748fd3","E":"2024-03-27T20:21:04.949Z","F":"2024-03-27T20:21:05.233Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:21:06 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:05 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215b76f6238a9-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215b76f6238a9 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v4ig27oydy0XnPpRNKUADBYZiJp0OTiek4srCB2FiDik%2FoYJ9%2Bnd7tPBXTE6%2B35ZJrT4qo7VXyCldNU81ZqecerQXq0sAmlZY9t5h3ZBJKmDoBYsJ9x27VizE3c3EOg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:06 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50275	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	2787	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=qualified_session&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571279328122&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=qualified&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=session&ep.custom_product_variant=web-2&ep.custom_qs_audience=Desktop%20web%20session%20with%203%20page%20views&tfd=4060&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:06 UTC	515	IN	Data Raw: 31 66 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 31 3b 6f 72 64 3d 31 39 34 33 31 32 35 36 33 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 Data Ascii: 1fcevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1943125636;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%25
2024-03-27 20:21:06 UTC	452	IN	Data Raw: 31 62 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 31 3b 6f 72 64 3d 31 39 34 33 31 32 35 36 33 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e Data Ascii: 1bdevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=flood001;ord=1943125636;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.
2024-03-27 20:21:06 UTC	1183	IN	Data Raw: 34 39 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 32 33 38 37 32 35 35 37 33 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 36 31 30 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 51 4b 52 66 43 4c 4b 79 74 62 41 44 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 Data Ascii: 498event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=238725573&fst=1711570866107&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z98483
2024-03-27 20:21:06 UTC	288	IN	Data Raw: 31 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 51 67 34 4f 66 70 4d 79 31 35 44 50 56 4a 30 31 79 58 5a 52 38 72 52 64 25 32 42 41 5a 42 76 34 76 6b 65 77 75 4a 4f 6f 49 35 73 37 4e 4e 4f 77 7a 73 42 54 66 32 33 43 6a 37 47 7a 4c 47 68 38 4b 41 25 32 46 6b 4e 38 6f 75 43 53 43 41 6e 4c 67 6c 7a 4f 30 62 51 4b 61 61 6d 53 6c 73 25 32 46 64 68 50 32 51 4a 34 48 62 63 42 78 61 67 6e 47 55 4d 63 46 76 54 76 34 73 32 43 6b 6b 4e 6e 30 65 53 53 46 4c 74 4c 79 25 32 46 76 69 6d 45 7a 55 74 34 6b 53 47 49 64 57 6c 6c 39 4b 76 68 50 50 70 4b 6f 4a 25 32 42 6d 47 59 61 6b 64 77 4e 46 56 43 Data Ascii: 119event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=Qg4OfpMy15DPVJ01yXZR8rRd%2BAZBv4vkewuJOoI5s7NNOwzsBTf23Cj7GzLGh8KA%2FkN8ouCSCAnLglzO0bQKaamSls%2FdhP2QJ4HbcBxagnGUMcFvTv4s2CkkNn0eSSFLtLy%2FvimEzUt4kSGIdWll9KvhPPpKoJ%2BmGYakdwNFVC
2024-03-27 20:21:06 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50277	151.101.0.84	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:05 UTC	734	OUT	GET /.well-known/attribution-reporting/trigger-attribution?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1 Host: www.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-03-27 20:21:06 UTC	870	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0","filters":{"source_type":["navigation"]}},{"trigger_data":"0","filters":{"source_type":["event"]}}],"aggregatable_trigger_data":[],"aggregatable_values":{"0":8192},"debug_reporting":true,"debug_key":"3314371174257558654"} x-envoy-upstream-service-time: 0 referrer-policy: origin set-cookie: _routing_id="e9663d22-5643-4da5-ab1a-73f1c253607f"; Max-Age=86400; Path=/; HttpOnly x-pinterest-rid: 2253588854816524 Date: Wed, 27 Mar 2024 20:21:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: e55cd6245ba0a9b4bc845e73c8628057727dd4c8
2024-03-27 20:21:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50278	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1130	OUT	GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:06 UTC	985	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50282	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1217	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50281	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	925	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:06 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9738743155889965989"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9738743155889965989","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"9738743155889965989","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"9738743155889965989","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"9738743155889965989","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50283	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1219	OUT	GET /ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50288	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	927	OUT	GET /activity;register_conversion=1;src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:06 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"14653909986324022136"}],"aggregatable_trigger_data":[{"filters":{"14":["12480411"]},"key_piece":"0x55195f18b07a6b40","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xcd443c5aa95a764a","not_filters":{"14":["12480411"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["12480411"]},"key_piece":"0x2643a4fa8783cc4","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7d76a9d85191d605","not_filters":{"14":["12480411"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"14653909986324022136","filters":{"14":["12480411"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"14653909986324022136","filters":{"14":["12480411"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"14653909986324022136","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"14653909986324022136","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50280	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1240	OUT	GET /pagead/viewthroughconversion/804757079/?random=1249181144&fst=1711570865423&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:06 UTC	971	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/804757079/?random=1249181144&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqAGORUVJ3ICp6z6t4OLQoqPMT2WmHu-0mRmM5gp4zgI7AbMrZ&random=639097606 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50286	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	919	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:06 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50289	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	922	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215bb0dcf057a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215bb0dcf057a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LwDIJ5Jc2bIYIIPppn9o7TLItORZoiIiSOvKPgYFI%2Bwv7Ojj8xcy2oW0%2F3wcnT3r0j4s1OwOAaNIItKXRXHrppvlVzTpH13sHOLdzje8XRIhjvLCwbzRr9I1C%2Fn69RI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:06 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50287	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2172	OUT	GET /_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P2AyQLQh03FBpexox17ttsJjA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:06 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50285	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2700	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570862065&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570862065&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Canva%3A%20Visual%20Suite%20for%20Everyone&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157127932894&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_product_variant=web-2&tfd=4059&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	468	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775961; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:06 UTC	513	IN	Data Raw: 31 66 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 37 30 34 35 35 37 31 30 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 1faevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1704557105;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:21:06 UTC	450	IN	Data Raw: 31 62 62 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 37 30 34 35 35 37 31 30 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 1bbevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1704557105;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:21:06 UTC	505	IN	Data Raw: 31 66 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 1f2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:21:06 UTC	442	IN	Data Raw: 31 62 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 1b3event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:21:06 UTC	551	IN	Data Raw: 32 32 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 39 37 31 39 39 36 36 36 36 26 66 73 74 3d 31 37 31 31 35 37 30 38 36 36 35 30 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 72 Data Ascii: 220event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=971996666&fst=1711570866502&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&ur
2024-03-27 20:21:06 UTC	296	IN	Data Raw: 31 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 6b 68 56 69 63 6e 50 38 53 72 57 69 6f 62 6a 62 64 47 6b 63 41 34 51 63 73 71 63 33 61 5a 4d 34 51 79 44 77 6c 75 66 25 32 46 25 32 42 50 62 25 32 46 61 44 62 6b 6c 63 57 6a 58 6f 73 66 4c 31 65 62 68 69 5a 31 25 32 42 58 39 47 4f 7a 41 53 54 58 41 48 35 5a 55 33 25 32 46 33 44 32 58 6a 32 6d 43 6b 25 32 46 51 69 4d 47 34 48 55 5a 46 70 53 51 61 25 32 42 64 35 58 75 61 57 6a 37 53 59 35 61 33 42 4b 45 62 4f 4c 6e 42 4e 74 44 74 6e 55 38 71 4c 58 6b 63 55 76 67 62 41 45 76 54 48 43 64 49 73 25 32 42 31 4f 53 78 78 4f 63 4c 6f 54 6a 48 Data Ascii: 121event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=khVicnP8SrWiobjbdGkcA4Qcsqc3aZM4QyDwluf%2F%2BPb%2FaDbklcWjXosfL1ebhiZ1%2BX9GOzASTXAH5ZU3%2F3D2Xj2mCk%2FQiMG4HUZFpSQa%2Bd5XuaWj7SY5a3BKEbOLnBNtDtnU8qLXkcUvgbAEvTHCdIs%2B1OSxxOcLoTjH
2024-03-27 20:21:06 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:21:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50290	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:06 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50291	172.253.115.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:06 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50292	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:06 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50294	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2178	OUT	GET /_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXehQ1mfS7CpE24V%2Bj10Wm6vsVQ4f1w%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:06 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50296	151.101.0.84	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	521	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: www.pinterest.com Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://www.pinterest.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:06 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 33 31 34 33 37 31 31 37 34 32 35 37 35 35 38 36 35 34 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3314371174257558654"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:06 UTC	506	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT x-envoy-upstream-service-time: 0 referrer-policy: origin set-cookie: _routing_id="5c12fe22-7b09-405f-a7ed-ed2ddc0f968c"; Max-Age=86400; Path=/; HttpOnly x-pinterest-rid: 1218366547637885 Date: Wed, 27 Mar 2024 20:21:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: e55cd6245ba0a9b4bc845e73c8628057727dd4c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50297	151.101.0.84	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	501	OUT	GET /.well-known/attribution-reporting/trigger-attribution?click-trigger-data=0&view-trigger-data=0&value=0&trigger-debug-key=3314371174257558654 HTTP/1.1 Host: www.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-03-27 20:21:06 UTC	870	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0","filters":{"source_type":["navigation"]}},{"trigger_data":"0","filters":{"source_type":["event"]}}],"aggregatable_trigger_data":[],"aggregatable_values":{"0":8192},"debug_reporting":true,"debug_key":"3314371174257558654"} x-envoy-upstream-service-time: 1 referrer-policy: origin set-cookie: _routing_id="77b91cf0-1e11-4374-91c5-199477f5f062"; Max-Age=86400; Path=/; HttpOnly x-pinterest-rid: 1106266968448509 Date: Wed, 27 Mar 2024 20:21:06 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: e55cd6245ba0a9b4bc845e73c8628057727dd4c8
2024-03-27 20:21:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50298	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1211	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:06 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50303	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	984	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=82522075;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50302	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 4362 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	4362	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:21:06 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b215bdad61584e-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8JCm9QB3pXtblu5rwIUb7xi6e1Z%2F%2BmhAn8A4av%2FHDOc4LXUYmjB%2FOH8Gru%2FoGT0PyD1mLZ7qboHatQOTLykUwATtIyXFmA5PLBuxozG%2Fu%2FRHKhmJmQgws9Qw7SkAOrUkobymgk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:06 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50301	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1211	OUT	GET /pagead/1p-user-list/804757079/?random=1249181144&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqAGORUVJ3ICp6z6t4OLQoqPMT2WmHu-0mRmM5gp4zgI7AbMrZ&random=639097606 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50304	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	986	OUT	GET /ddm/fls/z/src=9812343;type=conve0;cat=flood001;ord=1080875973;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50300	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2226	OUT	GET /pagead/viewthroughconversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_27zcaARx6kzk_UjQ3RS7Y0CzlvDFjWWQs&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:07 UTC	2077	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqOC3RZLfuirL74pFBCceqHS-ZBKP76g48bfGracKnv9wOy_3j&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3zFjSeXQvO-Lc77TCb_P2HuWMgTLhvfVU&random=141426074 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50306	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1946	OUT	GET /_set_cookie?val=paYfXv5feiw54HVb6z69TY0hsVthO%2Bx6MC537QxJtv5FPzxwH8Nr%2FyEtMi%2FHfm8VcgXtV%2BNT8ht5OzS9GgYtcsGPuhzYpMS21B%2BgjFsNXYNxu%2F4wa4PerIrYGZWu%2Boorh1%2F6G4THuFQ%2Bpb1nuWOxDOsufLSUA7tyXehQ1mfS7CpE24V%2Bj10Wm6vsVQ4f1w%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:07 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:06 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:07 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50307	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	3002	OUT	GET /visual-suite/ HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:07 UTC	935	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:07 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215beecf3204b-IAD CF-Cache-Status: HIT Age: 9481 Cache-Control: public, max-age=86400 Last-Modified: Wed, 27 Mar 2024 17:43:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: Content-Length Phoenix-Page-Namespace: ProductVisualSuite Phoenix-Page-Template: home X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAuk0LeSJ8DafOTOF1AotHf8rVrgKPRTy4xJGoICLhGBpNFnFZW2ckdPV%2F4LxUhkRgxpUgkZLy6dAl098q5XFn9%2FmY9ppSTPoFOiM36FjwAcPbg%2FHX5cPjNxP%2F0%2F2ws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 37 66 37 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 6a 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 49 6e 74 72 6f 64 75 63 69 6e 67 20 74 68 65 20 56 69 73 75 61 6c 20 53 75 69 74 65 20 7c 20 43 61 6e 76 61 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 74 61 74 69 63 Data Ascii: 7f7e<!DOCTYPE html><html dir="ltr" lang="en-US" class="nojs"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Introducing the Visual Suite \| Canva</title><link href="https://static.canva.com/static
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 73 69 67 6e 20 74 68 65 20 77 61 79 20 79 6f 75 20 77 6f 72 6b 20 77 69 74 68 20 43 61 6e 76 61 26 23 78 32 37 3b 73 20 66 72 65 65 20 56 69 73 75 61 6c 20 53 75 69 74 2e 20 49 74 20 68 61 73 20 65 76 65 72 79 74 68 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 6e 6c 6f 63 6b 20 79 6f 75 72 20 63 72 65 61 74 69 76 69 74 79 20 61 6e 64 20 64 65 73 69 67 6e 20 66 6f 72 20 74 68 65 20 6e 65 77 20 76 69 73 75 61 6c 20 65 72 61 2e 20 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 63 73 65 2e 63 61 6e 76 61 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 Data Ascii: e="twitter:description" content="Redesign the way you work with Canva's free Visual Suit. It has everything you need to unlock your creativity and design for the new visual era. "/><link rel="preconnect" href="https://static-cse.canva.com" crossorigi
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 6c 2d 73 75 69 74 65 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 4c 61 6e 67 3d 22 70 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 70 74 5f 62 72 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 4c 61 6e 67 3d 22 74 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 74 68 5f 74 68 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 4c 61 6e 67 3d 22 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 74 72 5f 74 72 2f 76 69 Data Ascii: l-suite/"/><link rel="alternate" hrefLang="pt" href="https://www.canva.com/pt_br/visual-suite/"/><link rel="alternate" hrefLang="th" href="https://www.canva.com/th_th/visual-suite/"/><link rel="alternate" hrefLang="tr" href="https://www.canva.com/tr_tr/vi
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 61 74 61 2d 6e 2d 63 73 73 3d 22 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 22 20 6e 6f 6d 6f 64 75 6c 65 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 63 73 65 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 6f 6c 79 66 69 6c 6c 73 2d 63 36 37 61 37 35 64 31 62 36 66 39 39 64 63 38 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 73 65 6e 74 72 79 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 3d 22 50 72 6f 64 75 63 74 56 69 73 75 61 6c 53 75 69 74 65 2e 68 6f 6d 65 22 20 64 61 74 61 2d 73 65 6e 74 72 79 2d 63 75 72 72 65 6e 74 2d 74 65 6d 70 6c 61 74 65 2d 6e 61 6d 65 3d 22 2f 70 72 6f 64 75 63 74 2f 76 69 73 75 61 Data Ascii: ata-n-css=""></noscript><script defer="" nomodule="" src="https://static-cse.canva.com/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script data-sentry-current-page="ProductVisualSuite.home" data-sentry-current-template-name="/product/visua
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 5f 31 51 6f 78 44 77 20 51 6b 64 36 36 41 20 74 59 49 30 56 77 20 6f 34 54 72 6b 41 20 45 70 68 38 48 67 20 63 63 6c 67 39 41 20 59 50 54 4a 65 77 20 51 6b 64 36 36 41 20 74 59 49 30 56 77 20 6c 73 58 70 5f 77 20 63 77 4f 5a 4d 67 20 75 52 76 52 6a 51 20 5f 33 41 48 33 67 77 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4d 65 6e 75 22 20 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 3a 52 69 64 6d 3a 30 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 54 63 4e 49 68 41 22 3e 3c 73 70 61 6e 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 4e 41 5f 49 6d 67 20 64 6b 57 79 70 77 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: button class="_1QoxDw Qkd66A tYI0Vw o4TrkA Eph8Hg cclg9A YPTJew Qkd66A tYI0Vw lsXp_w cwOZMg uRvRjQ _3AH3gw" type="button" aria-label="Menu" aria-describedby=":Ridm:0"><span class="TcNIhA"><span aria-hidden="true" class="NA_Img dkWypw"><svg xmlns="http://w
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 6d 39 79 62 54 30 69 62 57 46 30 63 6d 6c 34 4b 44 51 32 4c 6a 63 78 4f 54 6b 32 49 44 51 75 4d 54 59 67 4c 54 4d 75 4d 7a 45 31 4e 6a 45 67 4d 7a 63 75 4d 6a 4d 32 4f 44 67 67 4d 53 34 35 4d 69 41 78 4e 79 34 32 4e 43 6b 69 49 47 64 79 59 57 52 70 5a 57 35 30 56 57 35 70 64 48 4d 39 49 6e 56 7a 5a 58 4a 54 63 47 46 6a 5a 55 39 75 56 58 4e 6c 49 6a 34 38 63 33 52 76 63 43 42 76 5a 6d 5a 7a 5a 58 51 39 49 69 34 79 4e 53 49 67 63 33 52 76 63 43 31 6a 62 32 78 76 63 6a 30 69 49 7a 41 77 51 7a 52 44 51 79 49 76 50 6a 78 7a 64 47 39 77 49 47 39 6d 5a 6e 4e 6c 64 44 30 69 4d 53 49 67 63 33 52 76 63 43 31 6a 62 32 78 76 63 6a 30 69 49 7a 41 77 51 7a 52 44 51 79 49 67 63 33 52 76 63 43 31 76 63 47 46 6a 61 58 52 35 50 53 49 77 49 69 38 2b 50 43 39 79 59 57 52 70 Data Ascii: m9ybT0ibWF0cml4KDQ2LjcxOTk2IDQuMTYgLTMuMzE1NjEgMzcuMjM2ODggMS45MiAxNy42NCkiIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIj48c3RvcCBvZmZzZXQ9Ii4yNSIgc3RvcC1jb2xvcj0iIzAwQzRDQyIvPjxzdG9wIG9mZnNldD0iMSIgc3RvcC1jb2xvcj0iIzAwQzRDQyIgc3RvcC1vcGFjaXR5PSIwIi8+PC9yYWRp
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 51 39 49 6a 45 69 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 69 4d 33 52 44 4a 42 52 54 63 69 49 47 51 39 49 6b 30 77 49 44 42 6f 4d 54 41 77 64 6a 45 77 4d 45 67 77 65 69 49 76 50 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 39 49 6e 56 79 62 43 67 6a 58 7a 49 77 4d 44 49 77 4e 44 59 31 4d 44 68 66 58 32 45 70 49 69 42 6b 50 53 4a 4e 4d 43 41 77 61 44 45 77 4d 48 59 78 4d 44 42 49 4d 48 6f 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 4a 31 63 6d 77 6f 49 31 38 79 4d 44 41 79 4d 44 51 32 4e 54 41 34 58 31 39 69 4b 53 49 67 5a 44 30 69 54 54 41 67 4d 47 67 78 4d 44 42 32 4d 54 41 77 53 44 42 36 49 69 38 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 64 58 4a 73 4b 43 4e 66 4d 6a 41 77 4d 6a 41 30 4e 6a 55 77 4f 46 39 66 59 79 6b 69 49 Data Ascii: Q9IjEiPjxwYXRoIGZpbGw9IiM3RDJBRTciIGQ9Ik0wIDBoMTAwdjEwMEgweiIvPjxwYXRoIGZpbGw9InVybCgjXzIwMDIwNDY1MDhfX2EpIiBkPSJNMCAwaDEwMHYxMDBIMHoiLz48cGF0aCBmaWxsPSJ1cmwoI18yMDAyMDQ2NTA4X19iKSIgZD0iTTAgMGgxMDB2MTAwSDB6Ii8+PHBhdGggZmlsbD0idXJsKCNfMjAwMjA0NjUwOF9fYykiI
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 31 4e 69 41 77 4c 53 34 33 4d 44 67 74 4c 6a 55 31 4e 69 30 75 4e 7a 41 34 4c 54 45 75 4d 6a 67 30 49 44 41 74 4d 69 34 79 4f 54 49 67 4d 53 34 79 4f 44 51 74 4e 53 34 78 4e 54 59 67 4d 53 34 79 4f 44 51 74 4e 79 34 32 49 44 41 74 4d 53 34 33 4f 54 59 74 4c 6a 63 34 4f 43 30 79 4c 6a 6b 7a 4d 69 30 79 4c 6a 49 33 4d 69 30 79 4c 6a 6b 7a 4d 69 30 78 4c 6a 63 30 4f 43 41 77 4c 54 51 75 4d 44 59 67 4d 69 34 77 4f 43 30 32 4c 6a 49 30 4f 43 41 31 4c 6a 6b 33 4e 69 34 33 4d 69 30 79 4c 6a 6b 34 4e 43 41 78 4c 6a 41 78 4e 69 30 31 4c 6a 67 33 4d 69 30 78 4c 6a 45 78 4e 69 30 31 4c 6a 67 33 4d 6b 45 79 4c 6a 67 34 4e 69 41 79 4c 6a 67 34 4e 69 41 77 49 44 41 67 4d 43 41 7a 4e 69 41 35 4c 6a 6b 78 4e 6d 45 75 4e 7a 55 79 4c 6a 63 31 4d 69 41 77 49 44 41 67 4d 43 Data Ascii: 1NiAwLS43MDgtLjU1Ni0uNzA4LTEuMjg0IDAtMi4yOTIgMS4yODQtNS4xNTYgMS4yODQtNy42IDAtMS43OTYtLjc4OC0yLjkzMi0yLjI3Mi0yLjkzMi0xLjc0OCAwLTQuMDYgMi4wOC02LjI0OCA1Ljk3Ni43Mi0yLjk4NCAxLjAxNi01Ljg3Mi0xLjExNi01Ljg3MkEyLjg4NiAyLjg4NiAwIDAgMCAzNiA5LjkxNmEuNzUyLjc1MiAwIDAgMC
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 4e 43 34 34 4f 54 49 74 4d 53 34 78 4d 7a 49 67 4e 69 34 35 4f 54 49 67 4d 43 41 79 4c 6a 49 32 4f 43 34 35 4e 6a 51 67 4d 79 34 33 4e 6a 67 67 4d 69 34 35 4e 54 59 67 4d 79 34 33 4e 6a 67 67 4d 69 34 79 4d 44 67 67 4d 43 41 30 4c 6a 51 31 4d 69 30 79 4c 6a 63 77 4e 43 41 31 4c 6a 6b 30 4f 43 30 32 4c 6a 59 31 4e 69 34 30 4e 6a 67 67 4d 79 34 32 4f 54 49 67 4d 53 34 30 4f 43 41 32 4c 6a 59 33 4d 69 41 7a 4c 6a 41 32 4e 43 41 32 4c 6a 59 33 4d 69 41 78 4c 6a 6b 30 4e 43 41 77 49 44 55 75 4d 7a 6b 32 4c 54 51 75 4d 44 6b 79 49 44 63 75 4e 44 67 34 4c 54 67 75 4e 44 49 30 4c 6a 67 79 4c 6a 45 77 4e 43 41 79 4c 6a 41 31 4d 69 34 77 4e 7a 59 67 4d 79 34 79 4d 7a 59 74 4c 6a 63 32 4c 53 34 31 4d 44 51 67 4d 53 34 79 4e 7a 59 74 4c 6a 67 67 4d 69 34 32 4e 7a 49 Data Ascii: NC44OTItMS4xMzIgNi45OTIgMCAyLjI2OC45NjQgMy43NjggMi45NTYgMy43NjggMi4yMDggMCA0LjQ1Mi0yLjcwNCA1Ljk0OC02LjY1Ni40NjggMy42OTIgMS40OCA2LjY3MiAzLjA2NCA2LjY3MiAxLjk0NCAwIDUuMzk2LTQuMDkyIDcuNDg4LTguNDI0LjgyLjEwNCAyLjA1Mi4wNzYgMy4yMzYtLjc2LS41MDQgMS4yNzYtLjggMi42NzI
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 5a 6d 34 45 7a 6b 66 20 61 6b 46 74 47 73 66 20 6a 6e 55 30 46 74 4f 20 46 55 35 75 5a 38 6e 20 2d 66 6a 47 48 4e 71 20 44 56 7a 31 37 34 2d 20 5a 6d 34 45 7a 6b 66 20 6c 4e 4d 69 49 43 51 20 79 55 5a 5a 4d 41 57 20 6c 79 4d 6c 5a 4f 78 20 46 4f 36 42 6d 42 62 20 72 75 44 6a 55 77 54 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 3a 52 61 6b 64 6d 48 31 3a 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 69 61 2d 68 61 73 70 6f 70 75 70 3d 22 6d 65 6e 75 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 54 64 35 73 6d 35 62 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 64 53 57 67 71 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 4d 4e 68 31 62 Data Ascii: Zm4Ezkf akFtGsf jnU0FtO FU5uZ8n -fjGHNq DVz174- Zm4Ezkf lNMiICQ yUZZMAW lyMlZOx FO6BmBb ruDjUwT" type="button" aria-controls=":RakdmH1:" aria-expanded="false" aria-haspopup="menu" role="button"><span class="Td5sm5b"><div class="ndSWgqn"><span class="MNh1b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50308	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	2958	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1007 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:06 UTC	1007	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 34 2e 33 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 33 38 38 35 36 36 33 63 2d 63 36 37 39 2d 34 37 63 37 2d 61 33 65 63 2d 63 62 38 31 39 62 63 66 30 61 66 31 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 31 31 35 37 30 38 36 30 33 33 36 2e 35 2c 22 73 69 74 65 54 6f 6b 65 6e 22 3a 22 65 66 38 38 65 32 62 32 65 32 38 39 34 65 38 35 39 66 61 37 35 35 33 64 63 38 64 30 34 34 31 63 22 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2024.3.0"},"pageloadId":"3885663c-c679-47c7-a3ec-cb819bcf0af1","location":"https://www.canva.com/","landingPath":"/","startTime":1711570860336.5,"siteToken":"ef88e2b2e2894e859fa7553dc8d0441c"
2024-03-27 20:21:07 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:07 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215be58ee57af-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50309	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:06 UTC	1940	OUT	GET /_set_cookie?val=zXrkTZCeuNW7c9NCJuctF2%2FgvHv%2Bdc1vDrhKcjxcRa3h415d%2BEePE7Z%2FWMS06tVt1V%2FaM2etwC88WtvsST8r%2F8dogB8sfsrl1PKFaRYDPSY6SpUcBaoeg1BG5rHp3mvwKF4jdCpb1CqHUEdH32QAEdxUo5%2B7H77QC1HL1P2AyQLQh03FBpexox17ttsJjA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:07 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:07 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:07 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50313	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	978	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q1h2v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50314	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	978	OUT	GET /pagead/1p-user-list/804757079/?random=1249181144&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q1h2v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqAGORUVJ3ICp6z6t4OLQoqPMT2WmHu-0mRmM5gp4zgI7AbMrZ&random=639097606 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50315	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	2395	OUT	GET /pagead/1p-conversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqOC3RZLfuirL74pFBCceqHS-ZBKP76g48bfGracKnv9wOy_3j&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3zFjSeXQvO-Lc77TCb_P2HuWMgTLhvfVU&random=141426074 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50320	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	1951	OUT	GET /_next/static/chunks/pages/_app.54198e75.css HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:07 UTC	1338	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:07 GMT Content-Type: text/css Content-Length: 121056 Connection: close CF-Ray: 86b215c29e1a8f2c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782099 Cache-Control: public, max-age=31536000 ETag: "4a7bb9e17c3bb0bfa008eab208bca6f3" Expires: Thu, 27 Mar 2025 20:21:07 GMT Last-Modified: Fri, 16 Feb 2024 04:03:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: j1FYRoTnQXkBni2BugKcLEtKJmrVJza6zp+dD9DEj2sItZblH37h9Qhcip75tBbgYmT6+jzCC04= x-amz-request-id: TZ9DY6MFEN09V4CM x-amz-server-side-encryption: AES256 x-amz-version-id: 3RaxLpFAc4N4T0N9by1S2r2amIdjyeBw X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ffgx6lRr4JEm0Som3NC2uR5b0RiTlOTq8AhLpOlMduTRDRA1HSYFfn6EKupEs9TsQWjuiYriFSiVCtP1ygo2RNPw3Wdc3WfKjDkTRUMVtxvd0pGUD0GkiW2YzmTMlHv1XB4ISFDE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:07 UTC	31	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 54 57 46 34 72 Data Ascii: .theme{color-scheme:var(--TWF4r
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 77 29 7d 2e 6c 69 67 68 74 7b 2d 2d 54 57 46 34 72 77 3a 6c 69 67 68 74 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 41 5f 2d 41 3a 72 67 62 61 28 35 33 2c 37 31 2c 39 30 2c 2e 32 29 3b 2d 2d 63 74 47 44 33 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 5f 54 36 33 4a 41 3a 23 30 64 31 32 31 36 3b 2d 2d 6f 58 6a 65 6b 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 73 7a 35 57 39 41 3a 72 67 62 61 28 31 33 2c Data Ascii: w)}.light{--TWF4rw:light;--6899sQ:rgba(64,87,109,.07);--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QYA_-A:rgba(53,71,90,.2);--ctGD3w:rgba(64,87,109,.07);--_T63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--sz5W9A:rgba(13,
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 3b 2d 2d 32 73 59 4a 61 41 3a 23 31 61 36 32 66 66 3b 2d 2d 75 59 4f 56 6f 67 3a 23 61 64 35 61 30 30 3b 2d 2d 30 35 74 76 6a 51 3a 23 64 62 31 34 33 36 3b 2d 2d 55 38 49 70 69 41 3a 23 62 33 30 30 32 34 3b 2d 2d 67 49 48 75 6e 77 3a 23 64 62 31 34 33 36 3b 2d 2d 74 6b 62 79 4e 67 3a 23 38 62 33 64 66 66 3b 2d 2d 65 6c 46 46 70 77 3a 23 37 33 30 30 65 36 3b 2d 2d 33 7a 52 6c 61 67 3a 23 38 62 33 64 66 66 3b 2d 2d 37 68 6e 73 49 67 3a 72 67 62 61 28 34 33 2c 35 39 2c 37 34 2c 2e 33 29 3b 2d 2d 68 6d 42 7a 35 77 3a 72 67 62 61 28 32 38 2c 33 39 2c 34 38 2c 2e 35 29 3b 2d 2d 33 6a 30 4f 32 77 3a 23 38 62 33 64 66 66 3b 2d 2d 36 71 51 43 4e 51 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 43 67 4f 6d 71 67 3a 23 64 62 31 34 33 36 3b 2d 2d Data Ascii: ;--2sYJaA:#1a62ff;--uYOVog:#ad5a00;--05tvjQ:#db1436;--U8IpiA:#b30024;--gIHunw:#db1436;--tkbyNg:#8b3dff;--elFFpw:#7300e6;--3zRlag:#8b3dff;--7hnsIg:rgba(43,59,74,.3);--hmBz5w:rgba(28,39,48,.5);--3j0O2w:#8b3dff;--6qQCNQ:rgba(57,76,96,.15);--CgOmqg:#db1436;--
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 44 6f 34 4c 63 41 3a 23 66 66 66 3b 2d 2d 42 62 50 36 76 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 79 6b 66 50 56 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 31 47 52 5f 4f 67 3a 23 30 30 34 37 30 34 3b 2d 2d 37 4a 73 6a 33 41 3a 23 66 66 66 3b 2d 2d 52 64 32 35 6c 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 59 4f 79 31 6b 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 61 78 63 6b 56 67 3a 23 30 30 33 36 39 39 3b 2d 2d 79 70 41 76 62 51 3a 23 66 66 66 3b 2d 2d 79 75 44 57 31 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 7a 62 62 65 38 77 3a 68 73 6c 61 28 30 2c 30 25 2c Data Ascii: la(0,0%,100%,.07);--Do4LcA:#fff;--BbP6vg:hsla(0,0%,100%,.4);--ykfPVA:hsla(0,0%,100%,.07);--1GR_Og:#004704;--7Jsj3A:#fff;--Rd25lA:hsla(0,0%,100%,.4);--YOy1kQ:hsla(0,0%,100%,.07);--axckVg:#003699;--ypAvbQ:#fff;--yuDW1w:hsla(0,0%,100%,.4);--zbbe8w:hsla(0,0%,
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 6b 57 79 70 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 30 30 32 30 30 42 22 3b 77 69 64 74 68 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 64 6b 57 79 70 77 3e 73 76 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 52 33 42 55 70 77 7b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 75 52 57 78 56 41 7b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 4e 41 5f 49 6d 67 7b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 4a 52 6b 7a 32 41 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 5f 76 73 4f 53 77 7b 30 25 7b Data Ascii: kWypw:before{content:"\00200B";width:0;line-height:1}.dkWypw>svg{width:100%;height:100%;display:block}.R3BUpw{width:12px;height:12px}.uRWxVA{width:16px;height:16px}.NA_Img{width:24px;height:24px}.JRkz2A{width:32px;height:32px}@-webkit-keyframes _vsOSw{0%{
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 39 6b 30 51 3a 76 61 72 28 2d 2d 64 38 31 74 75 41 29 3b 2d 2d 5f 65 76 50 53 41 3a 76 61 72 28 2d 2d 70 41 39 6b 30 51 29 3b 2d 2d 4a 78 71 42 4b 51 3a 76 61 72 28 2d 2d 5f 66 32 52 5a 41 29 3b 2d 2d 75 4e 35 4f 6c 77 3a 76 61 72 28 2d 2d 4a 78 71 42 4b 51 29 3b 2d 2d 63 65 78 6e 58 41 3a 76 61 72 28 2d 2d 2d 58 4a 64 50 67 29 3b 2d 2d 63 6d 4a 43 47 77 3a 76 61 72 28 2d 2d 63 65 78 6e 58 41 29 3b 2d 2d 53 79 6f 4b 38 41 3a 76 61 72 28 2d 2d 6d 34 70 32 46 67 29 3b 2d 2d 6e 75 6b 79 64 77 3a 76 61 72 28 2d 2d 53 79 6f 4b 38 41 29 3b 2d 2d 41 57 64 55 38 67 3a 76 61 72 28 2d 2d 79 5f 74 6d 69 51 29 3b 2d 2d 44 6d 4c 47 4b 41 3a 76 61 72 28 2d 2d 41 57 64 55 38 67 29 3b 2d 2d 47 4d 62 64 6b 67 3a 76 61 72 28 2d 2d 61 43 37 52 50 67 29 3b 2d 2d 76 33 2d 76 Data Ascii: 9k0Q:var(--d81tuA);--_evPSA:var(--pA9k0Q);--JxqBKQ:var(--_f2RZA);--uN5Olw:var(--JxqBKQ);--cexnXA:var(---XJdPg);--cmJCGw:var(--cexnXA);--SyoK8A:var(--m4p2Fg);--nukydw:var(--SyoK8A);--AWdU8g:var(--y_tmiQ);--DmLGKA:var(--AWdU8g);--GMbdkg:var(--aC7RPg);--v3-v
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 63 51 29 3b 2d 2d 4f 70 77 31 55 51 3a 76 61 72 28 2d 2d 55 72 47 6c 32 41 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 4a 79 42 5f 76 77 7b 2d 2d 42 46 47 2d 66 67 3a 76 61 72 28 2d 2d 55 72 47 6c 32 41 29 3b 2d 2d 4f 70 77 31 55 51 3a 76 61 72 28 2d 2d 42 46 47 2d 66 67 29 7d 7d 2e 4a 79 42 5f 76 77 7b 2d 2d 6c 54 41 35 56 41 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 2d 56 52 66 35 55 51 3a 76 61 72 28 2d 2d 6c 54 41 35 56 41 29 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 76 61 72 28 2d 2d 56 52 66 35 55 51 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 4a 79 42 5f 76 77 7b 2d 2d 48 47 48 6a 33 51 3a 76 61 72 28 2d 2d 6c 54 41 35 56 41 29 3b 2d 2d 56 52 66 35 55 51 3a 76 61 72 28 Data Ascii: cQ);--Opw1UQ:var(--UrGl2A)}}@media (min-width:1200px){.JyB_vw{--BFG-fg:var(--UrGl2A);--Opw1UQ:var(--BFG-fg)}}.JyB_vw{--lTA5VA:flex-start;--VRf5UQ:var(--lTA5VA);align-items:var(--VRf5UQ)}@media (min-width:600px){.JyB_vw{--HGHj3Q:var(--lTA5VA);--VRf5UQ:var(
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 4f 70 77 31 55 51 29 7d 2e 4a 79 42 5f 76 77 2e 5f 31 43 63 35 5f 41 3e 2e 79 59 77 5f 46 41 2b 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 76 61 72 28 2d 2d 50 74 47 34 49 77 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 39 39 70 78 29 7b 2e 4a 79 42 5f 76 77 2e 48 77 4a 35 30 77 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 4a 79 42 5f 76 77 2e 48 77 4a 35 30 77 3e 2e 79 59 77 5f 46 41 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 Data Ascii: dth:100%;display:flex;justify-content:var(--Opw1UQ)}.JyB_vw._1Cc5_A>.yYw_FA+.yYw_FA{padding-top:var(--PtG4Iw)}}@media (max-width:899px){.JyB_vw.HwJ50w{flex-direction:column;margin-left:0}.JyB_vw.HwJ50w>.yYw_FA{padding-left:0;width:100%;display:flex;justif
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 36 46 4a 77 67 3a 76 61 72 28 2d 2d 31 65 5a 52 51 77 29 3b 2d 2d 35 65 72 48 43 51 3a 76 61 72 28 2d 2d 42 5a 4b 4b 45 41 29 3b 2d 2d 59 79 51 49 43 67 3a 76 61 72 28 2d 2d 35 65 72 48 43 51 29 7d 7d 2e 45 79 37 53 37 77 7b 2d 2d 6c 42 45 39 77 41 3a 31 3b 2d 2d 59 51 6f 71 2d 41 3a 76 61 72 28 2d 2d 6c 42 45 39 77 41 29 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 76 61 72 28 2d 2d 59 51 6f 71 2d 41 29 2c 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 45 79 37 53 37 77 7b 2d 2d 75 4b 37 4b 50 67 3a 76 61 72 28 2d 2d 6c 42 45 39 77 41 29 3b 2d 2d 59 51 6f 71 2d 41 3a 76 61 72 28 2d 2d 75 4b 37 4b 50 67 29 7d 7d 40 6d 65 64 69 61 20 28 Data Ascii: 6FJwg:var(--1eZRQw);--5erHCQ:var(--BZKKEA);--YyQICg:var(--5erHCQ)}}.Ey7S7w{--lBE9wA:1;--YQoq-A:var(--lBE9wA);grid-template-columns:repeat(var(--YQoq-A),minmax(0,1fr))}@media (min-width:600px){.Ey7S7w{--uK7KPg:var(--lBE9wA);--YQoq-A:var(--uK7KPg)}}@media (
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 46 4f 57 41 29 3b 2d 2d 4b 49 36 4d 79 77 3a 76 61 72 28 2d 2d 48 61 63 75 50 77 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 59 54 52 70 44 51 7b 2d 2d 64 70 7a 56 4b 51 3a 76 61 72 28 2d 2d 48 61 63 75 50 77 29 3b 2d 2d 4b 49 36 4d 79 77 3a 76 61 72 28 2d 2d 64 70 7a 56 4b 51 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 59 54 52 70 44 51 7b 2d 2d 4b 45 42 41 72 51 3a 76 61 72 28 2d 2d 64 70 7a 56 4b 51 29 3b 2d 2d 4b 49 36 4d 79 77 3a 76 61 72 28 2d 2d 4b 45 42 41 72 51 29 7d 7d 2e 59 54 52 70 44 51 7b 2d 2d 4d 67 70 4d 73 41 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 2d 78 49 4f 79 47 51 3a 76 61 72 28 2d 2d 4d 67 70 4d 73 41 29 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 76 Data Ascii: FOWA);--KI6Myw:var(--HacuPw)}}@media (min-width:900px){.YTRpDQ{--dpzVKQ:var(--HacuPw);--KI6Myw:var(--dpzVKQ)}}@media (min-width:1200px){.YTRpDQ{--KEBArQ:var(--dpzVKQ);--KI6Myw:var(--KEBArQ)}}.YTRpDQ{--MgpMsA:flex-start;--xIOyGQ:var(--MgpMsA);align-items:v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50321	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	1972	OUT	GET /_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.css HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:07 UTC	1344	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:07 GMT Content-Type: text/css Content-Length: 150501 Connection: close CF-Ray: 86b215c2abf707e9-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 209345 Cache-Control: public, max-age=31536000 ETag: "c98a65b66721ea60c76427e0df5ed4ea" Expires: Thu, 27 Mar 2025 20:21:07 GMT Last-Modified: Mon, 25 Mar 2024 07:50:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 9XXJbARmDJMzEKRFYG46HE6GUZZjLVKm0TWziyexHdvoHOmLMRXPW3IDIU/1Z0rZIX9CODXndmw= x-amz-request-id: P713EXZ1GW7KJKQ5 x-amz-server-side-encryption: AES256 x-amz-version-id: rCGKaS5tbdYKU4zxDTYfoAPskiyD5Kjr X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MJiS%2BCZAa1w4VepSxAUPX6kV%2Bs9OBsM3GuSCzbYQfyxCQEXFKAF34ALab8HtygMBVb7vip0qO5EzQiNWqevWTqi%2BVqWL0Jxmq7zhNHinoKBIcdvn0zAZQRdbj2tK2c44vPi3dUkW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:07 UTC	25	IN	Data Raw: 2e 45 74 45 6f 65 53 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 Data Ascii: .EtEoeSn{display:inline-b
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 45 74 45 6f 65 53 6e 3e 73 76 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 4b 5f 6b 66 41 70 32 7b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 5f 37 6d 37 74 68 30 7b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 71 41 2d 4f 57 4a 79 7b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 48 77 61 6f 52 6f 30 7b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 65 5f 49 44 Data Ascii: lock;vertical-align:text-bottom;box-sizing:border-box}.EtEoeSn>svg{width:100%;height:100%;display:block}.K_kfAp2{width:12px;height:12px}._7m7th0{width:16px;height:16px}.qA-OWJy{width:24px;height:24px}.HwaoRo0{width:32px;height:32px}@-webkit-keyframes e_ID
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 65 6d 70 6f 72 61 72 79 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 72 61 64 69 75 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 34 70 78 29 3b 2d 2d 74 68 65 6d 65 2d 72 61 64 69 75 73 2d 74 6f 61 73 74 2d 62 75 74 74 6f 6e 2d 74 65 6d 70 6f 72 61 72 79 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 72 61 64 69 75 73 2d 65 6c 65 6d 65 6e 74 2c 34 70 78 29 3b 2d 2d 74 68 65 6d 65 2d 72 61 64 69 75 73 2d 74 65 78 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 74 65 6d 70 6f 72 61 72 79 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 72 61 64 69 75 73 2d 65 6c 65 6d 65 6e 74 2c 34 70 78 29 7d 2e 74 68 65 6d 65 2e 6c 69 67 68 74 7b 2d 2d 74 68 65 6d 65 2d 73 68 61 64 6f 77 2d 73 75 72 66 61 63 65 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 36 34 2c 38 38 2c 31 30 39 2c 2e Data Ascii: emporary:var(--theme-radius-container,4px);--theme-radius-toast-button-temporary:var(--theme-radius-element,4px);--theme-radius-text-placeholder-temporary:var(--theme-radius-element,4px)}.theme.light{--theme-shadow-surface:0px 0px 0px 1px rgba(64,88,109,.
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 4f 4e 39 6b 6b 5a 48 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 68 65 61 76 79 29 7d 2e 6c 69 67 68 74 7b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 62 72 61 6e 64 3a 23 30 30 63 34 63 63 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 38 62 33 64 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 68 6f 76 65 72 3a 23 37 37 33 31 64 38 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 61 63 74 69 76 65 3a 23 36 31 32 64 61 65 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 2d 64 69 73 61 62 6c 65 64 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 70 72 69 Data Ascii: ON9kkZH{box-shadow:var(--theme-box-shadow-heavy)}.light{--theme-color-brand:#00c4cc;--theme-color-primary:#8b3dff;--theme-color-primary-hover:#7731d8;--theme-color-primary-active:#612dae;--theme-color-primary-disabled:rgba(64,87,109,.07);--theme-color-pri
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 63 74 69 76 65 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 65 72 74 69 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 64 69 73 61 62 6c 65 64 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 65 72 74 69 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 66 6f 72 65 3a 23 30 64 31 32 31 36 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 65 72 74 69 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 66 6f 72 65 2d 64 69 73 61 62 6c 65 64 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 72 61 73 74 Data Ascii: ctive:rgba(57,76,96,.15);--theme-color-tertiary-selected-disabled:rgba(13,18,22,0);--theme-color-tertiary-selected-fore:#0d1216;--theme-color-tertiary-selected-fore-disabled:rgba(36,49,61,.4);--theme-color-contrast:rgba(17,23,29,.6);--theme-color-contrast
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 2d 69 6e 66 6f 3a 23 31 61 36 32 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 68 6f 76 65 72 3a 23 33 64 38 62 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 61 63 74 69 76 65 3a 23 31 38 35 35 64 38 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 64 69 73 61 62 6c 65 64 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 6c 6f 77 3a 23 63 63 65 31 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 66 6f 72 65 3a 23 66 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 66 6f 72 65 2d 6c 6f 77 3a 23 30 64 31 32 31 36 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 69 6e 66 6f 2d 66 6f 72 65 2d 64 Data Ascii: color-info:#1a62ff;--theme-color-info-hover:#3d8bff;--theme-color-info-active:#1855d8;--theme-color-info-disabled:rgba(64,87,109,.07);--theme-color-info-low:#cce1ff;--theme-color-info-fore:#fff;--theme-color-info-fore-low:#0d1216;--theme-color-info-fore-d
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 75 72 66 61 63 65 2d 74 72 61 6e 73 70 61 72 65 6e 74 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 3a 23 30 64 31 32 31 36 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 38 36 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 72 74 69 61 72 79 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 72 67 62 Data Ascii: a(0,0%,100%,.7);--theme-color-surface-transparent:hsla(0,0%,100%,0);--theme-color-typography-primary:#0d1216;--theme-color-typography-secondary:rgba(13,18,22,.86);--theme-color-typography-tertiary:rgba(13,18,22,.7);--theme-color-typography-placeholder:rgb
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 64 61 72 79 2d 66 6f 72 65 2d 64 69 73 61 62 6c 65 64 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 3a 23 65 37 64 62 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 3a 23 65 37 64 62 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 61 63 74 69 76 65 3a 23 64 36 63 32 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 64 69 73 61 62 6c 65 64 3a 23 66 31 65 62 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 Data Ascii: dary-fore-disabled:rgba(36,49,61,.4);--theme-color-secondary-selected:#e7dbff;--theme-color-secondary-selected-hover:#e7dbff;--theme-color-secondary-selected-active:#d6c2ff;--theme-color-secondary-selected-disabled:#f1ebff;--theme-color-secondary-selected
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 64 61 72 79 2d 73 65 6c 65 63 74 65 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 61 63 74 69 76 65 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 64 69 73 61 62 6c 65 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 2d 73 65 6c 65 63 74 65 64 2d 66 6f 72 65 3a 23 66 66 66 Data Ascii: dary-selected:hsla(0,0%,100%,.2);--theme-color-secondary-selected-hover:hsla(0,0%,100%,.15);--theme-color-secondary-selected-active:hsla(0,0%,100%,.2);--theme-color-secondary-selected-disabled:hsla(0,0%,100%,.07);--theme-color-secondary-selected-fore:#fff
2024-03-27 20:21:07 UTC	1369	IN	Data Raw: 61 6c 2d 64 69 73 61 62 6c 65 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 66 6f 72 65 3a 23 66 66 66 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 66 6f 72 65 2d 64 69 73 61 62 6c 65 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 6c 6f 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 6c 6f 77 2d 68 6f 76 65 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 74 68 65 6d 65 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 6c 6f 77 2d 61 63 74 69 76 65 3a 68 73 6c 61 28 Data Ascii: al-disabled:hsla(0,0%,100%,.15);--theme-color-neutral-fore:#fff;--theme-color-neutral-fore-disabled:hsla(0,0%,100%,.4);--theme-color-neutral-low:hsla(0,0%,100%,.07);--theme-color-neutral-low-hover:hsla(0,0%,100%,.15);--theme-color-neutral-low-active:hsla(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50323	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	2084	OUT	GET /pagead/1p-conversion/804757079/?random=1307500536&fst=1711570865394&cv=10&fmt=3&label=QKRfCLKytbADENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&value=0&url=https%3A%2F%2Fwww.canva.com%2F&tiba=Canva%3A%20Visual%20Suite%20for%20Everyone&data=event%3Dqualified_session%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20261%3Bevent_id%3D1711571717886_1711571279328122%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dqualified%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dsession%3Bcustom_product_variant%3Dweb-2%3Bcustom_qs_audience%3DDesktop%20web%20session%20with%203%20page%20views&auid=1649447272.1711570827&dma=0&npa=0&uip=102.165.48.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&s3p=1&ct_cookie_present=false&sscte=1&crd=COG9sQIIucGxAiIBAUABSixub3QtbmF2aWdhdGlvbi1zb3VyY2UsIHRyaWdnZXIsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CLv3nevFgp-2hgEiEwidgIKsopWFAxUkEtAEHW2dAlwyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCOhZodHRwczovL3d3dy5jYW52YS5jb20v&is_vtc=1&cid=CAQSKQB7FLtqOC3RZLfuirL74pFBCceqHS-ZBKP76g48bfGracKnv9wOy_3j&eitems=ChEI8IePsAYQlaDEnKP-xJvjARIdAO8jX_3zFjSeXQvO-Lc77TCb_P2HuWMgTLhvfVU&random=141426074 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50322	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:07 UTC	663	OUT	GET /_next/static/media/canva-sans-latin.cb8040b8.woff2 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://static-cse.canva.com/_next/static/chunks/pages/product/visual_suite/home.3ed2fbe7.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:08 UTC	1105	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: binary/octet-stream Content-Length: 38848 Connection: close CF-Ray: 86b215c4dccd2415-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 777350 Cache-Control: public, max-age=31536000 ETag: "cff149ee1e9d2be50ac77bcd86769d05" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Thu, 24 Mar 2022 05:36:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: awtscmFhDU74jw+jPhxnPl8AdAcnPjfgcHLaid/7yrHY+KP+Iv0lXbQm8L4XNJyk46Ywu84vXuY= x-amz-request-id: N5R2QJS7MY8N7JZM x-amz-server-side-encryption: AES256 x-amz-version-id: FBHco6CA32mJtUTWgLI71PLrSWoBu6B_ X-Content-Type-Options: nosniff
2024-03-27 20:21:08 UTC	795	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 77 64 71 6e 41 59 4f 6e 76 4b 4d 64 68 64 47 32 4c 30 77 61 37 6a 4b 69 43 59 52 62 2e 47 73 63 43 56 42 72 33 49 71 46 39 7a 51 2d 31 37 31 31 35 37 30 38 36 38 2d 31 2e 30 2e 31 2e 31 2d 4c 4a 51 75 4f 6d 73 36 4a 6d 47 49 71 31 6a 74 4d 47 32 50 41 62 6b 75 54 4e 39 51 77 34 35 74 48 64 4d 34 34 44 56 67 41 35 43 31 52 33 74 54 49 48 72 56 4d 4b 54 72 46 73 62 68 49 6a 49 75 32 46 62 33 55 66 54 4e 52 6b 77 4e 38 6b 72 6a 6b 64 4a 6d 59 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 30 38 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=wdqnAYOnvKMdhdG2L0wa7jKiCYRb.GscCVBr3IqF9zQ-1711570868-1.0.1.1-LJQuOms6JmGIq1jtMG2PAbkuTN9Qw45tHdM44DVgA5C1R3tTIHrVMKTrFsbhIjIu2Fb3UfTNRkwN8krjkdJmYA; path=/; expires=Wed, 27-Mar-24 20:51:08 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 97 c0 00 13 00 00 00 01 25 28 00 00 97 4c 00 01 02 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 11 1b 81 91 6a 1c 90 18 3f 48 56 41 52 88 5e 3f 4d 56 41 52 5a 06 60 3f 53 54 41 54 24 27 28 00 83 4e 2f 81 00 0a ff 44 e6 7c 30 81 fc 00 01 36 02 24 03 87 7c 0b 84 00 00 04 20 05 85 3e 07 20 5b 94 15 71 80 a1 57 1d 8c db 06 f0 73 67 74 59 7f 8d 8a b1 0b 43 cf 6d e3 c8 58 3d 65 9d 8d 88 60 e3 00 08 7e 39 cc f8 ff 3f 2d e9 90 a1 09 ee 01 68 5b 55 e7 74 bb 2d 88 5c 14 91 51 de 7a 6b 6d d4 c8 2c cf d9 6b 16 cd b1 52 50 34 da d0 b1 a3 25 5a 23 5f 31 71 08 11 19 48 a7 10 f9 41 87 50 cd 54 0e 73 23 0f b8 51 e8 11 11 3b cf d3 0f f1 84 0c d7 5b a6 dc 17 48 7c aa 85 43 08 b4 c0 ce 69 0c a1 e3 ec 41 57 ba e5 fe b9 56 Data Ascii: wOF2%(Lj?HVAR^?MVARZ`?STAT$'(N/D\|06$\| > [qWsgtYCmX=e`~9?-h[Ut-\Qzkm,kRP4%Z#_1qHAPTs#Q;[H\|CiAWV
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: f0 55 35 7e fc fd af e9 73 ae 0b c9 7e 53 42 6e a8 cf 32 a9 e2 1a 42 14 af 04 2d c1 a5 96 12 45 dc 90 10 62 28 2e 59 7f df 20 de 8e 45 ee e9 54 d2 10 80 cf 61 40 08 22 00 99 00 ba 01 0c c2 1c 20 7e 10 7f 2a 88 9a 11 12 2d 0e 76 cc 31 c8 59 b7 11 1e 7b 89 30 ce 06 99 32 05 e1 23 19 b8 53 33 c0 f6 87 03 80 a9 50 88 56 85 42 39 f0 13 00 21 11 31 3c 3a 6a e7 b1 e9 32 52 a4 58 0d c0 07 e0 1e f5 ef cb 9b 6e 79 01 c3 ce ba 01 e0 b1 e7 f8 10 00 35 1e 80 5c 00 27 01 7c 03 e0 1e 80 27 00 2d 0a d0 ba 80 d8 10 46 80 04 09 76 0a fd eb b2 ff 27 57 04 00 81 96 5f 53 a7 cd 9c 35 6f d1 b2 fa 86 e6 96 35 6b d7 b5 6e 2a ec 3c 7e 58 38 2d 9d 55 aa cd 4e 97 a2 59 8e 17 24 59 ed bb a8 21 6c d8 ce 92 30 2e b4 71 21 65 42 2a 6d 1d cf 67 78 41 31 4c c7 0d c2 62 ec 88 95 2d d2 c1 Data Ascii: U5~s~SBn2B-Eb(.Y ETa@" ~-v1Y{02#S3PVB9!1<:j2RXny5\'\|'-Fv'W_S5o5kn<~X8-UNY$Y!l0.q!eB*mgxA1Lb-
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: f8 f4 8b aa 49 10 00 b8 59 12 44 fe 60 26 7f 85 68 41 f8 bd 2e bb 97 b1 37 f6 68 de ee 09 31 53 c1 8e 87 3f 2d 1f 9f fc 2a ac 25 86 73 7d 31 c5 90 e9 ce 39 1b 0c 4b 9b ef b6 21 b6 75 c7 a7 60 34 b5 e1 fa 50 d0 cb a6 71 e7 67 d0 ea 36 9f 0b e4 4e f9 7c 01 1f b5 6a 6c 69 b9 8d 63 f6 d1 8c 0e ba d4 ec bb 26 d4 2c 1f 94 5d 57 57 5e d6 12 88 56 91 32 6a 03 6a 10 96 07 77 51 8b 75 37 e5 93 0b f0 55 ba 92 59 c6 ec 27 b6 eb 47 b9 d7 e2 0e 8f 87 0a 02 2a 81 f3 9c f3 39 b9 b1 ec 63 6a ab f7 93 d1 46 4f f6 d5 93 bd a1 52 0f d8 91 22 72 4f 56 d9 55 69 e8 c3 83 19 03 c7 e5 e0 bc 29 e5 73 ac 31 e4 37 fc 50 00 20 bc 0d 22 1e fc 6f 75 a5 e2 88 2a 6f 77 16 2f 2e 00 39 94 a0 f2 cb 65 00 00 32 d9 e2 8d 10 cf 61 b0 c4 91 9a 10 9c a5 54 77 60 c6 e8 5f c4 0f ff fa a3 54 6e 1c Data Ascii: IYD`&hA.7h1S?-%s}19K!u`4Pqg6N\|jlic&,]WW^V2jjwQu7UY'G9cjFOR"rOVUi)s17P "ou*ow/.9e2aTw`_Tn
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: f0 5e 7f 1d 0e 3b 5d e2 84 2b 8c 99 16 f4 87 8e 6e e5 41 be 45 b4 6e b7 51 c6 a0 d5 d1 0e 88 16 08 f9 72 31 9e c1 73 af 2f 6a cc a3 6d ba 22 b4 67 b2 18 69 a2 d0 5d f3 59 48 cb bf 77 6c ba 14 cc a8 76 ec f9 e2 74 ca bd 2b 5b db b7 54 4d bb 44 4b 2b 86 b1 07 78 20 35 df b7 37 a4 0d 29 db da bd 5f d5 97 f3 86 3e 3a 2a 16 fb 00 64 23 d7 ed 77 29 50 01 98 75 42 38 f3 d1 d1 bb 3a 5b 52 d3 5d 88 35 35 93 00 05 61 ba 83 fb 02 19 b2 a0 3f ff fc 90 11 11 36 36 3e 84 93 f6 18 90 f1 be 8b e1 31 7f cc f2 af 0f ee 7c 2a 7a 78 16 b5 93 44 e3 3a fb 9a aa d8 54 f5 c3 d1 c8 6b 8f 81 ed 2e 8e 08 d9 be c8 af 33 07 bb e0 1f 1f 5c b6 3c 83 5d 0a 82 b1 82 2c 41 e5 87 37 79 91 06 db 91 59 f7 69 ca 5d 0d 5d 2f 6a e8 a3 35 ce 97 f7 4c 87 9e bf 3e cc e6 39 8e f6 f6 fa 4b d9 92 2b Data Ascii: ^;]+nAEnQr1s/jm"gi]YHwlvt+[TMDK+x 57)_>:d#w)PuB8:[R]55a?66>1\|zxD:Tk.3\<],A7yYi]]/j5L>9K+
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: b2 7a 5b d4 af 7c 1e a8 11 d5 2c 9a ad 42 a6 9a ca a9 ad 69 47 c1 bd 32 0d bf 37 ac aa 96 c9 df c7 1e 09 76 17 0f bb 5f 8f fd d8 c4 c2 4c b9 c3 db 0b f4 f1 32 a6 74 de 3f b7 ce 4e c4 1b cc 42 bd a8 7b ff 05 5d b8 09 24 75 0e 66 fd f5 90 79 5d eb 54 e3 3e 89 d9 68 5a f1 f4 d6 53 d2 ef cd 76 de 2f 96 7a eb e4 93 d1 c2 21 f8 69 7b d0 64 a6 52 9e a3 bb a9 1f 37 0a 97 0f 81 f4 14 10 b0 4e 0e f1 2f 82 af 58 d3 0a 64 9c 79 5f 2c 45 55 44 83 2f c4 af e6 b4 0c 3c 7c 12 a8 3d 2e 2a 6c f4 ef 01 51 76 fb 4d 75 d4 df 7a 9a fc a8 36 16 27 4d 54 2e f8 45 40 9b bc e3 0c c6 8f 38 ab f2 78 4f af fe 23 54 91 df 23 a8 73 c3 91 23 33 32 74 be 53 48 fc 37 f5 1b 38 7e a2 3e 67 94 be de 89 2d 7d 8d 39 4c 6b cf 06 c1 55 8c 51 9d 59 44 fd 9e e5 c9 6b fa 9a 82 de 63 ec 42 a6 1a 9c Data Ascii: z[\|,BiG27v_L2t?NB{]$ufy]T>hZSv/z!i{dR7N/Xdy_,EUD/<\|=.*lQvMuz6'MT.E@8xO#T#s#32tSH78~>g-}9LkUQYDkcB
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 85 56 ec 15 6f ea 0a a4 1e dd 65 55 c0 a4 9a 6c 6e 84 cc c2 8b 93 a2 92 a3 e6 29 eb 11 37 74 aa ab 36 54 f9 25 1f 86 60 4d b2 e9 3c 09 24 79 97 d0 72 d5 fc e5 11 3d b9 3b 0e bb 13 ad c2 11 47 97 f6 ed 91 7a 27 76 04 51 54 95 d0 30 5a 3e 51 48 c5 05 c7 51 66 0b ab fd 66 cf aa 9b 59 89 57 f1 9c e7 89 89 cb 71 87 f5 a7 26 3e 75 66 be a4 07 bf 11 93 9d 0e 3a a2 05 95 54 ba 90 24 92 9c f3 31 d4 9c b4 bb da ab da a8 55 e7 54 16 d9 0f ba b2 0b cf da a9 76 7b ec 99 d4 3a ed 10 75 7a f7 b3 de cb 52 ef f1 f2 f5 b1 17 51 af cd 93 55 88 2b 12 61 3d 82 d4 d4 83 a9 3c 5a 48 c2 22 8d e7 14 51 a7 91 ac 4b db 65 25 2e e2 5b 2e a2 6d 85 e2 c4 51 67 47 d6 e4 39 04 fe e8 ea 3e 11 a6 7e d1 29 09 02 91 f6 29 55 a2 4c f2 e0 06 a6 9f 52 a7 aa 5e 9b a9 1a 79 ba 7a 11 07 27 b6 de Data Ascii: VoeUln)7t6T%`M<$yr=;Gz'vQT0Z>QHQffYWq&>uf:T$1UTv{:uzRQU+a=<ZH"QKe%.[.mQgG9>~))ULR^yz'
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: a1 72 2b 34 fc a1 b3 bc 63 81 95 1a 51 00 48 02 32 d9 8a 14 b6 55 ca 22 46 00 08 e1 ca 0c 4c 42 c9 ce 27 21 d8 aa 00 02 aa 8e 60 68 48 5e 48 40 b1 87 73 a1 a8 12 22 da 76 75 26 49 f8 c3 11 6f a0 d7 cf bf 92 33 7f ea f6 51 64 3b f8 00 01 72 80 ea 04 4e 3a a1 16 61 34 89 ec 33 21 85 d2 2e a5 48 17 3f c1 7d fa 63 2f 6d f4 c0 30 24 b8 54 26 a3 95 48 2b e9 18 9f 06 42 96 b0 76 91 06 d9 e8 9c 48 68 e2 02 0f 98 12 11 10 ef 9a 06 36 50 b4 c7 29 c6 97 f1 e4 22 c3 08 9e 2e a2 3f 84 04 a9 2a a7 4f bd 8c 77 64 8e fd 4c 4d d3 80 42 23 67 4a 4c 7a 42 ee 2a 91 2e 8d f2 3a fe c8 22 0b 40 55 ca 86 60 f6 2e 94 91 50 b2 86 2e 11 f3 46 0e 25 39 6e 5e 9c 6d 4c 88 4d 28 ac 35 f4 65 70 49 84 44 48 a4 15 ab 00 ba 9d ae 58 12 0d a1 36 dd a4 8e 5e c6 c9 9c 14 36 a1 04 f8 8e c8 62 Data Ascii: r+4cQH2U"FLB'!`hH^H@s"vu&Io3Qd;rN:a43!.H?}c/m0$T&H+BvHh6P)".?OwdLMB#gJLzB.:"@U`.P.F%9n^mLM(5epIDHX6^6b
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 2d c0 bf bd fb b4 d9 63 bd 3e c7 0d db 6b 83 8d d6 f9 48 93 f7 ac d6 a1 59 8b 43 3e 75 d0 1a 5f d9 e2 5d 5d 8e da e6 9e 00 81 34 36 39 6d b3 c3 f6 fb c0 01 1f 3a 63 c4 1d df 38 a2 db 29 f7 1d f3 b5 76 e7 5d 70 c9 35 d7 5d 71 ce 59 57 5d 74 d9 2e bb f5 da 61 a7 ed be f3 bd b5 be f0 1f 9f f9 dc 97 86 0c 3a 61 c0 49 08 80 10 86 31 28 7c 03 99 03 94 2d 35 83 8c a5 b1 19 70 75 fc 7c a6 ca 2c 06 ab 24 f8 28 01 6e 8d 67 ec 99 05 91 80 1c 79 d4 8a 93 e2 4e 27 d9 3f 89 01 20 b1 b2 4b 65 23 63 c6 5e 97 67 37 f1 fa 0b 00 df ef e3 7b 01 fd 51 2b 92 00 c7 10 8c 46 a0 fe 33 85 12 04 7a 26 23 0c 9c 9c b2 03 e8 c5 dc 07 a2 2b ce 4b 44 0f 62 b8 3f e1 4e 61 90 75 84 e0 ea 84 10 00 01 d5 be 05 29 3f d5 8e 14 a2 4c 49 67 9c d2 8c 81 79 ea 52 54 43 d5 54 13 6d a0 30 6f 8c 44 Data Ascii: -c>kHYC>u_]]469m:c8)v]p5]qYW]t.a:aI1(\|-5pu\|,$(ngyN'? Ke#c^g7{Q+F3z&#+KDb?Nau)?LIgyRTCTm0oD
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: e5 16 1f 11 b0 a0 49 fb b8 54 39 ac 19 1e 29 c6 97 e0 ca 70 ca 62 ed e0 b8 f3 8c 30 16 4f 24 3f 53 4d ab 9e 9b 35 93 9b 72 31 7a dc fd e0 e0 34 9b 6a dc f9 d8 1e 41 bc 01 be 7b ed 87 2f d9 6c 75 f9 f2 6a 4c 71 de f2 3b e8 f0 37 82 62 25 fc 9b 97 a2 b8 55 1c 4f 76 66 73 b7 5a 12 4e 34 66 05 43 e4 2a 3e c8 fb 35 73 58 86 1c 9b cc a2 d5 84 e5 f6 38 35 8f 4f 70 b9 92 32 75 33 d0 b8 a3 68 ae 9d ec 2d 6f 5a e4 e6 55 7a 2d 8a 35 66 b5 6e 10 6e 81 d0 76 3c de be d6 79 c7 f8 4d d7 d5 d1 60 eb cf f2 18 86 d1 61 d4 e7 c6 6e f7 4e d8 52 2c 0e d2 94 1c b1 2b 6b 42 25 80 6a a3 eb 2a 42 21 c7 d1 05 65 c5 92 02 08 fd 04 c9 8a 67 f3 70 9a 4d 91 a6 45 34 31 df 88 f2 18 8f ac 2a 96 d1 1d a3 dd 6d c7 dc fc 4c 14 87 43 ce 24 1b 13 a6 a3 bb 92 e5 b4 bb 6c 60 30 a2 f9 3c be f9 Data Ascii: IT9)pb0O$?SM5r1z4jA{/lujLq;7b%UOvfsZN4fC>5sX85Op2u3h-oZUz-5fnnv<yM`anNR,+kB%jB!egpME41*mLC$l`0<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50324	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1941	OUT	GET /_next/static/chunks/webpack-feafa46848d16e44.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1346	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 10112 Connection: close CF-Ray: 86b215c60d167fe2-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 146501 Cache-Control: public, max-age=31536000 ETag: "7dd697ea857973d26eca0a53b572382a" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Tue, 26 Mar 2024 02:08:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: OeAQbi1o8+PL47L9Ov5X763SgIrh5O/SWK+pUoYBiG+0wORdQfwQimqQUhM9SxTcLv70nHUGzfk= x-amz-request-id: D6S66RQGEJJRGVXY x-amz-server-side-encryption: AES256 x-amz-version-id: WgOjQe_f.vUMTAFtxO4zr0fq_d7KLuwW X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nPA0AZT7U2yX8yf6hCoNx%2FjIFQ2tpcpMST4IX58Vo90XUhSLQMjqWqKextdKzIG3Dvwg6erx9jvdMKDsU8RBNIesQKhuREkNi0wUZbtoEsG8xSilQPv0K7RXXl5MYr5DWKi0YzDi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	23	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: !function(){"use strict
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 22 3b 76 61 72 20 65 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 64 29 7b 76 61 72 20 66 3d 63 5b 64 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 66 29 72 65 74 75 72 6e 20 66 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 63 5b 64 5d 3d 7b 69 64 3a 64 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 3d 21 30 3b 74 72 79 7b 65 5b 64 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 61 29 2c 6e 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 6e 26 26 64 65 6c 65 74 65 20 63 5b 64 5d 7d 72 65 74 75 72 6e 20 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 65 2c 61 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 Data Ascii: ";var e={},c={};function a(d){var f=c[d];if(void 0!==f)return f.exports;var t=c[d]={id:d,loaded:!1,exports:{}},n=!0;try{e[d].call(t.exports,t,t.exports,a),n=!1}finally{n&&delete c[d]}return t.loaded=!0,t.exports}a.m=e,a.amdD=function(){throw new Error("de
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 28 63 2c 64 29 26 26 21 61 2e 6f 28 65 2c 64 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 64 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 63 5b 64 5d 7d 29 7d 2c 61 2e 66 3d 7b 7d 2c 61 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 66 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 72 65 74 75 72 6e 20 61 2e 66 5b 64 5d 28 65 2c 63 29 2c 63 7d 29 2c 5b 5d 29 29 7d 2c 61 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 22 2b 65 2b 22 2e 22 2b 7b 31 31 32 32 3a 22 65 62 36 32 65 35 30 32 66 61 63 39 62 61 35 63 22 2c 31 34 34 37 Data Ascii: (c,d)&&!a.o(e,d)&&Object.defineProperty(e,d,{enumerable:!0,get:c[d]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(c,d){return a.f[d](e,c),c}),[]))},a.u=function(e){return"static/chunks/"+e+"."+{1122:"eb62e502fac9ba5c",1447
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 22 39 32 64 30 38 35 64 64 37 36 65 62 35 35 35 66 22 2c 32 34 30 36 31 3a 22 36 61 35 63 33 34 31 31 31 66 62 30 65 36 65 31 22 2c 32 34 30 37 34 3a 22 62 63 30 38 38 64 64 34 62 65 63 35 33 32 63 38 22 2c 32 34 32 30 38 3a 22 33 66 39 37 30 65 30 39 39 31 65 37 30 31 38 61 22 2c 32 34 33 39 32 3a 22 31 62 63 64 36 65 30 38 61 66 64 65 61 39 36 66 22 2c 32 34 37 30 30 3a 22 31 35 30 30 61 63 37 33 32 37 39 66 39 36 61 34 22 2c 32 34 38 35 34 3a 22 31 30 32 39 64 35 65 30 61 33 61 37 38 63 35 38 22 2c 32 34 38 35 37 3a 22 35 64 33 36 32 30 66 61 66 32 37 38 30 38 33 34 22 2c 32 35 33 32 39 3a 22 63 38 65 61 36 35 34 31 34 31 64 39 62 36 34 63 22 2c 32 35 35 32 34 3a 22 66 34 66 32 34 66 64 30 61 31 39 33 36 32 65 65 22 2c 32 35 35 34 35 3a 22 32 35 66 64 Data Ascii: "92d085dd76eb555f",24061:"6a5c34111fb0e6e1",24074:"bc088dd4bec532c8",24208:"3f970e0991e7018a",24392:"1bcd6e08afdea96f",24700:"1500ac73279f96a4",24854:"1029d5e0a3a78c58",24857:"5d3620faf2780834",25329:"c8ea654141d9b64c",25524:"f4f24fd0a19362ee",25545:"25fd
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 35 33 37 37 31 3a 22 64 34 37 61 35 36 61 37 35 62 64 37 65 33 32 37 22 2c 35 36 34 39 31 3a 22 66 61 35 61 65 62 64 62 61 34 65 61 65 39 33 32 22 2c 35 37 32 36 36 3a 22 30 36 39 65 30 65 62 34 39 33 36 63 31 31 63 38 22 2c 35 37 35 34 38 3a 22 39 30 39 31 37 33 37 61 36 31 61 62 64 31 63 38 22 2c 35 37 37 31 37 3a 22 31 30 62 64 34 65 63 31 30 33 38 34 33 39 31 30 22 2c 35 38 39 36 36 3a 22 35 35 32 30 36 61 33 61 33 35 33 36 31 65 31 63 22 2c 36 31 30 35 36 3a 22 61 32 35 32 37 63 36 65 63 63 39 37 34 66 35 36 22 2c 36 31 35 33 31 3a 22 35 38 36 64 65 30 31 66 63 66 30 37 39 64 65 34 22 2c 36 31 37 32 39 3a 22 61 63 35 39 30 33 64 62 34 62 64 34 36 66 30 31 22 2c 36 32 30 37 32 3a 22 34 39 64 63 32 31 65 34 37 62 34 37 64 36 63 38 22 2c 36 34 30 35 35 Data Ascii: 53771:"d47a56a75bd7e327",56491:"fa5aebdba4eae932",57266:"069e0eb4936c11c8",57548:"9091737a61abd1c8",57717:"10bd4ec103843910",58966:"55206a3a35361e1c",61056:"a2527c6ecc974f56",61531:"586de01fcf079de4",61729:"ac5903db4bd46f01",62072:"49dc21e47b47d6c8",64055
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 33 36 63 38 22 2c 38 36 34 34 34 3a 22 64 64 62 61 31 66 61 61 64 62 61 34 30 38 39 37 22 2c 38 36 36 32 35 3a 22 65 37 38 36 33 61 38 30 63 34 61 64 61 37 37 37 22 2c 38 36 36 35 31 3a 22 32 66 38 30 66 36 37 36 65 66 62 64 64 38 65 65 22 2c 38 36 37 30 34 3a 22 38 32 34 33 33 39 32 38 65 39 35 38 61 39 61 35 22 2c 38 36 39 31 38 3a 22 36 36 61 61 30 30 34 31 65 65 61 64 39 30 62 39 22 2c 38 36 39 32 38 3a 22 32 32 64 61 34 66 64 33 35 38 36 35 63 65 66 33 22 2c 38 36 39 35 31 3a 22 37 66 64 37 36 61 31 35 35 33 65 38 66 35 36 37 22 2c 38 37 34 31 37 3a 22 32 62 34 30 37 39 62 63 38 35 65 33 37 31 62 66 22 2c 38 38 35 36 36 3a 22 62 38 30 32 39 64 34 33 35 31 39 34 39 35 62 33 22 2c 38 39 34 33 37 3a 22 36 36 34 62 62 66 64 39 61 33 32 39 39 63 33 64 22 Data Ascii: 36c8",86444:"ddba1faadba40897",86625:"e7863a80c4ada777",86651:"2f80f676efbdd8ee",86704:"82433928e958a9a5",86918:"66aa0041eead90b9",86928:"22da4fd35865cef3",86951:"7fd76a1553e8f567",87417:"2b4079bc85e371bf",88566:"b8029d43519495b3",89437:"664bbfd9a3299c3d"
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 20 30 21 3d 3d 74 29 66 6f 72 28 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 75 3d 6f 5b 69 5d 3b 69 66 28 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 64 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 63 2b 74 29 7b 62 3d 75 3b 62 72 65 61 6b 7d 7d 62 7c 7c 28 72 3d 21 30 2c 28 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 62 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 61 2e 6e 63 26 26 62 2e 73 65 74 41 74 74 Data Ascii: 0!==t)for(var o=document.getElementsByTagName("script"),i=0;i<o.length;i++){var u=o[i];if(u.getAttribute("src")==d\|\|u.getAttribute("data-webpack")==c+t){b=u;break}}b\|\|(r=!0,(b=document.createElement("script")).charset="utf-8",b.timeout=120,a.nc&&b.setAtt
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6c 69 6e 6b 22 29 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 66 3d 28 6e 3d 61 5b 64 5d 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 68 72 65 66 22 29 7c 7c 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 22 73 74 79 6c 65 73 68 65 65 74 22 3d 3d 3d 6e 2e 72 65 6c 26 26 28 66 3d 3d 3d 65 7c 7c 66 3d 3d 3d 63 29 29 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 74 79 6c 65 22 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 74 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 6e 3b 69 66 28 28 66 3d 28 6e 3d 74 5b 64 5d 29 2e 67 65 74 41 74 74 72 69 62 Data Ascii: entsByTagName("link"),d=0;d<a.length;d++){var f=(n=a[d]).getAttribute("data-href")\|\|n.getAttribute("href");if("stylesheet"===n.rel&&(f===e\|\|f===c))return n}var t=document.getElementsByTagName("style");for(d=0;d<t.length;d++){var n;if((f=(n=t[d]).getAttrib
2024-03-27 20:21:08 UTC	506	IN	Data Raw: 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 62 2e 74 79 70 65 3d 74 2c 62 2e 72 65 71 75 65 73 74 3d 6e 2c 66 5b 31 5d 28 62 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 63 2c 63 29 7d 65 6c 73 65 20 65 5b 63 5d 3d 30 7d 2c 61 2e 4f 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 5b 63 5d 7d 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 66 2c 74 2c 6e 3d 64 5b 30 5d 2c 62 3d 64 5b 31 5d 2c 72 3d 64 5b 32 5d 2c 6f 3d 30 3b 69 66 28 6e 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 63 5d 7d 29 29 29 7b 66 6f 72 28 66 20 69 6e 20 62 29 61 2e 6f 28 62 2c 66 29 26 26 28 61 2e 6d 5b 66 5d 3d 62 5b 66 5d 29 3b 69 66 28 72 29 76 61 72 20 69 3d 72 28 61 29 7d 66 Data Ascii: nkLoadError",b.type=t,b.request=n,f[1](b)}}),"chunk-"+c,c)}else e[c]=0},a.O.j=function(c){return 0===e[c]};var c=function(c,d){var f,t,n=d[0],b=d[1],r=d[2],o=0;if(n.some((function(c){return 0!==e[c]}))){for(f in b)a.o(b,f)&&(a.m[f]=b[f]);if(r)var i=r(a)}f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50325	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1938	OUT	GET /_next/static/chunks/main-3341eddb41618187.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1359	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 280305 Connection: close CF-Ray: 86b215c68ed70649-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 792724 Cache-Control: public, max-age=31536000 ETag: "be32dd7e87b23c5c67d28598be46017b" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Fri, 16 Feb 2024 04:03:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: fDRwQltS8nsuDtri9rH2xFg6dNjJGk+QtAngOGaaLL0/pzz5U14qDEfCS7txV3k/afBwrvoWHI4= x-amz-request-id: 59AC4PH230NY2Q4N x-amz-server-side-encryption: AES256 x-amz-version-id: LVwbdzdfbCFf1DuKCsln6ZxRO5fErygY X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=okOAT8OZH%2FrjofcGffPPATtZKtNhkQB%2BMNKtgcTTzyAPK2oYqjKPjsJu0ZILD6b%2FYguXuhWjIO21iyhpYZ%2BY%2BN%2BItDV%2FhFRC51IuGHP7AeifSHSOf9LgTODb8Fx7QFs87Fy3TzBx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	10	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 Data Ascii: (self.webp
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 31 37 39 5d 2c 7b 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 61 72 72 61 79 5f 6c 69 6b 65 5f 74 6f 5f 61 72 72 61 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 Data Ascii: ackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[40179],{"./node_modules/@swc/helpers/lib/_array_like_to_array.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(va
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 79 28 74 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 6e 28 6c 2c 6f 2c 61 2c 69 2c 75 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6e 28 6c 2c 6f 2c 61 2c 69 2c 75 2c 22 74 68 72 6f 77 22 2c 65 29 7d 69 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 63 6c 61 73 73 5f 63 61 6c 6c 5f 63 68 65 63 6b 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 Data Ascii: y(t,r);function i(e){n(l,o,a,i,u,"next",e)}function u(e){n(l,o,a,i,u,"throw",e)}i(void 0)}))}}},"./node_modules/@swc/helpers/lib/_class_call_check.js":function(e,t){"use strict";t.Z=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a cla
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 64 65 66 61 75 6c 74 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 6f 2e 64 65 66 61 75 6c 74 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2c 6e 29 7d 7d 3b 76 61 72 20 72 3d 6c 28 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 Data Ascii: (e,t,n){"use strict";t.Z=function(e){var t=r.default();return function(){var n,r=o.default(e);if(t){var l=o.default(this).constructor;n=Reflect.construct(r,arguments,l)}else n=r.apply(this,arguments);return a.default(this,n)}};var r=l(n("./node_modules/@s
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 6f 2e 64 65 66 61 75 6c 74 28 65 2c 74 29 7d 3b 76 61 72 20 72 2c 6f 3d 28 72 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 73 65 74 5f 70 72 6f 74 6f 74 79 70 65 5f 6f 66 2e 6a 73 22 29 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 69 6e 73 74 61 6e 63 65 6f 66 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tructor:{value:e,writable:!0,configurable:!0}}),t&&o.default(e,t)};var r,o=(r=n("./node_modules/@swc/helpers/lib/_set_prototype_of.js"))&&r.__esModule?r:{default:r}},"./node_modules/@swc/helpers/lib/_instanceof.js":function(e,t){"use strict";t.Z=function(
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 69 73 5f 6e 61 74 69 76 65 5f 72 65 66 6c 65 63 74 5f 63 6f 6e 73 74 72 75 63 74 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 Data Ascii: call(e).indexOf("[native code]")}},"./node_modules/@swc/helpers/lib/_is_native_reflect_construct.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){if("undefined"===typeof Reflect\|\|!Reflect.construct)retur
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 65 63 74 5f 77 69 74 68 6f 75 74 5f 70 72 6f 70 65 72 74 69 65 73 5f 6c 6f 6f 73 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 6f 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 6f 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 70 6f 73 73 69 62 6c 65 5f 63 6f 6e 73 74 72 75 63 74 6f 72 5f 72 65 Data Ascii: ect_without_properties_loose.js":function(e,t){"use strict";t.Z=function(e,t){if(null==e)return{};var n,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}},"./node_modules/@swc/helpers/lib/_possible_constructor_re
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 74 6f 5f 63 6f 6e 73 75 6d 61 62 6c 65 5f 61 72 72 61 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 28 65 29 7c 7c 6f 2e 64 65 66 61 75 6c 74 28 65 29 7c 7c 6c 2e 64 65 66 61 75 6c 74 28 65 29 7c 7c 61 2e 64 65 66 61 75 6c 74 28 29 7d 3b 76 61 72 20 72 3d 69 28 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 61 72 72 61 79 5f 77 69 74 68 6f 75 74 5f 68 6f 6c 65 73 2e 6a 73 22 29 29 2c 6f 3d 69 Data Ascii: ?e:{default:e}}},"./node_modules/@swc/helpers/lib/_to_consumable_array.js":function(e,t,n){"use strict";t.Z=function(e){return r.default(e)\|\|o.default(e)\|\|l.default(e)\|\|a.default()};var r=i(n("./node_modules/@swc/helpers/lib/_array_without_holes.js")),o=i
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 2e 64 65 66 61 75 6c 74 28 65 2c 74 29 7d 3b 76 61 72 20 72 2c 6f 3d 28 72 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 61 72 72 61 79 5f 6c 69 6b 65 5f 74 6f 5f 61 72 72 61 79 2e 6a 73 22 29 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 6c 69 62 2f 5f 77 72 61 70 5f 6e 61 74 69 76 65 5f 73 75 70 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: mped)?Array$/.test(n))return o.default(e,t)};var r,o=(r=n("./node_modules/@swc/helpers/lib/_array_like_to_array.js"))&&r.__esModule?r:{default:r}},"./node_modules/@swc/helpers/lib/_wrap_native_super.js":function(e,t,n){"use strict";t.Z=function(e){return
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 3e 30 7d 7d 29 3b 65 6c 73 65 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6e 3d 6f 28 74 29 3b 6e 3b 29 6e 3d 6f 28 74 3d 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 2c 74 3d 5b 5d 2c 6e 3d 6e 75 6c 6c 2c 72 3d 6e 75 6c Data Ascii: prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(var t=window.document,n=o(t);n;)n=o(t=n.ownerDocument);return t}(),t=[],n=null,r=nul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50328	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1944	OUT	GET /_next/static/chunks/pages/_app-b6b8bc6bcb073f4f.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1352	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 353122 Connection: close CF-Ray: 86b215c6ed3305fa-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 20650 Cache-Control: public, max-age=31536000 ETag: "2716395156da73896d9a844ce376dad7" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Wed, 27 Mar 2024 13:52:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 7rwTrJJLQ2uHJe676yvAmQ8CZjLOHgHOZAKIFKkLAIwLPtQZTf9asVM/36T+CKEay0DgWXCL2I0= x-amz-request-id: 4X4JQP2PR3P1ZGEQ x-amz-server-side-encryption: AES256 x-amz-version-id: aLDnmF_7UOsllshDbiPMtzBaifYCk9xN X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0HgElTmv9l7Nk9vFA8C9d8%2BKTjAEFl%2Fh2iS2kJUPJtXzr45uZQ47RA30JCECna22WU6hDBPslsaliZBV1b%2BJHnPOeLaCpB64B55hX%2B79zoe46fVYnO6ASWwIiwrtz3ifICGgusI6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 32 38 38 38 5d 2c 7b 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 61 6e 61 6c 79 74 69 63 73 2f 64 69 73 74 2f 69 6e 64 65 78 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 65 5b 6e 5d 3b 69 66 28 69 28 6f 29 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 29 29 7b 6c 65 74 20 65 3d 22 6f 62 6a 65 63 74 22 21 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[92888],{"./node_modules/@canva/analytics/dist/index.js":function(e,t,n){"use strict";function r(e){const t={};for(const n of Object.keys(e)){const o=e[n];if(i(o))if(Array.isArray(o)){let e="object"!
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 7d 2c 6c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 61 4b 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 2c 51 6d 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 65 7d 2c 58 58 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 2c 73 5a 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 65 7d 2c 4b 7a 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 51 4f 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 2c 78 41 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 2c 77 71 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 2c 4c 59 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d Data Ascii: },lHn:function(){return K},aKi:function(){return te},QmS:function(){return oe},XX7:function(){return ne},sZo:function(){return ie},Kz_:function(){return Z},QO3:function(){return L},xAL:function(){return z},wqc:function(){return D},LYK:function(){return k}
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 5b 74 2c 6e 5d 3d 65 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 73 2e 68 61 73 28 74 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3e 30 3f 60 3f 24 7b 74 2e 6a 6f 69 6e 28 22 26 22 29 7d 60 3a 22 22 7d 28 74 2e 73 65 61 72 63 68 29 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 72 3d 2d 31 3d 3d 3d 6e 3f 65 3a 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 29 3b 74 3d 6e 65 77 20 55 52 4c 28 72 29 7d 72 65 74 75 72 6e 20 74 2e 70 61 74 68 6e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 64 65 73 69 67 6e 22 29 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 20 74 3d 65 2e 73 70 6c 69 Data Ascii: unction(e){const[t,n]=e.split("=");return s.has(t)}));return t.length>0?`?${t.join("&")}`:""}(t.search));else{const n=e.indexOf("?"),r=-1===n?e:e.substring(0,n);t=new URL(r)}return t.pathname=function(e){if(!e.startsWith("/design"))return e;const t=e.spli
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 73 5f 73 61 76 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 73 6f 75 72 63 65 3a 65 2e 73 6f 75 72 63 65 2c 74 61 72 67 65 74 69 6e 67 3a 65 2e 74 61 72 67 65 74 69 6e 67 2c 70 65 72 66 6f 72 6d 61 6e 63 65 3a 65 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 3a 65 2e 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 7d 29 7d 2c 66 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 63 6f 6c 6f 72 5f 70 61 6c 65 74 74 65 5f 63 6f 6c 6f 72 5f 77 68 65 65 6c 5f 73 65 6c 65 63 74 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 72 6f 6d 3a 61 28 65 2e 66 72 6f 6d 29 2c 74 6f 3a 61 28 65 2e 74 6f 29 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 Data Ascii: s_saved",serializeEventProperties:e=>r({source:e.source,targeting:e.targeting,performance:e.performance,functionality:e.functionality})},f={eventType:"color_palette_color_wheel_selected",serializeEventProperties:e=>r({from:a(e.from),to:a(e.to),section:e.s
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 64 65 73 69 67 6e 5f 73 63 68 6f 6f 6c 5f 73 65 65 5f 61 6c 6c 5f 73 65 6c 65 63 74 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 72 6f 6d 3a 61 28 65 2e 66 72 6f 6d 29 2c 74 6f 3a 61 28 65 2e 74 6f 29 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 7d 29 7d 2c 45 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 64 65 73 69 67 6e 5f 73 63 68 6f 6f 6c 5f 76 69 64 65 6f 5f 66 69 6e 69 73 68 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 72 6f 6d 3a 61 28 65 2e 66 72 6f 6d 29 2c 74 6f 3a 61 28 65 2e 74 6f 29 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 7d 29 7d 2c 54 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 64 65 73 69 67 6e 5f 73 63 Data Ascii: design_school_see_all_selected",serializeEventProperties:e=>r({from:a(e.from),to:a(e.to),section:e.section})},E={eventType:"design_school_video_finished",serializeEventProperties:e=>r({from:a(e.from),to:a(e.to),section:e.section})},T={eventType:"design_sc
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 70 65 3a 22 6c 65 61 72 6e 5f 70 6f 73 74 5f 63 6c 69 63 6b 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 72 6f 6d 3a 61 28 65 2e 66 72 6f 6d 29 2c 74 6f 3a 61 28 65 2e 74 6f 29 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 7d 29 7d 2c 4d 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 6c 65 61 72 6e 5f 73 65 65 5f 61 6c 6c 5f 73 65 6c 65 63 74 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 72 6f 6d 3a 61 28 65 2e 66 72 6f 6d 29 2c 74 6f 3a 61 28 65 2e 74 6f 29 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 7d 29 7d 2c 44 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 75 70 6c 6f 61 64 5f 73 74 61 72 74 65 64 22 2c 73 65 72 69 61 6c 69 Data Ascii: pe:"learn_post_clicked",serializeEventProperties:e=>r({from:a(e.from),to:a(e.to),section:e.section})},M={eventType:"learn_see_all_selected",serializeEventProperties:e=>r({from:a(e.from),to:a(e.to),section:e.section})},D={eventType:"upload_started",seriali
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 6e 74 54 79 70 65 3a 22 63 6f 6e 74 65 6e 74 5f 63 6c 69 63 6b 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 70 61 67 65 3a 65 2e 70 61 67 65 2c 70 61 67 65 5f 74 79 70 65 3a 65 2e 70 61 67 65 54 79 70 65 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 2c 63 6f 6e 74 72 6f 6c 5f 63 6f 6e 74 65 78 74 3a 65 2e 63 6f 6e 74 72 6f 6c 43 6f 6e 74 65 78 74 2c 63 6f 6e 74 72 6f 6c 5f 74 79 70 65 3a 65 2e 63 6f 6e 74 72 6f 6c 54 79 70 65 2c 63 6f 6e 74 72 6f 6c 5f 63 61 74 65 67 6f 72 79 3a 65 2e 63 6f 6e 74 72 6f 6c 43 61 74 65 67 6f 72 79 2c 6c 6f 63 61 6c 65 3a 65 2e 6c 6f 63 61 6c 65 2c 62 61 73 65 5f 75 72 6c 3a 65 2e 62 61 73 65 55 72 6c 7d 29 7d 2c 46 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 63 Data Ascii: ntType:"content_clicked",serializeEventProperties:e=>r({page:e.page,page_type:e.pageType,section:e.section,control_context:e.controlContext,control_type:e.controlType,control_category:e.controlCategory,locale:e.locale,base_url:e.baseUrl})},F={eventType:"c
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 65 50 61 67 65 2c 73 65 63 74 69 6f 6e 3a 65 2e 73 65 63 74 69 6f 6e 2c 63 6f 6e 74 72 6f 6c 5f 63 6f 6e 74 65 78 74 3a 65 2e 63 6f 6e 74 72 6f 6c 43 6f 6e 74 65 78 74 7d 29 7d 2c 57 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 6c 61 6e 67 75 61 67 65 5f 73 65 6c 65 63 74 6f 72 5f 62 61 6e 6e 65 72 5f 6c 6f 61 64 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 70 61 67 65 5f 6c 61 6e 67 75 61 67 65 3a 65 2e 70 61 67 65 4c 61 6e 67 75 61 67 65 2c 62 61 6e 6e 65 72 5f 6c 61 6e 67 75 61 67 65 3a 65 2e 62 61 6e 6e 65 72 4c 61 6e 67 75 61 67 65 7d 29 7d 2c 58 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 67 6c 6f 62 61 6c 5f 6e 61 76 5f 73 69 67 6e 75 70 5f 63 6c 69 63 6b 65 64 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 Data Ascii: ePage,section:e.section,control_context:e.controlContext})},W={eventType:"language_selector_banner_loaded",serializeEventProperties:e=>r({page_language:e.pageLanguage,banner_language:e.bannerLanguage})},X={eventType:"global_nav_signup_clicked",serializeEv
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 65 6e 64 3a 65 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 45 6e 64 2c 64 6f 6d 5f 63 6f 6d 70 6c 65 74 65 3a 65 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3a 65 2e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 2c 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3a 65 2e 6c 6f 61 64 45 76 65 6e 74 45 6e 64 2c 66 69 72 73 74 5f 70 61 69 6e 74 3a 65 2e 66 69 72 73 74 50 61 69 6e 74 2c 66 69 72 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 3a 65 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 2c 74 69 6d 65 5f 74 6f 5f 69 6e 74 65 72 61 63 74 69 76 65 3a 65 2e 74 69 6d 65 54 6f 49 6e 74 65 72 61 63 74 69 76 65 2c 61 63 74 69 76 61 74 69 6f 6e 5f 73 74 61 72 74 3a 65 2e 61 63 74 Data Ascii: end:e.domContentLoadedEventEnd,dom_complete:e.domComplete,load_event_start:e.loadEventStart,load_event_end:e.loadEventEnd,first_paint:e.firstPaint,first_contentful_paint:e.firstContentfulPaint,time_to_interactive:e.timeToInteractive,activation_start:e.act
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 4d 61 78 69 6d 75 6d 7d 29 7d 2c 69 65 3d 7b 65 76 65 6e 74 54 79 70 65 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 5f 70 6f 73 74 5f 69 6e 74 65 72 61 63 74 69 6f 6e 5f 74 69 6d 69 6e 67 22 2c 73 65 72 69 61 6c 69 7a 65 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3a 65 3d 3e 72 28 7b 66 69 72 73 74 5f 69 6e 70 75 74 5f 64 65 6c 61 79 3a 65 2e 66 69 72 73 74 49 6e 70 75 74 44 65 6c 61 79 2c 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 3a 65 2e 6c 61 72 67 65 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 2c 6c 61 72 67 65 73 74 5f 63 6f 6e 74 65 6e 74 66 75 6c 5f 70 61 69 6e 74 5f 65 6c 65 6d 65 6e 74 3a 65 2e 6c 61 72 67 65 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 45 6c 65 6d 65 6e 74 2c 73 68 65 6c 6c 5f 70 61 67 65 Data Ascii: Maximum})},ie={eventType:"performance_post_interaction_timing",serializeEventProperties:e=>r({first_input_delay:e.firstInputDelay,largest_contentful_paint:e.largestContentfulPaint,largest_contentful_paint_element:e.largestContentfulPaintElement,shell_page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50329	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1957	OUT	GET /_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_buildManifest.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1347	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 44830 Connection: close CF-Ray: 86b215c6fe8e2f19-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 20650 Cache-Control: public, max-age=31536000 ETag: "4ed7f59ac0440d4e1e5bf68902bba227" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Wed, 27 Mar 2024 13:52:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: KNsSNsgUMXNVngcZPGjsOHtgeSHz2n9ZQkklqLuJ8Ix3b1eauVlz5yPot2MlV0ehOY2lh+AD/9g= x-amz-request-id: 4X4XPJ345KQ7QYTD x-amz-server-side-encryption: AES256 x-amz-version-id: 4nkPUB.pgOb4XrGzOur1NcazbdG2u9.D X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QYMn8RAs3t9kBMulaagn%2BeMc78WTb3AKIcz8Ziz7XIIWZjrikeCWR5nK1uZe5UVkPoHzIX71ktgR4bGpeZEgPZLXD2xWwqCr1nIMIaQbL8ZtyaMgcUXnlF2lJ6l%2B18NysJwOkgnJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	22	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d Data Ascii: self.__BUILD_MANIFEST=
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 34 30 34 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 34 30 34 2e 66 34 65 34 32 37 65 33 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 34 30 34 2d 31 61 31 64 30 33 37 39 39 38 66 35 32 64 64 38 2e 6a 73 22 5d 2c 22 2f 35 30 30 5f 74 65 73 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 35 30 30 5f 74 65 73 74 2d 61 66 63 32 63 37 32 34 62 61 33 66 33 30 36 30 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2e 37 37 Data Ascii: {__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/404":["static/chunks/pages/404.f4e427e3.css","static/chunks/pages/404-1a1d037998f52dd8.js"],"/500_test":["static/chunks/pages/500_test-afc2c724ba3f3060.js"],"/_error":["static/chunks/pages/_error.77
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 61 67 69 63 2e 38 38 65 36 65 37 34 61 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 62 72 61 6e 64 2f 61 63 74 69 76 61 74 69 6f 6e 2f 6d 61 67 69 63 2d 30 62 64 66 37 61 36 38 64 32 32 34 36 63 36 37 2e 6a 73 22 5d 2c 22 2f 62 72 61 6e 64 2f 61 63 74 69 76 61 74 69 6f 6e 2f 6d 61 67 69 63 5f 65 6d 62 65 64 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 62 72 61 6e 64 2f 61 63 74 69 76 61 74 69 6f 6e 2f 6d 61 67 69 63 5f 65 6d 62 65 64 2e 64 61 33 36 34 63 32 35 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 62 72 61 6e 64 2f 61 63 74 69 76 61 74 69 6f 6e 2f 6d 61 67 69 63 5f 65 6d 62 65 64 2d 64 33 65 66 37 64 66 65 36 39 31 65 34 62 37 36 2e 6a 73 22 5d 2c 22 Data Ascii: agic.88e6e74a.css","static/chunks/pages/brand/activation/magic-0bdf7a68d2246c67.js"],"/brand/activation/magic_embed":["static/chunks/pages/brand/activation/magic_embed.da364c25.css","static/chunks/pages/brand/activation/magic_embed-d3ef7dfe691e4b76.js"],"
2024-03-27 20:21:08 UTC	474	IN	Data Raw: 6d 6d 75 6e 69 74 79 2f 61 77 61 72 64 73 2f 6e 6f 6d 69 6e 61 74 65 2e 36 33 37 35 61 33 61 38 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 61 77 61 72 64 73 2f 6e 6f 6d 69 6e 61 74 65 2d 38 33 31 31 33 38 61 38 36 62 64 32 35 64 32 30 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 6d 70 75 73 2f 68 6f 6d 65 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 6d 70 75 73 2f 68 6f 6d 65 2e 61 65 30 39 64 66 64 32 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 6d 70 75 73 2f 68 6f 6d 65 2d 61 33 35 61 64 61 38 39 31 33 32 33 39 63 31 31 2e 6a 73 22 5d 2c Data Ascii: mmunity/awards/nominate.6375a3a8.css","static/chunks/pages/community/awards/nominate-831138a86bd25d20.js"],"/community/campus/home":["static/chunks/pages/community/campus/home.ae09dfd2.css","static/chunks/pages/community/campus/home-a35ada8913239c11.js"],
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 73 65 5f 73 74 75 64 69 65 73 2f 70 6f 73 74 2e 64 30 35 62 36 37 62 31 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 73 65 5f 73 74 75 64 69 65 73 2f 70 6f 73 74 2d 61 34 30 65 63 39 62 64 33 66 34 66 33 62 35 64 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 73 65 5f 73 74 75 64 69 65 73 2f 76 69 64 65 6f 5f 70 6f 73 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 73 65 5f 73 74 75 64 69 65 73 2f 76 69 64 65 6f 5f 70 6f 73 74 2e 33 65 34 36 35 37 32 33 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 61 73 65 Data Ascii: community/case_studies/post.d05b67b1.css","static/chunks/pages/community/case_studies/post-a40ec9bd3f4f3b5d.js"],"/community/case_studies/video_post":["static/chunks/pages/community/case_studies/video_post.3e465723.css","static/chunks/pages/community/case
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 74 6f 72 73 2f 74 65 6d 70 6c 61 74 65 73 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 72 65 61 74 6f 72 73 2f 74 65 6d 70 6c 61 74 65 73 2e 62 33 65 65 36 35 63 32 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 72 65 61 74 6f 72 73 2f 74 65 6d 70 6c 61 74 65 73 2d 62 36 61 38 37 39 35 38 37 31 37 66 34 39 33 61 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 72 65 61 74 6f 72 73 2f 76 69 64 65 6f 73 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 63 72 65 61 74 6f 72 73 2f 76 69 64 65 6f 73 2e 32 66 32 61 65 38 35 38 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 Data Ascii: tors/templates":["static/chunks/pages/community/creators/templates.b3ee65c2.css","static/chunks/pages/community/creators/templates-b6a87958717f493a.js"],"/community/creators/videos":["static/chunks/pages/community/creators/videos.2f2ae858.css","static/chu
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 65 64 75 63 61 74 69 6f 6e 2f 63 6f 6e 74 61 63 74 5f 73 61 6c 65 73 2d 37 39 34 32 32 35 63 62 61 32 66 33 66 66 38 64 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 65 64 75 63 61 74 69 6f 6e 2f 64 69 73 74 61 6e 63 65 5f 65 64 75 63 61 74 69 6f 6e 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 65 64 75 63 61 74 69 6f 6e 2f 64 69 73 74 61 6e 63 65 5f 65 64 75 63 61 74 69 6f 6e 2e 34 35 61 39 63 37 63 33 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 65 64 75 63 61 74 69 6f 6e 2f 64 69 73 74 61 6e 63 65 5f 65 64 75 63 61 74 69 6f 6e 2d 37 64 62 Data Ascii: tatic/chunks/pages/community/education/contact_sales-794225cba2f3ff8d.js"],"/community/education/distance_education":["static/chunks/pages/community/education/distance_education.45a9c7c3.css","static/chunks/pages/community/education/distance_education-7db
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 6e 6f 6e 70 72 6f 66 69 74 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 68 6f 6d 65 2e 62 61 30 32 62 30 38 33 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 6e 6f 6e 70 72 6f 66 69 74 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 68 6f 6d 65 2d 61 39 35 65 38 63 63 32 61 62 39 62 38 61 64 38 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 6e 6f 6e 70 72 6f 66 69 74 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 70 6f 73 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 6e 6f 6e 70 72 6f 66 69 74 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 70 6f 73 74 2e 32 34 66 65 32 33 31 63 2e 63 73 73 22 Data Ascii: ges/community/nonprofits/case_studies_home.ba02b083.css","static/chunks/pages/community/nonprofits/case_studies_home-a95e8cc2ab9b8ad8.js"],"/community/nonprofits/case_studies_post":["static/chunks/pages/community/nonprofits/case_studies_post.24fe231c.css"
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 70 61 72 74 6e 65 72 73 68 69 70 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 68 6f 6d 65 2e 62 61 30 32 62 30 38 33 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 70 61 72 74 6e 65 72 73 68 69 70 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 68 6f 6d 65 2d 38 63 63 63 65 39 64 65 37 65 30 34 33 61 66 37 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 6d 75 6e 69 74 79 2f 70 61 72 74 6e 65 72 73 68 69 70 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 70 6f 73 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 2f 70 61 72 74 6e 65 72 73 68 69 70 73 2f 63 61 73 65 5f 73 74 75 64 69 65 73 5f 70 6f 73 74 2e 32 35 34 Data Ascii: pages/community/partnerships/case_studies_home.ba02b083.css","static/chunks/pages/community/partnerships/case_studies_home-8ccce9de7e043af7.js"],"/community/partnerships/case_studies_post":["static/chunks/pages/community/partnerships/case_studies_post.254
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 70 61 6e 79 2f 65 76 65 6e 74 73 2f 70 61 73 74 5f 64 65 74 61 69 6c 2e 66 66 38 31 33 63 30 66 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 70 61 6e 79 2f 65 76 65 6e 74 73 2f 70 61 73 74 5f 64 65 74 61 69 6c 2d 66 63 64 66 63 35 31 63 66 63 35 35 38 33 30 34 2e 6a 73 22 5d 2c 22 2f 63 6f 6d 70 61 6e 79 2f 65 76 65 6e 74 73 2f 75 70 63 6f 6d 69 6e 67 5f 64 65 74 61 69 6c 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f 6d 70 61 6e 79 2f 65 76 65 6e 74 73 2f 75 70 63 6f 6d 69 6e 67 5f 64 65 74 61 69 6c 2e 61 63 36 31 65 36 61 63 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 63 6f Data Ascii: static/chunks/pages/company/events/past_detail.ff813c0f.css","static/chunks/pages/company/events/past_detail-fcdfc51cfc558304.js"],"/company/events/upcoming_detail":["static/chunks/pages/company/events/upcoming_detail.ac61e6ac.css","static/chunks/pages/co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50327	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1965	OUT	GET /_next/static/chunks/pages/product/visual_suite/home-77221781a3080c3f.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1351	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 1525579 Connection: close CF-Ray: 86b215c6f90a5a7b-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 18952 Cache-Control: public, max-age=31536000 ETag: "b205a9a803f0bea000cf8928cf4bbc0b" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Wed, 27 Mar 2024 09:21:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: hAgPipW/USENMxU8Arh9aaGu8fa8xM4je2tHUewoutlp+aR+SOv50pKaxIL0dDFZhpaEV2qBebc= x-amz-request-id: B29A6GM0CH87RN5J x-amz-server-side-encryption: AES256 x-amz-version-id: J8O.l8lu96h2zppCX8sdv1LmRwI8Y2PV X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJ2DXgzoipvT1K8xtv237t3ZGpHoq%2B5egdnbeO77w7vcdjiNbyuH4AQhxP60m7kWA6ugee5MQ0GnfnqT56hu%2BQ678x44ZOO%2F6b83VAyZHxIS6fTeQZFA1wHZaO7lfZXOCtqsmz26"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	18	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b Data Ascii: (self.webpackChunk
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 32 39 34 2c 37 37 36 35 30 2c 31 36 39 34 38 2c 39 31 32 37 35 2c 32 34 30 36 31 5d 2c 7b 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 65 61 73 65 6c 2f 6c 69 62 2f 73 72 63 2f 62 61 73 65 2f 64 65 62 6f 75 6e 63 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 62 6f 75 6e 63 65 3d 76 6f 69 64 20 30 3b 74 2e 64 65 62 6f 75 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 35 30 2c 6e 3d 7b 7d 29 7b 6c 65 Data Ascii: _N_E=self.webpackChunk_N_E\|\|[]).push([[50294,77650,16948,91275,24061],{"./node_modules/@canva/easel/lib/src/base/debounce.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.debounce=void 0;t.debounce=function(e,t=50,n={}){le
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 6e 5b 72 5d 3d 61 29 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 6d 61 6b 65 4f 62 73 65 72 76 61 62 6c 65 29 28 65 2c 6e 29 7d 3b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 69 66 28 74 20 69 6e 20 65 29 7b 69 66 28 65 5b 74 5d 21 3d 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 6c 28 60 43 61 6e 20 6e 6f 74 20 61 70 70 6c 79 20 61 20 64 69 66 66 65 72 65 6e 74 20 64 65 63 6f 72 61 74 6f 72 20 74 6f 20 74 68 65 20 61 6c 72 65 61 64 79 20 64 65 63 6f 72 61 74 65 64 20 24 7b 74 7d 20 70 72 6f 70 65 72 74 79 2e 20 43 68 65 63 6b 20 74 68 65 20 70 61 72 65 6e 74 20 63 6c 61 73 73 20 64 65 Data Ascii: defineProperty(e,r,{configurable:!0}),n[r]=a));return(0,r.makeObservable)(e,n)};const a=new WeakMap;function o(e,t,n){if(t in e){if(e[t]!==n)throw new l(`Can not apply a different decorator to the already decorated ${t} property. Check the parent class de
2024-03-27 20:21:08 UTC	476	IN	Data Raw: 74 68 72 6f 77 20 6e 2e 65 72 72 6f 72 7d 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 65 61 73 65 6c 2f 6c 69 62 2f 73 72 63 2f 62 61 73 65 2f 70 72 6f 74 6f 2f 62 69 6e 61 72 79 2f 63 6f 6e 73 74 61 6e 74 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 42 69 6e 61 72 79 43 6f 6e 73 74 61 6e 74 73 3d 74 2e 57 69 72 65 54 79 70 65 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 49 4e 56 41 4c 49 44 3d 2d 31 5d 3d 22 49 4e 56 41 4c 49 44 22 2c 65 5b 65 2e 56 41 52 49 4e 54 3d 30 5d 3d 22 56 41 52 49 Data Ascii: throw n.error}}},"./node_modules/@canva/easel/lib/src/base/proto/binary/constants.js":function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.BinaryConstants=t.WireType=void 0,function(e){e[e.INVALID=-1]="INVALID",e[e.VARINT=0]="VARI
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 5f 33 32 3a 34 32 39 34 39 36 37 32 39 36 2c 54 57 4f 5f 54 4f 5f 35 32 3a 34 35 30 33 35 39 39 36 32 37 33 37 30 34 39 36 2c 54 57 4f 5f 54 4f 5f 36 33 3a 30 78 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 2c 54 57 4f 5f 54 4f 5f 36 34 3a 30 78 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 7d 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 65 61 73 65 6c 2f 6c 69 62 2f 73 72 63 2f 62 61 73 65 2f 70 72 6f 74 6f 2f 62 69 6e 61 72 79 2f 64 65 63 6f 64 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 42 69 6e 61 72 79 Data Ascii: _32:4294967296,TWO_TO_52:4503599627370496,TWO_TO_63:0x8000000000000000,TWO_TO_64:0x10000000000000000}},"./node_modules/@canva/easel/lib/src/base/proto/binary/decode.js":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Binary
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 3c 3c 31 36 7c 65 2e 72 65 61 64 28 29 3c 3c 32 34 7d 73 74 61 74 69 63 20 72 65 61 64 49 6e 74 36 34 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 72 65 61 64 55 69 6e 74 33 32 28 65 29 2c 6e 3d 61 2e 72 65 61 64 55 69 6e 74 33 32 28 65 29 3b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 49 6e 74 36 34 28 74 2c 6e 29 7d 73 74 61 74 69 63 20 72 65 61 64 44 6f 75 62 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 61 64 46 6c 6f 61 74 28 29 7d 73 74 61 74 69 63 20 72 65 61 64 42 6f 6f 6c 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 72 65 61 64 28 29 7d 73 74 61 74 69 63 20 72 65 61 64 45 6e 75 6d 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 61 64 53 69 67 6e 65 64 56 61 72 69 6e 74 33 32 28 65 29 7d 73 74 61 74 69 63 20 72 65 61 64 53 74 72 69 6e 67 28 65 2c 74 29 7b Data Ascii: <<16\|e.read()<<24}static readInt64(e){const t=a.readUint32(e),n=a.readUint32(e);return a.joinInt64(t,n)}static readDouble(e){return e.readFloat()}static readBool(e){return!!e.read()}static readEnum(e){return a.readSignedVarint32(e)}static readString(e,t){
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 62 2f 73 72 63 2f 62 61 73 65 2f 70 72 6f 74 6f 2f 62 69 6e 61 72 79 2f 64 65 63 6f 64 65 2e 6a 73 22 29 2c 73 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 65 61 73 65 6c 2f 6c 69 62 2f 73 72 63 2f 62 61 73 65 2f 70 72 6f 74 6f 2f 62 69 6e 61 72 79 2f 72 65 61 64 5f 62 75 66 66 65 72 2e 6a 73 22 29 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 65 2e 69 6e 69 74 28 29 3b 63 6f 6e 73 74 20 6f 3d 7b 7d 3b 61 77 61 69 74 20 74 2e 6c 6f 61 64 42 79 74 65 73 28 34 29 3b 63 6f 6e 73 74 20 73 3d 69 2e 42 69 6e 61 72 79 44 65 63 6f 64 65 72 2e 72 65 61 64 55 6e 73 69 67 6e 65 64 56 61 72 69 6e 74 33 32 28 74 29 2c 6c 3d 74 2e 62 79 74 65 73 52 65 61 64 2b 73 3b 66 6f 72 28 3b 74 2e 62 79 74 Data Ascii: b/src/base/proto/binary/decode.js"),s=n("./node_modules/@canva/easel/lib/src/base/proto/binary/read_buffer.js");async function l(e,t){let n=e.init();const o={};await t.loadBytes(4);const s=i.BinaryDecoder.readUnsignedVarint32(t),l=t.bytesRead+s;for(;t.byt
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 20 61 2e 46 69 65 6c 64 54 79 70 65 2e 52 45 50 45 41 54 45 44 3a 61 77 61 69 74 20 74 2e 6c 6f 61 64 42 79 74 65 73 28 34 29 3b 63 6f 6e 73 74 20 6e 3d 69 2e 42 69 6e 61 72 79 44 65 63 6f 64 65 72 2e 72 65 61 64 55 6e 73 69 67 6e 65 64 56 61 72 69 6e 74 33 32 28 74 29 2c 6f 3d 74 2e 62 79 74 65 73 52 65 61 64 2b 6e 2c 73 3d 5b 5d 3b 66 6f 72 28 3b 74 2e 62 79 74 65 73 52 65 61 64 3c 6f 3b 29 73 2e 70 75 73 68 28 61 77 61 69 74 20 65 2e 72 65 61 64 56 61 6c 75 65 28 74 29 29 3b 72 65 74 75 72 6e 20 73 3b 63 61 73 65 20 61 2e 46 69 65 6c 64 54 79 70 65 2e 4d 41 50 3a 61 77 61 69 74 20 74 2e 6c 6f 61 64 42 79 74 65 73 28 34 29 3b 63 6f 6e 73 74 20 6c 3d 69 2e 42 69 6e 61 72 79 44 65 63 6f 64 65 72 2e 72 65 61 64 55 6e 73 69 67 6e 65 64 56 61 72 69 6e 74 33 Data Ascii: a.FieldType.REPEATED:await t.loadBytes(4);const n=i.BinaryDecoder.readUnsignedVarint32(t),o=t.bytesRead+n,s=[];for(;t.bytesRead<o;)s.push(await e.readValue(t));return s;case a.FieldType.MAP:await t.loadBytes(4);const l=i.BinaryDecoder.readUnsignedVarint3
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 5f 33 32 29 3b 6e 3e 30 7c 7c 74 3e 31 32 37 3b 29 65 2e 77 72 69 74 65 28 31 32 37 26 74 7c 31 32 38 29 2c 74 3d 28 74 3e 3e 3e 37 7c 6e 3c 3c 32 35 29 3e 3e 3e 30 2c 6e 3e 3e 3e 3d 37 3b 65 2e 77 72 69 74 65 28 74 29 7d 73 74 61 74 69 63 20 77 72 69 74 65 55 6e 73 69 67 6e 65 64 56 61 72 69 6e 74 33 32 28 65 2c 74 29 7b 66 6f 72 28 73 28 74 3d 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 29 29 2c 73 28 74 3e 3d 30 26 26 74 3c 72 2e 42 69 6e 61 72 79 43 6f 6e 73 74 61 6e 74 73 2e 54 57 4f 5f 54 4f 5f 33 32 29 3b 74 3e 31 32 37 3b 29 65 2e 77 72 69 74 65 28 31 32 37 26 74 7c 31 32 38 29 2c 74 3e 3e 3e 3d 37 3b 65 2e 77 72 69 74 65 28 74 29 7d 73 74 61 74 69 63 20 77 72 69 74 65 53 69 67 6e 65 64 56 61 72 69 6e 74 33 32 28 65 2c 74 29 7b 69 66 28 73 28 74 3d Data Ascii: _32);n>0\|\|t>127;)e.write(127&t\|128),t=(t>>>7\|n<<25)>>>0,n>>>=7;e.write(t)}static writeUnsignedVarint32(e,t){for(s(t===Math.floor(t)),s(t>=0&&t<r.BinaryConstants.TWO_TO_32);t>127;)e.write(127&t\|128),t>>>=7;e.write(t)}static writeSignedVarint32(e,t){if(s(t=
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 20 74 3d 65 3c 30 3b 6c 65 74 20 6e 3d 28 65 3d 4d 61 74 68 2e 61 62 73 28 65 29 29 3e 3e 3e 30 2c 69 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 65 2d 6e 29 2f 72 2e 42 69 6e 61 72 79 43 6f 6e 73 74 61 6e 74 73 2e 54 57 4f 5f 54 4f 5f 33 32 29 3b 69 3e 3e 3e 3d 30 2c 74 26 26 28 69 3d 7e 69 3e 3e 3e 30 2c 6e 3d 7e 6e 3e 3e 3e 30 2c 6e 2b 3d 31 2c 6e 3e 34 32 39 34 39 36 37 32 39 35 26 26 28 6e 3d 30 2c 69 2b 2b 2c 69 3e 34 32 39 34 39 36 37 32 39 35 26 26 28 69 3d 30 29 29 29 2c 61 3d 6e 2c 6f 3d 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 7d 74 2e 42 69 6e 61 72 79 45 6e 63 6f 64 65 72 3d 69 7d 2c 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 63 61 6e 76 61 2f 65 61 73 65 6c 2f 6c 69 Data Ascii: t=e<0;let n=(e=Math.abs(e))>>>0,i=Math.floor((e-n)/r.BinaryConstants.TWO_TO_32);i>>>=0,t&&(i=~i>>>0,n=~n>>>0,n+=1,n>4294967295&&(n=0,i++,i>4294967295&&(i=0))),a=n,o=i}}function s(e){if(!e)throw new Error}t.BinaryEncoder=i},"./node_modules/@canva/easel/li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50326	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1955	OUT	GET /_next/static/cf99caa0a63f70fb589dd6e69b96ec3e/_ssgManifest.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1346	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: text/javascript Content-Length: 77 Connection: close CF-Ray: 86b215c6f8ae2430-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 20650 Cache-Control: public, max-age=31536000 ETag: "b6652df95db52feb4daf4eca35380933" Expires: Thu, 27 Mar 2025 20:21:08 GMT Last-Modified: Wed, 27 Mar 2024 13:52:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: G6AXFwkJh3FMHEqEax8ArG9FjCv9sm3hrkjFgBmOXdviq3uWv/nPn4gaUB7RQLVioID/6IsE+fo= x-amz-request-id: 4X4HAPH12SBGYCKP x-amz-server-side-encryption: AES256 x-amz-version-id: beFqZ.PmnHgrcQWbiuwYbM3OeSsmQ4FZ X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oTm4HUkbq5TUO4xk5zDzYeNq2XZZ2QOhSHZysGB53UvNLLQOFZKzzV6Cr5iUgt%2F8TYqX382gSl8UVqGIelqzsIzNE8ieu8nb%2FlXIc3hit5PQvHpH7Thty3fRSKN9qJgVUBM5n8z%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	23	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 Data Ascii: self.__SSG_MANIFEST=new
2024-03-27 20:21:08 UTC	54	IN	Data Raw: 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50330	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1995	OUT	GET /blob/1374692/Wowwithvisuals.7a445a34.avif HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: application/octet-stream Content-Length: 59980 Connection: close CF-Ray: 86b215c8ef6d242f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777350 Cache-Control: public, max-age=2592000 ETag: "121eae5461ce474672fa5c8698fc86b8" Expires: Fri, 26 Apr 2024 20:21:08 GMT Last-Modified: Tue, 27 Feb 2024 03:59:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 4O+YZgWov4rVWm/wtXR/Un+jFTK/PWxvCOsuDpHPe3O6ToigUdpiPR1dkdv7hWoA96XjKhEWor8= x-amz-request-id: N5R7J81H6FCZV37Q x-amz-server-side-encryption: AES256 x-amz-version-id: 18BIpxNqslUiihcwM4CI6XDfdmsNV7qr X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sh66YiqCPmYjzyxkhY3b8gKSXc6xgCclVuEaqvvgof24AyY%2BYfjvXgCxvo2jUHa5Bx%2FOLmFnGMHrXErK2z%2FBICASGEqvICdFolyonqDIUuVp2EWSOXcQ4U%2BqXCEHhosc8rRgxNN8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	9	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 Data Ascii: ftypa
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 ea 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 22 69 6c 6f 63 00 00 00 00 44 40 00 01 00 01 00 00 00 00 01 0e 00 01 00 00 00 00 00 00 e9 3e 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 0c 61 76 31 43 81 24 02 00 00 00 00 14 69 73 70 65 00 00 00 00 00 00 02 58 00 00 02 58 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 17 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 04 81 82 03 84 00 00 Data Ascii: vifavifmif1miafmeta!hdlrpictpitm"ilocD@>#iinfinfeav01jiprpKipcocolrnclxav1C$ispeXXpixiipma
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 78 64 b7 85 91 91 1d fb 1f 77 7c 33 81 02 42 9c 90 79 51 5f 38 41 d2 9a b4 e0 c6 10 75 88 61 86 75 16 a4 fb 4c 1f 3d 6c 73 4a 10 3c 35 c4 06 86 b8 17 44 50 00 8b 59 4b c4 bd 2a ef 85 61 d1 90 6c 5e 4a 6a 7a ea ef c3 e4 92 13 4e 62 eb 21 7c cd 59 e3 ee 4d e6 ff 03 9a 0a 52 e2 6a f6 6d da e2 7d b0 d6 ef 49 64 37 75 9b 92 76 dd 5a ad 9d f1 3d 9a 4a df 4e 85 77 04 d3 a0 dc 41 cf 5e b5 7b 40 ff b7 1f 95 1d 07 80 a7 b8 2e 61 bb 75 c6 8e dc 60 7d 7f f3 8a da cc d3 9e db 3e c7 9a 2f ef 95 1c 4f c2 bb 1b 11 d3 e5 3d da 00 a4 34 80 0f 8c 7e 7c 00 29 80 a9 fd af 17 59 b3 5f e6 84 71 f4 e2 38 8c 4e 3d 02 87 58 26 f6 f5 18 ac e9 3d 73 e4 c8 9f ed 3c a4 c8 8b fb c9 aa 59 14 0b 92 b7 cd db 09 ed 16 1a c5 b5 0b 13 69 12 b9 6d cd 8e 9c 74 75 6a c9 00 c9 da 0d c4 c1 db a7 Data Ascii: xdw\|3ByQ_8AuauL=lsJ<5DPYK*al^JjzNb!\|YMRjm}Id7uvZ=JNwA^{@.au`}>/O=4~\|)Y_q8N=X&=s<Yimtuj
2024-03-27 20:21:08 UTC	478	IN	Data Raw: 25 cf 0a 11 21 03 26 ed 43 d9 95 e0 76 1f 08 d8 77 d3 5c e9 64 3e 9a f7 fe 03 1e 9f e8 8e d5 2b fa 7c 4b ae 0d 9d 8a 0f 35 0a 45 f2 30 f1 66 ca ff ce 10 0d f5 37 70 cb d9 1f 7b 13 db 96 19 2d 08 79 96 63 ca 64 10 9e 6d 20 32 d1 28 03 49 98 48 38 2a f3 31 98 ab ea e6 7d 93 7a b4 ad 07 db fa 23 71 e0 be c2 a2 de f0 b9 fe 24 9b 6c 6a 0c e8 42 9c 54 2a 86 d2 d8 36 55 90 26 87 3b 45 e9 7b 4d 68 e3 c7 a4 f8 47 ca 88 bd 60 64 fe 68 53 7b 0f 6f 61 0e fc e9 8c 49 ea 6d 2f ec f1 ea 52 46 fb 47 df b2 94 2d ef f8 b8 0d 95 a3 10 0d e0 5c 67 f5 8c dc 8f c1 d1 bd f2 92 89 c1 71 e0 c0 20 e1 93 b4 d0 24 ca 24 32 ca d4 79 07 21 59 fc 51 52 ba 2b 4d f7 ca ac 05 ae f1 42 74 14 6b fe 1f 34 ac ce 12 1e f5 29 15 6a f7 eb 5a 07 4d 2c d3 a8 41 72 89 a4 f8 12 23 2c 8c 9b f0 4e a9 Data Ascii: %!&Cvw\d>+\|K5E0f7p{-ycdm 2(IH81}z#q$ljBT6U&;E{MhG`dhS{oaIm/RFG-\gq $$2y!YQR+MBtk4)jZM,Ar#,N
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 17 24 f9 f8 5a 6d 50 4d e9 35 15 f9 2d 7c ed 5e fe 1f e1 13 9d 0d 31 2d 1a 99 2c 96 38 2f dd 48 38 ab fb 61 04 d0 e2 f6 da 33 ac 73 ed 57 d8 35 ac 2b 7d de f5 96 e7 43 4a 6a 8d 8f 1d f7 47 fd 17 32 24 db d5 9d c6 da 7b 2f 03 6e 56 87 66 b7 e0 43 78 a9 43 85 7a 5f 37 d8 28 f8 52 3c 76 57 f4 f6 f8 99 09 d1 f9 3d cc 17 09 f3 7a f0 28 bc dc 80 74 ec 5e 3b 41 5c 66 06 3a fc c9 a0 49 56 0b 8b de f7 4e 55 c1 a5 d5 09 fb 89 fc ab f6 16 57 44 40 55 bd 47 85 7a b0 2c 82 72 5f 10 e1 2a fa 4d ce 9c 1b 7f 44 fc 93 0e 75 80 e7 3b 57 b8 c0 8c cb 02 bb a1 ff 47 4d 9d 80 b2 28 9f 8c f1 6c 03 58 88 32 22 b6 c8 44 60 e6 d0 b8 d7 aa 4b e9 05 10 c8 1d 38 2b 05 e7 fc 73 ac 12 ff 71 47 a7 cb ec c9 8c 7f c3 c1 19 57 c4 9d 8a 3e fa a6 c5 a2 b2 b9 84 21 f8 4e cf 8a c0 ff 85 c3 e4 Data Ascii: $ZmPM5-\|^1-,8/H8a3sW5+}CJjG2${/nVfCxCz_7(R<vW=z(t^;A\f:IVNUWD@UGz,r_*MDu;WGM(lX2"D`K8+sqGW>!N
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 87 cc 90 83 6a 88 e5 06 97 0a 8b 16 f5 e8 11 41 1c b0 9f 93 7b 5b 97 a0 cd f3 14 80 72 ff 8c de e7 e2 d4 e5 8b 47 60 55 bf d0 6f f8 fe c4 82 17 96 40 e4 ed 3b be 3f 6a 5f a7 f1 1e b5 1a b9 25 bf 09 3b ae 77 49 fc 29 63 1f 4e d8 f7 fb bb 57 3f 96 61 9c 2f 0f 93 7d bf 94 b6 d8 d3 2e 11 2f 21 71 d5 71 7b 00 97 38 7f e5 c5 2e fd 58 e5 79 1c 81 df b6 42 f8 7e 60 30 3e f8 1d 3d 5a 8f 63 8d 21 b2 c6 e2 c6 59 23 c7 f4 63 f2 1d ce 70 c7 97 2f ef 44 0c 27 cb 81 3b 46 1a be 77 88 92 b6 0c 13 95 94 e9 33 6d 72 66 32 c0 35 a0 65 9b 8d 2c 18 86 35 92 6c 99 ec b2 b0 8e e9 45 40 80 d1 34 1d c2 ad 80 30 c3 44 c7 7f 64 1a 8b 79 2e 08 d8 05 b9 52 45 c0 b3 9b 8d 97 cc 8d a7 62 14 30 1e a2 45 ca 7c 94 40 ae 79 16 50 43 d6 69 00 b0 c8 21 03 7e bb ef 23 d5 69 57 75 89 c6 a7 15 Data Ascii: jA{[rG`Uo@;?j_%;wI)cNW?a/}./!qq{8.XyB~`0>=Zc!Y#cp/D';Fw3mrf25e,5lE@40Ddy.REb0E\|@yPCi!~#iWu
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 7c eb c5 b1 b3 1d 5f 96 04 cb 71 04 3c be d2 95 a8 44 27 6c 51 6b 3d 8a f6 02 0b db 79 22 98 cf 23 dc 61 6e 18 3e b3 33 65 df 90 7a a8 46 c6 08 05 0d 70 f8 74 cf e9 ad 74 12 6f 4a c5 69 85 dd 71 7e 8a 11 21 d6 2f 3d 52 f8 29 69 ee d5 f6 24 a9 02 00 2d a9 d5 9a 10 b8 16 3a 0f 32 77 93 e8 81 3b 64 1c 92 a8 3d 39 c8 5b 1d 06 65 b2 9f 1c 8d 04 cb 7b 45 df 6f 6a cd 48 cf 1a 72 7d 4f 05 ec a3 d4 f8 61 a0 cf 7d 1f 3d 4a 24 6c e7 c0 f3 c7 7a ff 13 cd 9e 47 58 e8 00 6c 04 80 2b b0 c6 a9 c8 fc de 12 b7 68 ec 35 f6 2a 62 d4 6d df 16 bb 46 97 c0 ad 88 6a a4 c1 35 29 bd 3f a7 11 aa 59 88 3f b5 1f e8 67 98 36 fd 1d 9a 1a ea dd c1 ca 98 56 2b a0 85 19 92 c3 00 93 96 e3 9c 91 b6 91 8b b7 70 21 c0 33 a9 42 5c 1c f4 88 71 64 d6 60 4b 51 88 04 c6 40 18 39 9f c9 ce df 1a ab Data Ascii: \|_q<D'lQk=y"#an>3ezFpttoJiq~!/=R)i$-:2w;d=9[e{EojHr}Oa}=J$lzGXl+h5*bmFj5)?Y?g6V+p!3B\qd`KQ@9
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: b5 59 3f 97 4a cd 51 e5 bf bc ad aa 45 c1 80 ea b4 20 67 68 74 a0 82 6a 1e bf d3 00 79 fc 06 8b 3b a7 1c be 58 b8 d8 61 ec ad 3e 75 20 f2 1a d2 80 e0 fb 87 66 15 38 13 32 40 02 6e 9b 3b 79 de 48 d9 fc c7 31 09 71 5a 8b f5 69 e5 e7 8b 08 4a 55 bb 09 36 aa 39 03 a3 32 5b 34 d5 ae f1 67 67 98 d1 09 35 a3 ba 9d 46 be 4f 0a df 1f 64 27 e8 9d a8 ba 30 31 eb ba e3 e4 8d ad b4 55 86 4f b1 95 19 f9 15 23 d4 9f 16 c5 e3 79 22 f2 dc 59 08 d7 bb 74 2d 4c 5d 42 55 75 89 c3 de 62 f4 b8 5b 27 14 a1 87 c4 21 cb af 81 ed a7 76 5f 75 5b a5 98 f1 c3 35 ab 6f a6 27 cc 3d b4 6b 05 f8 5d de 19 a7 f5 40 1a dd 7c 09 a6 f3 68 da 1d cd 74 ee d7 55 08 78 dd b0 88 df 2e 79 3b c6 87 b2 ac 39 84 cc 56 ea f4 65 e7 ab 47 01 5d 95 0d ae f2 e5 be f0 8b 98 6c 86 2d 6b c2 75 c9 98 f7 1e 41 Data Ascii: Y?JQE ghtjy;Xa>u f82@n;yH1qZiJU692[4gg5FOd'01UO#y"Yt-L]BUub['!v_u[5o'=k]@\|htUx.y;9VeG]l-kuA
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 5d 9e 6c f5 f8 5a 6e 99 3d 59 04 c6 e9 16 bb f0 bb bc b3 ad ac 1c c1 99 c4 1e a8 00 fd 66 c7 6b 8a ea 36 2e 41 d4 8f a0 4e 02 37 92 8c 32 53 5b 40 5c 9a 36 a9 73 9f 9e 66 14 02 5a 78 a1 5a 36 7d de 35 48 82 d4 8d 43 d9 da 10 c8 1b b3 7b 63 96 52 a1 c3 2e 6c 54 8f aa 5e 1b 6d a6 f8 ea eb 61 64 7e 97 78 71 72 83 b8 83 11 90 28 99 de ea 00 8f a0 23 05 ed e5 23 a8 f3 44 29 0b 79 01 00 9b 65 e0 c8 16 ee 02 f0 78 1d 3a c7 13 bc fe 49 75 6c 39 03 09 da 8b fb b0 bf 51 3d 06 a6 ac 15 f7 94 cc 53 60 55 86 a2 44 f2 15 37 05 c8 bd d4 4e 69 af 04 6e 69 38 d7 5f dd 55 4d 8b 12 07 fe df e0 1a b3 ae 71 88 c5 19 32 07 31 c7 fe ba e8 73 07 50 68 c6 bc 32 c8 c8 67 00 b7 4d b0 76 e3 19 d3 60 4e 37 f0 9a db 31 26 48 ba d9 77 a7 da 21 e3 7c 84 91 b0 57 a6 30 07 fb 6d 1b 3e 64 Data Ascii: ]lZn=Yfk6.AN72S[@\6sfZxZ6}5HC{cR.lT^mad~xqr(##D)yex:Iul9Q=S`UD7Nini8_UMq21sPh2gMv`N71&Hw!\|W0m>d
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 58 85 d3 a4 0c d5 b7 77 8e 46 f9 1e d5 99 ba 98 35 10 b7 87 7d 4e 68 37 ea 47 59 0a df d6 da eb c2 c1 2e 11 51 91 a8 2f fa f0 11 5b 66 6e 9b c9 6c 5e b0 7b 14 4d f0 9c 56 50 04 80 f8 b9 f0 20 c1 41 f5 2d f0 17 17 5b 73 2c f9 f0 1a 70 81 c2 e9 a6 00 9b 22 cb a1 e4 37 ae dd 8c cf 8e a6 c7 d5 89 47 e5 de 14 90 bc f6 a5 00 b7 39 07 26 88 73 23 f9 ae f7 71 54 a7 32 7b 34 38 52 9a e0 2b c0 30 ca d8 de 18 e2 fc d6 31 5a 57 e5 05 58 8c 07 86 2a dd 78 91 1f c6 11 89 3b 69 f1 ad 62 78 a2 a8 a5 ff 31 ed fd fc 57 2f 3d 99 3b 12 31 c1 9c 71 4e 13 a2 58 b5 b8 0c ff 40 32 fd dd f3 7e 9e e7 b9 67 02 da b8 1a 8a a7 13 14 06 ba 9c 8b 2b 88 24 1d 81 af fc 78 cb 1d cb 22 ae 9a cd a7 f0 0b b8 00 39 79 15 44 53 65 6b bb 25 ee 74 be fa 80 af fb dd d6 4a 36 5b b3 61 e2 d4 9e f4 Data Ascii: XwF5}Nh7GY.Q/[fnl^{MVP A-[s,p"7G9&s#qT2{48R+01ZWX*x;ibx1W/=;1qNX@2~g+$x"9yDSek%tJ6[a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50331	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1998	OUT	GET /blob/1373917/SuperchargewithAI.7fceec79.avif HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: application/octet-stream Content-Length: 24358 Connection: close CF-Ray: 86b215ca1c390737-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782100 Cache-Control: public, max-age=2592000 ETag: "4e998bf9187f9de2c02ae9393ff244ac" Expires: Fri, 26 Apr 2024 20:21:08 GMT Last-Modified: Mon, 26 Feb 2024 02:33:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: E8k9uUK8RpEbHvtjXC2bhaPZBQIaDzNqpEhvAv9xRFNt19gjEpfiYuxMogqKjmBua/449C0FiJA= x-amz-request-id: HYBZA28S0GHHJ79C x-amz-server-side-encryption: AES256 x-amz-version-id: 0qPJjQVUtFgkemI26.x0hrM.yBWJrbla X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXIQAuDmHyU%2FwUkUYBYAo99HS6SOdsI%2FngerryRmDyb4WpAIx07%2BLQwVHWdNdJomGUxZJYTA6c2uKbVWURGNUEDsowa9YaB60GW5UyE2Hq%2FGHIIWYAWzyMZQGeTvoal7EKPaddHM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 01 98 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 34 69 6c 6f 63 00 00 00 00 44 40 00 02 00 02 00 00 00 00 01 bc 00 01 00 00 00 00 00 00 01 d1 00 01 00 00 00 00 03 8d 00 01 00 00 00 00 00 00 5b 99 00 00 00 38 69 69 6e 66 00 00 00 00 00 02 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 15 69 6e 66 65 02 00 00 00 00 02 00 00 61 76 30 31 00 00 00 00 d7 69 70 72 70 00 00 00 b1 69 70 63 6f 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 0c 61 76 31 43 81 05 1c 00 00 00 00 14 69 73 70 65 00 00 00 00 00 Data Ascii: ftypavifavifmif1miafmeta!hdlrpictpitm4ilocD@[8iinfinfeav01infeav01iprpipcocolrnclxav1Cispe
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: a5 a6 64 e7 a5 17 9f 20 6f c6 8c bb 01 13 6e 76 2b e4 b3 78 c4 46 28 23 96 86 27 8b 4a 13 96 74 93 29 df 70 2e 43 c3 7d 28 da e8 54 0b 30 b9 3b 99 b1 4c 86 db 5f 6e f7 5d e5 ca a3 40 96 01 c7 a2 ec f6 b9 48 f5 4f 63 33 bc 86 49 10 50 6c 94 91 ac fb 2a 50 7e 7d d6 62 06 52 e3 2f 7d 56 bd bd 19 d0 90 22 2c 04 0f da 53 5e 8e be 55 75 fc 8f e9 a4 ad d9 b7 29 4a 38 e6 5c 9e ed 0a bc b9 49 e5 46 7e 41 c1 a3 4e 17 fd ff aa 78 85 b3 37 9a d2 47 8c 70 78 ec 29 c8 fd d8 b4 ed c9 d0 50 e5 57 39 a8 bf c3 f2 ae 9d 4f ad 42 45 ac cf 80 58 e3 2d 1d bb 1f a4 04 3c 3e 0f 47 a5 d0 1b 35 e9 ae 08 32 40 57 0e e5 d2 26 5e d4 f3 ab 77 98 0d 98 32 a1 73 64 d9 33 57 d5 bd 54 2a 86 86 bb 96 48 5c e9 a9 24 a0 84 91 2e ac 12 d8 b5 57 87 c0 60 99 81 b6 0b 94 23 e2 93 12 f2 9d e8 1f Data Ascii: d onv+xF(#'Jt)p.C}(T0;L_n]@HOc3IPlP~}bR/}V",S^Uu)J8\IF~ANx7Gpx)PW9OBEX-<>G52@W&^w2sd3WTH\$.W`#
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 7d 9f 95 7f fc 15 ce 6c 3f ff d3 45 29 e6 d0 98 66 5d af f0 9c 76 0e 16 97 ec d3 4f a5 c4 fa 44 6e 49 f5 cb e8 74 32 7e d5 c4 82 01 35 f9 0a de eb e5 dc 92 5d 81 fd da 71 fe 97 39 20 c3 be 52 99 c6 fd ef 94 d8 10 ee 69 14 1b 93 ae 27 c9 91 70 5c 75 a0 a8 95 67 75 37 7f 3a 0f 5e f9 4b d8 d2 a9 a4 6b 9c f7 1c db 4b 5c 3d 9c 4e 08 5d 12 7d 1f c8 bc a6 b2 cc 8a 17 9d 5b 9b 3d 03 1d 5c 71 98 f2 94 e1 01 95 a5 85 6a b9 1a 59 29 c1 ab 11 9b 2b 77 19 48 17 fc 2a 55 0f a9 30 6d d5 3f 77 f7 51 22 39 4a 9d 57 28 0b c9 68 77 06 fe 3a bf 8c 46 91 56 de f3 48 9b 35 9f 33 13 49 15 ac 72 18 f3 49 40 d0 18 7d f4 10 a1 b9 83 40 fa 28 91 80 6b 47 96 46 16 66 ba 1f d6 33 03 7e c3 b5 19 37 89 8d 2b 56 dd 36 a3 12 d4 6c 06 c1 7f 1e ed 61 a7 f6 9f ff 28 57 30 d3 72 f8 0b 3a be Data Ascii: }l?E)f]vODnIt2~5]q9 Ri'p\ugu7:^KkK\=N]}[=\qjY)+wH*U0m?wQ"9JW(hw:FVH53IrI@}@(kGFf3~7+V6la(W0r:
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: f8 7f 13 89 61 ee da 43 7d aa 57 71 4b 1b 07 73 21 c1 d2 fa ab 42 0a f3 37 73 b3 67 54 bf 07 46 30 01 d7 dc 24 6b 36 38 73 f2 8c a0 63 ad 09 83 7f 46 2b 24 48 8f 29 4a ce df 4a 41 dd 1c 38 bb 7f a7 7b de c9 14 4d 51 0e 02 99 29 5f 1b b6 6a 61 72 c5 c2 8b 95 6f 2a 02 7c 71 03 c9 4d 47 be 53 c4 5b a0 9a 08 53 0d a0 82 3c c6 ed ca 60 07 34 09 87 0e 42 77 6d 4e 45 1c ca cc 61 44 d0 c4 ef d0 4f c7 de 17 c9 e3 d9 93 d5 1d cd 4e a6 cc 3e 3e a4 61 2a 90 ad 2a 88 f3 64 56 40 09 7c d3 1b d4 41 09 01 74 8f d7 92 16 15 99 04 10 56 0a a0 c1 36 23 98 be 9f 7a 44 a8 58 33 07 15 71 bf 38 fa 64 4f 9a 19 96 40 8f 4b 31 07 f9 17 3e ed c1 06 aa 30 57 d8 f3 79 af 66 1a df 8e 88 05 35 c6 8a a0 74 72 b4 8b f8 cf 2c 74 eb 63 20 4f 4a 44 91 8e 08 7a f4 e5 57 59 df 09 b2 5d c3 87 Data Ascii: aC}WqKs!B7sgTF0$k68scF+$H)JJA8{MQ)_jaro\|qMGS[S<`4BwmNEaDON>>a*dV@\|AtV6#zDX3q8dO@K1>0Wyf5tr,tc OJDzWY]
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 0c f5 a1 7d 57 4e 8d e6 a8 9f d8 96 85 ad f4 bf 8d f6 ad 60 09 02 7c 1f 12 01 fe 1a f2 cd 40 93 82 40 46 c3 61 ed 8a 92 49 b0 1e 42 44 05 1e d2 d6 97 12 fb 55 16 57 16 af 3d 0c 03 8c c8 04 82 44 77 93 c9 8a 87 36 bb 6e c6 fe 0f 11 81 10 ba f2 9f a1 31 e8 eb c9 5d 38 fa 98 2c 9f 5f 6b 45 6a b8 1f e0 24 d0 83 41 e5 34 33 1c 61 03 c3 be 9c f6 8f 29 36 47 8e dc 09 fa f0 60 86 db cb 70 0e a3 39 fa 9e 81 56 13 cb 4d 8d 48 e5 92 06 53 6d 70 70 00 cc 42 4d 14 4b 5d 17 49 61 95 54 b5 f5 2c 8f 54 ec b5 dc df c6 da f6 73 cc 25 e8 b6 33 1b 61 d4 24 c7 05 0c cd ec c2 41 03 d7 a6 8d 4b d4 0d 94 8d 93 d3 4d 35 07 73 2e 0d 6c d1 07 a8 bc 30 1d df be 1d 1a 36 cd 95 76 46 a5 97 a1 4f b3 83 2a 47 d0 25 a8 3d e1 87 68 97 4a 6a 17 88 bf f7 1a 64 ec b5 26 db ab 2e ee 48 0b 9f Data Ascii: }WN`\|@@FaIBDUW=Dw6n1]8,_kEj$A43a)6G`p9VMHSmppBMK]IaT,Ts%3a$AKM5s.l06vFO*G%=hJjd&.H
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 79 50 de e2 8f a2 b3 08 d0 a0 28 b1 47 bd cd 70 af 9b d7 92 21 6d dc 4c 80 a5 d1 e6 ff db 8e 3b 44 ce 81 f2 11 99 6b b8 2a 1b a7 38 43 30 9e 4b 74 58 bc 0e fa 47 c6 00 e4 9d 3f 43 fe 97 89 de 97 96 33 bc 15 97 c1 27 1e 37 ac cf 92 eb fa af 75 d4 50 01 6a 1f 3e 8d 70 da f3 e5 69 21 4b 58 f0 9a 11 42 94 f0 42 df 38 92 27 5b a4 94 0f a1 25 a9 fe 20 b4 f1 39 45 87 fa 55 16 7a b6 8e 7f d0 b6 c8 5f ad fc fe 9a e7 11 6c b1 c2 aa e9 59 6c 02 92 9a 9f 83 36 ba 38 ef 9d 71 71 0c 94 ac f9 d9 e8 0c cf 4b 3b 8c 43 1e 3d 56 a6 68 c7 87 5c d4 36 ec eb 7e a1 cd 13 5c 53 85 d2 e7 68 14 30 8c 40 65 9f 45 e4 20 45 7c 1a c5 80 34 d5 c5 e1 61 94 21 bf 69 8d 8e 53 d9 7d a9 58 50 b5 bc 2c 8a 4b 74 af 88 80 11 e6 1b 00 5b 57 d3 ad bd b3 bb 23 23 14 dc cd 80 5a 91 10 28 91 2c 2c Data Ascii: yP(Gp!mL;Dk*8C0KtXG?C3'7uPj>pi!KXBB8'[% 9EUz_lYl68qqK;C=Vh\6~\Sh0@eE E\|4a!iS}XP,Kt[W##Z(,,
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: e8 16 57 81 22 de 08 f9 a7 d2 8a 6a 62 4b b2 70 fb b3 75 b9 44 5e a1 69 78 91 b5 d4 15 d9 b8 4b 92 52 2b 42 09 2b d5 76 d6 ce 8d f1 58 4d 33 0f 48 49 b6 48 0f 35 ee 63 60 4f 33 ff d8 43 48 68 99 4a ac 20 61 0a 4f b4 7d 61 00 dc de fe eb c5 1f 74 e3 b3 e8 8f 4e cf f7 17 07 d0 8a 5e 1b 6a db 02 78 27 1f b9 b3 4d 9a 63 b3 a5 7b 52 54 15 2b bd 73 ee 01 09 29 52 e7 5b e8 ae ea 00 e4 6c 78 22 30 67 8c 73 fd 7e df 3f 1e 4e 26 7a 89 70 a4 09 d9 6b 62 32 9b 10 1f 68 ae c8 d3 2d ee 05 c1 7d b5 2a 23 ab 19 a9 90 17 77 cc ef d0 ae bf 4d 2c a2 65 1f 91 f8 15 e5 fb c9 24 bb bf 7f 72 ed 32 37 48 a4 f8 5f 9c 31 4f e0 c1 3a d2 44 8a fb db c8 e3 46 73 a8 25 08 2a 86 03 c0 b1 61 f0 6d a4 3f df fb 5b 5e 2e a5 e8 6e 3d 65 d2 47 84 66 ff 88 81 a7 bd 40 fe 51 e5 58 44 18 16 f0 Data Ascii: W"jbKpuD^ixKR+B+vXM3HIH5c`O3CHhJ aO}atN^jx'Mc{RT+s)R[lx"0gs~?N&zpkb2h-}#wM,e$r27H_1O:DFs%am?[^.n=eGf@QXD
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: 46 b0 9b 36 2e 6c da 93 87 cf 0c 5a a9 fa 6e c9 53 40 2c 53 2b cb d8 4f 0d 8b 63 aa 9d 9a 22 cc f9 b0 5a ae 1b 50 88 dc f0 0d 9a 95 e1 60 73 07 84 5b 73 a4 d2 c7 43 bf 54 a5 f1 3b 8a b0 af 99 b3 52 43 2d 04 d0 33 ce 74 fe 6b c1 fe 5e 89 15 4e 58 df b3 c0 75 cb 20 31 08 90 13 49 39 60 8e b8 19 87 6a 51 a3 72 d5 93 47 40 f6 50 0e 95 54 23 4a 26 76 ef 58 9e b9 07 20 ad 67 28 b4 49 1e 63 91 66 bb 91 36 b8 cd 9f 61 d1 4a d9 0d 50 b2 df 0e 8c 95 97 76 f2 5f 58 4c d1 f5 d0 ff 28 42 e3 97 ba 89 12 0a 90 9e bf cc 15 50 3c fb da 55 51 ad 5e 1e 54 0d 44 2a 39 4e 7f 3a f3 34 d2 1b 87 3d 78 eb 7f cd 2a 8c 46 dd 67 2b 41 22 f7 8a 18 b0 24 a9 c6 3a 20 e8 5e 2c 76 1e 91 08 2d b2 64 6e 97 cd 27 01 55 73 c7 1e 33 f6 dc f8 4d c1 b0 02 4c f6 5e 49 e2 2c 22 99 a4 54 8b 0c c9 Data Ascii: F6.lZnS@,S+Oc"ZP`s[sCT;RC-3tk^NXu 1I9`jQrG@PT#J&vX g(Icf6aJPv_XL(BP<UQ^TD9N:4=xFg+A"$: ^,v-dn'Us3ML^I,"T
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: cf 5e ad 0f ec f8 dc ea 39 57 e2 45 f6 c5 6e bd 61 94 16 0e 96 34 2a 21 e5 40 8f 8f ff bb 0d 46 ec 92 2e 66 0e f4 27 25 9b c1 f9 17 75 d9 07 f6 91 88 09 0d b7 9c 78 f0 eb 8c 0a 2a 67 e7 a7 68 8c 35 78 28 f5 eb f4 1a 02 51 cf fd a5 d8 d0 64 ef 21 f7 1f 48 2f c5 9a ce b0 e1 1b c2 1b 14 aa 33 25 e3 56 f4 9f 17 28 ef e1 bb 51 64 96 4f 14 eb 91 30 42 31 15 58 fd f8 2f ff 56 7a 6d 77 63 1d 43 72 b7 1e 3d a5 a9 c6 63 77 a3 7c 8f 24 e9 f3 ae 0b 58 0b ad 50 ff 74 c9 a9 2c 9b 84 d9 34 5d f5 17 ce 68 44 0f 5a 12 b2 f0 49 76 5c 9e ed 68 63 ae 77 78 91 48 04 87 cd ed 5a cf 5e 6d ab 91 cb 90 bf 2f e9 4a 03 30 34 4b 93 77 d0 fa fd 6d 42 38 98 cb 85 bd 0a b3 ea 22 91 30 50 fc ab eb 18 1c 28 94 99 ef 8f 95 9f 33 81 40 7a 6a 68 aa cb b9 d1 6a 59 5c 75 62 bb 78 24 e4 80 a8 Data Ascii: ^9WEna4!@F.f'%uxgh5x(Qd!H/3%V(QdO0B1X/VzmwcCr=cw\|$XPt,4]hDZIv\hcwxHZ^m/J04KwmB8"0P(3@zjhjY\ubx$
2024-03-27 20:21:08 UTC	1369	IN	Data Raw: b0 ac e8 03 7a d1 f4 8f a2 5b 9f 1a 8b 5a 28 7e 66 91 9b b4 ef df 12 61 c5 85 9f 9f cd 0b 52 46 0f e5 9b 8a bb f6 01 25 ce 7c 98 00 1c f9 ec 62 8b e5 90 10 45 83 2d bd f8 d4 15 d4 8e d0 34 b1 03 ed 43 c8 0d 96 38 34 1d 2f 90 01 44 d4 41 5d 25 f8 60 2d 6f 65 82 f0 7d 74 b8 de b2 2b 49 1f 04 7f cd ea ce d8 54 07 c4 47 6d 82 39 2a ad e4 36 e1 85 6d b3 fa d2 5a e7 f9 80 2a 8c d7 62 06 09 58 2e 42 70 b5 39 b5 a1 d9 bf ad b2 9c 95 aa ef c4 64 d3 64 05 54 5b 47 e5 ff 91 a7 fc d6 fb 85 8b 9b ce 38 8a 28 f0 77 c3 9c 81 af 0b 4a f8 bb 58 9f 72 36 d5 71 55 fb 3e 33 22 14 a6 67 1e 79 0d 5a 38 87 64 bb c0 4e 3b 3f 6c 2e 77 46 3b ab 12 bb fd d2 09 a2 37 96 6c f8 6b 9f 8f 9c 39 6a 11 9b 05 0a 29 67 61 e3 44 83 f1 f7 17 0d 13 37 66 0a 45 12 04 95 83 d1 32 9b 68 55 5f db Data Ascii: z[Z(~faRF%\|bE-4C84/DA]%`-oe}t+ITGm96mZbX.Bp9ddT[G8(wJXr6qU>3"gyZ8dN;?l.wF;7lk9j)gaD7fE2hU_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50332	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	1984	OUT	POST /v1/traces HTTP/1.1 Host: telemetry.canva.com Connection: keep-alive Content-Length: 1711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	1711	OUT	Data Raw: 7b 22 72 65 73 6f 75 72 63 65 53 70 61 6e 73 22 3a 5b 7b 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 74 65 6c 65 6d 65 74 72 79 5f 76 65 72 73 69 6f 6e 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 76 32 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 61 70 70 2e 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 22 7d 7d 2c 7b 22 6b 65 79 22 3a 22 73 65 72 76 69 63 65 2e 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 73 74 72 69 6e 67 56 61 6c 75 65 22 3a 22 61 6e 6f 6e 5f 68 6f 6d 65 20 7c 20 74 65 6c 65 6d 65 74 72 79 2e 75 73 65 72 5f 6f 70 65 72 61 74 69 6f 6e 22 7d 7d 2c 7b 22 6b 65 79 22 3a Data Ascii: {"resourceSpans":[{"resource":{"attributes":[{"key":"telemetry_version","value":{"stringValue":"v2"}},{"key":"app.component","value":{"stringValue":"anon_home"}},{"key":"service.name","value":{"stringValue":"anon_home \| telemetry.user_operation"}},{"key":
2024-03-27 20:21:08 UTC	857	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:08 GMT Content-Type: application/json Content-Length: 21 Connection: close CF-Ray: 86b215c9e81a05bf-IAD CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.canva.com Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3000 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rUjaShDq4DWBEtCoqXhSOahSk6J7cW9Is6jQSD24cqnx1RxUdhw0kOcfA6V4AFz3In%2Fhe8EEIYSkJynMyCqlKC8hMzHUC9i6kI6liqidozpKq%2FD6XEZO9uG7%2Bgik5MNrIxPp83k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:08 UTC	21	IN	Data Raw: 7b 22 70 61 72 74 69 61 6c 53 75 63 63 65 73 73 22 3a 7b 7d 7d Data Ascii: {"partialSuccess":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50333	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 4660 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:08 UTC	4660	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 30 63 35 61 33 61 65 36 2d 65 65 63 30 2d 34 62 61 39 2d 61 64 62 38 2d 37 32 38 34 32 66 36 31 31 64 62 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 36 2e 35 37 30 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 38 2e 31 38 35 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"0c5a3ae6-eec0-4ba9-adb8-72842f611dbf","E":"2024-03-27T20:21:06.570Z","F":"2024-03-27T20:21:08.185Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:21:09 UTC	913	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215ca8ca839af-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215ca8ca839af X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DmUImIMdJAyFZ4WhmH40dhmZgV%2BJtEVvuw%2BtHmey0x50%2BDKNF4FlnH6V%2Be8R5oAZLRBUa%2BTh4HysoqYUrYCF55GG%2FCqhd%2BLG38Kw9zfSGu23QS0FKRWQPaV%2F5yk%2BP4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50334	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:08 UTC	740	OUT	POST /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:08 UTC	486	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 38 2e 33 34 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 6e 65 78 74 6a 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 30 30 2e 31 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 64 39 66 62 31 66 31 62 35 36 65 35 34 35 62 35 61 32 33 35 62 39 38 39 30 36 62 30 30 65 35 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 38 2e 33 34 32 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 38 2e 33 34 32 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:21:08.343Z","sdk":{"name":"sentry.javascript.nextjs","version":"7.100.1"}}{"type":"session"}{"sid":"d9fb1f1b56e545b5a235b98906b00e53","init":true,"started":"2024-03-27T20:21:08.342Z","timestamp":"2024-03-27T20:21:08.342Z","stat
2024-03-27 20:21:09 UTC	553	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin x-envoy-upstream-service-time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:09 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50335	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1763	OUT	GET /blob/1374692/Wowwithvisuals.7a445a34.avif HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1364	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: application/octet-stream Content-Length: 59980 Connection: close CF-Ray: 86b215cc89311ffe-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777351 Cache-Control: public, max-age=2592000 ETag: "121eae5461ce474672fa5c8698fc86b8" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Tue, 27 Feb 2024 03:59:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 4O+YZgWov4rVWm/wtXR/Un+jFTK/PWxvCOsuDpHPe3O6ToigUdpiPR1dkdv7hWoA96XjKhEWor8= x-amz-request-id: N5R7J81H6FCZV37Q x-amz-server-side-encryption: AES256 x-amz-version-id: 18BIpxNqslUiihcwM4CI6XDfdmsNV7qr X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5OWIWfKk8d%2FCkQ7FHwYp8xQweoF1nEYlTMaoZw6D6IcJRAHWuRncd7oQBWylXsnMKMMRJ3MUOd1lkT%2BxavkfhXdg%2FDwYaKdTx0%2FpUaDIsp%2BlMJr79HSJszdFozC4WA7st6J3od%2FL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	5	IN	Data Raw: 00 00 00 1c 66 Data Ascii: f
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 ea 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 22 69 6c 6f 63 00 00 00 00 44 40 00 01 00 01 00 00 00 00 01 0e 00 01 00 00 00 00 00 00 e9 3e 00 00 00 23 69 69 6e 66 00 00 00 00 00 01 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 0c 61 76 31 43 81 24 02 00 00 00 00 14 69 73 70 65 00 00 00 00 00 00 02 58 00 00 02 58 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 17 69 70 6d 61 00 00 00 00 00 00 00 01 00 01 04 81 82 Data Ascii: typavifavifmif1miafmeta!hdlrpictpitm"ilocD@>#iinfinfeav01jiprpKipcocolrnclxav1C$ispeXXpixiipma
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 2e bd ce f8 78 64 b7 85 91 91 1d fb 1f 77 7c 33 81 02 42 9c 90 79 51 5f 38 41 d2 9a b4 e0 c6 10 75 88 61 86 75 16 a4 fb 4c 1f 3d 6c 73 4a 10 3c 35 c4 06 86 b8 17 44 50 00 8b 59 4b c4 bd 2a ef 85 61 d1 90 6c 5e 4a 6a 7a ea ef c3 e4 92 13 4e 62 eb 21 7c cd 59 e3 ee 4d e6 ff 03 9a 0a 52 e2 6a f6 6d da e2 7d b0 d6 ef 49 64 37 75 9b 92 76 dd 5a ad 9d f1 3d 9a 4a df 4e 85 77 04 d3 a0 dc 41 cf 5e b5 7b 40 ff b7 1f 95 1d 07 80 a7 b8 2e 61 bb 75 c6 8e dc 60 7d 7f f3 8a da cc d3 9e db 3e c7 9a 2f ef 95 1c 4f c2 bb 1b 11 d3 e5 3d da 00 a4 34 80 0f 8c 7e 7c 00 29 80 a9 fd af 17 59 b3 5f e6 84 71 f4 e2 38 8c 4e 3d 02 87 58 26 f6 f5 18 ac e9 3d 73 e4 c8 9f ed 3c a4 c8 8b fb c9 aa 59 14 0b 92 b7 cd db 09 ed 16 1a c5 b5 0b 13 69 12 b9 6d cd 8e 9c 74 75 6a c9 00 c9 da 0d Data Ascii: .xdw\|3ByQ_8AuauL=lsJ<5DPYK*al^JjzNb!\|YMRjm}Id7uvZ=JNwA^{@.au`}>/O=4~\|)Y_q8N=X&=s<Yimtuj
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: ce 43 66 d1 25 cf 0a 11 21 03 26 ed 43 d9 95 e0 76 1f 08 d8 77 d3 5c e9 64 3e 9a f7 fe 03 1e 9f e8 8e d5 2b fa 7c 4b ae 0d 9d 8a 0f 35 0a 45 f2 30 f1 66 ca ff ce 10 0d f5 37 70 cb d9 1f 7b 13 db 96 19 2d 08 79 96 63 ca 64 10 9e 6d 20 32 d1 28 03 49 98 48 38 2a f3 31 98 ab ea e6 7d 93 7a b4 ad 07 db fa 23 71 e0 be c2 a2 de f0 b9 fe 24 9b 6c 6a 0c e8 42 9c 54 2a 86 d2 d8 36 55 90 26 87 3b 45 e9 7b 4d 68 e3 c7 a4 f8 47 ca 88 bd 60 64 fe 68 53 7b 0f 6f 61 0e fc e9 8c 49 ea 6d 2f ec f1 ea 52 46 fb 47 df b2 94 2d ef f8 b8 0d 95 a3 10 0d e0 5c 67 f5 8c dc 8f c1 d1 bd f2 92 89 c1 71 e0 c0 20 e1 93 b4 d0 24 ca 24 32 ca d4 79 07 21 59 fc 51 52 ba 2b 4d f7 ca ac 05 ae f1 42 74 14 6b fe 1f 34 ac ce 12 1e f5 29 15 6a f7 eb 5a 07 4d 2c d3 a8 41 72 89 a4 f8 12 23 2c 8c Data Ascii: Cf%!&Cvw\d>+\|K5E0f7p{-ycdm 2(IH81}z#q$ljBT6U&;E{MhG`dhS{oaIm/RFG-\gq $$2y!YQR+MBtk4)jZM,Ar#,
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 2b 90 b7 d0 8e f9 8a 02 8f d3 a8 c9 2b 65 c1 8a b9 e0 09 21 81 7e d9 a9 d0 d3 92 a0 26 3f b0 a3 5a 45 b7 0f 24 fa 46 c1 b6 d9 34 d1 06 04 ec 17 e8 33 a9 4c d8 3f de fa e2 60 18 4f b4 1a 5c 8d 1d f7 93 61 b9 dc 3b 21 4d d2 ae e3 1a 91 05 c5 74 da cc dc e3 b9 60 91 b3 0e f0 00 9d 2c 51 fd 98 1c 29 a5 82 7b a4 19 25 e7 bb 89 2e d0 44 33 0d 36 f1 6e e9 28 88 ff 61 6f a6 bd 50 80 e3 49 f8 b6 38 a2 50 2e fc 88 bf ca bb e0 7e 15 44 7e ae 5b c6 5e 1b 6b 85 d2 fd ad fb dd 0e c3 7e 8d 81 f5 28 cb 5e a3 a0 5e 8a 76 b9 ff e0 b5 9e ce 3e 29 92 1f 82 89 a8 fd 1d ea 10 b9 fc 4c 2a a0 1d c4 21 9d 34 a9 82 2e 4a c0 c9 40 51 3e a6 b8 49 35 5a 24 39 2a 4f cc fb e2 d7 eb 62 b8 f0 af cb 7c 50 ef fc 4b bd a9 8a f0 6c 97 29 dc 85 b4 ae 75 4d dc d0 cc 41 b8 31 1e d9 6f c7 42 d1 Data Ascii: ++e!~&?ZE$F43L?`O\a;!Mt`,Q){%.D36n(aoPI8P.~D~[^k~(^^v>)L!4.J@Q>I5Z$9Ob\|PKl)uMA1oB
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 0c 3e 8d 2a f7 63 ba 3a 27 7f 83 5d e9 fb 83 ea c0 a9 39 16 be 18 e5 69 93 ba 22 bb c3 d4 11 50 d4 26 92 52 ac b2 d6 3a 3b 9a fb 35 bd 11 6f 38 a5 a8 fe 44 ba 2e f1 2e f6 1c 96 e4 50 74 6b 89 ce be 15 76 b1 91 b2 0f 63 b6 dd 1b 8e b4 ab d0 c9 a9 7c 67 ac dd 8d 8a de 36 40 fb e8 99 9e 86 ae 43 4f ad bf d3 09 77 ac e6 f1 16 3a 27 6d 77 ec 24 78 71 6e 31 d0 95 08 07 b8 e8 95 28 fa d2 52 23 b2 1f d0 5c ed c9 a1 5e ac bb e0 f3 19 5a df 68 fa cc 08 eb 00 2d 52 c1 49 da c6 8a dd 3a 89 c7 33 f7 fe 03 9d 88 4c 4d 53 c1 5a c3 40 30 d3 d5 4d 99 da 41 36 35 5c ae 18 03 2d cb 5c c5 1a 45 71 2a 30 0c 39 59 02 2d 4b e9 76 b3 dc 7c dc b2 48 72 1c 32 3e 8c 62 65 c8 38 75 36 c3 54 d5 74 7a 61 b6 c5 90 1d 67 e4 e2 ff b9 ea c7 d0 eb 6d af ea 85 2b 24 58 f5 c4 48 89 53 fa 4f Data Ascii: >c:']9i"P&R:;5o8D..Ptkvc\|g6@COw:'mw$xqn1(R#\^Zh-RI:3LMSZ@0MA65\-\Eq09Y-Kv\|Hr2>be8u6Ttzagm+$XHSO
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 04 3d 57 7e ab 7f 0d 58 0a d6 2f e3 29 b9 44 9a d5 15 a6 6c d3 f2 8e d8 c9 83 df c9 7c a1 9b 66 9f 07 d0 59 a2 c6 7d 67 88 49 76 3f 1f 95 c1 aa a4 c5 dc ec 9e 6b eb 88 25 f7 b6 d6 f2 68 13 15 a0 e6 ab a3 d1 d9 be 21 62 e6 16 7b 2f ea 8c 3e c1 c7 77 ef b8 de f0 d8 94 bc ba b9 91 e0 b8 b4 8c 3f c4 49 78 19 3f 5b 97 3b 60 25 3c bd fe 8e 70 77 e9 ed fe f4 50 9e 11 7f 06 be 41 ad 4d 8b 8b ed c1 58 74 a5 92 90 fc 63 23 f6 2d 6a 1a fc 86 ec 9f 5f 53 bb 35 5d 3a 1a c8 82 2a 23 d4 31 7c af ea 10 c4 08 53 e6 f5 14 8a 55 69 a5 1b a4 aa 71 8d 97 6c 4e f2 72 23 c5 77 11 4a 53 71 d1 79 74 cb e5 59 cd 30 fa 79 a1 f6 24 f4 a8 e1 6d 5e 31 ba e3 38 e3 ad 3c e5 01 3c 39 0f ef 92 00 d0 4f 2d be 24 d9 e3 ac 41 cc 6a e7 72 c5 71 6c 09 a3 1a b9 0a c9 18 37 b8 3c 4a 91 df 12 6f Data Ascii: =W~X/)Dl\|fY}gIv?k%h!b{/>w?Ix?[;`%<pwPAMXtc#-j_S5]:*#1\|SUiqlNr#wJSqytY0y$m^18<<9O-$Ajrql7<Jo
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: d9 17 a0 49 1b a4 a9 54 79 54 72 27 55 a1 eb 5a c0 3a 43 be 3b f4 00 12 b1 be 3d 2b 7f 5c b4 a3 8b 4a ac 85 a2 58 f3 20 85 92 d0 09 1d b9 14 e0 19 2e b1 cd 4f 93 e2 b3 e1 d0 f9 00 18 58 5d a4 9f 45 60 54 c9 ce f4 0b 09 75 1a 6b 73 bd 4b ef 16 85 74 64 45 8c 8e bf 6a e4 75 2c 23 2c 67 17 62 02 2f ad c6 dd 63 6a 1d d9 6b 60 80 ef d0 9a 6b 2e 85 8e 2f a3 b4 d5 37 c4 e3 bf fc e0 bf ba 4f 66 df a2 c7 63 5c ff a8 91 bf 63 7e 85 41 a0 73 61 a8 3d 79 eb df 25 8a 1c ab 6a 90 45 0c 15 45 26 be d3 d7 2b 68 37 1f 87 f3 e9 7a 26 5d 82 eb aa 7d ac 8b ce c9 e6 71 6a ca 1d a0 9e d3 d5 17 fc cc 04 d6 45 9d 83 0d df 82 61 51 74 96 48 8d a0 10 fe 12 11 46 8c 47 9e b4 8f 4b fd 7e ab ec b5 ac 9a 3f 2b 6a d1 26 c7 db 52 08 44 bd a7 e5 99 a5 0a 92 95 67 f8 1b 37 80 97 a8 19 3b Data Ascii: ITyTr'UZ:C;=+\JX .OX]E`TuksKtdEju,#,gb/cjk`k./7Ofc\c~Asa=y%jEE&+h7z&]}qjEaQtHFGK~?+j&RDg7;
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 63 9d 7e 12 ef 8f 05 db 3b 5d 4f 62 82 ea 8e 10 1e 1b e0 7f c1 cc b2 50 ec 76 6d 03 85 3d 95 98 0b 65 3d a0 49 a1 47 e3 d1 d1 48 f1 69 cc 11 5a ff ab 99 ab 91 50 62 93 13 d6 bc 97 23 15 3d 32 b9 7c a7 2a 82 cb 16 9f 53 fe 23 b9 4e 5e 98 89 ca 45 de 88 9e 13 51 d1 e0 37 e0 49 c1 e6 2f 0a 35 49 6c 16 74 0b 1f da 57 75 4b 06 80 4f 92 f5 26 96 e7 6b 9f aa 08 2c ab 5a dd 1f 1d ab 1e df 86 cc ef 57 f8 7e f9 2a d4 03 5a f9 79 ba 5f 3c ca c1 4a dc 87 e2 07 e8 40 4b a4 ee 67 0b 79 a6 63 4e 59 7c fd 96 24 62 9f 80 70 b6 eb e5 c0 9b 4c 23 69 75 8d 45 78 02 eb 2d 54 1e 60 99 ec 8a 37 7b 6c bb bc 1f 4d 48 15 a1 b0 3c 5f ed e8 20 1e 27 23 ea c5 a0 ef 9a a8 4c de 20 3d 06 3f 25 a4 f7 a9 ef 48 7d 86 2b 7a 56 f2 a0 88 cd 7d 8d df 47 51 01 a3 bf a1 d1 9a a1 54 29 6a 07 5c Data Ascii: c~;]ObPvm=e=IGHiZPb#=2\|S#N^EQ7I/5IltWuKO&k,ZW~Zy_<J@KgycNY\|$bpL#iuEx-T`7{lMH<_ '#L =?%H}+zV}GQT)j\
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: c8 6a 3f 2f 65 c2 6b 71 67 9d d4 00 78 52 9e 59 f3 4e be a7 f3 ff b7 ab d9 19 54 1f f7 c1 a2 cc 61 b5 d9 4e 8d 3c 5f 3b ca 53 d1 b1 da 66 f1 f4 ac b4 ad 56 fa 9e 4a 68 90 4d 1d 96 23 30 c6 7f 5c 99 85 61 7b 17 98 81 cf df 10 4d 7d c9 c2 35 8f a1 29 25 ea 17 f1 48 84 5e 7f 6f bf f8 d6 d0 18 cf 69 89 89 6d 1e 73 f4 a4 7b 64 6c ec 15 94 ec 02 2c 78 00 81 8b da 0a dc 78 d5 f1 d6 30 e8 d0 04 42 8e 18 1d 42 65 5a 2b 0f 15 73 b8 fb 58 a4 df 81 be e1 08 06 b4 2a f5 3d cf 6b 44 31 d3 ef 6d 3e 13 f4 e2 54 78 b6 d0 6f 0c a3 37 27 ce c2 96 22 34 14 b6 b4 fc db ae 8f fa 3e 4e 7d 02 fd f3 f1 a2 49 71 34 93 01 7d 95 51 3f fd 69 81 a0 b2 46 84 cc c1 9b 20 f7 0e 63 99 ba 2c ca 16 a6 2c 1c f1 cf 3e 77 25 9a 2c 48 96 c1 28 ce 5d 10 af bb 14 67 bc e3 97 da ed 90 15 af f1 7e Data Ascii: j?/ekqgxRYNTaN<_;SfVJhM#0\a{M}5)%H^oims{dl,xx0BBeZ+sX*=kD1m>Txo7'"4>N}Iq4}Q?iF c,,>w%,H(]g~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50336	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1939	OUT	GET /_next/static/chunks/20986.6ba441b61ca29079.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1351	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: text/javascript Content-Length: 1424 Connection: close CF-Ray: 86b215cfda7e8f0e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 788757 Cache-Control: public, max-age=31536000 ETag: "00f8b2d413d5a9ecc09ba70f3c2356f9" Expires: Thu, 27 Mar 2025 20:21:09 GMT Last-Modified: Fri, 16 Feb 2024 04:03:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: kBan+lvqns2blKQZATpOM3BJxkL6lIgArR7ikP5HSKockUjqp29XzPJfKBKTBG0R4Ai85l83WIs= x-amz-request-id: 6P0MHKMSQ1M3T5E6 x-amz-server-side-encryption: AES256 x-amz-version-id: CxZaYcU_t6ZR03zl5qHI9FGwEJuJ7FQK X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3xhIrpGiT4%2Bm5%2FIGSOjHzNqFhQ6RDK3U%2F9dEEOR%2FP7KvHyuyFjNbO7olZfWAxKx2t5FcTimnVg4iBtcwNI7zVuesM0zfdOT5LiTJOwuoaR58V5ckZqE6r2o3ZAWMt83oY6ivHLh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	18	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 Data Ascii: "use strict";(self
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 39 38 36 5d 2c 7b 22 2e 2f 73 72 63 2f 73 65 72 76 69 63 65 73 2f 61 6e 61 6c 79 74 69 63 73 2f 70 6c 75 67 69 6e 73 2f 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 73 65 72 76 69 63 65 5f 70 6c 75 67 69 6e 2e 74 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 41 6e 61 6c 79 74 69 63 73 45 76 65 6e 74 53 65 72 76 69 63 65 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 73 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 73 72 63 2f 5f 63 6c 61 Data Ascii: .webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[20986],{"./src/services/analytics/plugins/analytics_event_service_plugin.ts":function(e,t,n){n.r(t),n.d(t,{AnalyticsEventServicePlugin:function(){return o}});var s=n("./node_modules/@swc/helpers/src/_cla
2024-03-27 20:21:09 UTC	37	IN	Data Raw: 70 69 6e 67 55 52 4c 3d 32 30 39 38 36 2e 36 62 61 34 34 31 62 36 31 63 61 32 39 30 37 39 2e 6a 73 2e 6d 61 70 Data Ascii: pingURL=20986.6ba441b61ca29079.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50337	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1938	OUT	GET /_next/static/chunks/8643.b8f14875e0e505be.js HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1351	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: text/javascript Content-Length: 3808 Connection: close CF-Ray: 86b215cfd8c85854-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 777378 Cache-Control: public, max-age=31536000 ETag: "45cda07250fc5c29753d3f5213ede851" Expires: Thu, 27 Mar 2025 20:21:09 GMT Last-Modified: Fri, 16 Feb 2024 04:03:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: zFMq61xUbenVfkGObC4U8L/eBoNBEtr1k3pALaOGIjPkNN4D93VcdKDGSjV+bWQaJ3C4QaM86HQ= x-amz-request-id: 7WA5ADEQKP2SRTSC x-amz-server-side-encryption: AES256 x-amz-version-id: WH3YnTNuHwuJn958UXVr9CLYYL4nN5A6 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=opxcSYg%2BLSdWcrTEE2kh%2FxsNtgL7HzIDUoTtKPS1nWrD%2BZ2SQ4LQK8qjffuWO5V6J625phbNZU9V0rwTdqaZPS6WsxWdCpsljS%2BfDup4OPDNK9HepWSMZCkoPPsSoEDUk1WRfzhx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	18	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 Data Ascii: "use strict";(self
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 36 34 33 5d 2c 7b 22 2e 2f 73 72 63 2f 73 65 72 76 69 63 65 73 2f 61 6e 61 6c 79 74 69 63 73 2f 70 6c 75 67 69 6e 73 2f 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 5f 70 6c 75 67 69 6e 2e 74 73 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 47 6f 6f 67 6c 65 54 61 67 4d 61 6e 61 67 65 72 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 61 3d 6e 28 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 77 63 2f 68 65 6c 70 65 72 73 2f 73 72 63 2f 5f 63 6c 61 73 73 5f 63 61 6c 6c 5f 63 68 65 Data Ascii: .webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[8643],{"./src/services/analytics/plugins/google_tag_manager_plugin.ts":function(t,e,n){n.r(e),n.d(e,{GoogleTagManagerPlugin:function(){return d}});var a=n("./node_modules/@swc/helpers/src/_class_call_che
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 61 73 73 69 67 6e 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 61 2c 73 2c 6f 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 28 30 2c 69 2e 5a 29 28 6f 2c 22 61 70 70 5f 6e 61 6d 65 22 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 2e 61 70 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6e 61 6d 65 29 2c 28 30 2c 69 2e 5a 29 28 6f 2c 22 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 22 2c 6e 75 6c 6c 3d 3d 3d 28 61 3d 65 2e 61 70 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 76 61 72 69 61 6e 74 29 2c 28 30 2c 69 2e 5a 29 28 6f 2c 22 65 78 70 65 72 69 65 6e 63 65 22 2c 74 2e 65 78 70 65 72 69 65 6e 63 65 29 2c 28 30 2c 69 2e 5a 29 28 6f 2c 22 63 6f 75 6e 74 Data Ascii: assign(Object.assign({},function(t,e){var n,a,s,o;return o={},(0,i.Z)(o,"app_name",null===(n=e.app)\|\|void 0===n?void 0:n.name),(0,i.Z)(o,"product_variant",null===(a=e.app)\|\|void 0===a?void 0:a.variant),(0,i.Z)(o,"experience",t.experience),(0,i.Z)(o,"count
2024-03-27 20:21:09 UTC	1052	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 74 68 69 73 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 28 6e 3d 7b 7d 2c 28 30 2c 69 2e 5a 29 28 6e 2c 22 65 76 65 6e 74 22 2c 22 63 6f 6e 73 65 6e 74 5f 73 74 61 74 65 22 29 2c 28 30 2c 69 2e 5a 29 28 6e 2c 22 63 6f 6e 73 65 6e 74 22 2c 28 65 3d 7b 7d 2c 28 30 2c 69 2e 5a 29 28 65 2c 22 65 73 73 65 6e 74 69 61 6c 22 2c 22 79 65 73 22 29 2c 28 30 2c 69 2e 5a 29 28 65 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 2c 74 2e 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 3f 22 79 65 73 22 3a 22 6e 6f 22 29 2c 28 30 2c 69 2e 5a 29 28 65 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 2c 74 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 79 65 73 22 3a 22 6e 6f 22 29 2c 28 30 2c 69 2e 5a 29 28 65 2c 22 74 61 72 67 65 Data Ascii: unction(t){var e,n;this.dataLayer.push((n={},(0,i.Z)(n,"event","consent_state"),(0,i.Z)(n,"consent",(e={},(0,i.Z)(e,"essential","yes"),(0,i.Z)(e,"functionality",t.functionality?"yes":"no"),(0,i.Z)(e,"performance",t.performance?"yes":"no"),(0,i.Z)(e,"targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50342	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1766	OUT	GET /blob/1373917/SuperchargewithAI.7fceec79.avif HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: application/octet-stream Content-Length: 24358 Connection: close CF-Ray: 86b215d05c632417-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 782101 Cache-Control: public, max-age=2592000 ETag: "4e998bf9187f9de2c02ae9393ff244ac" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Mon, 26 Feb 2024 02:33:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: E8k9uUK8RpEbHvtjXC2bhaPZBQIaDzNqpEhvAv9xRFNt19gjEpfiYuxMogqKjmBua/449C0FiJA= x-amz-request-id: HYBZA28S0GHHJ79C x-amz-server-side-encryption: AES256 x-amz-version-id: 0qPJjQVUtFgkemI26.x0hrM.yBWJrbla X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5qc1Aa%2BF1wX%2Fg%2BriX8XWZLARlboViF5V6BIPVWdrWuqqZa4xANpie006HRQBxCKVg%2FUdkggqZ3JePImX%2BlDyk0CLA4cf44lLiAn7VNmv2zurjSqg7AhbycMkpuFTxjr5r6nXSZ5F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	7	IN	Data Raw: 00 00 00 1c 66 74 79 Data Ascii: fty
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 01 98 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 34 69 6c 6f 63 00 00 00 00 44 40 00 02 00 02 00 00 00 00 01 bc 00 01 00 00 00 00 00 00 01 d1 00 01 00 00 00 00 03 8d 00 01 00 00 00 00 00 00 5b 99 00 00 00 38 69 69 6e 66 00 00 00 00 00 02 00 00 00 15 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 00 00 00 00 15 69 6e 66 65 02 00 00 00 00 02 00 00 61 76 30 31 00 00 00 00 d7 69 70 72 70 00 00 00 b1 69 70 63 6f 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 06 80 00 00 00 0c 61 76 31 43 81 05 1c 00 00 00 00 14 69 73 70 65 00 00 00 00 00 00 03 84 00 00 03 84 Data Ascii: pavifavifmif1miafmeta!hdlrpictpitm4ilocD@[8iinfinfeav01infeav01iprpipcocolrnclxav1Cispe
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 20 6f c6 8c bb 01 13 6e 76 2b e4 b3 78 c4 46 28 23 96 86 27 8b 4a 13 96 74 93 29 df 70 2e 43 c3 7d 28 da e8 54 0b 30 b9 3b 99 b1 4c 86 db 5f 6e f7 5d e5 ca a3 40 96 01 c7 a2 ec f6 b9 48 f5 4f 63 33 bc 86 49 10 50 6c 94 91 ac fb 2a 50 7e 7d d6 62 06 52 e3 2f 7d 56 bd bd 19 d0 90 22 2c 04 0f da 53 5e 8e be 55 75 fc 8f e9 a4 ad d9 b7 29 4a 38 e6 5c 9e ed 0a bc b9 49 e5 46 7e 41 c1 a3 4e 17 fd ff aa 78 85 b3 37 9a d2 47 8c 70 78 ec 29 c8 fd d8 b4 ed c9 d0 50 e5 57 39 a8 bf c3 f2 ae 9d 4f ad 42 45 ac cf 80 58 e3 2d 1d bb 1f a4 04 3c 3e 0f 47 a5 d0 1b 35 e9 ae 08 32 40 57 0e e5 d2 26 5e d4 f3 ab 77 98 0d 98 32 a1 73 64 d9 33 57 d5 bd 54 2a 86 86 bb 96 48 5c e9 a9 24 a0 84 91 2e ac 12 d8 b5 57 87 c0 60 99 81 b6 0b 94 23 e2 93 12 f2 9d e8 1f 75 69 8e 32 51 9b 60 Data Ascii: onv+xF(#'Jt)p.C}(T0;L_n]@HOc3IPlP~}bR/}V",S^Uu)J8\IF~ANx7Gpx)PW9OBEX-<>G52@W&^w2sd3WTH\$.W`#ui2Q`
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 6c 3f ff d3 45 29 e6 d0 98 66 5d af f0 9c 76 0e 16 97 ec d3 4f a5 c4 fa 44 6e 49 f5 cb e8 74 32 7e d5 c4 82 01 35 f9 0a de eb e5 dc 92 5d 81 fd da 71 fe 97 39 20 c3 be 52 99 c6 fd ef 94 d8 10 ee 69 14 1b 93 ae 27 c9 91 70 5c 75 a0 a8 95 67 75 37 7f 3a 0f 5e f9 4b d8 d2 a9 a4 6b 9c f7 1c db 4b 5c 3d 9c 4e 08 5d 12 7d 1f c8 bc a6 b2 cc 8a 17 9d 5b 9b 3d 03 1d 5c 71 98 f2 94 e1 01 95 a5 85 6a b9 1a 59 29 c1 ab 11 9b 2b 77 19 48 17 fc 2a 55 0f a9 30 6d d5 3f 77 f7 51 22 39 4a 9d 57 28 0b c9 68 77 06 fe 3a bf 8c 46 91 56 de f3 48 9b 35 9f 33 13 49 15 ac 72 18 f3 49 40 d0 18 7d f4 10 a1 b9 83 40 fa 28 91 80 6b 47 96 46 16 66 ba 1f d6 33 03 7e c3 b5 19 37 89 8d 2b 56 dd 36 a3 12 d4 6c 06 c1 7f 1e ed 61 a7 f6 9f ff 28 57 30 d3 72 f8 0b 3a be 1d 1c ac 86 fc 45 17 Data Ascii: l?E)f]vODnIt2~5]q9 Ri'p\ugu7:^KkK\=N]}[=\qjY)+wH*U0m?wQ"9JW(hw:FVH53IrI@}@(kGFf3~7+V6la(W0r:E
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 43 7d aa 57 71 4b 1b 07 73 21 c1 d2 fa ab 42 0a f3 37 73 b3 67 54 bf 07 46 30 01 d7 dc 24 6b 36 38 73 f2 8c a0 63 ad 09 83 7f 46 2b 24 48 8f 29 4a ce df 4a 41 dd 1c 38 bb 7f a7 7b de c9 14 4d 51 0e 02 99 29 5f 1b b6 6a 61 72 c5 c2 8b 95 6f 2a 02 7c 71 03 c9 4d 47 be 53 c4 5b a0 9a 08 53 0d a0 82 3c c6 ed ca 60 07 34 09 87 0e 42 77 6d 4e 45 1c ca cc 61 44 d0 c4 ef d0 4f c7 de 17 c9 e3 d9 93 d5 1d cd 4e a6 cc 3e 3e a4 61 2a 90 ad 2a 88 f3 64 56 40 09 7c d3 1b d4 41 09 01 74 8f d7 92 16 15 99 04 10 56 0a a0 c1 36 23 98 be 9f 7a 44 a8 58 33 07 15 71 bf 38 fa 64 4f 9a 19 96 40 8f 4b 31 07 f9 17 3e ed c1 06 aa 30 57 d8 f3 79 af 66 1a df 8e 88 05 35 c6 8a a0 74 72 b4 8b f8 cf 2c 74 eb 63 20 4f 4a 44 91 8e 08 7a f4 e5 57 59 df 09 b2 5d c3 87 26 91 f9 33 ec f3 36 Data Ascii: C}WqKs!B7sgTF0$k68scF+$H)JJA8{MQ)_jaro\|qMGS[S<`4BwmNEaDON>>a*dV@\|AtV6#zDX3q8dO@K1>0Wyf5tr,tc OJDzWY]&36
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: e6 a8 9f d8 96 85 ad f4 bf 8d f6 ad 60 09 02 7c 1f 12 01 fe 1a f2 cd 40 93 82 40 46 c3 61 ed 8a 92 49 b0 1e 42 44 05 1e d2 d6 97 12 fb 55 16 57 16 af 3d 0c 03 8c c8 04 82 44 77 93 c9 8a 87 36 bb 6e c6 fe 0f 11 81 10 ba f2 9f a1 31 e8 eb c9 5d 38 fa 98 2c 9f 5f 6b 45 6a b8 1f e0 24 d0 83 41 e5 34 33 1c 61 03 c3 be 9c f6 8f 29 36 47 8e dc 09 fa f0 60 86 db cb 70 0e a3 39 fa 9e 81 56 13 cb 4d 8d 48 e5 92 06 53 6d 70 70 00 cc 42 4d 14 4b 5d 17 49 61 95 54 b5 f5 2c 8f 54 ec b5 dc df c6 da f6 73 cc 25 e8 b6 33 1b 61 d4 24 c7 05 0c cd ec c2 41 03 d7 a6 8d 4b d4 0d 94 8d 93 d3 4d 35 07 73 2e 0d 6c d1 07 a8 bc 30 1d df be 1d 1a 36 cd 95 76 46 a5 97 a1 4f b3 83 2a 47 d0 25 a8 3d e1 87 68 97 4a 6a 17 88 bf f7 1a 64 ec b5 26 db ab 2e ee 48 0b 9f 55 78 19 e2 d4 ff 56 Data Ascii: `\|@@FaIBDUW=Dw6n1]8,_kEj$A43a)6G`p9VMHSmppBMK]IaT,Ts%3a$AKM5s.l06vFO*G%=hJjd&.HUxV
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 08 d0 a0 28 b1 47 bd cd 70 af 9b d7 92 21 6d dc 4c 80 a5 d1 e6 ff db 8e 3b 44 ce 81 f2 11 99 6b b8 2a 1b a7 38 43 30 9e 4b 74 58 bc 0e fa 47 c6 00 e4 9d 3f 43 fe 97 89 de 97 96 33 bc 15 97 c1 27 1e 37 ac cf 92 eb fa af 75 d4 50 01 6a 1f 3e 8d 70 da f3 e5 69 21 4b 58 f0 9a 11 42 94 f0 42 df 38 92 27 5b a4 94 0f a1 25 a9 fe 20 b4 f1 39 45 87 fa 55 16 7a b6 8e 7f d0 b6 c8 5f ad fc fe 9a e7 11 6c b1 c2 aa e9 59 6c 02 92 9a 9f 83 36 ba 38 ef 9d 71 71 0c 94 ac f9 d9 e8 0c cf 4b 3b 8c 43 1e 3d 56 a6 68 c7 87 5c d4 36 ec eb 7e a1 cd 13 5c 53 85 d2 e7 68 14 30 8c 40 65 9f 45 e4 20 45 7c 1a c5 80 34 d5 c5 e1 61 94 21 bf 69 8d 8e 53 d9 7d a9 58 50 b5 bc 2c 8a 4b 74 af 88 80 11 e6 1b 00 5b 57 d3 ad bd b3 bb 23 23 14 dc cd 80 5a 91 10 28 91 2c 2c 78 a5 57 5d 3b ea 75 Data Ascii: (Gp!mL;Dk*8C0KtXG?C3'7uPj>pi!KXBB8'[% 9EUz_lYl68qqK;C=Vh\6~\Sh0@eE E\|4a!iS}XP,Kt[W##Z(,,xW];u
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: f9 a7 d2 8a 6a 62 4b b2 70 fb b3 75 b9 44 5e a1 69 78 91 b5 d4 15 d9 b8 4b 92 52 2b 42 09 2b d5 76 d6 ce 8d f1 58 4d 33 0f 48 49 b6 48 0f 35 ee 63 60 4f 33 ff d8 43 48 68 99 4a ac 20 61 0a 4f b4 7d 61 00 dc de fe eb c5 1f 74 e3 b3 e8 8f 4e cf f7 17 07 d0 8a 5e 1b 6a db 02 78 27 1f b9 b3 4d 9a 63 b3 a5 7b 52 54 15 2b bd 73 ee 01 09 29 52 e7 5b e8 ae ea 00 e4 6c 78 22 30 67 8c 73 fd 7e df 3f 1e 4e 26 7a 89 70 a4 09 d9 6b 62 32 9b 10 1f 68 ae c8 d3 2d ee 05 c1 7d b5 2a 23 ab 19 a9 90 17 77 cc ef d0 ae bf 4d 2c a2 65 1f 91 f8 15 e5 fb c9 24 bb bf 7f 72 ed 32 37 48 a4 f8 5f 9c 31 4f e0 c1 3a d2 44 8a fb db c8 e3 46 73 a8 25 08 2a 86 03 c0 b1 61 f0 6d a4 3f df fb 5b 5e 2e a5 e8 6e 3d 65 d2 47 84 66 ff 88 81 a7 bd 40 fe 51 e5 58 44 18 16 f0 be 98 b5 cf b3 74 8d Data Ascii: jbKpuD^ixKR+B+vXM3HIH5c`O3CHhJ aO}atN^jx'Mc{RT+s)R[lx"0gs~?N&zpkb2h-}#wM,e$r27H_1O:DFs%am?[^.n=eGf@QXDt
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 93 87 cf 0c 5a a9 fa 6e c9 53 40 2c 53 2b cb d8 4f 0d 8b 63 aa 9d 9a 22 cc f9 b0 5a ae 1b 50 88 dc f0 0d 9a 95 e1 60 73 07 84 5b 73 a4 d2 c7 43 bf 54 a5 f1 3b 8a b0 af 99 b3 52 43 2d 04 d0 33 ce 74 fe 6b c1 fe 5e 89 15 4e 58 df b3 c0 75 cb 20 31 08 90 13 49 39 60 8e b8 19 87 6a 51 a3 72 d5 93 47 40 f6 50 0e 95 54 23 4a 26 76 ef 58 9e b9 07 20 ad 67 28 b4 49 1e 63 91 66 bb 91 36 b8 cd 9f 61 d1 4a d9 0d 50 b2 df 0e 8c 95 97 76 f2 5f 58 4c d1 f5 d0 ff 28 42 e3 97 ba 89 12 0a 90 9e bf cc 15 50 3c fb da 55 51 ad 5e 1e 54 0d 44 2a 39 4e 7f 3a f3 34 d2 1b 87 3d 78 eb 7f cd 2a 8c 46 dd 67 2b 41 22 f7 8a 18 b0 24 a9 c6 3a 20 e8 5e 2c 76 1e 91 08 2d b2 64 6e 97 cd 27 01 55 73 c7 1e 33 f6 dc f8 4d c1 b0 02 4c f6 5e 49 e2 2c 22 99 a4 54 8b 0c c9 aa 60 e8 73 83 14 d7 Data Ascii: ZnS@,S+Oc"ZP`s[sCT;RC-3tk^NXu 1I9`jQrG@PT#J&vX g(Icf6aJPv_XL(BP<UQ^TD9N:4=xFg+A"$: ^,v-dn'Us3ML^I,"T`s
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: ea 39 57 e2 45 f6 c5 6e bd 61 94 16 0e 96 34 2a 21 e5 40 8f 8f ff bb 0d 46 ec 92 2e 66 0e f4 27 25 9b c1 f9 17 75 d9 07 f6 91 88 09 0d b7 9c 78 f0 eb 8c 0a 2a 67 e7 a7 68 8c 35 78 28 f5 eb f4 1a 02 51 cf fd a5 d8 d0 64 ef 21 f7 1f 48 2f c5 9a ce b0 e1 1b c2 1b 14 aa 33 25 e3 56 f4 9f 17 28 ef e1 bb 51 64 96 4f 14 eb 91 30 42 31 15 58 fd f8 2f ff 56 7a 6d 77 63 1d 43 72 b7 1e 3d a5 a9 c6 63 77 a3 7c 8f 24 e9 f3 ae 0b 58 0b ad 50 ff 74 c9 a9 2c 9b 84 d9 34 5d f5 17 ce 68 44 0f 5a 12 b2 f0 49 76 5c 9e ed 68 63 ae 77 78 91 48 04 87 cd ed 5a cf 5e 6d ab 91 cb 90 bf 2f e9 4a 03 30 34 4b 93 77 d0 fa fd 6d 42 38 98 cb 85 bd 0a b3 ea 22 91 30 50 fc ab eb 18 1c 28 94 99 ef 8f 95 9f 33 81 40 7a 6a 68 aa cb b9 d1 6a 59 5c 75 62 bb 78 24 e4 80 a8 65 6a 09 c6 9d 67 84 Data Ascii: 9WEna4!@F.f'%uxgh5x(Qd!H/3%V(QdO0B1X/VzmwcCr=cw\|$XPt,4]hDZIv\hcwxHZ^m/J04KwmB8"0P(3@zjhjY\ubx$ejg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50338	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1986	OUT	GET /blob/1232025/Features_Editor.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1366	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: image/webp Content-Length: 4844 Connection: close CF-Ray: 86b215cfed6f826e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 415879 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_Editor.webp" ETag: "e4605eda6abc583fd2e7be12b5ba9931" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Thu, 23 Nov 2023 08:37:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=5938 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: g6bWXqTR8qzSbCWyxJdWkcWF8uCvnYAdZ1sKIdWaAQ6+OtvgKaGUhaMKHU2Vp6rChhz5eFIoBOQ= x-amz-request-id: CAXFT63TQQ3SE6BF x-amz-server-side-encryption: AES256 x-amz-version-id: mWN7ZBO2g7wEm5kkud6U1LCfUgVnnpsc X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2Bo9mBFr1R9mtjRYltBCSXYPKzlG8w3apRuYWc47msmLgFb5JYr4Lv4M3cXXkAX973ADHGFhi%2BL3FsSW8f5AU0SdSuZOrpBxMI2klEqX9OIL1XaFkvCcye%2B7zUJg9cHiUTU6lGB"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:09 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:09 UTC	1280	IN	Data Raw: 52 49 46 46 e4 12 00 00 57 45 42 50 56 50 38 4c d7 12 00 00 2f a8 41 48 10 af c1 a8 b6 6d 25 f7 2b 30 74 87 2a f4 af 41 00 46 df b5 06 e3 48 b2 95 cc c7 1d ce 7a 86 0c c8 3f 11 32 70 97 c7 67 5b 5b 7b 92 2f 09 3e 04 1d 4b 50 b3 37 9d 96 64 06 dc dd f9 dd d6 b6 ad 44 17 2d 80 d8 2b a0 02 27 a6 02 0a 21 26 a5 1c a8 c4 dd 2d d3 69 60 02 00 55 d3 bf 6a 42 f9 7f 64 f9 51 e4 43 92 0f 04 9e c4 f7 56 fd 7d 23 3e 6f 9c e5 73 fd fb cb 36 b0 67 5a 32 00 9c 00 13 c0 08 f8 0a fe a5 82 b1 80 69 5b 68 18 dc db a1 a6 62 72 8b 0b 00 81 47 4e 0a 1f 8e 14 86 04 6f be b2 47 ec 70 5d 68 f1 7d 1b b4 a9 ab 7e ea 06 ca 07 a5 f2 d8 cc 54 b5 7c 76 0c 91 c7 23 6b 11 4b 75 f8 53 e3 96 6b 42 d8 52 86 27 23 4c 31 c3 bc c9 c8 9e e7 f6 f5 59 fa 0f c3 65 6a 2f 54 8e 82 b6 6d a4 24 fc 59 Data Ascii: RIFFWEBPVP8L/AHm%+0t*AFHz?2pg[[{/>KP7dD-+'!&-i`UjBdQCV}#>os6gZ2i[hbrGNoGp]h}~T\|v#kKuSkBR'#L1Yej/Tm$Y
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 90 31 72 b3 cc fc e9 ca 2e e5 25 db 8d e1 5b e0 16 ec fe db ca 40 e2 cc a4 f1 bc b3 ff 76 df 99 9f 09 e1 1e 2b 15 91 18 d4 49 1b c2 8a ee ea 14 c4 d4 18 1b e9 c2 3b d8 8b c1 aa e6 3b e0 ab f6 9a 66 ea 90 e3 aa 7a 14 b1 3b d2 4a d1 88 9f bc e5 87 a1 40 55 b4 24 36 54 fc 99 fe 3a 1b 82 ff 20 48 3c d6 37 41 f0 5e f3 d6 29 ff 6e d4 cc fc 3c 58 51 82 fa ff 8b e7 31 fe 97 c3 e8 51 bc 31 5b 55 d1 92 f8 12 c1 f6 6a 89 db ce 5b 1f 87 5d 33 ef 13 96 59 07 8a 5c fa 01 f4 52 a4 e2 8f ef 94 1e 45 26 3c 8a ff 3e b0 11 15 2d 89 33 bd 79 73 87 e0 1e 89 47 fb 26 08 de 76 de 96 eb cb 8b 7e c2 33 cb 6a e6 22 99 1a 0a 61 f8 b6 7c 99 77 08 40 92 4f 99 a4 60 a2 d5 cb bc 63 35 a2 fc 42 74 42 9f 20 3b ab 1e c5 eb a0 a2 d5 a4 d1 4f ca b9 71 55 42 04 ab e5 d0 18 0d 53 d3 30 d7 09 Data Ascii: 1r.%[@v+I;;fz;J@U$6T: H<7A^)n<XQ1Q1[Uj[]3Y\RE&<>-3ysG&v~3j"a\|w@O`c5BtB ;OqUBS0
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 52 73 25 22 56 88 5f d5 b5 d7 bc 6e b9 2c e7 5a 5e 6f ee bd 7d 6a 35 6b c0 71 36 a8 53 83 83 c4 3e e8 3c 8f a2 6d c5 8c e4 9d c5 29 5c b2 85 e4 68 d4 31 98 e0 a8 e1 2d 89 b3 81 d4 c3 0c 76 f4 8c 9b 94 41 73 68 87 28 4d e1 36 12 8b 07 27 8b d4 cc 4c ed b0 69 b7 06 23 ba b5 21 47 5b 2d 51 3d dd 9d 6b 3c 14 c8 cb e4 1b d2 26 ee 35 ee 31 d0 df 19 0b c3 b7 01 b3 3f 37 ce a7 5d b4 40 8a d9 6a 9b dc 63 6a 23 30 b9 7a 63 e2 b8 1e 2c 51 26 77 f9 88 53 ce e1 8b 32 99 d6 78 46 1d 53 38 92 82 fe 34 55 7d 93 f5 10 d8 5b 68 77 9e 81 03 38 38 7f fb 72 3d 2d b9 65 41 c8 ed 2b 92 69 ad b2 c2 24 14 f7 a0 3c ce c1 34 0d c2 ea 10 66 59 e2 7a 3b d0 71 d4 1b e4 32 a4 15 21 df 5c d1 a2 1d 2b 5a 7c d4 75 c5 92 9e 6a db 53 c8 db ed 3e 0a db b2 4d bc d6 e1 8d 85 b3 9f 60 d0 ed ac Data Ascii: Rs%"V_n,Z^o}j5kq6S><m)\h1-vAsh(M6'Li#!G[-Q=k<&51?7]@jcj#0zc,Q&wS2xFS84U}[hw88r=-eA+i$<4fYz;q2!\+Z\|ujS>M`
2024-03-27 20:21:09 UTC	826	IN	Data Raw: b7 49 a5 19 df f5 34 cc a7 8a b5 26 da f0 06 ce 00 c2 73 3c a8 41 bc 42 57 32 61 c6 77 fd 2e 9e 6b d0 c6 de 2a 63 10 58 42 1a 0f d9 96 6e d8 74 c6 77 5d 69 fc b4 b0 b0 ff 56 92 8b 1c 50 53 88 f3 37 71 c7 79 3c c5 cd 74 11 22 23 3c 4e 9c f1 5d af 57 44 16 f2 7d 65 33 db a3 d0 4a a5 64 f1 a0 eb 58 b0 2c 95 5b 97 a9 b1 24 84 30 f4 31 2a 66 7c d7 e3 78 22 9a d6 54 04 62 11 21 3f 46 02 4a 94 cb c2 1a a3 7a b2 81 a5 90 a7 46 d7 e3 55 fb 39 d6 87 c5 8c ea 99 b4 da 01 49 2c d8 be ad 83 30 4f a1 44 17 d3 20 53 4f 36 30 f3 78 99 62 26 71 7d ce e3 49 0e 4a 7e e3 22 56 80 90 b8 4f 61 20 a6 67 17 53 11 cd 8c ef 2a f6 c8 b5 27 2c ed 6d 7e 51 55 75 27 95 48 6c 25 2c 50 61 43 30 83 3b 8f 4a 53 09 65 1b ef 46 b1 e7 ff 21 00 2c e3 ce 3f aa 98 9a ca a8 8b 07 bf 0c c1 dc b5 Data Ascii: I4&s<ABW2aw.kcXBntw]iVPS7qy<t"#<N]WD}e3JdX,[$01f\|x"Tb!?FJzFU9I,0OD SO60xb&q}IJ~"VOa gS*',m~QUu'Hl%,PaC0;JSeF!,?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50339	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1993	OUT	GET /blob/1232024/Features_LibraryAssets.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1117	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: image/webp Content-Length: 30610 Connection: close CF-Ray: 86b215cff8821763-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 412283 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_LibraryAssets.webp" ETag: "f723bc9b6ba256d9c44f49837cdd7c59" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Thu, 23 Nov 2023 08:37:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=36528 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: J3TYnra/uke4YIsGz+aoa2tIRV2684X0UIHpNltdzzYq3iRncTelynQ7poAVsSNSTZKJB/qXiKQ= x-amz-request-id: 1BHCA28SCQN6TBZ5 x-amz-server-side-encryption: AES256 x-amz-version-id: jG0v3s9qe9LxCI8xEvEpusorEVzZTWBg X-Content-Type-Options: nosniff
2024-03-27 20:21:09 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 47 36 52 56 79 42 42 4a 4b 30 58 6b 33 57 6a 69 44 38 41 71 71 79 77 25 32 42 56 37 25 32 42 74 4b 75 25 32 42 4d 35 42 75 4d 37 75 50 25 32 46 62 61 57 50 74 58 6f 7a 31 77 48 43 78 34 69 71 45 37 7a 6c 7a 77 36 4c 25 32 42 38 47 67 59 6f 25 32 42 55 4d 6e 46 55 59 4d 4d 4f 5a 5a 7a 79 55 76 42 50 76 25 32 46 38 42 6f 6a 69 4d 53 37 32 48 4b 58 52 49 73 74 70 4f 43 53 36 56 49 61 36 46 54 44 37 61 30 37 46 48 4f 64 55 4e 5a 66 53 55 55 37 32 25 32 46 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G6RVyBBJK0Xk3WjiD8Aqqyw%2BV7%2BtKu%2BM5BuM7uP%2FbaWPtXoz1wHCx4iqE7zlzw6L%2B8GgYo%2BUMnFUYMMOZZzyUvBPv%2F8BojiMS72HKXRIstpOCS6VIa6FTD7a07FHOdUNZfSUU72%2F"}],"group":"cf-nel","max
2024-03-27 20:21:09 UTC	1259	IN	Data Raw: 52 49 46 46 8a 77 00 00 57 45 42 50 56 50 38 4c 7e 77 00 00 2f a8 41 48 10 b7 e3 36 b6 6d 55 b9 ef 3f b7 9f 01 11 b5 d0 00 fd c7 1e 7d 77 bb f7 fd 36 dc 46 92 a4 48 b3 37 7d cc 60 c3 39 71 fe cb 2f 91 07 cc b8 bc 8e 03 80 51 93 c8 e1 ae 03 30 03 4b b0 32 6b f0 77 9e 75 4f 49 08 9b d8 b6 a3 9c 38 c9 c4 c8 a6 64 29 11 44 19 50 42 85 10 8c 30 09 20 30 bd ba dd 3e 65 17 2f 09 f0 9e ea 44 a9 12 aa 17 86 85 c8 66 d5 22 c5 22 c5 aa c4 19 fc 43 a7 51 4d 01 14 7f b2 04 94 a1 10 91 9c 08 97 80 34 58 d9 ec ca 59 49 c8 bd b4 af 42 7d af d1 7c 43 f5 93 4c 08 07 e3 60 2a 1b 58 3e 72 d7 fb b6 8f 57 95 56 67 af f5 dd 7f f7 f5 b4 57 e1 3f 32 1b 1d b0 9f 5e bb 57 71 71 62 50 36 0f 52 65 7c 18 c9 0a 76 66 2d 8b 09 96 09 1d 4f e8 04 f1 14 31 18 c1 81 48 00 4f 81 88 01 67 07 Data Ascii: RIFFwWEBPVP8L~w/AH6mU?}w6FH7}`9q/Q0K2kwuOI8d)DPB0 0>e/Df""CQM4XYIB}\|CL`*X>rWVgW?2^WqqbP6Re\|vf-O1HOg
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 2f 7c 13 0c 3d e0 ab 59 cf f4 52 7a ab 51 1d 47 d4 8b e2 0e fb 09 17 15 ea a7 8b 0c d5 4f 8e 7f fe 4b b1 77 7a 36 85 8d 5e f5 7f be cf 9c 05 c2 00 d4 87 18 a1 24 cf 60 51 2d 31 2d 51 14 25 18 52 8e 07 50 3d 64 3b 00 63 ee 5a 44 f7 5f f2 36 eb 4e 6e 7b 56 6b a8 1e 29 94 37 10 cc 56 35 53 3e fd 80 6a dc 8a f2 e2 be f5 f6 c5 e5 b6 ea 7e 57 9c 5d de 01 df 86 d6 4b cf f2 6d 8b 54 bd 34 68 51 81 a2 74 b5 28 39 ad 8b fa bc 89 40 d2 8f 7d ca 8a bb c6 18 86 d9 f9 de 9a 43 60 73 40 a0 fa 17 99 4b ce 64 a6 71 1a 30 0f 75 f3 d8 a5 fa b1 44 8a bc 62 01 5b 2d 47 2a 4d 95 cd 5c 8f a7 5f 02 cf ec 88 11 3e 49 c2 35 9b 03 ee d2 bd 52 94 a7 a3 9d e6 40 04 b2 be 5c 42 10 14 e3 e1 cd d6 c2 59 fd cb 12 3d 6d 68 81 35 1b fb 4d 76 4a 6f f8 75 8f 3b 10 d2 86 ef 5e cd cd a9 6f e4 Data Ascii: /\|=YRzQGOKwz6^$`Q-1-Q%RP=d;cZD_6Nn{Vk)7V5S>j~W]KmT4hQt(9@}C`s@Kdq0uDb[-G*M\_>I5R@\BY=mh5MvJou;^o
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: f7 72 c7 c9 ce d9 60 1c 5a 5f cc cd 95 b9 6a ba 5c 2a 21 a2 ea 9f 40 6d 0e 0c b9 74 41 9e 43 85 df 74 85 ba 6b 32 8f 6a 3f 31 43 a4 94 e4 a1 36 24 77 8a e5 d6 c9 0c 3c d8 26 17 9b 90 55 49 18 b6 f7 88 8f 98 40 d5 5d 8b 4f d5 01 0f be 0c 45 60 4c 5c d1 48 3a cf b5 67 e5 b1 fb 29 91 1d 30 9f 03 c0 de 02 14 0c ab 88 c1 7d 9a b2 de 09 85 7d 73 3b 57 76 87 b1 70 fb 3f 02 bb aa b2 76 6a 93 df 5b a6 23 16 4c d8 66 42 4c f6 dc c7 b9 ad 9c e9 8a 34 f1 58 79 db 33 39 9d 41 53 26 a2 62 14 38 39 c0 19 5c 05 eb 5d a4 ab 6e d8 aa 81 9d a0 75 85 0e a0 17 01 26 d1 80 27 ab a8 ea 0c 18 cd 1a fe 96 b5 9a 26 5b d3 bd 6d a0 9e 41 79 8e f2 0b e1 0a 36 b8 74 1b 64 70 7b f6 7d 78 09 4b 67 95 09 11 a8 ab 37 8f 06 a3 e2 71 a1 d6 aa 9a 60 31 d1 a3 36 39 7d 89 a3 43 9a 19 89 e5 82 Data Ascii: r`Z_j\*!@mtACtk2j?1C6$w<&UI@]OE`L\H:g)0}}s;Wvp?vj[#LfBL4Xy39AS&b89\]nu&'&[mAy6tdp{}xKg7q`169}C
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 8f 0b f7 04 68 42 f6 b4 3f 81 0b af 47 de d4 53 dc 43 30 7e 7f 89 f9 d1 2b a0 ea 05 8b 8c cc da cf 40 9f f2 06 79 f3 fe ac 47 46 64 7b f5 07 1c f5 02 aa 3b 11 13 90 3a ca 15 20 da 01 ed 72 f9 b6 b9 b5 32 ed 9e 77 87 8b 2a 19 dc da a5 36 80 7e 6a dd 89 1b 74 42 c7 91 33 cd 65 72 4f c7 61 60 8a 78 4f f2 54 6d 76 8d cb 33 c6 b8 30 62 bb 67 b6 bc 90 ab 13 b3 64 0b 16 c7 05 94 d0 b8 4a 85 b9 08 06 97 10 ad 6c 47 4a 4e 3b 51 35 3b 64 38 af 33 e8 a9 92 35 b9 dd 43 dd 8b 96 3e f7 c6 3c f6 f6 64 96 81 cc b4 dd c0 56 88 bd 5f e9 f7 ec 71 73 e5 74 d5 e7 44 97 a2 6b 2c cd 7a 06 79 aa 29 b2 e7 91 f4 cc 04 be 95 4f be cd 38 e5 23 4f f2 8d 21 26 f5 35 df 91 ea 9e 16 ff c8 9b bc c6 4c e3 7f c1 fe d1 e8 44 9c 70 dd 4d f3 21 c3 b7 bc c7 12 1d dc 2e 70 b9 5f 9b 9a d5 06 44 Data Ascii: hB?GSC0~+@yGFd{;: r2w*6~jtB3erOa`xOTmv30bgdJlGJN;Q5;d835C><dV_qstDk,zy)O8#O!&5LDpM!.p_D
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 3b 5b 98 4f f4 aa 1f 1f be 78 b1 e9 10 6d 50 09 f0 d2 6f 0c 88 67 36 84 ee 42 58 64 e9 14 e0 7a 66 ea 75 0b 22 e2 58 20 dd c0 94 ad 64 33 df 64 38 b1 1b 5f 07 8e 70 55 ae f8 1e 2b d0 da e0 3b 32 9a 1c 40 e3 12 08 5a ee b9 d0 15 b0 5b 4f b6 56 6f f8 0e cc a7 c4 22 66 13 bc af e9 79 58 35 52 c7 3a d1 3c 17 de d1 e0 e3 23 3c 1d b2 61 54 a5 93 ad 96 bb e4 b3 ee 2b 4b 58 76 a7 43 66 0d 17 a1 dc b7 d2 33 98 53 04 82 0d 07 c4 f0 98 78 89 9a ab f6 92 a7 94 f1 7d e5 de f4 50 a4 4c 9e ba 38 9a d4 c4 44 7a 79 a9 13 41 7d d2 e4 63 ec 17 8c 60 18 5c 77 61 1c 05 ac d1 04 d2 bf bf ec 3f c5 18 c8 04 e4 e8 7c c2 b7 e1 0d 2d a6 e9 db 3e 52 a0 12 07 a5 7c 8d df 14 bc b4 dd 10 e6 2e a3 ec 31 1e 30 42 cc 75 56 e6 89 17 98 72 f6 22 cf d0 a9 a7 66 5e 33 5f be 2e f9 56 55 39 95 Data Ascii: ;[OxmPog6BXdzfu"X d3d8_pU+;2@Z[OVo"fyX5R:<#<aT+KXvCf3Sx}PL8DzyA}c`\wa?\|->R\|.10BuVr"f^3_.VU9
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 37 d2 cd 43 fd fd 7a c0 fd fd 44 9c 62 44 a8 d0 7d e3 f4 eb 97 cc 40 dd c4 dc ae af e9 b7 9e f1 82 3e 03 be c5 63 32 bf c2 23 ec 70 4d a5 93 7e e6 75 c1 c0 7e 9e ff c6 22 e3 9a 51 37 be d1 56 65 56 54 44 25 5e c4 14 eb 4e 5c 50 54 17 44 42 74 4d a1 77 c6 1a 3e ad cd f4 09 df 92 f6 15 0d 0c c3 de 35 47 76 83 e7 86 8c 4b b0 bd 49 da fa bb 0f f9 54 a0 64 44 8c b7 bf 6e 83 63 60 f1 aa 6f b0 8d c1 f3 2a 8e 04 64 f4 0a 53 10 3c e4 a0 08 65 5e 42 fe f1 7b d5 d7 df f9 72 4e 93 d0 00 65 76 ea 6b c7 5a 81 67 04 95 fb 9c e2 5b 20 d5 a9 0a 44 4e 09 89 6d 12 88 0c bd 32 20 bb 05 8d 9a 29 a0 0c 85 bd 9a aa e9 01 c9 47 ff b2 fb c1 3d eb 7e dd 0f 5b 52 36 39 78 77 a3 20 f5 b6 fb 2c 3b a5 05 c1 dc e9 8b c2 a1 e9 d9 08 c2 e3 b9 0b c3 a9 d7 28 84 06 8f 6d d2 13 be 04 c1 2c Data Ascii: 7CzDbD}@>c2#pM~u~"Q7VeVTD%^N\PTDBtMw>5GvKITdDnc`o*dS<e^B{rNevkZg[ DNm2 )G=~[R69xw ,;(m,
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: d3 0f 1e 91 01 63 7a 26 c7 6a c3 48 25 0c 4b 95 4d ca f2 00 e2 a8 59 ed 53 b8 26 06 13 cd 60 e9 f6 83 71 73 a2 48 58 27 1c 2e 36 56 c2 1e 83 33 55 6a 5c 45 18 df 32 f9 b9 41 ef 4d cf 63 67 7a 74 a4 9d e4 79 16 ac e3 10 63 cc 7f ff 7f 54 51 c9 80 10 b6 1e 04 43 00 ca 1d c8 e4 0d 7d ec 27 62 c5 46 a8 c0 3d 46 ef 73 b3 53 c8 2b 8f d0 7c 30 0f 39 51 84 34 b9 ab 97 4d bc 6b 92 56 f5 34 a6 72 94 4c 45 ca d6 46 e5 6a b5 b3 62 0c 68 e2 be a6 3c d1 d8 6d b6 67 d7 7f d8 a8 f1 f3 8c 36 23 9a 1c 80 7f 57 52 90 f5 d3 e0 ef fc 64 42 88 20 1c 11 8b b7 13 6e 86 bd 2e 1a 68 e0 b7 5b 59 a7 f0 f1 68 95 e5 0c 2c 0f b6 80 32 7b 20 ad fd a3 19 d8 0c d9 e6 88 c8 9f 7c 2c af 3c df 31 c1 3b de b2 2c 8c 1e cb c4 ac 2c e8 b3 c0 77 82 e8 ad 64 e1 5a 89 ae e5 6a 7a 23 d1 82 ee 76 49 Data Ascii: cz&jH%KMYS&`qsHX'.6V3Uj\E2AMcgztycTQC}'bF=FsS+\|09Q4MkV4rLEFjbh<mg6#WRdB n.h[Yh,2{ \|,<1;,,wdZjz#vI
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: f4 e7 1a f8 b6 59 5f 57 83 ed 38 2c 7e e8 9d 92 c8 54 f1 6e 82 c9 8a 09 de fb bb ff 59 d5 94 19 9c 95 96 eb 39 c0 f4 df a6 f6 56 3e ef 89 5d d0 63 67 e5 8a be 78 bb 52 1b 97 7d 4b 13 6f 8e 6d 92 42 19 ce 92 2a 20 87 79 5c fc 8d f0 80 19 4e 15 b1 f2 9d 7c c0 37 9a a5 ff e1 46 4a 7a 9d 44 99 1b 2c e8 87 50 ba 72 d3 d9 c4 64 d6 02 b5 7c 4b c6 91 73 e1 86 c8 c1 f1 30 49 94 1f 0b 40 76 16 33 b3 76 1b 8c 72 a0 bd be 06 ab 60 09 30 b1 00 9b f2 e4 4a 37 79 1a 40 be 1a 68 8f f0 ce 16 45 7b 84 b7 c7 c4 2e ec b4 58 d1 a7 cb f8 64 af 87 3b 0c cf 7d 02 c0 4d ad 2d 38 52 69 ca cd a3 69 45 a1 55 e9 ec 6d 93 11 5a 76 ee 1f 8e dd cd 7e 54 b7 96 95 35 2e 5d 60 43 47 2d a0 9e a8 40 11 5f ef 04 66 12 8c dd 04 ce 72 e2 b1 c9 3e 5b 78 46 9f c6 ff 95 68 94 e6 3e 5a 7e d2 96 1a Data Ascii: Y_W8,~TnY9V>]cgxR}KomB* y\N\|7FJzD,Prd\|Ks0I@v3vr`0J7y@hE{.Xd;}M-8RiiEUmZv~T5.]`CG-@_fr>[xFh>Z~
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 26 87 91 1d 89 61 1e 04 d0 2f a5 6e ec c1 99 e1 c7 ba 51 9b db 5f c0 fd 74 a4 b6 58 bc b9 74 13 00 5f b8 80 2b 17 01 bb f4 68 20 63 ba 1d 80 c2 38 71 1e 58 86 c1 12 a1 f3 37 07 37 d5 f3 6d 79 87 23 f8 5f da b0 47 6c 98 2d ca 08 2a c0 22 1c a5 7d 21 2f e8 c1 95 08 ba b7 e3 2e 88 fa 15 c9 1a 89 ae 8d 41 2f 25 b1 e6 58 f1 77 56 8c 86 fd e1 7a e9 63 f7 bd db b2 e2 5c 12 3b 76 28 4c c5 84 18 15 bc c0 6a 97 16 c4 16 01 6c 1c 50 2b 64 31 fa 58 bc 69 02 57 59 69 48 ae 8a 66 82 0d 56 6c 05 eb 66 6b 85 10 28 14 b7 2f 27 32 19 0c c3 f3 d6 12 4a 36 ed 0d b6 96 0d c7 7c 67 d4 12 29 fb 21 9b b5 5b 77 2f a7 1b dd 0b 31 18 76 c9 37 bb 44 08 59 b1 9b d9 e8 e4 2a d8 33 1c 68 e1 e1 36 4f 30 0a 7b b8 01 43 ed 15 b6 82 f2 3b 9e 0a 86 2f 25 c4 4e 66 16 ca be c5 8c 98 88 84 2a Data Ascii: &a/nQ_tXt_+h c8qX77my#_Gl-"}!/.A/%XwVzc\;v(LjlP+d1XiWYiHfVlfk(/'2J6\|g)![w/1v7DY3h6O0{C;/%Nf*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50340	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1984	OUT	GET /blob/1232027/Features_Apps.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1364	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: image/webp Content-Length: 7276 Connection: close CF-Ray: 86b215d00ac139b5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 523365 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_Apps.webp" ETag: "e3952d78b4e972343cd7bfeb5435ff2f" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Thu, 23 Nov 2023 08:37:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=9408 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: I5omRKl4i/zgqgGfzm0btVG0OQJNdAWVxZKmr69K2FRYON2oI7uudVemrH94kwYwo0BsKa1ipsE= x-amz-request-id: 44SNKSVGKG6Q0JCZ x-amz-server-side-encryption: AES256 x-amz-version-id: jBXUp5zAFEO7Yp5t8p9EzbbIDPP.jgKj X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2zy7sxV%2FMcnRAEepzZE9QeZidtuMI06yHKmU5WneBg5OZ91JTGWe8cma3lMcamO0M53TLy0v4qcktUYE3SSNa2J%2F5RvQqYJpvdBkQdF8Ktsso9F0soB3DNXeGMadLHaBG6sehYkc"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:09 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:09 UTC	1282	IN	Data Raw: 52 49 46 46 64 1c 00 00 57 45 42 50 56 50 38 4c 57 1c 00 00 2f a8 41 48 10 a7 e3 36 b6 6d 55 b9 ff 7d 77 b7 0c 87 88 b2 c9 e9 81 16 dc dd dd e5 49 1b 8e 64 db 36 9d f3 fd 7f 6c db 49 53 5d a3 95 a1 27 13 b0 6d 3b d7 8d 00 00 84 72 b6 7d 61 72 6d 1e 7b 67 3f 69 b4 db 6d db b6 d3 6a db 96 e5 fe 7f 68 3a c2 af 11 69 ee ae 5f a3 13 39 24 06 d0 44 a3 73 88 cc f0 66 b6 80 a6 4b b8 06 00 00 00 fc 19 fd 01 00 8a e7 e0 2a fd ff 63 cf eb a5 48 e9 17 c6 cf bf f5 a7 57 1c b1 60 9a e7 60 4b 38 7f ec a7 fb cd 03 23 5e 17 d8 a0 10 dc af d1 b6 5d fe 7d 5c 70 e2 f4 03 59 7d 10 e6 3f 90 05 8b b1 bd a1 60 1e 54 a7 0f 25 ec c6 f1 fa 5a e1 1f 16 d0 c5 86 bc d5 c1 db ef 4a f8 4a 43 fe 3a 85 5f d8 d1 87 14 ee 94 c4 f8 ae 97 ae ba 7f 55 df df 89 c0 11 1e cf 4a 13 f9 18 4a 29 03 Data Ascii: RIFFdWEBPVP8LW/AH6mU}wId6lIS]'m;r}arm{g?imjh:i_9$DsfK*cHW``K8#^]}\pY}?`T%ZJJC:_UJJ)
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 37 c3 58 f7 7b 5b 0b 05 76 e8 fd 67 12 fb 5e d6 c2 cc a0 0a fb 37 67 b1 de 5f 98 a8 8b 50 6e eb 30 a9 51 34 60 65 48 74 59 bf 39 97 87 8b 10 f8 5c 0f 18 61 f2 6c e4 cd 62 dc 55 34 91 11 27 19 8f a2 28 d4 aa d7 a1 4c 49 75 90 4b 18 c1 82 0d 37 1c 7f 38 d9 87 e3 13 55 29 86 71 45 16 23 ec 1c 51 8d 3e 03 f5 e1 38 94 17 f4 63 55 b6 08 1b a0 aa 0d 36 42 a6 5d e8 b6 0d 67 0f ec e5 d1 01 90 4b 7b 5c 02 93 2a 45 84 dd 1c 83 f6 ae c7 84 cb dc ba c8 0f 36 32 04 4a 7c 87 cd 35 74 9a cc bc 38 31 3f 42 3f c7 ab 83 b0 e8 31 2f ec aa 46 58 b1 de c8 0a f5 84 59 6c 95 00 7b 5a e0 a1 b9 48 c1 e6 77 7b 64 a8 fc 47 a0 76 ec d1 41 4c d4 b2 c2 54 6b 3a 11 0d 54 32 51 d4 c3 1b 89 a7 63 62 8d c7 a5 7d 01 4d 68 fd fd 05 f7 6f 60 27 95 50 41 3f 74 33 13 2f 74 26 cd a0 d2 58 61 56 Data Ascii: 7X{[vg^7g_Pn0Q4`eHtY9\albU4'(LIuK78U)qE#Q>8cU6B]gK{\*E62J\|5t81?B?1/FXYl{ZHw{dGvALTk:T2Qcb}Mho`'PA?t3/t&XaV
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: f6 cc f8 a2 10 3d f9 a5 1d fe e2 89 6f 1b 7d a4 68 7b bc 66 68 b7 a8 73 35 91 9c 83 8c 17 95 33 1f 9f e4 5c 54 d3 31 30 bd cb 62 1c 6e 40 45 ff 47 35 8e ac e1 85 4f b4 c9 61 10 22 6e df 52 85 e6 0e 3f c8 c0 ff 77 d2 d9 7e e3 cf b9 ab 7c d7 19 9c 73 7a 79 92 79 99 5a 32 66 c4 c2 2b ac ce 37 a2 e8 c6 9f da fc 92 8e 99 88 0c d2 3a 6a 7c 9f ef 62 d0 89 11 18 ca 1b da eb 08 5b 3d 22 dc 3b f3 08 2e 3c 90 55 ee 15 ba 93 64 e4 2e 93 f1 5e 41 d5 f1 84 8d 33 e6 75 c1 17 34 50 20 d7 f0 3e ff 96 c2 02 58 c4 05 9b 8a 40 09 3d d7 5c 57 6b 31 5d 3e 46 d9 b1 d4 ae ff 13 64 dc 4a ea fc 4b a9 13 91 bb ca 64 a0 3a 57 a4 ff 5c f2 c5 0f 30 9d 49 f8 05 d0 2e 70 9e d5 de 79 53 7d 84 0d 91 2b b3 9c f0 31 36 80 f1 53 7b d9 bc 8f 03 3d c7 45 dc 45 32 49 42 ee 2a 93 c1 6a 46 4f eb Data Ascii: =o}h{fhs53\T10bn@EG5Oa"nR?w~\|szyyZ2f+7:j\|b[=";.<Ud.^A3u4P >X@=\Wk1]>FdJKd:W\0I.pyS}+16S{=EE2IB*jFO
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 37 b7 05 a3 da e6 61 7d 02 d6 46 ec 84 ea 52 9a f6 99 e9 2a 6d da ce c0 e6 6d c1 68 d3 03 38 65 49 45 99 c7 9e f5 a9 93 22 b0 ae af f5 83 d5 b8 79 19 74 4d 50 6a 14 6e 3c df bf c1 24 3b e5 98 b0 3c e7 81 21 df c1 3d 58 a1 7f 93 8d b4 d9 21 1c 0c b6 ab bc d8 4d e7 06 17 df 8f 16 6f 12 18 5a 07 0e 08 db d6 15 7a 47 53 18 22 0a fe 94 e8 49 96 25 99 c7 9f 4b 51 46 23 3f b8 ab a6 46 cd 6d 59 48 03 5c 4f d2 23 c6 76 5e 12 de ae d8 56 50 f3 b2 10 d0 25 1f c7 82 87 d6 d1 c0 0e 1b 5a 8a 79 7e 8a e4 fc 97 4e b2 60 b5 81 df ff 95 25 48 60 8e 04 34 2f 8d ce 67 33 01 f3 b0 6b 5b 27 b4 0e d2 3a 98 e6 b0 7a 08 2b 22 b1 65 c2 a9 5c 09 26 76 a4 fc 56 f5 22 0b b0 a4 a2 49 1d dc 3d 53 e9 2a 37 b4 ea 3c 30 ac e9 aa 20 ae 0e 2d cc d3 48 a5 a8 3b 9f e3 e9 08 81 8b 6c a0 02 13 Data Ascii: 7a}FRmmh8eIE"ytMPjn<$;<!=X!MoZzGS"I%KQF#?FmYH\O#v^VP%Zy~N`%H`4/g3k[':z+"e\&vV"I=S7<0 -H;l
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: dd 82 76 20 6d d9 2d 8c d7 b4 d7 77 04 a1 8c 65 8f a2 3f bd 1a de 09 d2 9f 10 ef 01 2d b2 e8 db 26 d7 53 b5 ec a6 49 68 2c 84 49 f4 b6 a9 8d 6a d7 ee 26 fb f5 f9 a9 aa 4a a2 7b e7 b1 14 91 58 7b de 23 dd 22 f9 f5 d8 83 cf ac 6f dc 30 e0 bb 84 bb a7 1e 06 d8 eb 02 c7 51 43 09 c2 7a 8a 24 c0 37 14 80 2f b1 7a 9f 7f 66 85 12 bb 13 68 ec be 97 d2 ba 0d 1f 81 75 da 28 a7 aa aa 91 70 4d 1c a5 8c 2c 7b ed 1d 16 de 86 0a 16 e3 38 8f 02 1a fb 94 45 42 9e e4 55 d7 c5 63 1c ec 73 a7 97 8d 19 a3 03 7e d2 7a 63 77 1f fa 8f ea 5e 11 f2 e7 21 60 23 95 b0 db a6 f1 3d f0 71 b1 6b 29 2d d7 41 90 d9 08 7c ab 40 d0 b7 49 63 bd 0c 02 3d c8 30 a3 5b 9e 09 d5 77 0f b9 10 58 27 be 23 27 3a ab d4 cc 16 db 1f 5d a0 cc b6 58 a2 90 b2 c2 89 0e d0 ff 0d 9b c4 7c a6 8b ed 29 53 57 aa Data Ascii: v m-we?-&SIh,Ij&J{X{#"o0QCz$7/zfhu(pM,{8EBUcs~zcw^!`#=qk)-A\|@Ic=0[wX'#':]X\|)SW
2024-03-27 20:21:09 UTC	518	IN	Data Raw: 57 db 85 2e 65 13 6c a4 6a 24 81 c2 1a 84 2c f0 e8 6c 3e 08 31 5c f4 cd 9a f7 b3 fd 36 3b 8d 79 b7 64 df f1 ad 7e 4a 56 42 88 b6 e3 5a 66 65 3e 83 0a 56 58 c3 2f c8 6c de 3b 37 27 28 8f c8 4e d4 6f 52 a5 e2 23 55 49 e1 00 6c 67 78 2f 27 1a 7d 6b 39 17 d9 8a 6e 49 4d d4 a4 50 73 82 4f 01 b6 ad 9b bc 53 94 9a 02 43 d6 f9 50 fc 96 65 db 82 45 89 db 71 61 6e 34 c2 36 94 49 d1 94 b0 46 61 b6 8c 41 b7 36 6e 5b 86 ac a9 09 0f 9d 8b b9 01 f9 ad 0b aa a6 25 38 08 0c 73 0d 34 9f 0d d5 e9 b6 95 21 6a 72 0a 4a d6 39 c6 ad cb a4 68 72 07 d4 7c 8b 86 a8 7c 61 ed c2 b2 f1 4e c6 1e 2c 28 ca 93 f0 f5 4b 1f f6 b4 21 98 a4 c3 9b 94 cb 96 a0 5c 29 74 59 4c 95 46 82 9b 74 38 81 41 d7 65 87 1e 33 b2 43 df a7 2a 5b 07 bc 51 d2 07 ee 4f 41 f0 1f 70 76 68 fa 8c 81 3a 62 30 45 cd Data Ascii: W.elj$,l>1\6;yd~JVBZfe>VX/l;7'(NoR#UIlgx/'}k9nIMPsOSCPeEqan46IFaA6n[%8s4!jrJ9hr\|\|aN,(K!\)tYLFt8Ae3C*[QOApvh:b0E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50341	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	1992	OUT	GET /blob/1232031/Features_AssetManager.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	1114	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: image/webp Content-Length: 3426 Connection: close CF-Ray: 86b215d00fab2d0e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 419338 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_AssetManager.webp" ETag: "7e1da438fad225d20458710e0338d4d5" Expires: Fri, 26 Apr 2024 20:21:09 GMT Last-Modified: Thu, 23 Nov 2023 08:39:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=4686 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: VwzKZEmVVC09oIOGRwcCQpWRDiBxZv4wOvArtvktYq4XCaObaowiqJ482WUxsn4xL69DIRgFoB8= x-amz-request-id: P54R11GN0SA1CENX x-amz-server-side-encryption: AES256 x-amz-version-id: Hmi6Rxuf8.LLLtDoXoH4rOU5RYZbcmz5 X-Content-Type-Options: nosniff
2024-03-27 20:21:09 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 43 6b 63 46 4a 64 25 32 46 4c 61 4e 25 32 46 42 68 44 66 70 53 72 38 64 44 37 6a 41 6b 4b 56 32 45 55 70 51 57 7a 35 73 50 68 51 34 30 4d 49 31 43 50 37 51 38 48 43 4a 48 55 6f 76 55 45 77 63 44 62 65 4b 70 43 71 53 41 41 63 4f 59 50 4c 4d 64 30 55 7a 45 6d 6d 67 34 5a 39 6a 77 51 66 42 42 6d 76 33 76 6c 4c 42 66 4d 50 54 48 52 30 49 49 43 73 4d 75 4e 45 50 74 64 72 62 39 69 5a 6f 6f 34 50 66 66 36 6c 66 6b 25 32 46 54 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OCkcFJd%2FLaN%2FBhDfpSr8dD7jAkKV2EUpQWz5sPhQ40MI1CP7Q8HCJHUovUEwcDbeKpCqSAAcOYPLMd0UzEmmg4Z9jwQfBBmv3vlLBfMPTHR0IICsMuNEPtdrb9iZoo4Pff6lfk%2FT"}],"group":"cf-nel","max_age":6048
2024-03-27 20:21:09 UTC	1272	IN	Data Raw: 52 49 46 46 5a 0d 00 00 57 45 42 50 56 50 38 4c 4e 0d 00 00 2f a8 41 48 10 17 c1 38 92 6c 25 df 70 77 ce 14 47 48 8a a4 dd 5d 12 70 48 83 4d 00 80 49 a6 1d 5c d1 12 a4 a0 09 75 f9 e0 72 bf 5c 55 6d db 90 79 e6 f7 a5 10 5b 1f 0d 14 20 c0 7b 26 d6 91 6d 35 59 52 25 fc 52 0d 6a 91 b6 85 3d e4 30 01 00 03 00 2b ff ff ef f7 7d e3 79 f6 f8 be b7 5d 17 e5 f7 2b 4b 7b 1e dd 7e cc eb d3 5c 64 26 68 6f 38 71 b4 e2 7e f3 eb cc 6a 9d 60 bf ac 65 b1 e7 49 95 0c 5f 64 42 09 f2 5b d3 5c ef 2e 83 1a c6 75 c5 48 3e 07 7a 0f 45 ff 43 51 fd 51 9d fe a3 6a ec 5e de 9a 71 10 b4 6d 1b 87 3f ef 6d 3f 82 88 48 74 37 f7 53 a6 7e ca 92 64 ab 8a 2d df 8e 01 fa 82 1d ce 7f 94 b2 f7 06 69 97 11 f7 eb ec 15 d1 7f 59 90 64 c7 6d b3 8f 10 41 fa 7a 98 7d 20 25 e5 c4 2f 45 db b6 db b6 51 Data Ascii: RIFFZWEBPVP8LN/AH8l%pwGH]pHMI\ur\Umy[ {&m5YR%Rj=0+}y]+K{~\d&ho8q~j`eI_dB[\.uH>zECQQj^qm?m?Ht7S~d-iYdmAz} %/EQ
2024-03-27 20:21:09 UTC	1369	IN	Data Raw: 1c b9 a9 3d e5 6a 7c fd ec 5e 77 c0 2e dc 9b e8 93 60 c4 2d 19 2d 51 8a 8a ae e3 db b8 e1 ad b1 ed b6 69 5e 43 a9 f8 d7 a4 ba 19 88 00 d0 3e f7 b6 34 62 91 21 fd ae ba 7e 4b 0a 65 de ad 31 35 2f da eb c6 b5 0f 77 32 40 d0 b6 5b a8 f9 3c 1b 45 88 aa 87 b7 94 ca d8 e0 6a 4e 48 66 0f ee b5 6b a3 ef 89 f6 24 6a a1 a9 76 cc 34 e9 49 d9 ae 88 78 73 2a 06 4a c2 6b 26 0b 16 a9 d4 96 22 c4 6b 57 62 d3 ed 27 da 33 4b ed 94 9f c7 24 6e 67 ae ac d7 18 db 52 11 58 2a cf 9f 9e 95 72 6d 3d d1 36 c5 9f 2e bc 87 5e d8 3c 9a 61 52 63 e1 2c 86 ad 8d 6f a9 a9 dd 74 fb 52 d1 3b 49 f5 68 6b da 4d 2f bb e9 16 2e 62 9a 1d 3a 41 d4 3c fb a9 71 ad 3a e6 89 54 4e 22 24 65 bb bd 62 c7 a7 cf f9 6d 85 aa 96 d0 76 8d d1 92 fb d6 36 2b 76 e4 56 d6 18 5b 57 f5 b8 a4 55 15 77 d4 8d d7 66 Data Ascii: =j\|^w.`--Qi^C>4b!~Ke15/w2@[<EjNHfk$jv4IxsJk&"kWb'3K$ngRXrm=6.^<aRc,otR;IhkM/.b:A<q:TN"$ebmv6+vV[WUwf
2024-03-27 20:21:09 UTC	785	IN	Data Raw: e9 22 da 0d c7 40 50 42 1c 8e 5b 79 58 90 b0 fc 0b 68 1f ec 2d f4 32 9f c2 eb e0 25 e4 45 02 b4 16 29 6d cb 8e 2e eb 77 3f a1 ff 4f 19 8b 0e 35 22 bc c0 6d 40 1f a0 ff df 33 f5 81 7c e3 f5 5d e4 e2 dd e0 74 a2 b3 28 1a e5 83 af af 70 f1 1f 89 3f 6b 42 b3 c0 ff 7f b4 4a fe 02 f3 67 73 d7 4d cc 9a 1d 58 7b 6a 12 bc 2d b3 3e 96 04 b0 6d 09 fa d5 ad 7c f0 05 fd 36 24 9b 3a 14 ba 2d 51 17 ad bb 7a 92 07 ff 42 52 6e 07 f8 61 f0 ac 54 0e f4 88 fd 9e bd 21 62 d7 6a 2c d7 14 d1 e8 f2 b5 24 ee 6e fd 27 bf d7 9b 12 f2 75 d3 8c bd 2f 32 08 44 58 57 ac 52 55 97 37 dc 5a 9d 5d fd 6e c2 62 25 8b 50 61 44 cb 15 ab 56 57 5c 57 2c 11 bb 56 83 da 7b ad 0a 3b e6 ec 51 2c 68 ca cf 19 b3 99 7b 75 23 2a 1b f4 a4 69 92 84 01 b9 ba 08 d1 f4 f1 60 10 f0 0d b4 e9 e9 a3 3f 9c 53 99 Data Ascii: "@PB[yXh-2%E)m.w?O5"m@3\|]t(p?kBJgsMX{j->m\|6$:-QzBRnaT!bj,$n'u/2DXWRU7Z]nb%PaDVW\W,V{;Q,h{u#*i`?S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50343	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	2672	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:09 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d05e1c084d-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d05e1c084d X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OW8n34fyDtiohyMbZwtmLsQJOBNgQ9JV3FGqzj1VTcc10x0y5bS3drhNfSuAsFzoA7y%2BHdDuTstxoFDOUDM2DnxVlqtaeAc%2BetVa4fNXLaJkfjmrbX4b9zL9fYAPa90%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:09 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50344	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	478	OUT	GET /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:09 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:21:09 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50345	18.160.41.49	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	537	OUT	GET /c/hotjar-920442.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Wed, 27 Mar 2024 20:21:10 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/6ff64cfa1bd9052f4a93c8b97282e62c Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2174e600dd54879ba9f49d0337eeb2dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: 1Sg6Ghq65YprocZL5ZGT84tCv_DdIHWYbLYncokLD5UDf4673ceP_g==
2024-03-27 20:21:10 UTC	9522	IN	Data Raw: 32 35 32 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 39 32 30 34 34 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 Data Ascii: 252awindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":920442,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"a
2024-03-27 20:21:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50346	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:09 UTC	3140	OUT	GET /_pricing_embed/?locale=en&layoutType=ALL&billingFrequency=MONTHLY&origin=https%3A%2F%2Fwww.canva.com HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1324	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d209cf69ff-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-9bUHNZLGuSQ8AtrwNngU/w'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=86b215d209cf69ff&app=pricing&policyHash=3bf9f0a0 Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 86b215d209cf69ff x-robots-tag: noindex X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XfaipuNleZ4Q1XNQzA7hmmrIYURVcA9Df9KfOrDSacK8apgAWoQ0n94ssNH8Kf4jtBSs1oVCIfmuhk5WfMRtqmxLV8JycZbcOHF9blT3vPg6PQi3pMYqbOWAP1clh1w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	45	IN	Data Raw: 34 62 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e Data Ascii: 4b37<!DOCTYPE html><html dir="ltr" lang="en
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 43 61 6e 76 61 20 50 72 69 63 69 6e 67 3a 20 43 6f 6d 70 61 72 65 20 46 72 65 65 2c 20 50 72 6f 2c 20 54 65 61 6d 73 20 61 6e 64 20 45 6e 74 65 72 70 72 69 73 65 20 70 6c 61 6e 73 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 72 69 63 69 6e 67 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 Data Ascii: " class="theme light classic"><head><meta charset="utf-8"><title>Canva Pricing: Compare Free, Pro, Teams and Enterprise plans</title><meta name="app-name" content="pricing" /><meta name="viewport" content="width=device-width, initial-scale=1"><link href="
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:normal;font-weig
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 2b 6d 32 6f 59 7a 39 6c 7a 6b 77 4a 69 35 7a 58 45 6e 69 4d 74 65 2b 53 63 65 4e 72 35 7a 6b 54 2b 74 32 39 52 41 72 2b 51 72 65 68 6a 63 49 4b 31 52 75 75 79 62 57 35 73 59 35 46 6d 53 47 54 71 69 6f 45 64 71 6a 2b 5a 66 44 4b 2b 79 6a 71 64 7a 78 32 37 51 3d 3d 22 20 6e 6f 6e 63 65 3d 22 39 62 55 48 4e 5a 4c 47 75 53 51 38 41 74 72 77 4e 6e 67 55 2f 77 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 64 30 64 61 30 34 64 33 61 62 39 65 62 63 33 61 2e 76 65 6e 64 6f 72 2e 6a 73 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 Data Ascii: egrity="sha512-+m2oYz9lzkwJi5zXEniMte+SceNr5zkT+t29RAr+QrehjcIK1RuuybW5sY5FmSGTqioEdqj+ZfDK+yjqdzx27Q==" nonce="9bUHNZLGuSQ8AtrwNngU/w"><link href="https://static.canva.com/web/d0da04d3ab9ebc3a.vendor.js" rel="preload" as="script" crossorigin="anonymous"
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 63 61 6e 76 61 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 72 65 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 40 63 61 6e 76 61 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 6e 76 61 20 50 72 69 63 69 6e 67 3a 20 43 6f 6d 70 61 72 65 20 46 72 65 65 2c 20 50 72 6f 2c 20 54 65 61 6d 73 20 61 6e 64 20 45 6e 74 65 72 70 72 69 73 65 20 70 6c 61 6e 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: ter:card" content="summary_large_image"><meta name="twitter:site" content="@canva"><meta name="twitter:creator" content="@canva"><meta name="twitter:title" content="Canva Pricing: Compare Free, Pro, Teams and Enterprise plans"><meta name="robots" content=
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 35 37 30 38 37 30 2c 22 46 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 2f 2f 33 31 62 38 30 63 31 32 37 35 38 63 34 35 62 35 39 30 33 38 65 37 33 61 62 38 38 66 66 36 34 34 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 2e 69 6f 2f 35 37 31 35 30 33 36 22 2c 22 63 22 3a 30 2e 32 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 47 22 3a 22 43 4c 49 45 4e 54 5f 46 55 4c 4c 22 2c 22 49 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 41 3f 22 3a 22 41 22 2c 22 41 22 3a 22 2f 5f 77 6f 72 6b 65 72 2f 73 65 72 76 69 63 65 2f Data Ascii: 570870,"F":{"A?":"C","b":"https://31b80c12758c45b59038e73ab88ff644@o13855.ingest.sentry.io/5715036","c":0.2,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":true,"B":100,"C":30,"D":10},"l":[]},"G":"CLIENT_FULL","I":"A","O":{"A?":"A","A":"/_worker/service/
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 73 69 6e 67 22 3a 22 53 54 41 4e 44 41 52 44 22 2c 22 6c 69 63 65 6e 73 65 54 79 70 65 50 72 69 63 65 73 22 3a 5b 7b 22 6c 69 63 65 6e 73 65 54 79 70 65 22 3a 22 4f 4e 45 5f 55 53 45 22 2c 22 6d 61 72 6b 65 64 50 72 69 63 65 22 3a 31 7d 2c 7b 22 6c 69 63 65 6e 73 65 54 79 70 65 22 3a 22 52 4f 59 41 4c 54 59 5f 46 52 45 45 22 2c 22 6d 61 72 6b 65 64 50 72 69 63 65 22 3a 31 30 7d 2c 7b 22 6c 69 63 65 6e 73 65 54 79 70 65 22 3a 22 45 58 54 45 4e 44 45 44 22 2c 22 6d 61 72 6b 65 64 50 72 69 63 65 22 3a 31 30 30 7d 5d 7d 5d 2c 22 64 69 73 63 6f 75 6e 74 50 72 69 63 65 4d 6f 64 65 6c 73 22 3a 5b 7b 22 64 69 73 63 6f 75 6e 74 22 3a 22 43 34 57 5f 46 52 45 45 5f 4d 45 44 49 41 22 2c 22 6c 69 63 65 6e 73 69 6e 67 50 72 69 63 65 4d 6f 64 65 6c 73 22 3a 5b 7b 22 6c Data Ascii: sing":"STANDARD","licenseTypePrices":[{"licenseType":"ONE_USE","markedPrice":1},{"licenseType":"ROYALTY_FREE","markedPrice":10},{"licenseType":"EXTENDED","markedPrice":100}]}],"discountPriceModels":[{"discount":"C4W_FREE_MEDIA","licensingPriceModels":[{"l
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 72 69 63 65 22 3a 35 7d 5d 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 43 22 3a 22 43 4c 49 50 22 2c 22 42 22 3a 5b 5d 7d 2c 7b 22 41 22 3a 22 43 22 2c 22 43 22 3a 22 43 4c 49 50 22 2c 22 42 22 3a 5b 7b 22 6c 69 63 65 6e 73 65 54 79 70 65 22 3a 22 4f 4e 45 5f 55 53 45 22 2c 22 6d 61 72 6b 65 64 50 72 69 63 65 22 3a 35 7d 5d 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 43 22 3a 22 53 54 49 43 4b 45 52 22 2c 22 42 22 3a 5b 5d 7d 2c 7b 22 41 22 3a 22 43 22 2c 22 43 22 3a 22 53 54 49 43 4b 45 52 22 2c 22 42 22 3a 5b 7b 22 6c 69 63 65 6e 73 65 54 79 70 65 22 3a 22 4f 4e 45 5f 55 53 45 22 2c 22 6d 61 72 6b 65 64 50 72 69 63 65 22 3a 31 7d 5d 7d 2c 7b 22 41 22 3a 22 42 22 2c 22 43 22 3a 22 56 45 43 54 4f 52 5f 53 54 49 43 4b 45 52 22 2c 22 42 22 3a 5b 5d 7d 2c 7b 22 41 22 3a 22 Data Ascii: rice":5}]},{"A":"B","C":"CLIP","B":[]},{"A":"C","C":"CLIP","B":[{"licenseType":"ONE_USE","markedPrice":5}]},{"A":"B","C":"STICKER","B":[]},{"A":"C","C":"STICKER","B":[{"licenseType":"ONE_USE","markedPrice":1}]},{"A":"B","C":"VECTOR_STICKER","B":[]},{"A":"
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 22 73 75 62 73 63 72 69 62 65 72 54 79 70 65 22 3a 22 42 52 41 4e 44 22 2c 22 70 61 79 6d 65 6e 74 43 6f 6e 66 69 67 54 79 70 65 22 3a 22 43 22 2c 22 62 69 6c 6c 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 22 59 45 41 52 22 2c 22 62 69 6c 6c 69 6e 67 49 6e 74 65 72 76 61 6c 43 6f 75 6e 74 22 3a 31 2c 22 63 75 72 72 65 6e 63 79 22 3a 22 55 53 44 22 2c 22 70 72 69 63 65 73 22 3a 5b 7b 22 71 75 61 6e 74 69 74 79 4c 6f 77 65 72 42 6f 75 6e 64 22 3a 31 2c 22 71 75 61 6e 74 69 74 79 55 70 70 65 72 42 6f 75 6e 64 22 3a 32 2c 22 70 72 69 63 69 6e 67 50 6f 6c 69 63 79 22 3a 22 43 4f 4e 53 54 41 4e 54 22 2c 22 62 61 73 65 41 6d 6f 75 6e 74 22 3a 32 33 39 38 30 2c 22 75 6e 69 74 41 6d 6f 75 6e 74 22 3a 30 7d 2c 7b 22 71 75 61 6e 74 69 74 79 4c 6f 77 65 72 42 6f 75 6e 64 Data Ascii: "subscriberType":"BRAND","paymentConfigType":"C","billingInterval":"YEAR","billingIntervalCount":1,"currency":"USD","prices":[{"quantityLowerBound":1,"quantityUpperBound":2,"pricingPolicy":"CONSTANT","baseAmount":23980,"unitAmount":0},{"quantityLowerBound
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 68 20 66 72 69 65 6e 64 73 20 61 6e 64 20 66 61 6d 69 6c 79 2e 22 2c 22 44 22 3a 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 22 47 65 74 20 73 74 61 72 74 65 64 22 2c 22 42 6c 22 3a 22 42 22 7d 7d 2c 22 45 22 3a 7b 22 41 22 3a 5b 7b 22 41 22 3a 22 46 65 61 74 75 72 65 73 20 79 6f 75 5c 27 6c 6c 20 6c 6f 76 65 3a 22 2c 22 42 22 3a 5b 5d 2c 22 43 22 3a 5b 7b 22 41 22 3a 22 45 61 73 79 20 64 72 61 67 2d 61 6e 64 2d 64 72 6f 70 20 65 64 69 74 6f 72 22 7d 2c 7b 22 41 22 3a 22 31 4d 2b 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 6c 79 2d 64 65 73 69 67 6e 65 64 20 74 65 6d 70 6c 61 74 65 73 22 7d 2c 7b 22 41 22 3a 22 31 30 30 30 2b 20 64 65 73 69 67 6e 20 74 79 70 65 73 20 28 73 6f 63 69 61 6c 20 70 6f 73 74 73 20 61 6e 64 20 6d 6f 72 65 29 22 7d 2c 7b 22 41 22 3a 22 Data Ascii: h friends and family.","D":{"A?":"B","A":"Get started","Bl":"B"}},"E":{"A":[{"A":"Features you\'ll love:","B":[],"C":[{"A":"Easy drag-and-drop editor"},{"A":"1M+ professionally-designed templates"},{"A":"1000+ design types (social posts and more)"},{"A":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50348	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1988	OUT	GET /blob/1232028/Features_Insights.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1110	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/webp Content-Length: 2646 Connection: close CF-Ray: 86b215d2ffb6289a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 531520 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_Insights.webp" ETag: "240d7a40ef80824e9f0350cec7ed8d73" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3516 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: dsdDJvTpjXxm+oV2lc4EaBYvIF1bjHOtcYaGSzltvt9xKtYC8qQWLuhJDsp/S5SC+btX7pBPp1g= x-amz-request-id: 8H3DESQ6R6TQ8CKS x-amz-server-side-encryption: AES256 x-amz-version-id: xp9.0vP7ny8h9xerRR_nYMldtxgTCn_B X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 72 51 30 30 59 36 6e 6c 59 44 38 74 57 33 44 58 74 36 74 46 46 66 31 31 7a 51 6b 38 50 6f 33 78 46 77 39 4d 38 75 41 4b 5a 30 25 32 46 54 4b 6b 61 25 32 42 45 5a 4f 68 37 6a 77 56 44 6a 32 42 32 35 37 46 58 77 77 79 7a 65 58 77 6e 33 33 4b 55 67 6a 6a 38 59 6b 68 76 4b 55 59 41 64 76 79 4e 30 79 6c 36 70 46 54 68 76 4b 6e 62 57 71 57 5a 43 41 70 6d 79 25 32 46 56 6a 61 47 4b 59 4a 56 37 38 58 4c 52 25 32 46 58 6d 78 63 25 32 46 7a 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rQ00Y6nlYD8tW3DXt6tFFf11zQk8Po3xFw9M8uAKZ0%2FTKka%2BEZOh7jwVDj2B257FXwwyzeXwn33KUgjj8YkhvKUYAdvyN0yl6pFThvKnbWqWZCApmy%2FVjaGKYJV78XLR%2FXmxc%2Fz"}],"group":"cf-nel","max_age":
2024-03-27 20:21:10 UTC	1272	IN	Data Raw: 52 49 46 46 4e 0a 00 00 57 45 42 50 56 50 38 4c 41 0a 00 00 2f dd 41 51 10 97 a0 a8 91 24 65 95 ad dc 15 46 f7 65 46 1b 4a 02 00 6d 38 9e 18 54 a0 06 fd dd d3 73 57 a1 a0 8d 24 65 93 53 72 e2 cf 18 be 02 46 56 91 64 35 5a 72 0e 4a d0 82 00 44 e0 05 05 38 40 0b 66 c2 dd 4f 00 00 00 e0 7f fe 5f 77 9d e3 ce d6 5f eb 56 39 38 14 fe fd d2 56 d9 ae 0b b8 14 ce 04 7f b0 50 51 c9 d9 64 e9 e7 f1 ca f3 93 33 8e 82 b6 6d 24 97 3f ed 6d f7 02 88 88 09 90 16 62 50 9e b0 37 3d e2 a7 81 e8 48 52 dd c8 04 47 ca 3d 2d fb ff bf 36 59 60 59 36 91 47 f7 60 36 a2 ff 92 d8 46 72 24 49 59 69 bb b3 d6 bb 9a ea de bd 7b 52 90 24 b9 8d 24 35 c7 60 05 13 27 fa ff cf 6d 56 65 16 b0 0a 3c 99 88 e8 bf 2c 48 b6 e2 b6 3a 37 96 03 da e6 e2 6b 84 01 f9 2d 9f 0b b8 32 fd e7 bf 6e 75 2d 23 Data Ascii: RIFFNWEBPVP8LA/AQ$eFeFJm8TsW$eSrFVd5ZrJD8@fO_w_V98VPQd3m$?mbP7=HRG=-6Y`Y6G`6Fr$IYi{R$$5`'mVe<,H:7k-2nu-#
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 9a 7a 94 3d de 24 99 9d 52 c6 3b 63 9a 78 9c 33 e6 a9 db 6e f7 6f 0f d0 33 a2 ea 7b 32 6a ca 3b 67 6d 67 e7 84 2c d6 3f 67 27 1f e7 58 10 08 b3 56 05 10 cb 02 ea c7 b0 5b 01 ef 73 f3 2d 37 f6 64 e4 1a ae 40 d5 12 7b b8 13 19 aa 60 b4 a3 8b 50 9a fe c4 47 05 08 03 23 6a 34 48 fc 4f a7 21 39 c4 c3 ac 6f f1 4c db 2d 75 b5 e1 30 6a 99 4b 04 8b 22 16 35 83 21 0e ec 45 7c da d7 b9 98 34 5f 45 69 ac f5 55 b1 3a fd e0 6d 58 25 17 41 2d 3c 6d e9 5c cc 51 6b 64 f6 45 94 49 08 09 87 4c 4b 76 ba c4 a7 fd 1d bd 30 7d 6c 2a 91 a8 b8 5a 18 14 ca f8 b5 23 f5 64 db 7a 57 b8 49 62 f1 cd bb be 48 72 2a dd b3 e0 7d 7f 67 fc 0c 31 c5 e8 3b 5e b0 5b 5b ac e5 6e 20 9d 4b 8e 47 31 36 d5 27 7a 41 ca 44 ef 68 0d 55 7f da 87 5d be 6f b8 82 e1 4a 59 2f 53 c3 13 2a 94 a7 a4 7d d8 de Data Ascii: z=$R;cx3no3{2j;gmg,?g'XV[s-7d@{`PG#j4HO!9oL-u0jK"5!E\|4_EiU:mX%A-<m\QkdEILKv0}lZ#dzWIbHr}g1;^[[n KG16'zADhU]oJY/S*}
2024-03-27 20:21:10 UTC	5	IN	Data Raw: e7 ff 27 04 00 Data Ascii: '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50347	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1987	OUT	GET /blob/1232029/Features_Imports.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1111	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/webp Content-Length: 17236 Connection: close CF-Ray: 86b215d2fe7f9c72-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 419569 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_Imports.webp" ETag: "8042e51c4ab1cd7823f05d1b2077e72f" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=21728 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: IhgNI3L3sudN2+Kz329VpOY3947hFB2hhbDdCBVGsgI/fJetRAmLMCpD4slekRHfihbwG5svy4A= x-amz-request-id: 5YZ719GQ44CGY7V8 x-amz-server-side-encryption: AES256 x-amz-version-id: Wwm2uU2U9rPBPKsy3GVXkR5rnH9PWV11 X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 51 32 6f 33 73 45 48 43 74 67 63 42 4e 69 48 70 70 6f 56 68 31 6a 57 73 4b 57 67 76 6c 25 32 42 71 4b 4c 75 54 63 47 61 78 54 33 7a 64 75 48 6f 34 72 79 62 32 61 66 79 4e 6c 54 71 4d 6c 58 72 49 47 50 67 45 59 49 46 25 32 42 45 71 74 4f 51 43 70 68 39 37 64 62 61 32 37 46 38 76 71 6e 54 7a 62 71 44 59 25 32 46 56 44 4b 51 5a 4c 51 63 63 73 73 30 50 71 35 45 69 6b 73 61 42 54 4f 53 4c 66 78 43 75 78 46 58 71 67 34 38 6c 6a 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q2o3sEHCtgcBNiHppoVh1jWsKWgvl%2BqKLuTcGaxT3zduHo4ryb2afyNlTqMlXrIGPgEYIF%2BEqtOQCph97dba27F8vqnTzbqDY%2FVDKQZLQccss0Pq5EiksaBTOSLfxCuxFXqg48lj"}],"group":"cf-nel","max_age":6048
2024-03-27 20:21:10 UTC	1275	IN	Data Raw: 52 49 46 46 4c 43 00 00 57 45 42 50 56 50 38 4c 3f 43 00 00 2f a8 41 48 10 8f e3 38 b2 6d d3 3a cf 36 46 2f c9 1f dc 4f c6 a3 67 9b e7 bc 34 dc 06 00 9b 36 b2 cc 76 4a ff 3f c4 17 74 a4 29 cc 24 d9 6d 00 80 69 12 0f ee ee 0e 23 2f f0 13 a7 71 0b 2b 53 dd 5d 13 dc d4 b6 ed 44 5b 02 12 32 f8 c1 01 fa 28 31 40 9f a1 cb 33 12 a6 8f 01 00 80 80 7f 22 01 81 ba f7 cc b5 0b f5 54 fd ae 32 68 89 c5 0c 28 ce 73 ae ba 5a b3 ae 25 64 0d 1d c3 52 61 fa 4c 23 99 61 91 96 a1 64 42 a9 ec 6b 73 6a 39 a6 84 51 25 52 51 51 96 52 3d 66 b6 3e 76 4f b1 75 28 71 14 b1 82 84 9d cd 09 15 9c 3d d1 25 85 fa ca f6 6d a8 f9 43 4c 34 92 1c 36 ee cc 88 4d be 23 0c cc 48 96 03 26 95 40 75 cc a2 ac c1 b6 57 86 30 4c e2 49 8e 84 32 00 2c 62 2c 22 00 b9 23 d5 c0 8f 68 f4 47 2c f1 8a 10 1c Data Ascii: RIFFLCWEBPVP8L?C/AH8m:6F/Og46vJ?t)$mi#/q+S]D[2(1@3"T2h(sZ%dRaL#adBksj9Q%RQQR=f>vOu(q=%mCL46M#H&@uW0LI2,b,"#hG,
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 4b bb 49 91 08 7d 21 2a a5 84 f5 ea 66 8f 61 07 45 9d 02 2e a6 ae 9e b2 5a e3 fd 55 f7 51 fb e1 96 9b b7 05 2d c1 87 a3 ca b7 a5 f2 ed d4 a4 bf a6 66 ac 01 89 66 10 6e c0 74 fc cf 07 f8 00 8b a1 a3 c2 bb 44 55 5f 8d 82 a7 0f 48 4e c4 1b 92 1c f6 0d b7 3a 8d f9 a8 68 d8 64 d4 8d 14 ad 17 ca f4 04 3e 50 c7 24 08 45 c2 9a dd 7b f7 a2 15 d3 21 f4 a0 ad ed 72 00 6f 5b 2c 5b 03 d7 75 58 97 81 ae 87 4f 97 42 5f 9b 33 43 28 1b 10 d3 db 16 ef 1e bb 12 72 54 f4 75 ef c2 cf c5 48 19 bc 4c 05 ac 6f ae d6 24 19 63 3c 07 5b dc c1 6b 81 68 18 44 84 ec 20 33 d4 75 a8 b8 84 8a 20 5c 61 38 df 0b a1 64 d4 d9 50 c0 e9 0f 1c 77 4a 0c 78 0e 2e 66 00 e9 2e 5e 10 5d 6a 40 af a9 f2 d5 59 53 13 7e 58 48 5b 1d 26 75 25 3c 64 66 a2 7c 55 42 b6 22 ed 5d 79 f7 d8 a1 62 94 b6 82 96 0e Data Ascii: KI}!*faE.ZUQ-ffntDU_HN:hd>P$E{!ro[,[uXOB_3C(rTuHLo$c<[khD 3u \a8dPwJx.f.^]j@YS~XH[&u%<df\|UB"]yb
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: e6 35 0b d7 bb 86 af ce 91 d8 25 8c a1 0a 18 f0 d2 b7 76 81 56 a4 03 b1 32 4c 2a e9 45 e1 70 c6 c0 31 37 a3 5e bd 34 f6 33 c8 13 3c 2e 50 b0 fe e3 8e e1 7a c9 97 63 25 c2 74 31 e4 01 f0 9f 18 32 df 66 b3 20 44 d5 6f 05 11 77 80 a9 72 6a 45 24 dd 7b f7 78 bf 2e 13 2b 6b 31 f6 cf ae 8d 04 a3 f8 e6 8e f9 d2 b2 bb af 78 46 c6 ba 3f 0b be 11 1e fc 06 21 63 c6 04 c2 41 89 15 46 76 ad 91 47 77 e6 6f de 0e ba a5 91 67 66 b4 86 37 ec 9f 1f 08 ee d9 55 8d 1e 7b c6 f2 5c ac 1a d5 b9 ae 0e 7d 61 bb 30 3b a2 c6 b8 01 df 78 5a c5 50 55 37 ae 4d 76 25 24 d3 78 de f6 86 11 c2 12 57 87 a6 11 b1 f6 af c1 0d 5f db ed 0e cb ef 2a 60 41 56 85 af 9f 05 db 08 bf b2 c6 b8 6a e7 4c 6f 92 d1 01 8d 0c a9 43 3c 00 f9 37 4e d2 64 59 26 e2 46 8f 32 22 43 11 30 6d c5 96 95 5b 2f df 7c Data Ascii: 5%vV2LEp17^43<.Pzc%t12f DowrjE${x.+k1xF?!cAFvGwogf7U{\}a0;xZPU7Mv%$xW_`AVjLoC<7NdY&F2"C0m[/\|
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 06 58 18 9b de 0a 73 53 62 80 a7 16 83 6c 9f c2 aa 91 20 7b 09 22 9e f6 da e8 5a 39 a3 06 56 01 66 16 18 c5 34 e2 6e 5a 3c 4a 87 3e aa 0d 17 85 21 54 2d dd 67 89 78 2f 74 7e 7a 52 87 ff d1 92 10 c6 4c ab ec 08 d6 64 c6 c3 dd b0 06 f7 0d 64 25 6e f4 23 91 bf cd 2f 48 7d 93 ef 7e c7 90 fb fa 32 6b 57 69 04 84 58 94 fc e4 63 aa a0 a3 83 9d 66 79 1a ca 82 ea 90 46 c7 5f 8a 1b 21 dd 17 4a 66 12 d0 b4 90 1d 4d 30 1a 8e a0 96 7a a4 01 62 bb b5 39 b6 ac da e2 b0 46 f8 1a e0 1d 1c fa 0a 22 b8 3d b8 e1 c5 62 a1 47 23 9b 40 af aa 72 6d c5 4a ae 63 74 13 93 ac 18 7c 4a f0 28 3c 22 cc ae 90 05 ab 2a 16 ee b3 f2 bd d0 79 d1 54 62 53 70 93 e8 4e 7a 44 61 36 34 88 c3 9a 1e 0a e3 04 85 32 1a 77 b2 c0 2f ce ee 33 87 cb 78 96 49 a2 10 79 65 e8 d4 6b 09 62 20 ab 1b 0e 75 d4 Data Ascii: XsSbl {"Z9Vf4nZ<J>!T-gx/t~zRLdd%n#/H}~2kWiXcfyF_!JfM0zb9F"=bG#@rmJct\|J(<"*yTbSpNzDa642w/3xIyekb u
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 09 4c 5c 18 2b f7 e0 10 54 11 d8 cf 69 99 0a 57 30 00 cf af e0 e9 8c c0 b3 16 93 a6 17 69 78 46 09 87 56 ec 32 81 49 98 95 51 e5 b5 f5 a2 ad a6 06 e9 34 17 34 08 8b 9d 36 63 a7 76 a2 fe d3 4f 62 a0 06 d1 7b 74 31 c8 c7 be 36 61 e5 69 99 e5 0c 4f ea 42 c1 19 e1 6d 47 86 e4 79 a7 c6 83 34 87 e1 e0 43 bd 9a 58 67 c2 46 20 4d 45 bd e8 11 26 91 44 9b 69 c6 2c e1 b2 7a 27 5d b3 3b c9 9f 0f 9e 5c d0 4d 54 dc c7 be 29 05 6a 76 1e 87 d5 14 a4 ea 1a 95 95 6e 4a e5 2d 4c f9 d2 bb e5 60 38 bb 63 0c 43 ed a1 9e 5d 12 2f 34 1a 1a c5 0d c1 1a 53 a6 32 0b 2c 18 a6 8e 6a 44 94 bb 33 2f 31 09 97 05 b0 17 6e 3d 2e db 2a 79 a5 99 2a 5e 1f dc 54 45 f6 21 8d 22 38 7b 7c 78 3b 62 df da 39 48 ee d0 71 e1 f6 c7 be a5 e9 e5 48 4b e9 74 8a 73 79 43 fa b8 93 32 7b 7e 26 cc d4 54 6a Data Ascii: L\+TiW0ixFV2IQ446cvOb{t16aiOBmGy4CXgF ME&Di,z'];\MT)jvnJ-L`8cC]/4S2,jD3/1n=.y^TE!"8{\|x;b9HqHKtsyC2{~&Tj
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: cf 31 9b 34 a6 2c 09 43 ac ff 47 80 b1 98 79 77 7d b1 88 58 0f 24 b0 bb a9 16 95 5b c0 50 80 3b ba 7e 37 a2 64 9a 34 d2 89 af 15 59 c9 73 1a e2 f8 93 0a 08 97 e5 99 b0 0b cd a8 94 44 74 95 e7 a4 2f 0f 27 20 8d 30 67 6a 12 ec b4 ef a4 bf 57 8e 5a db aa e8 87 bc 5b 87 73 54 0f 3f b7 d0 aa 80 6d b6 48 9b e6 ea d9 48 fa 4e d0 db b7 f7 15 3b 50 80 99 3c 5b e7 43 05 9a e4 db cb 91 16 30 99 b2 ab 1e e5 0c 4e 7d e2 a1 3b 86 03 27 7c 05 82 72 d4 04 ce 3b 1b b3 f3 b0 51 98 5c 2f c7 b0 7b 35 d5 1e d9 7f e9 52 f2 e0 73 81 74 68 b7 49 d9 5e b1 d5 6c f4 85 d7 6b 48 32 3d e0 fd 11 fe 2b a1 df 81 fe 42 f9 cd e0 2b a5 2f fd 1f a1 92 4f 3a 0a 32 93 b4 c1 36 e8 74 c4 4f e0 ad 0a c5 ca fe df 12 47 5b b0 65 d7 bf dd a3 6e a2 63 97 71 5c 0f fb e9 60 32 13 ea 83 ec 30 a8 32 f3 Data Ascii: 14,CGyw}X$[P;~7d4YsDt/' 0gjWZ[sT?mHHN;P<[C0N};'\|r;Q\/{5RsthI^lkH2=+B+/O:26tOG[encq\`202
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: ed 3e 7f 90 b6 e2 5a 90 0f 8d e9 37 44 75 4b fc 22 65 32 de 56 a7 4f 93 99 a6 6b 32 87 75 46 1d cc f4 4c bb 38 91 50 27 a1 06 c2 f4 5c 05 51 35 23 64 d4 f9 ba ae 81 0b d5 bc 6f 0b 6d 46 1c 0b 64 ee c3 91 14 ba 80 4d 4c 9d a3 b4 02 bb 36 7d 13 17 c0 60 3b 13 93 0d 5b dc bd cf 0a 81 73 ad 48 80 2d cb 71 c3 a2 94 36 16 66 73 dd 7d b9 80 5d 5c dc 60 fd fe 63 e2 15 b1 89 a3 c3 99 26 5d a1 96 02 27 54 49 48 d4 73 08 d5 31 22 05 b0 7b 8f 43 b2 af 68 e3 56 2e a8 5d bc 0d 2a ce 13 30 dd 14 da 3a 13 bc f2 80 4d e2 d8 fd d4 13 50 0a 42 9b ba 13 59 5a ab 2a d7 72 b8 6b 9b 6e 72 8d 97 82 0f ed b5 b7 c5 8e 51 d6 5c 13 28 93 f3 19 7c 4f 16 9c 89 2c 29 24 b8 b7 8d 35 c6 1d 5c 13 d3 c0 eb 7d 21 f5 60 2e 32 6b 9d 38 4d 3b 57 c0 f5 35 51 68 0d f6 02 94 12 2c ca 86 15 1e e3 Data Ascii: >Z7DuK"e2VOk2uFL8P'\Q5#domFdML6}`;[sH-q6fs}]\`c&]'TIHs1"{ChV.]0:MPBYZrknrQ\(\|O,)$5\}!`.2k8M;W5Qh,
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: c1 14 03 82 56 38 f6 73 51 61 bc 1f a4 a5 ce b8 99 b0 62 8f ee 5d e3 0f 1b 82 bb a4 42 1e 79 34 9a e8 41 bd d2 1e 1e dc a1 db a6 aa cc 2a eb 58 4e 9b a0 3a 14 07 7b a3 81 4e 89 10 5c 82 35 9d 2b 61 a0 4e ea 0f 3b ad 57 fd 74 29 7a 91 29 a9 50 06 2c 25 93 5b f4 f7 f9 51 44 6b 39 84 15 20 3e 3f 6a 97 25 eb c1 5b 09 b7 26 32 41 d3 72 08 7d 3a 0b 5b 1c fb 93 0e 8b e7 e9 63 90 7d 98 79 d4 cd cc cc 94 08 92 2a e0 18 ff 97 c3 16 58 72 e1 ed 57 d6 fc 04 c5 59 80 8e 25 c7 d8 5e 01 34 3a 58 61 97 69 fa f8 ef 5d 6c a9 46 53 7a 34 02 7b 0c 71 6b 74 20 68 80 e7 aa 88 3e 3a 06 74 51 7c 05 b7 19 bd 38 80 5e 0e 11 30 07 88 6a fd 85 a6 29 5b 3c 3e 2c 10 b5 65 1a 46 65 a2 b3 bc 26 1f 01 76 30 a8 8a 44 fa 8e ed cf ee ce 61 6b 40 2f ca 3a 01 9a 75 54 18 fa 37 e6 fb d0 a0 c6 Data Ascii: V8sQab]By4AXN:{N\5+aN;Wt)z)P,%[QDk9 >?j%[&2Ar}:[c}yXrWY%^4:Xai]lFSz4{qkt h>:tQ\|8^0j)[<>,eFe&v0Dak@/:uT7
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: d1 0c 38 1e a2 84 08 1d 3c eb e5 96 ce 03 43 92 9a f9 9b 0d 4f 38 82 63 64 2a 7f 5f 18 f7 bb 0a b5 79 d3 70 58 c4 c2 bc c2 7e 0f 55 9f d3 87 eb 84 79 25 bc 5d 2d c3 b5 b6 a1 8e 6f 61 f3 2b f0 76 23 83 b5 00 dc 66 46 64 a7 15 c4 31 c4 d7 90 38 5a 6b 19 57 c1 0a 09 4f d1 6d 27 bf c6 d8 a3 f7 e8 36 81 0d a2 90 4c ab ea da 2a 13 8b f1 2e bc dd 6e aa 6b 38 28 58 a8 07 88 75 45 ac 54 fa 54 b0 fb b2 e0 b0 90 25 fb 8b 5d 5b 9e dc 05 ee 85 9e fd 1c 9b de 1a e8 69 f6 1a 6b c0 9f e7 73 63 56 43 60 e6 76 40 f9 05 fa c1 cd 80 60 5c 14 a1 5e 65 e9 62 e3 c5 47 fb f4 88 4e a7 aa 02 b4 04 b0 07 7b 4d 7c 03 fe 28 b2 60 74 74 7a 78 f7 10 b1 c8 8b 18 ff dc 10 79 17 7f 03 9e c5 98 5f 6b 27 bf 23 20 fb 43 26 a3 33 79 2d 35 6c 12 df f9 be 75 4d 45 3d fa 34 cc 4d f8 4e 94 90 09 Data Ascii: 8<CO8cd_ypX~Uy%]-oa+v#fFd18ZkWOm'6L.nk8(XuETT%][ikscVC`v@`\^ebGN{M\|(`ttzxy_k'# C&3y-5luME=4MN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50350	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	2887	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	921	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d30a995a3f-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d30a995a3f X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r1eZz5i29IPJI%2FDMKdCsvAc9xQ2KPztXYJbw45VqW846U7Zv6j%2B08ASZZU4DbgFiB9%2B0yLiQgEdflR97WgGA%2FPB%2Feh2uDWHmVW%2B3AcARieqqS1gNMmAjsInBP5EeY5A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 57 65 49 5a 75 4c 42 76 65 41 31 57 59 57 71 52 70 32 7a 53 4c 59 53 66 6c 69 51 5f 34 6d 4c 68 79 42 45 31 67 78 5a 39 54 31 4d 34 49 68 66 68 62 41 78 46 72 4e 49 35 77 76 33 5f 71 31 58 66 79 69 30 5a 75 76 4f 32 59 4b 78 65 4d 54 46 6d 30 6e 56 64 48 51 48 4f 5a 66 45 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 37 30 32 37 37 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"WeIZuLBveA1WYWqRp2zSLYSfliQ_4mLhyBE1gxZ9T1M4IhfhbAxFrNI5wv3_q1Xfyi0ZuvO2YKxeMTFm0nVdHQHOZfE","B":1711578070277}
2024-03-27 20:21:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50349	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1986	OUT	GET /blob/1232030/Features_Collab.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1108	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/webp Content-Length: 6016 Connection: close CF-Ray: 86b215d31a270766-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434827 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Features_Collab.webp" ETag: "60e5223b189a293e164433bc70a50777" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=7358 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: zaLsHSIk/s2F5vAl/Ix6+ZBXodunoKJKaejvSsaFjFyfBXu/oaDATNBj0dWVNK+2vNl6fypU9Cg= x-amz-request-id: A815YMJWXJBHCQZ5 x-amz-server-side-encryption: AES256 x-amz-version-id: SIdAy6ktsTo33yeEygrpi6aX8YNTnnI1 X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 58 72 4d 72 69 6e 58 75 5a 70 6e 52 58 36 76 4b 70 69 52 6e 49 78 37 76 75 67 72 25 32 46 36 5a 75 34 4e 69 6e 4e 36 6a 72 31 6a 6d 59 52 51 4a 4f 42 65 6d 59 34 78 43 68 75 35 62 4c 63 34 65 65 4f 6b 4d 53 75 4e 34 31 36 47 46 4a 36 63 56 44 47 70 45 39 25 32 46 74 5a 55 66 67 46 36 62 30 25 32 42 6f 59 41 4b 72 42 4f 47 71 4f 72 32 31 30 55 36 4c 31 6d 6d 25 32 42 76 32 67 46 54 7a 48 35 61 57 7a 25 32 46 61 72 6f 63 55 54 42 31 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VXrMrinXuZpnRX6vKpiRnIx7vugr%2F6Zu4NinN6jr1jmYRQJOBemY4xChu5bLc4eeOkMSuN416GFJ6cVDGpE9%2FtZUfgF6b0%2BoYAKrBOGqOr210U6L1mm%2Bv2gFTzH5aWz%2FarocUTB1"}],"group":"cf-nel","max_age":
2024-03-27 20:21:10 UTC	1274	IN	Data Raw: 52 49 46 46 78 17 00 00 57 45 42 50 56 50 38 4c 6c 17 00 00 2f a8 41 48 10 e7 c0 36 b6 ad 44 68 44 05 f4 4e 48 43 0c 11 eb ee ee be 6d 30 8e 6d 2b cd 87 81 16 e8 bf 22 b7 1d 24 d9 b9 bb 2a 0d 00 a4 81 08 0f f0 06 d5 97 3d c0 13 6c 7e a0 dd 64 db 93 51 24 5b 8d 86 74 cc 20 09 7f 88 c3 40 96 c0 5e 37 00 00 ff ff ff 63 fb 1f 22 bb 9f fb dc f7 bb ef 79 ee 41 17 69 35 eb f8 cb 20 dd 16 f6 dc d1 7d a5 3a 36 12 29 09 ff 74 11 51 45 42 68 63 af 8b 0c a5 fc 18 9e c5 94 7e 17 e0 e4 02 91 fe 0f 9c 90 e1 c1 d6 ae 2b c9 38 0a da b6 61 12 fe b0 f7 87 20 22 26 80 dc 08 08 98 29 b1 65 a4 74 c0 24 55 df e4 7a 14 00 b4 6d 6d db da 62 b9 8c de 64 cb a3 28 ef ff a0 12 20 97 08 94 b5 76 81 88 fe cb 82 24 3b 6e 9b 7d 78 37 00 2a a6 6c 09 e0 21 44 9f be 25 49 b2 24 49 b2 ad 74 Data Ascii: RIFFxWEBPVP8Ll/AH6DhDNHCm0m+"$=l~dQ$[t @^7c"yAi5 }:6)tQEBhc~+8a "&)et$Uzmmbd( v$;n}x7l!D%I$It
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: a6 00 19 8a 6f fc 16 aa 3d a7 fa 20 61 be db 52 86 e3 a2 5e b1 b3 b9 4c b4 5e 66 94 79 81 d6 79 d6 1f 77 1d e6 46 c1 d5 65 49 ee 0d 09 97 30 0d 13 f2 94 69 91 1e e4 c8 c8 03 52 74 33 37 34 d0 8e 19 be 56 e1 0f 44 16 78 b7 25 06 e4 d1 34 73 8c 48 39 97 1c a3 46 76 a6 66 9a 28 dc a2 eb b8 73 0c 6e 26 ea b6 a7 04 d4 8c 52 df a0 e2 08 0f 86 42 18 4b 41 d4 9c fb 65 07 77 23 b8 a2 a7 9d 32 e5 48 86 51 68 8e c1 08 33 ab 0c 0b 56 7a 82 46 8a c1 92 70 03 a1 b0 7d 40 9c 88 32 23 4d 99 b0 4e 22 15 7b 10 89 e5 10 da 8d 61 e9 68 6e 65 d6 3e 80 7f 0d 83 22 58 a2 5a 53 b0 a4 19 16 5d e9 11 6d 31 35 2f 75 99 99 91 1a d5 e1 34 13 15 81 8f 8c 83 65 49 8f 13 07 31 06 e9 68 a6 d3 05 75 35 14 93 18 94 26 d1 fa 2d 5a 63 ea 70 8b ca ee 1b bf 4d 46 5f a7 b0 96 bf cc f2 a7 dd 58 Data Ascii: o= aR^L^fyywFeI0iRt374VDx%4sH9Fvf(sn&RBKAew#2HQh3VzFp}@2#MN"{ahne>"XZS]m15/u4eI1hu5&-ZcpMF_X
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 95 00 23 f2 66 a0 43 ec 4f 94 82 e6 f2 19 0e 8e fd c9 2a 20 62 36 ab 32 fe e9 bf 1f fd 8d e5 70 79 b1 38 b0 7d 56 70 4c 43 07 27 1b 98 79 3c 21 c5 b0 82 23 60 0d e7 38 ee 86 0b 02 59 d1 7d 76 ee 10 a8 77 2b d5 4c f9 da b5 55 fc 0f cc 25 da 9d 84 69 cd 8b ac 89 f7 cf 0b eb 32 75 8a d7 b4 75 ef c0 75 fa ae 86 d7 b4 75 cf 70 4c fc 69 a6 4a ac 69 eb 5e 61 1f 3a 7d 48 30 fb 78 7f 20 d6 b4 a5 77 49 c9 1f 2f 96 50 0a 8c 9b 5f 26 89 f9 18 6a da 45 ce bd e0 e4 0f 03 d8 98 b8 1d 50 a9 39 23 9e ea 91 f3 ed cc 44 1c 0a 99 66 86 14 8d 74 40 b8 f8 71 4d 38 2c 3a 4f c0 25 02 c4 cb 24 d1 1c ef 4f 7e 57 36 f3 f1 18 e4 6e 08 d8 04 7e 19 99 27 69 00 dd 62 00 7c ac e5 22 02 5d 16 95 a3 22 70 37 50 32 26 62 d5 3f e4 a1 cf c2 a3 08 41 a1 52 1a 8d 4e f0 d9 10 b1 6b 8f 0c 58 89 Data Ascii: #fCO* b62py8}VpLC'y<!#`8Y}vw+LU%i2uuuupLiJi^a:}H0x wI/P_&jEP9#Dft@qM8,:O%$O~W6n~'ib\|"]"p7P2&b?ARNkX
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 08 07 31 c6 6f f7 d0 f9 84 4a 85 83 60 17 27 04 24 04 38 e7 1d 77 25 15 26 31 ce 27 24 95 eb 4c a4 0b e8 ae 78 8a 91 7b 5c 48 31 8a 75 49 aa ca 70 93 8b f2 00 4e 1c 1f b7 94 40 14 e6 44 d6 ce 49 e5 cb 71 5d 16 76 a7 4e 1f c4 e1 3e a0 4c 96 17 01 2e a0 43 ae 39 31 42 d4 7c 64 2c 67 24 18 c1 a1 d9 2b 27 49 93 c4 23 95 f7 ec 17 2a 81 42 2a 46 d1 07 b0 0e b7 d2 7c 08 f3 0d c9 34 5c 8b 9c 28 37 74 24 f3 c0 97 42 11 c5 bd cb 10 d5 3e 73 21 23 43 02 a9 94 74 c0 f8 50 c6 73 b1 3e e0 5b ea 91 a7 69 48 20 28 05 cd 38 74 22 50 7f 45 0b 69 f2 94 96 42 11 25 1b 8e 7b ac fd 35 d0 0c f3 32 14 4f 35 01 06 f8 4a 3c d8 a6 ef f9 ab b0 c4 33 bc 2d 39 04 61 9a 1a f7 c4 af 8c ca ca 52 94 2c fc 1b 0a aa 41 56 d4 46 12 55 30 f8 67 05 bc 49 4b 31 88 a3 ba 57 55 ee 2d aa 37 8a 45 Data Ascii: 1oJ`'$8w%&1'$Lx{\H1uIpN@DIq]vN>L.C91B\|d,g$+'I#BF\|4\(7t$B>s!#CtPs>[iH (8t"PEiB%{52O5J<3-9aR,AVFU0gIK1WU-7E
2024-03-27 20:21:10 UTC	635	IN	Data Raw: d4 e5 e2 1e 17 13 19 0b 91 dd f9 bc 7d ae 8c 92 e2 36 81 db 63 9a 76 a3 e6 47 7a c8 37 89 b0 1b 83 99 84 43 a1 43 9f 2b b3 90 cd 6e 0a 36 33 34 b0 8e ec 4f 98 b9 49 c7 4e 5e 44 c7 f4 2a 74 6f 37 8d 71 78 e5 66 85 99 d4 a3 01 2a 29 1d 76 a4 78 46 a4 bd 9a c5 1d ed 03 94 97 08 d9 c9 bc 54 f4 fb 31 f6 fb ac 8e df d4 e7 e6 1f a1 5b d5 5d c6 3f 70 92 b1 51 ed 36 c7 78 bb f2 72 ab 3a ce 83 d1 9e 24 c0 f5 e6 3f 4d 76 65 12 9a 0d ce a8 97 0b b4 aa 39 4e 7b 5f c8 f3 73 cd 78 39 a9 06 cf 31 b6 89 e2 07 ad 71 20 0c 87 d9 41 68 93 73 35 3c c6 d0 29 2b 4e b3 9c a1 8b f0 cb c3 e5 3e 5a 68 d9 20 8a 93 eb b2 7a d4 b2 51 84 26 71 e5 e3 4a 47 d4 b2 31 54 69 f1 74 7c 5c 3b dc 26 82 4e 8c c9 e5 21 43 9f f7 d9 26 57 3a 6a 72 d7 fa 75 79 1d b6 da 22 61 35 1b ea 57 bf 49 c7 e2 Data Ascii: }6cvGz7CC+n634OIN^Dto7qxf)vxFT1[]?pQ6xr:$?Mve9N{_sx91q Ahs5<)+N>Zh zQ&qJG1Tit\|\;&N!C&W:jruy"a5WI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50352	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1997	OUT	GET /blob/1232032/Fordesigners-16x9.f02b27fe.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1112	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/webp Content-Length: 71238 Connection: close CF-Ray: 86b215d35c560600-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 390840 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="Fordesigners-16x9.webp" ETag: "b1d489c7324d5bf72dde07b9ed5325c1" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:44:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=86768 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: /kTCNRv5dgwku4tBbK7HuqyTsxl1ZZSPi+5YXk2Sy+p0WRoLA49jv07P/trMWOeWs6LFprSSQdE= x-amz-request-id: M4Z316BSFJ4R48VB x-amz-server-side-encryption: AES256 x-amz-version-id: 6EfZUis9uXxa3_.npF1W8p6ktGXLDfjD X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 52 71 37 6b 35 41 36 31 62 55 61 47 4a 30 32 6c 73 78 65 50 25 32 42 4d 6f 76 47 64 7a 42 51 72 55 7a 6f 36 25 32 42 66 55 46 31 6c 69 69 50 32 46 5a 4e 44 35 48 6d 42 53 33 33 52 72 53 25 32 42 62 76 6f 32 70 55 68 48 65 63 25 32 46 44 54 6a 72 48 54 34 75 64 6c 57 73 44 51 57 51 64 65 56 59 25 32 46 39 6d 32 61 6c 69 5a 65 41 52 35 73 63 78 6d 70 4d 32 65 31 56 76 6b 64 69 42 44 76 35 6a 74 73 47 6f 51 68 56 75 74 53 55 36 39 49 65 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rq7k5A61bUaGJ02lsxeP%2BMovGdzBQrUzo6%2BfUF1liiP2FZND5HmBS33RrS%2Bbvo2pUhHec%2FDTjrHT4udlWsDQWQdeVY%2F9m2aliZeAR5scxmpM2e1VvkdiBDv5jtsGoQhVutSU69Ie"}],"group":"cf-nel","max_age":
2024-03-27 20:21:10 UTC	1270	IN	Data Raw: 52 49 46 46 3e 16 01 00 57 45 42 50 56 50 38 4c 31 16 01 00 2f 57 02 54 00 ff 07 cb b6 ed b4 4d c4 61 66 fc cf 90 32 df 32 cc 20 cc 0c 26 3d 3d 59 9e 86 dc 00 00 13 21 8a 9f 0b ee ae 3d 6b b0 2f b4 74 8c 40 e9 fe 7f 1e 37 48 b6 b5 a5 61 70 08 75 77 ef b0 23 97 45 74 d4 bd 75 4d de 4e dd dd 0b 49 7e 82 84 f9 0f 82 49 10 9e 86 15 c7 a9 38 78 c6 03 a3 13 8b 00 68 cf 38 07 9c 83 d6 03 e3 91 2c e0 79 20 90 20 28 c3 91 c0 a2 22 19 97 ab 90 2c e9 73 7a 22 f4 80 b8 b4 14 49 e7 ca 11 85 fe 5d 5c 16 0f 5a 1b 62 79 db 85 af 4b 46 cc 0a 47 07 07 42 4f 91 1f 4b 74 56 80 07 20 03 d0 9e 36 0d 6d 6a da d4 b4 05 a0 1d ed 00 38 60 bc 83 be 81 c1 c3 e0 d9 d0 b0 c1 b3 c1 43 df b0 10 18 0f 30 d4 2c 2a 81 0e d0 05 18 1d 0c 25 91 54 b2 a4 40 a2 92 6d 90 74 52 70 72 5c 86 74 11 Data Ascii: RIFF>WEBPVP8L1/WTMaf22 &==Y!=k/t@7Hapuw#EtuMNI~I8xh8,y (",sz"I]\ZbyKFGBOKtV 6mj8`C0,*%T@mtRpr\t
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 82 c4 89 49 ef 15 69 c6 be 8a 31 4e b3 31 53 b4 e5 ea fb fd 7c bf ff d1 96 fb 6f 89 e8 3f 2d d8 76 e2 06 d2 03 84 10 8b bb 7b 98 24 16 8b 01 ff e1 bf b6 7d 7d db 48 f1 18 66 99 d7 91 ea 8d 31 4e 6a cc 30 95 1b a9 dc 46 76 52 69 99 8b f6 9e a6 5d ca 57 5f 85 71 a8 94 e2 30 17 16 4b 4b 69 4f 33 b1 83 7f 80 33 82 63 77 6c cb b5 5c 67 21 31 6d dc 3a e7 7c de f7 f3 f9 7e a5 b6 f3 f3 0b 11 fd a7 05 db 56 d5 5a 9a 1b 97 80 40 b8 d5 9c 3c 10 d0 a4 ff 74 5b db f6 cc 6d 23 f5 44 45 5a b6 34 39 1c 40 07 35 49 80 04 40 08 a4 34 43 a9 aa fe 0a 28 00 13 e0 a4 40 52 9e 63 28 0a e8 1c 9c b3 57 b6 9c 96 40 07 49 2d 79 29 4b 8e 87 81 b0 6a 93 d6 5e 27 85 fd f7 7d de af 38 67 f0 3c ef 1b d1 7f 4a 00 80 c4 91 24 82 88 78 65 77 32 39 10 8f a4 e6 85 4f da ff b7 8d 1c 8d 26 1d Data Ascii: Ii1N1S\|o?-v{$}}Hf1Nj0FvRi]W_q0KKiO33cwl\g!1m:\|~VZ@<t[m#DEZ49@5I@4C(@Rc(W@I-y)Kj^'}8g<J$xew29O&
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 56 a1 f9 f3 ff ed f7 13 4c 32 66 69 53 49 61 84 69 6c c7 22 24 f8 75 a4 ee 5a 16 87 21 00 d7 97 dc 6b ee 3e b7 74 56 f7 38 3d 43 12 65 8e 10 19 e8 92 f5 88 c9 8b 02 d7 2f d0 45 89 a9 37 bd 11 11 ec 6b 2b bb 38 b5 2e 09 a1 da f5 88 b8 b1 c2 65 7a ab 4b ee f9 be fc 99 e4 ef ab df 09 24 ff 41 23 3f 3d 12 74 c9 16 82 12 10 58 84 84 b9 df a8 fa df 7e a3 ae 7a 7d a3 7c 32 fa 1e e1 ca 4c cb 69 50 9b a4 16 8d 7b 01 28 49 a6 8a 10 89 4e aa 41 17 1e 51 db 3f f8 10 31 91 5c 6b 1a 02 36 a9 b7 48 7e 49 8c 1a ac 00 a6 ca 59 88 2a 87 23 88 87 7f 9c 3e 24 72 44 12 9c 8a b7 19 32 b7 14 c0 7d ca 38 0a 8a 76 49 a5 6b 5b b1 02 84 3e 6e 48 36 69 1d 4b b5 88 58 8c 67 31 e7 7e 96 6a 67 bf 7b 76 30 77 f1 5a b5 ed ad 0a af 73 9f a9 21 71 c2 f5 86 c8 a6 ba be 09 a6 27 05 a0 dd 58 Data Ascii: VL2fiSIail"$uZ!k>tV8=Ce/E7k+8.ezK$A#?=tX~z}\|2LiP{(INAQ?1\k6H~IY*#>$rD2}8vIk[>nH6iKXg1~jg{v0wZs!q'X
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 46 9d 84 08 1d c5 12 1f 44 1a 1d ab 10 5e b8 1a 8c 60 8d 61 95 08 c4 a7 1a 3a 0a 8b 2c 99 01 32 e2 93 08 8a 4c b1 bd 27 e0 33 33 51 cb 81 8d 2e 62 dd 06 06 fa f0 72 ab 20 42 15 eb a8 19 ef 7d f6 3c ab 7f be e7 b0 20 0d 3b 93 3a 89 91 12 44 f6 1f 76 c6 f9 bd 93 38 9f 32 07 bc d0 16 4b 0c 8c d7 6c 27 55 87 c3 24 48 69 42 b7 7c 8c f0 74 dc 23 b3 ba 23 e8 23 d2 30 08 aa c7 77 e1 75 d7 33 2c d4 a9 a3 80 58 85 13 90 72 dc c3 03 87 4a 48 ca a8 14 f9 90 fa 38 89 46 35 62 b6 e2 55 75 26 b0 ee dc 03 a2 31 15 07 ea cc b4 a0 43 96 49 81 dd 00 cc ea 8d 9d a1 a5 23 54 9c 6c df 85 fa ee c1 94 28 ef ed 90 bb b4 7b 3b ea b2 1a 23 a5 0c 4e e3 29 9f cc b9 3c ce 96 a3 52 36 b7 2e 61 98 df e9 74 37 0f f0 8b d3 47 88 51 7a 9e 8a c9 61 fe 88 6d 0d 0f bb 73 bb a4 82 a9 21 09 68 Data Ascii: FD^`a:,2L'33Q.br B}< ;:Dv82Kl'U$HiB\|t###0wu3,XrJH8F5bUu&1CI#Tl({;#N)<R6.at7GQzams!h
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 7a 94 86 51 af d5 ed 0d fb c8 e8 20 37 0b 48 8f 92 09 c9 5d d5 43 29 c7 68 8a 47 d1 2c 94 18 f0 8f 84 ea d6 d9 ba 24 89 b5 ad c0 bb a7 25 12 20 0d e1 38 8d 40 fb 9c 1c a2 cc ac 1b 36 9f 70 7a 14 ac 73 c0 ef 09 c0 12 2b 99 84 5e c6 80 4e 1f 98 78 0a f3 44 28 a0 07 c5 8b 7a 75 de 5e 5b 60 05 91 b0 df fc 5b 97 43 8d 79 23 46 a6 37 6e 1c de f9 4c d0 ea 35 fb 03 ab 16 73 11 ff 63 4b 20 5a ac 93 0e fd e6 90 9a 71 0f 40 6a 10 06 20 c8 4e 4e a9 50 08 1c 7a 92 19 8d 9e 8d cc a2 e8 67 a0 d4 7b 03 36 c9 5e 23 03 28 64 59 8a 24 f4 63 93 04 03 41 87 99 19 29 96 a1 aa 8b 86 61 ab d3 b0 76 37 fa 63 f2 e0 c6 20 72 f7 45 37 16 2b 53 3c 21 9c 20 37 65 f5 29 53 f7 13 9c aa 8d 54 05 08 a2 f8 7a bc 44 a7 22 e4 44 7b 48 93 49 b7 b1 b4 f8 fc 99 db 13 73 3b 73 c1 e7 11 0f e2 54 Data Ascii: zQ 7H]C)hG,$% 8@6pzs+^NxD(zu^[`[Cy#F7nL5scK Zq@j NNPzg{6^#(dY$cA)av7c rE7+S<! 7e)STzD"D{HIs;sT
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: cb a6 98 5b ec aa 99 fb 12 07 55 a3 59 df dd eb 8b 4b 6e 0e d4 50 b0 d7 bf 56 d1 0f b2 84 21 d0 3a 91 e0 52 6d 71 9e cf 5f 7b 35 d1 66 dd ab c5 de 89 20 53 91 7a 23 e1 ee 76 61 e3 fa d1 1d 98 b3 d2 69 a7 95 65 9e b8 2e 07 8a a3 c7 22 e2 c0 a5 95 88 eb 70 fa dc dc 6a 5d 52 6e 3e 23 a2 61 90 14 b0 b4 84 d4 9b 49 6c 03 aa 05 64 51 d8 7e 18 b1 dc 1d 88 f5 ea c7 9d d1 d8 96 a4 d0 90 90 42 33 70 d1 08 d2 cf 31 93 c9 d2 79 66 b2 4f 09 b1 3a 30 6c 46 59 3d 30 56 1a fd c1 d4 61 13 80 eb 2b d5 87 64 de 84 9a ae 9a b9 69 ae 09 ad c0 6d 2d 88 42 58 05 6d 95 6d 5f 6e 69 6e b9 e5 99 f3 b9 cb 8b 07 0e 91 17 e6 56 d7 41 81 ad 74 74 d9 c3 ec 38 8c 4a 40 b9 59 a8 29 a8 8a 75 7b ff 53 fd 25 74 e5 55 f5 71 7d fa 49 b8 37 d3 2b de 6d ea 75 55 91 dc 1d ae 0d c8 bd ae 8e 4d 18 Data Ascii: [UYKnPV!:Rmq_{5f Sz#vaie."pj]Rn>#aIldQ~B3p1yfO:0lFY=0Va+dim-BXmm_ninVAtt8J@Y)u{S%tUq}I7+muUM
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0c 7e c5 4d b4 90 26 96 91 2c 91 9b 71 d6 6f 45 b3 51 ad 14 bd 56 a5 2c b7 c0 09 c9 cf e6 1a 3b d1 e8 c2 c6 d2 3b 1c 63 5b 78 47 a3 d6 d3 59 9a c6 4b 25 94 c7 f9 ab 19 1f 06 de 74 a7 8d 37 1d 21 6c 1a 42 46 61 da 2a cc 11 26 79 35 e6 39 91 33 81 a7 a7 21 28 63 9d a9 00 83 d7 1c 96 7b 91 c0 d4 a3 4d b0 24 d8 0f 11 73 2a 6a 95 62 49 7e 03 93 1b 36 45 eb 2c 6f 1f c2 7e 4a 52 1f 84 3e 26 68 87 11 e4 c7 52 42 75 e9 cc 46 1d b4 11 7f 18 1a 97 a1 36 12 5a 68 04 0a 5f c7 e8 d2 67 48 1d fc 42 a8 6b fa 06 49 e0 b0 06 4b 05 c5 6d 7c b1 9a 28 16 11 33 b3 bd 66 12 06 3e a7 26 7b 81 2b 56 52 f7 30 cf 70 99 b9 b9 27 0d c5 31 38 57 65 81 61 54 68 85 9c c4 cf 20 dd 48 94 c2 13 60 66 7e ac 87 1f 86 9a 46 3e 00 c9 84 10 1a 0f c1 6c 8e 66 e0 36 73 b7 30 7f 79 d5 e2 86 8d 44 Data Ascii: ~M&,qoEQV,;;c[xGYK%t7!lBFa&y593!(c{M$sjbI~6E,o~JR>&hRBuF6Zh_gHBkIKm\|(3f>&{+VR0p'18WeaTh H`f~F>lf6s0yD
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 51 19 20 94 37 5d b7 4b b9 29 13 83 bc a3 a1 8a 6c 90 e5 21 08 38 a9 b8 36 01 a4 67 44 fd 32 4d 42 e3 e0 84 fd 46 73 b6 ab 0d 41 5b 0b 44 0a f7 71 0d a5 53 93 c8 fd a5 a7 e4 b7 86 10 f2 3b 0c 45 2c 79 6d 88 33 82 30 c4 56 1c 6e ea 43 24 b9 f3 bb 30 28 ba 03 e5 7c f3 ae e0 f4 2c 11 e3 17 71 0f 60 b5 d1 93 14 df 59 5e eb 29 35 23 c2 c3 c1 31 c2 db eb 8a 90 fe 31 89 85 cf c1 c4 c9 da f4 18 21 93 ff 2f a9 50 44 29 11 98 58 6b c0 ab 23 33 55 42 8a 43 88 0b 09 cc bb a5 98 8a 74 e3 ae b1 a7 31 33 0b fb d6 8e 30 94 c8 24 d3 32 04 b7 1b f0 9a 61 a2 36 2c 40 13 e9 55 f9 c8 4b 48 4d 0a 63 99 1d 53 a3 15 03 a2 db bb 05 58 b9 3d b9 ba 56 d0 00 19 5f ff 38 33 51 90 8d ce 4e c4 43 bb b4 7e dd 35 66 09 57 8b 94 e0 e4 1a e2 83 87 0e 8b e0 78 75 7f 0f c5 12 cc 37 7b 84 bb Data Ascii: Q 7]K)l!86gD2MBFsA[DqS;E,ym30VnC$0(\|,q`Y^)5#11!/PD)Xk#3UBCt130$2a6,@UKHMcSX=V_83QNC~5fWxu7{
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: be 83 1e b4 3e 5e 9b ec 46 f4 ac a2 05 4b 62 3e d3 16 49 db b6 02 c1 7e 2e 2a f1 ad df 6b 44 9c 86 30 73 66 f5 84 36 6c a6 39 df 6b 9c 2a cc cc f4 e3 cc ac 16 a9 91 bd f4 b1 fb 2a 92 bc 70 bc 22 08 09 99 c9 96 7f 8a 4a 4c 44 e8 d0 b0 68 d6 96 5f e1 1d c1 cf e9 ed 81 7c 4c e1 ad 04 3d f5 44 e4 60 59 b1 81 d5 55 da 5a 98 0c d3 7d 81 c0 d0 85 03 69 cb 6c 8c e5 8b dc 39 e0 98 8e d4 2e 22 05 be 21 15 49 54 bd 68 79 18 58 a1 d5 c6 b0 8c 68 aa 8d 60 6d 07 51 b8 bb 67 19 05 1c 62 ba 7f f4 66 ab 46 8b f3 eb 95 11 be 36 9b 9b a5 3c 20 c0 73 e2 d0 ae 7a 11 86 26 37 4b 79 06 f0 80 2c a5 40 9a 20 0b 2d 0e 57 7f b3 e7 61 dc 23 90 68 bb 8b 39 67 70 ac 17 4d 69 11 8f 99 f9 e6 9e 89 60 57 d6 08 f5 d1 31 71 4c c0 1e ac cb 87 25 63 8b 6e e6 e6 4f bd be 84 54 d7 b5 66 50 49 Data Ascii: >^FKb>I~.kD0sf6l9k*p"JLDh_\|L=D`YUZ}il9."!IThyXh`mQgbfF6< sz&7Ky,@ -Wa#h9gpMi`W1qL%cnOTfPI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50353	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	2008	OUT	GET /blob/1232037/integrationsDownloadCardGraphicMobile.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	1130	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/webp Content-Length: 2344 Connection: close CF-Ray: 86b215d37ffc5b65-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 524106 Cache-Control: public, max-age=2592000 Content-Disposition: inline; filename="integrationsDownloadCardGraphicMobile.webp" ETag: "59ab06623c5238411a6e8023fcd3b807" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:52:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=2835 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: NmDj0hNk4rw8roLcbnwbKkYlrGBGqT2THCEROQnf5D6MhFYl4ep867dl27YhPkqvhKUB9Blalzk= x-amz-request-id: M94844SKPQMZTNZQ x-amz-server-side-encryption: AES256 x-amz-version-id: B0IH5mUuU62aWl2AxqUWqqaztMnh87BP X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 32 4d 70 41 73 65 65 62 67 4a 36 33 57 30 52 78 5a 73 36 6b 50 4b 64 39 6b 48 56 46 4a 6e 51 6c 53 7a 46 61 48 48 6a 73 4f 4a 32 50 55 76 50 43 32 34 68 6f 53 4e 4f 4f 67 66 59 53 64 46 4c 54 46 51 48 45 31 52 64 56 38 6f 44 6b 62 62 57 4a 25 32 42 43 45 4c 58 5a 51 50 68 42 4b 48 50 31 75 41 4e 76 36 75 6f 44 73 78 74 74 75 69 78 31 59 30 55 5a 42 61 77 6c 36 42 6f 6a 5a 54 54 4f 69 25 32 42 48 6d 6c 76 7a 68 68 69 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2MpAseebgJ63W0RxZs6kPKd9kHVFJnQlSzFaHHjsOJ2PUvPC24hoSNOOgfYSdFLTFQHE1RdV8oDkbbWJ%2BCELXZQPhBKHP1uANv6uoDsxttuix1Y0UZBawl6BojZTTOi%2BHmlvzhhi"}],"group":"cf-nel","max_age":604800
2024-03-27 20:21:10 UTC	1258	IN	Data Raw: 52 49 46 46 20 09 00 00 57 45 42 50 56 50 38 4c 14 09 00 00 2f 96 80 25 10 a7 e1 46 00 00 22 ca f6 c6 49 7b bd aa f7 f5 95 76 db d6 f1 1b 6e 6b db 56 a2 87 bb 4b 01 a4 5e 04 55 d3 87 86 ee 64 6e 33 4c 1b 00 40 82 d3 9c e4 92 e0 24 5e e4 05 1a 07 58 76 d7 e6 ce 18 44 92 d4 a8 89 22 f0 8e 10 44 24 27 9f 04 7c 00 00 80 00 fa af f3 f0 bc 91 30 06 f1 9c ec c5 3a a2 a2 f3 fd bb 0c eb 24 9b 27 97 dd d0 38 87 01 16 f2 47 bf 3f f2 f7 3f 7c ed 0b ff f9 61 ff 9c 02 7c c0 18 0f 62 74 16 08 58 fb b5 ac a6 4e 41 38 26 42 31 10 b6 f6 0a f2 98 8e a6 5e 9a 27 ae 08 d7 91 6a 16 41 d5 4c 5e 63 58 b2 aa aa d7 71 d4 85 b0 2e 08 67 90 c4 ec f8 1b 38 1e e6 bd 2a 9d 90 f1 eb 87 5a 1f dc 05 92 42 82 3f ff 1a 1d 81 47 36 e3 10 64 db 74 fe dc 3f 43 44 4c 80 3b b4 68 4b 92 e4 c8 56 Data Ascii: RIFF WEBPVP8L/%F"I{vnkVK^Udn3L@$^XvD"D$'\|0:$'8G??\|a\|btXNA8&B1^'jAL^cXq.g8*ZB?G6dt?CDL;hKV
2024-03-27 20:21:10 UTC	1086	IN	Data Raw: 5b 2d 83 dc 41 f8 51 6e bd 74 be 00 ee 00 c9 45 bc 01 5c 38 1c 1c 8b 15 b7 54 c3 e4 1e 41 d9 5c 04 77 b1 5e f6 ee 2e 20 2d 5a b1 a8 9e 5c 58 03 d7 84 af 7a 68 06 b8 70 85 00 71 ce e3 c9 83 5e 03 4e b3 86 2e 2c 56 cc c8 13 03 bd 86 f6 cb 24 ab 29 4c 54 e5 d5 fc 7a 62 db 44 14 33 80 ae 20 2d 07 93 6a 61 e7 cb 90 d6 ab 94 26 a2 00 4c 78 5f 4a 1c 8b 1b c3 0b a4 de 97 cd 4a b7 b0 0a 2d 88 d2 5e 4c b1 2d 2c ad 85 4c 43 ec 20 16 54 07 9c eb 0d cf 4f 0f 2d 47 04 a2 9c 82 f3 55 a9 5f 2d f0 ae 88 5d 69 73 a8 ef 2e 5b 22 3c 3f bd a9 55 82 70 f6 05 aa 1f b9 9a 1e 8a 07 aa 52 98 94 08 cf ea 0d 52 bb 66 ad 97 aa 62 7a ea 39 ac 33 59 0f cf 79 cb a9 31 9c 19 dd 0f b5 d6 8b 61 8c b8 21 dc 5d 76 a6 ad fa 8a 8b dd 50 6b 6e dd 5d e2 82 20 d6 d3 c4 bd 98 41 3d d4 e4 d4 f6 26 Data Ascii: [-AQntE\8TA\w^. -Z\Xzhpq^N.,V$)LTzbD3 -ja&Lx_JJ-^L-,LC TO-GU_-]is.["<?UpRRfbz93Yy1a!]vPkn] A=&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50351	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1963	OUT	GET /video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63 Range: bytes=0-
2024-03-27 20:21:10 UTC	1352	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 2908620 Connection: close Content-Range: bytes 0-2908619/2908620 CF-Ray: 86b215d35fe039aa-IAD CF-Cache-Status: HIT Age: 788736 Cache-Control: public, max-age=2592000 ETag: "9e03c33ee7e7dc5c5363f6a62722a351" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Wed, 28 Feb 2024 06:47:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: WqmJVzBL/QBu0NTMFZCT+H+ehRl8n2mlJM9ORMW5P7In886kFvZWx0Tzra71Qojr4jMixgsmwRg= x-amz-request-id: TJAJWMCK2H19N77V x-amz-server-side-encryption: AES256 x-amz-version-id: zrdARqr8wF3nxKksq84wQ5a.39csM5Ep X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uTCQICppDwymkTnUfNabqRZrZuSHLorPuv7NANlVc%2FNZDcBxSy41aDKObRoVd3fEcEgBKF36Yi3D3D5IIuRmmz3jXaTUjqTF%2BhstFmPM6CEM1W8Sqz7Z7ySgRLIcbXjD95YDJku2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1364	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 2c 2a 9e 6d 64 61 74 21 00 03 40 68 1c 00 00 03 13 06 05 ff ff ff 0f dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 31 30 30 20 65 64 30 66 37 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 32 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 31 3a 30 78 31 31 31 20 6d 65 3d 68 65 78 Data Ascii: ftypmp42mp42iso2avc1mp41free,*mdat!@hEH, #x264 - core 164 r3100 ed0f7a6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 46 ea eb 98 74 21 6c 9b 4f 9e 4b 77 ce d3 b2 6d 89 a2 d4 2c a6 02 56 f0 da 19 a3 5b f1 a8 7a 10 42 78 1c ea e0 16 c6 82 67 9c 0e 25 04 1f 5e f9 1c 28 e0 c9 5f 3f 75 37 2e 74 84 51 b5 ad 85 47 3e e8 8a 0f aa 77 22 4d 98 5b a5 fb f2 8e 15 af 67 c3 d7 0f 1e d4 5a 36 c1 c7 33 3b 69 6c 93 5a 5d 93 3f 21 34 4b c6 a5 7b c9 b6 9f e6 b1 9f ba b1 26 75 a3 0f df 98 b1 c8 91 8a db 71 41 aa d3 57 8a 83 f4 42 b2 86 93 c9 55 a0 8a 64 50 4a 01 34 b2 52 02 db 47 e7 a9 57 bd bf 54 b6 cd f4 c5 b1 be 41 4a 3a 20 46 5f fc 9b 60 b3 e5 b8 c1 71 bc 79 2d 50 3b 31 f6 3e 58 32 5a ed 1c aa dd a6 10 93 ac a5 29 be d3 bd bf bb d0 52 f9 69 ef b3 3b 20 7f c6 c9 72 4d dc a1 4c e5 f0 2c d8 22 f7 c2 04 c9 11 39 27 fd ec 7b cd 9b d5 3a 84 4a 38 98 7e f1 e5 26 02 d4 8a b2 d7 51 a3 f4 17 fc Data Ascii: Ft!lOKwm,V[zBxg%^(_?u7.tQG>w"M[gZ63;ilZ]?!4K{&uqAWBUdPJ4RGWTAJ: F_`qy-P;1>X2Z)Ri; rML,"9'{:J8~&Q
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 82 3a d5 67 4a 74 14 b3 3f de f8 f5 55 2e f1 b1 45 19 18 72 9f e7 19 7f 00 f2 da 77 73 ab ee 92 f7 df 09 12 c1 b3 35 21 be 5a bc 03 22 83 68 80 45 1c 9d f0 9b 8d d3 37 8f d4 f5 66 c2 3a 5d fe 6c cd 5b 5a 60 9d 89 54 b3 8b 97 36 48 e4 c5 f8 8c f5 d9 45 76 8d 2c 74 67 ad 4a 76 8b 25 c8 1c 3c 56 15 0a 40 95 d1 df 0e 1e ad e6 14 88 c9 19 75 a3 27 78 94 36 a2 37 95 34 2f f6 e0 e0 d2 ef f5 f7 fa 4a ad 21 ab 1e 9e 14 c7 a4 b9 eb 87 46 e7 f6 dc 39 c8 54 42 01 6f b0 3a c5 b0 b7 d6 a1 0e f2 4d 51 cc 59 f4 e4 6a 13 52 20 a0 73 dc 5c 67 ab ea a7 4c eb 56 c6 70 00 c3 7e 7f 10 5c fe c8 26 3f fc 64 a2 cd cb 63 5f 96 ea f3 9b 2c e3 30 0e 6d 5b b0 c1 f6 41 70 4b c7 f3 aa ed f7 f0 3f d6 e8 5c c3 f9 b2 ff 44 df d2 08 33 2b 0f 54 b0 9c 5a 23 d8 34 c0 67 79 d1 33 75 95 99 12 Data Ascii: :gJt?U.Erws5!Z"hE7f:]l[Z`T6HEv,tgJv%<V@u'x674/J!F9TBo:MQYjR s\gLVp~\&?dc_,0m[ApK?\D3+TZ#4gy3u
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: ba 1d 23 83 b5 9f a9 bc dd 81 62 70 b8 be 94 ca 30 5b 08 6c 5a bf 9a 4b 6b f2 04 4f 05 b5 98 b9 ae 4e 1c 33 ad a0 72 18 76 11 94 ec 47 ff bf 28 c2 1a ae 1e cc 25 85 78 c7 29 63 0c 35 01 fb 10 11 42 67 fb 15 be 6e 83 35 c3 1b d1 d5 db e2 c3 71 32 40 7c 40 67 ff 26 ae fe f8 cf 21 70 6b 9d dd c4 cc 92 de 5c 79 d1 79 08 ec 49 32 c1 ca de 02 63 60 45 6e aa f3 6f 80 a0 49 0f 1b f8 5f 61 69 31 01 d8 1c 94 46 2a ab 04 41 9f 95 cf ea 0e bf 9b fe 0f ff 44 f1 0a 21 fb 1a 96 b6 89 dc c5 1f e6 9f 75 f1 6b 6c 6b c6 92 c9 3d 7a a1 bb 46 28 d2 7b 7a 2f bf f6 7e 27 21 81 0b 70 26 57 e3 2f 68 7e 7d 82 0a 6b 58 ee 86 3a 71 7b 1b da 0a 90 ab bb 1a 5b 92 6c f7 c8 b2 2b 16 ab ca 7d 6a d6 16 1e b2 41 4d 8f 0b 11 93 e0 02 02 3d 0e 8b fa 35 c9 cd b2 1f e8 0e c5 8a d8 62 5b 18 43 Data Ascii: #bp0[lZKkON3rvG(%x)c5Bgn5q2@\|@g&!pk\yyI2c`EnoI_ai1F*AD!uklk=zF({z/~'!p&W/h~}kX:q{[l+}jAM=5b[C
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 47 b1 db 0b 3e a2 81 2a 47 65 2c d6 e6 7b 23 a3 9a 72 2a 80 ef 9f 31 9c c3 4f 34 f0 19 1d 0c 1e 5d 00 5b b8 fe a7 4b cf 8e bd 86 c7 61 93 7c a9 83 38 b0 1a 80 5c 2e 46 d3 25 64 8c c0 f7 74 d4 6a d2 0b 24 47 2d 1e 6e b9 6e 09 a7 ed 9a db 5a 2e a8 89 10 0b 63 fa 90 ae e4 a3 c0 48 91 a2 93 99 25 79 39 82 c5 23 2c 4f 42 8c 17 79 8e 04 47 1d 29 4b 0e 2f 29 9a c0 31 89 9c 4f 90 f2 b9 93 95 4f e5 4e cd 7d bd 52 d2 a7 e3 1b f6 99 ee db 86 4e 8b c9 78 89 95 04 40 78 26 1e 07 1f 8f 6b 3b 03 16 53 76 c8 24 a0 49 bf b9 bb 42 1e 46 c1 92 68 e0 f6 da b7 08 3b 3b 36 60 d9 b5 ea 16 aa 19 2f 6b e3 61 0e 9d f3 5e 2f 17 42 f5 48 52 de 13 1a 3a 11 76 a6 4a 94 c4 bd 2f e1 54 62 1c 65 18 f3 3a 5d 7d a5 d8 b0 6f 3c 89 0e 55 85 96 22 2c 56 b5 48 2d db 78 66 de 2d a3 51 12 f3 7d Data Ascii: G>Ge,{#r1O4][Ka\|8\.F%dtj$G-nnZ.cH%y9#,OByG)K/)1OON}RNx@x&k;Sv$IBFh;;6`/ka^/BHR:vJ/Tbe:]}o<U",VH-xf-Q}
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 9d 08 7a 72 c2 60 db e5 bc 05 4c 90 7a 97 7b d1 6a ea 4c 94 6c 20 f5 fc cb da a7 0c 0b 34 42 cb d0 6b 24 05 7b 66 76 8e bb de df b6 80 dc 44 e1 8e c4 b3 7f 72 4a 09 9b d3 04 a1 0d af 77 27 fb a8 53 75 cb 42 42 9d 47 3a 75 8b 21 aa 37 85 ff f1 1e 2b 92 73 00 8b c3 60 08 40 47 5e 2f 0e 4a 2e 14 82 af 5e d7 93 84 e1 90 7b 32 1f 71 3a 4c 95 8d 51 9e c4 8a c6 a8 7a 1e 63 77 89 52 cf b0 92 56 b8 20 4a 3b 24 79 83 7c f9 58 1c 4d 7b 03 1c ef f7 be 63 d9 c6 40 3d e3 6b 60 16 7c 3f 21 5a 86 d8 d5 63 3f 7d 48 78 27 00 b2 66 fe 55 e4 17 3b ce 27 0f de 5c 46 90 73 e1 0a 56 48 91 d1 eb 4b 7e 30 4d fb 8e a9 32 49 10 f8 ee ad 67 e6 39 21 7b 35 9d 09 cf 6f 8a ca bf 21 c2 9b 7d 60 8b df fc d7 a4 85 35 41 58 37 54 ab e8 a6 6c 89 19 cb f5 89 21 d6 4e 14 0d ff 0b b8 0d 4e 47 Data Ascii: zr`Lz{jLl 4Bk${fvDrJw'SuBBG:u!7+s`@G^/J.^{2q:LQzcwRV J;$y\|XM{c@=k`\|?!Zc?}Hx'fU;'\FsVHK~0M2Ig9!{5o!}`5AX7Tl!NNG
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 34 bc e0 fc 8e 5b c8 27 25 43 72 28 d7 a9 6f d7 9f df 9a ec ae 02 42 5f f9 79 ea af 07 34 bb ed 49 e8 a8 56 76 04 83 fc 1f dd 23 f1 8b 91 38 0c 78 c5 00 58 9b 1f 34 3b 47 ed d3 c9 0f 35 29 04 41 d4 cf dc 47 9e 15 29 91 dc 11 20 4f f5 7c e4 da 5c 15 a8 97 bb 8b 43 17 6d 29 51 13 2c 29 79 f8 cf 42 76 3e 66 4e 6e c8 ea 95 61 da aa ef 00 39 82 75 0c a3 18 67 22 ce 1e 3f 32 6c 00 33 0c 3b 9e d5 52 22 06 61 a3 73 01 62 c7 ec fd 09 48 80 24 f3 bc ee c0 68 6d 79 2e 65 69 cd 10 11 de b5 dc a9 51 5f e1 55 24 a0 86 97 4a c6 28 e3 20 6c a9 a6 7b 29 80 43 af a3 b3 db 40 97 41 39 06 75 26 4d 8c 6b fe 26 6f 60 9f b0 98 a9 d1 0a 90 d2 10 57 61 37 85 e4 5a 09 3f 9a 02 99 e2 e9 6f 0a 22 d3 2c 14 21 16 31 81 b8 ea 7b 6f 28 db a6 04 1d db fd 76 49 9d 81 a8 73 97 f2 7d cc b4 Data Ascii: 4['%Cr(oB_y4IVv#8xX4;G5)AG) O\|\Cm)Q,)yBv>fNna9ug"?2l3;R"asbH$hmy.eiQ_U$J( l{)C@A9u&Mk&o`Wa7Z?o",!1{o(vIs}
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: bf a6 d6 19 72 32 6d fc 36 63 c4 fc 2e 06 72 ce f0 a5 9b fb 13 6d 39 4e b9 fa ea ce b8 92 22 7b 38 82 05 d0 78 c4 66 9b 0d 68 09 4b 27 c3 cb 65 f7 39 fe 3a 94 f4 09 bd 12 a7 b2 85 44 af f3 be 5c 62 21 01 e9 8a 77 ba 31 97 c1 97 77 06 a9 2d c0 4b 0f eb a4 82 b8 b8 f9 99 e6 13 b5 8d 09 db bd 31 ce 72 ed 0a 69 8f 35 e6 6a 0e 42 5e d4 72 23 2a a9 a3 68 f4 64 38 9a a6 92 19 7b f0 86 8a ec 29 f4 e1 37 d3 a6 aa 7c 3b cd fc fb 31 76 87 3a e6 bd ee 86 ca e3 80 42 8c 0a 28 18 cf 8b 32 f2 12 3e 16 ce 17 ec d0 43 76 c3 d4 b8 ed 7b 9a 86 2e 4b 4e 78 eb 45 fb 3a 2e c7 c9 f0 67 50 5e fa e6 17 de 4a bc bb 0d e2 70 55 2c b5 39 85 54 24 b9 06 5f 4a c8 26 7d fc ae fc 9f bc 1c 3a 22 15 ec 21 08 e6 43 89 7e b5 1a 8c 1e 0c 70 9f 04 6c 1c c1 66 dd 81 ce 55 e1 6d fd bb 01 0e 6d Data Ascii: r2m6c.rm9N"{8xfhK'e9:D\b!w1w-K1ri5jB^r#*hd8{)7\|;1v:B(2>Cv{.KNxE:.gP^JpU,9T$_J&}:"!C~plfUmm
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 03 ce 5f ff ad 0f 4c d6 59 86 a4 97 c9 87 d8 f5 1d 0d 00 97 b4 8c ec 9a 13 9e d2 58 d6 c4 3a 8d 1a 28 fa 54 ae 45 e4 09 8c 39 85 83 95 c7 fc 4e 4c e5 69 55 63 78 80 99 7a a7 c6 e4 5e c8 b9 c0 52 84 15 b7 ea 0e 86 bc bc 02 9d ae 44 55 58 1d 7f ef 40 33 7f b7 aa 85 dc 83 87 2c 70 00 86 f1 90 df fb 75 4f bb b3 72 44 1d ba 71 b2 ea 4d da 18 0d 8d d5 88 33 ad 54 61 3c 47 ff 0a 9e 31 f7 e4 16 59 7c 9e cd 20 54 44 ae 74 7a da 08 c4 90 53 a1 bb d9 f7 1c 65 23 01 b7 eb bc cc 81 5b 35 f0 2a 88 d5 6a fd 25 ee e3 e1 85 23 6d a3 a6 2c 31 df 06 5c 8a a0 50 36 f9 c5 e7 08 a8 86 73 08 c0 1e e7 9d 0f 66 61 3a 73 64 00 b5 46 53 9e 9d 0e ba 62 43 0e 90 c6 cd fd b0 33 31 4e 18 a3 b6 ae b6 f8 36 55 77 82 9c c0 f3 f1 d1 37 b2 d8 48 58 59 e2 34 64 6d 97 63 0e 54 3a 70 26 7b cf Data Ascii: _LYX:(TE9NLiUcxz^RDUX@3,puOrDqM3Ta<G1Y\| TDtzSe#[5*j%#m,1\P6sfa:sdFSbC31N6Uw7HXY4dmcT:p&{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50354	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1760	OUT	GET /blob/1232031/Features_AssetManager.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1358	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 3855 Connection: close CF-Ray: 86b215d3dd4007c5-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 419339 Cache-Control: public, max-age=2592000 ETag: "7e1da438fad225d20458710e0338d4d5" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=4686 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: VwzKZEmVVC09oIOGRwcCQpWRDiBxZv4wOvArtvktYq4XCaObaowiqJ482WUxsn4xL69DIRgFoB8= x-amz-request-id: P54R11GN0SA1CENX x-amz-server-side-encryption: AES256 x-amz-version-id: Hmi6Rxuf8.LLLtDoXoH4rOU5RYZbcmz5 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnMR29hRi0eq4FI2vFrZOIqlTL60Muz6XrsQ9pA7WtxxtVu5ayKj2Qown4aX4g14oLHIsR1dkIIfXEEydN6MJEfl%2FLY27nvPhnW6qq8uUqB7fdCQ1fKAMG92MrYBgaDpD5oIZIko"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 69 50 4c 54 45 47 70 4c f6 f6 f6 09 12 12 f0 f0 f0 0d 0d 13 12 12 12 0b 15 15 00 00 00 17 17 17 00 1c 1c e5 e5 e5 cd cd ce fc fc fd 9a a0 a0 f8 f8 f8 ff ff ff 7a 2c ea ee ed fe 55 50 f7 07 bc d5 b2 e1 f9 38 65 ff c2 5e e7 90 55 ef a4 49 e8 2a 91 fc 19 a6 e9 d4 b0 f6 72 7e fb c4 97 f4 e2 ce fa ad bc fe be 77 ee 22 cc d5 5f d6 e2 55 76 6f ff 00 00 00 0f 74 52 4e 53 00 a6 1d aa 13 0e 18 05 0b 09 74 51 e1 2b c3 00 6b 06 9f 00 00 0e 29 49 44 41 54 78 da ec da 5d 4f eb 30 0c 06 e0 55 8b 89 9d b6 cb e9 cd d9 a4 e9 a0 fd ff 5f 79 d6 ba a3 a3 74 5f 2a 8b 7d f1 3e 9a 04 e2 Data Ascii: PNGIHDR"trgAMAasRGBiPLTEGpLz,UP8e^UIr~w"_UvotRNStQ+k)IDATx]O0U_yt_}>
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 7b 4a bf 9f 12 80 1a 8e 3f 89 4f 4d 47 4a f5 26 71 0c 9e 1d 9b fe 48 e1 9e 38 a5 04 a0 6a a9 21 29 f8 1d c5 8d 84 12 56 b7 3d d6 29 8c 5f 20 25 4f 91 e2 9b 44 0d 29 2a 21 45 4b f9 a3 07 a9 5e 47 2a 2b fb c1 52 93 91 58 e6 46 53 ed 92 d2 3f 5e 4e 2a a4 d0 47 ab 5f 5a 5d 5b de 33 58 0a 47 9a aa 4c f6 23 a9 d4 3e 06 a4 cc 1e eb 14 74 f8 13 a4 34 d9 4f d2 74 e9 99 28 82 a5 70 7f 9a 2a ab fa 01 54 26 29 61 f9 cb 5d a7 30 0b 90 da 7f e7 3b 12 d5 06 54 bf 5c d0 52 50 4f 53 65 f4 28 de 95 a4 4c 22 07 99 44 ca 6e 52 56 a2 10 6f 76 24 85 a1 dd f9 36 12 83 b2 b2 70 9c 57 29 88 a6 2a d2 f7 23 a9 ad 5c ac ab bb ae 32 ba 44 91 41 6a c0 66 aa 93 7d 48 01 53 54 fd b4 a8 7c 74 d5 02 14 f0 04 53 95 ca 7e 53 92 fc e6 11 38 01 54 a0 35 14 ca 7e 52 cd fb 5e d9 85 14 51 85 6f Data Ascii: {J?OMGJ&qH8j!)V=)_ %OD)!EK^G+RXFS?^NG_Z][3XGL#>t4Ot(pT&)a]0;T\RPOSe(L"DnRVov$6pW)*#\2DAjf}HST\|tS~S8T5~R^Qo
2024-03-27 20:21:10 UTC	1117	IN	Data Raw: 43 9b 6b 4c d5 19 5d 31 f8 3a 3f 45 a5 00 f2 54 5e 57 62 e4 55 b8 27 5a 14 dc 83 c0 51 2a d7 b6 5f fa 3c 85 e8 ce 4c a9 52 93 8b 52 59 f4 a7 2a e4 a9 bc 5a 14 65 3e 57 e1 ce 24 4f 15 18 a3 c8 6b 07 96 8c 76 5e ae f2 68 51 e4 a3 94 b3 9d 79 1e fb 24 9a 23 ab 7d 3d 56 dc 29 2c ef 56 3a da 36 dc cf d7 51 ca 99 49 4c 80 3b e7 cb 56 7a d6 63 14 22 54 8e 6d bf 7c 46 93 f2 c9 53 42 b1 e6 de a3 f7 6b bf 8c 7a be 55 26 57 39 c8 70 3f df 02 d7 78 c9 43 29 8e 26 65 bf 53 18 ce 9f a2 52 93 7b 10 a4 1f a3 e0 08 ed 73 ec 93 68 4d c9 2f 4f 55 1c f7 83 52 15 6b bf 89 98 c2 fc 14 f7 f3 cd 78 37 f3 8c f2 14 e6 5f b8 f7 e8 7d a5 ea 7c 7a be 75 2e 73 be 6e 4c 71 6d d2 3d a5 8a 35 e7 a7 ee 2b 95 55 8b a2 8e 14 53 fe eb fd b6 fb 74 7c 88 52 d6 3f 2a b1 52 58 9b f4 b6 4f c7 46 Data Ascii: CkL]1:?ET^WbU'ZQ_<LRRYZe>W$Okv^hQy$#}=V),V:6QIL;Vzc"Tm\|FSBkzU&W9p?xC)&eSR{shM/OURkx7_}\|zu.snLqm=5+USt\|R?*RXOF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50357	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1761	OUT	GET /blob/1232024/Features_LibraryAssets.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 33069 Connection: close CF-Ray: 86b215d41b3920cf-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 412284 Cache-Control: public, max-age=2592000 ETag: "f723bc9b6ba256d9c44f49837cdd7c59" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:37:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=36528 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: J3TYnra/uke4YIsGz+aoa2tIRV2684X0UIHpNltdzzYq3iRncTelynQ7poAVsSNSTZKJB/qXiKQ= x-amz-request-id: 1BHCA28SCQN6TBZ5 x-amz-server-side-encryption: AES256 x-amz-version-id: jG0v3s9qe9LxCI8xEvEpusorEVzZTWBg X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bY7Ulb8M0M4V40pH9Ow9KcPpTH7LGhikQKxxSUh5Avw2vlCEmtBuiRu07uqpLfo4vEYno0KuCbuktjVHqyrw111usYLFQnUQ%2BgFO69aEsFCUcqalLQ1URTEpngW6i5cMf2onr2Tp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1356	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 65 50 4c 54 45 47 70 4c db b9 cc 89 99 e4 b3 a0 d2 1d 68 da e4 b7 b1 dc a3 b8 df 75 34 d8 ae ca ae 7f b2 dd b9 ca f2 f5 f8 e3 e5 f1 f5 e5 b5 fd da bd f6 e1 ab ef d9 d7 f4 d3 be f4 d5 b2 f0 d6 ae ea ce d3 d5 d0 ea ea cb c7 ee cb b7 c8 d0 f4 ea c8 c1 e9 cb af ff c3 9a fe bf 96 e4 c2 c8 e4 c2 b5 e7 be bf fe bb 91 df be be c9 c1 e7 e3 bb b6 e6 b1 e0 fc b6 8c d9 b6 da e5 b5 ba fc b1 8e de b7 b6 b9 be f1 d5 b0 d7 d7 b1 b9 e2 ab b7 db ad bf f6 a9 8b ca ae e3 db ae b0 b6 b4 e7 af b4 ea cf a8 d2 d7 a8 b7 ac b1 eb ef a2 87 d2 aa a9 cb a0 e0 de 9d b5 d6 a0 b5 a7 ad eb ca a1 Data Ascii: PNGIHDR"trgAMAasRGBePLTEGpLhu4
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 13 18 6c fa 10 85 a4 de 88 a6 10 5e a7 4c 55 04 95 55 aa 81 aa 14 d4 02 13 2e 46 24 e6 04 95 ef 36 b3 45 23 ee 8a 5a c9 ad 20 f2 12 d5 20 3a 5a 6a 6a 47 5f 67 f2 c3 18 93 54 9a 56 a3 fc bd 2a 1f 6f bc bf 5b 50 12 f0 2c 55 20 45 50 74 36 80 c3 92 a2 a6 2c 68 ec d1 8f 99 fe ce b4 fd 43 3f a1 b0 30 51 50 56 a7 fe 91 ed c4 1b 17 15 c2 69 59 f6 bb 92 81 57 5b 09 94 a8 6e ae a4 7a 72 99 95 35 aa a2 55 2a 2a 4c ee 3b eb 23 3a b6 e7 86 c5 a2 e6 f5 06 97 61 51 fd 50 73 e2 54 37 07 18 e4 f7 dd e6 e8 2f 3f 98 9e 60 10 15 fb 0a 36 80 3f 0d f7 7d 89 8a 98 a0 29 2c a8 66 d3 63 e1 43 52 d4 14 19 89 a8 7a dd 44 68 0a 82 0a 4c ca 0a a0 80 89 d6 8a 9c ba c6 72 5f 0d 27 99 cc 71 9d cf 10 35 23 4f 8d 08 73 95 12 55 25 c0 ba 16 82 ea 9c 0c 63 97 b2 c2 85 36 b8 b6 e4 8a e9 b7 Data Ascii: l^LUU.F$6E#Z :ZjjG_gTVo[P,U EPt6,hC?0QPViYW[nzr5U*L;#:aQPsT7/?`6?}),fcCRzDhLr_'q5#OsU%c6
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: d4 f9 d2 10 64 5d 1a d9 7f 0d 8e 60 15 a8 74 7f af d4 95 0c c0 22 23 4c e8 d1 49 6b 90 d4 41 36 14 b9 eb 27 ce 23 df 53 61 35 c7 52 aa 16 55 f6 12 26 a3 d4 13 18 11 13 28 c1 b8 23 db ec a0 32 cf 7d 01 2a 38 c9 20 a3 74 dd 2c 97 0b ea 94 3a 91 75 88 2d 55 45 13 2d c1 f6 98 3a 00 13 46 a4 24 21 d6 6a b1 5a 83 d7 1b 0a ea c5 88 a6 96 24 93 a1 b6 3c 27 31 38 ae 49 b2 67 75 c9 5a 72 0f 16 16 f9 8f c2 8a 8d 73 b7 ec fe 48 6e 4c 53 a6 28 4a ca aa 94 10 9a a0 4c f1 d8 83 e6 17 1a a5 e5 9c 38 31 e6 0a c8 53 1f 9a 0f 08 8a 5d df da 51 99 90 54 51 00 45 cf 16 90 8a b2 ee 61 b1 20 20 46 1b cd 04 3a 14 a0 da 75 04 d2 21 50 a7 08 08 ac 48 eb c6 1c b0 5c 53 98 86 49 15 9a 7a aa 22 61 53 30 5e 0c 89 2a 73 a6 04 f2 9f 5a dd fc 11 96 a2 41 c0 f2 3a 40 0a 8c fa 87 53 e2 22 Data Ascii: d]`t"#LIkA6'#Sa5RU&(#2}8 t,:u-UE-:F$!jZ$<'18IguZrsHnLS(JL81S]QTQEa F:u!PH\SIz"aS0^sZA:@S"
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 81 6f 5a 56 29 82 82 a2 3a 60 b0 ea 01 29 f1 15 35 40 52 6c 05 f1 1a 2f 15 01 34 e5 80 98 34 f5 96 9e 3c f9 56 c7 f7 2d bf 62 c6 04 4d a9 9a 1e 37 7c b7 21 2a ce c0 84 61 96 27 be 23 eb a9 40 44 48 b0 04 b4 11 bf 60 72 14 30 0e 80 97 3e a7 b4 fc 39 08 c3 cf 35 03 22 d4 aa 5a c5 a9 df 51 1c 04 2c 18 66 7f 26 9d 1d 85 8b ca b2 df aa 58 fb 92 95 57 90 ce 32 1f 25 b5 a5 a4 80 50 1c eb 56 dc 80 47 92 9a 39 0a 82 69 15 94 cd 88 da 48 9e 94 b4 37 c7 b6 c4 de 5a 85 58 42 21 0c 90 4e 30 fe c8 b6 29 68 fe 6c d2 68 f6 23 a9 8d 0c 8a 6a 83 80 c9 1c 04 97 92 12 53 33 b1 8f d1 47 45 34 76 51 5b e2 cc 2a 16 c3 e0 04 2f 31 a1 ab 78 44 4a 37 27 30 e8 61 90 13 ec 74 06 50 61 be 98 72 4e 0b 90 62 ef ad bd 33 35 05 48 6c f5 08 00 8a 5a 05 96 4c 7e c6 a5 55 25 d1 fc 6e ab ff Data Ascii: oZV):`)5@Rl/44<V-bM7\|!a'#@DH`r0>95"ZQ,f&XW2%PVG9iH7ZXB!N0)hlh#jS3GE4vQ[/1xDJ7'0atParNb35HlZL~U%n
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 49 4a 08 b4 99 fd c2 48 06 c3 fd 8a 7a 72 4c 68 1e 76 e4 24 bd 1f 49 b9 a0 d4 00 09 28 2b 4d 65 a1 32 7b 86 54 76 ea 91 f5 92 92 84 55 a3 d4 90 63 4a 09 e9 6d 5a be e6 bf cd 6f a3 f8 a2 98 14 12 30 c9 dc 23 75 0a 50 68 2b 32 f9 51 54 13 3f f1 0d 50 c0 63 7d 1f 07 77 fd 88 c9 53 1f 19 31 07 e6 97 7f f0 87 20 05 45 cd 4e 66 12 0b bc dc 05 92 2c 55 98 b3 9f 00 1d 81 24 57 32 da 25 28 19 37 d0 d0 ee 76 0f 4c 09 08 26 6d 46 2d a9 44 95 9d df f3 75 8a 9c 12 52 52 b2 16 c2 a9 a4 f5 a1 5c 0c fd 54 28 dd 79 27 e1 a5 89 94 38 19 ac a7 49 fd 2a 6c 60 87 be a6 82 9e d0 fb a1 f1 63 c0 12 94 98 37 11 ac 51 80 42 58 82 08 13 9d a8 1a 3a 10 21 08 8f a0 02 52 b2 ba 22 ae 36 fa 71 0c d7 55 41 89 90 6e 34 e0 54 15 46 74 e8 94 94 1f 85 ec 48 69 bf 96 b8 96 f1 bc a6 8a f2 94 Data Ascii: IJHzrLhv$I(+Me2{TvUcJmZo0#uPh+2QT?Pc}wS1 ENf,U$W2%(7vL&mF-DuRR\T(y'8I*l`c7QBX:!R"6qUAn4TFtHi
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: b7 12 75 73 5d 49 8a 9a 62 3d 72 22 ef e4 85 4c 12 46 ea 06 81 ee 0f 8a 12 df 83 51 ac a7 76 a0 44 5b 8d 69 4a 51 c1 49 25 25 a4 c4 4c 64 b1 56 72 48 b5 e5 b3 14 b2 e7 81 87 26 88 ca bf 1e 4e 51 79 b1 e2 04 e3 3c a0 29 7c 61 33 7c 8a 22 25 98 30 26 7c 82 16 94 c0 4a da bf 85 cc 42 29 61 05 24 a8 29 13 1f b8 80 15 4a 93 17 ab 6c 29 f8 e9 0e 2e 70 63 29 d5 b3 50 5c 59 a0 d8 76 d3 6d e5 64 fa a1 c3 30 db 8b dc 55 12 56 7b 3e 62 c6 4f 2b 76 10 15 39 ad 18 eb c5 30 29 03 55 36 e6 da a6 3f 3a d0 50 48 3a c5 eb 3e 2a 6c 9a df 95 5d 7a 9e eb 92 54 ba d9 b0 a6 e6 dc 35 a2 a2 38 04 14 04 05 67 48 fa 03 9b 33 db 2c 92 80 a4 ac d9 5b 88 1f 1e 1c 1e 1d 4a 68 de a3 a8 40 87 2f ed 05 2b 15 1f 9c 05 2a 04 46 8f 55 6a 0a 71 bb bb b1 95 14 45 95 78 fc ca c9 c2 ef 6e 70 02 Data Ascii: us]Ib=r"LFQvD[iJQI%%LdVrH&NQy<)\|a3\|"%0&\|JB)a$)Jl).pc)P\Yvmd0UV{>bO+v90)U6?:PH:>l]zT58gH3,[Jh@/+FUjqExnp
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: e4 93 2d fe 16 7a 07 34 0f 5a 97 62 9f 08 83 96 90 08 ea fb b3 9f c4 dc 44 05 83 a2 88 07 61 8b 2a f0 a1 23 a8 28 68 aa 06 c5 b5 93 6b a9 20 16 eb 29 eb fd 00 0b de 2b 52 6c fa 30 b8 25 0b 63 e5 79 30 54 49 05 5b b2 02 05 77 ce 89 96 e7 53 ce 29 97 54 02 09 41 1b 5f 4f 39 14 b6 e4 f9 50 92 c3 09 53 25 89 6b 87 e7 55 89 f6 15 03 61 9c e0 16 98 be 8b 14 51 d5 9a 02 27 13 93 2e 7c 27 64 44 9b f0 b1 b0 90 54 72 02 a8 5a 53 f4 97 01 2a 56 be f0 ca 76 c2 a9 8b c7 90 18 54 94 e6 be 07 09 d8 7d 4a ca 05 14 90 72 13 30 35 e5 a8 48 cb 41 51 53 ab e7 34 65 0b dd dc 2c 4a 3e 3c 9b f7 0f 41 b1 26 25 25 fb 4c 0d 1c 90 5c 5a f5 86 39 a6 ef 24 05 50 06 ab e8 d3 4f 09 8a c4 d8 55 58 d5 12 35 09 27 78 36 14 58 37 65 17 91 92 ca db 28 54 33 d5 54 cf 76 96 fa 54 53 d8 ee 2b Data Ascii: -z4ZbDa#(hk )+Rl0%cy0TI[wS)TA_O9PS%kUaQ'.\|'dDTrZSVvT}Jr05HAQS4e,J><A&%%L\Z9$POUX5'x6X7e(T3TvTS+
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 7e fb 87 e2 08 f2 f1 4b 12 0b 56 70 84 15 2a 90 42 f6 d3 e4 77 2d e3 a6 34 eb f9 00 ca 34 f5 09 d3 7b 75 a4 3f d3 91 e0 92 89 fe 96 ee 4f c1 f4 76 28 5c 53 7c 96 02 01 4e cd e8 5e 3a 33 1e d0 58 1e e4 8c a0 81 1d 65 75 67 2d 05 2c bf 4b 51 8c 37 b8 0b 72 d9 bc 97 94 00 ca 23 6e ed da 27 45 56 b0 ec d0 8d d5 cc 1e a6 0d 3b 14 5a d8 9b 78 25 84 e0 7e 49 4b 64 69 44 55 77 7f 2d 3a 8a f6 6a e7 8a da dd b7 a6 a8 e4 04 44 1c 0a 49 4c 26 a4 3d b0 12 c3 c4 59 19 01 5c 25 ab d4 14 a6 68 fe c4 d1 51 8c 66 3f 17 14 44 74 89 bd 74 3c 2c 76 77 29 67 1b 78 10 6c 63 a0 84 94 64 40 69 2b c4 70 e4 f1 ad fe 83 95 9c 48 ae 5f b9 7c 22 2b f5 1e b2 a7 7b 3f a2 e2 9e 1f dd 61 f1 d3 89 c2 87 90 0e 0f 64 16 7b f5 12 b3 3e d1 52 ca 2a f9 f4 30 45 a1 f2 83 5f 68 4a 58 79 cf 77 bf Data Ascii: ~KVpBw-44{u?Ov(\S\|N^:3Xeug-,KQ7r#n'EV;Zx%~IKdiDUw-:jDIL&=Y\%hQf?Dtt<,vw)gxlcd@i+pH_\|"+{?ad{>R0E_hJXyw
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: c0 3c cd 5d 64 0f 61 d7 7c 65 ac 52 55 c5 9e 12 22 17 54 18 61 c9 4a 27 40 93 18 a8 53 96 fa 74 33 fd 57 f1 5a 53 a6 25 06 5c 7b 8a ec 27 06 1a 3f 44 2a 2a 8a 14 73 5f d3 c2 ac 48 d1 c8 09 b3 71 4a 58 66 b5 a6 a8 a3 df df fd fe 56 ae 18 80 05 43 06 7c 1b 2e d6 69 95 f2 3a e5 b2 1a 25 65 6c ec 40 5e 31 99 70 ca 2e 22 7a 09 d2 12 50 8e aa fe d3 f2 c9 8a 0d 06 3c 20 85 b4 c8 09 3f c5 c5 e8 f5 48 01 54 b0 12 4c 53 3a 3f ec 7b ac 9c 92 95 29 0a 43 cd b5 34 52 a6 8c 56 e6 be 45 43 49 5d 59 91 ba a1 a2 18 aa a7 64 05 4c 0f 9a 01 89 a9 2f aa df 8d 93 b2 22 ae c4 94 96 9c 9a 7f af f7 4b 4b 46 90 98 4f 29 2f 09 b3 3a 01 f6 38 21 c8 49 8f ef a9 ae 5a 5a 05 3c f2 7b 4c 4a 21 9d 11 16 20 85 a8 6c 43 dd c4 e4 9a 0a 23 84 92 4c cd aa 5f a5 08 0a 7d 9f 6a ea 2a 76 90 58 Data Ascii: <]da\|eRU"TaJ'@St3WZS%\{'?D*s_HqJXfVC\|.i:%el@^1p."zP< ?HTLS:?{)C4RVECI]YdL/"KKFO)/:8!IZZ<{LJ! lC#L_}jvX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50355	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1752	OUT	GET /blob/1232027/Features_Apps.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 8211 Connection: close CF-Ray: 86b215d42ee85772-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 523366 Cache-Control: public, max-age=2592000 ETag: "e3952d78b4e972343cd7bfeb5435ff2f" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:37:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=9408 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: I5omRKl4i/zgqgGfzm0btVG0OQJNdAWVxZKmr69K2FRYON2oI7uudVemrH94kwYwo0BsKa1ipsE= x-amz-request-id: 44SNKSVGKG6Q0JCZ x-amz-server-side-encryption: AES256 x-amz-version-id: jBXUp5zAFEO7Yp5t8p9EzbbIDPP.jgKj X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSlkLEr7%2FYYgIDuSzTat7z%2FJjm1NYkmsKF5DSHUZR4wSBft9aGQFTLrB8YPTPiWhdcXV1htotRFHLVZpA3hiOlh8JTFYgmuVCVgsoNCNAr4on7%2FEps0WSgQeqJrm2sGQimdqHcjG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 5f 50 4c 54 45 47 70 4c 22 22 22 ff 03 86 99 b3 cc 17 ab ee ee 1e 25 eb ef f2 ff ff ff 00 61 d7 00 72 e1 ef d2 cc 0c 88 db f3 f3 f3 18 70 50 6a 5b 6a 09 76 d1 a4 d0 ee ef d0 dc 04 75 b6 5b b9 f2 38 55 90 3c 8a e4 f4 70 64 21 9c 6a 01 86 c6 3e 4c 93 12 99 74 fe 91 6d ef ef f0 ff 8e 72 0c 89 b7 1c 13 29 00 00 01 c3 bb b8 33 3b b4 c7 17 58 e7 a5 58 39 75 e2 29 7d 78 c7 4a 41 fb a5 4a 9c 09 a2 ea ea ec 30 9f 58 02 02 02 ec ec ed ff ff ff 05 a0 81 00 00 00 ff 7a 59 3e b0 60 00 91 d4 3b 59 98 1c 99 57 d7 3f 35 3e 7b f2 f4 f5 f5 ff d7 3d cc cc ca fe cb 4d 73 13 b6 f6 c1 Data Ascii: PNGIHDR"trgAMAasRGB_PLTEGpL"""%arpPj[jvu[8U<pd!j>Ltmr)3;XX9u)}xJAJ0XzY>`;YW?5>{=Ms
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: b9 62 bd 58 a7 a0 d3 6a b5 be db 8f 10 54 be 52 fd e5 75 35 cb 7e 33 29 37 14 a2 8a 1a 52 40 92 28 0d 75 23 9b 70 89 59 9a 92 15 5a 85 52 55 b1 5e 7c ed 07 2c 7e 81 2a f0 94 9a a2 4e d5 3c 4d bd a4 ca 23 3c b3 d9 4c 59 13 a0 4b aa 0a b5 c2 65 e8 e6 7e 3f 28 f7 09 ed 13 a2 4a a8 4e d9 38 49 3b bc a3 61 b0 be 86 b5 9f 58 7d 17 a0 54 3e 52 cb 6b 3b 4b 0f a9 8d b2 96 7c 1b fd 8d 9e 7c bd 39 45 0a 4e 02 75 43 22 98 db 12 f0 c8 46 40 f4 55 82 41 44 94 34 49 a8 54 8a 89 18 eb c5 3a d5 0a f7 21 1f a1 42 7e f8 21 f4 90 02 94 83 ca 21 e5 9a fb 7a 9b c3 ef 14 27 77 4a 9c 68 cc 69 f2 e3 83 5d 92 74 95 ae 92 9b 38 49 92 15 af fb b8 5a 1d 42 c2 10 ab 17 b8 4e 85 f6 8a 0f 54 18 81 97 d4 f4 80 e8 61 9e cf 1f 40 d5 4c ca 9e fb 66 b6 a1 2a 4f 92 32 85 a2 50 5f 32 16 8a f9 Data Ascii: bXjTRu5~3)7R@(u#pYZRU^\|,~N<M#<LYKe~?(JN8I;aX}T>Rk;K\|\|9ENuC"F@UAD4IT:!B~!!z'wJhi]t8IZBNTa@LfO2P_2
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: a2 8d e3 d9 29 c4 43 ea e0 3a 15 f0 b1 87 54 ff 89 a8 20 b5 a5 31 a1 37 92 7a 22 a8 7e 53 a9 d2 29 85 93 ee 4e c1 09 e9 52 a3 6e 79 c6 cb 46 26 57 99 38 dd a1 64 2c 25 eb f5 08 4e 91 ac d5 4f ee 14 12 9c bb 53 fe 6b 3f 9b ea 1f 9e fd 52 7e 5f a3 51 ed e6 bf f1 32 73 4a f5 de 9d d0 29 48 a1 53 04 85 31 27 95 51 35 b7 57 57 77 57 b7 38 02 15 45 4b c5 11 45 37 aa 96 d4 71 90 f0 c2 43 ca f3 7e ca 4e 9f 26 c0 5f d0 29 d9 08 ea b9 ed f5 5b 64 0e 29 fe 6c de dd 29 30 8d ba b7 34 d0 29 dc 45 41 6c b7 c1 08 11 aa 01 a4 72 d2 84 13 06 36 b7 94 44 a4 3c ef 7c ed 84 7e cf 28 ec 2c 21 85 70 ad 78 31 d1 58 0a 2c 0e a9 e2 dd 49 9d 02 12 81 e8 31 ba c3 92 02 48 d5 17 06 9c 28 54 aa 09 3f 65 8f 10 ed 44 af d3 a4 42 11 09 ac f3 8e a7 49 ae 04 7e cf fd ec f4 97 d4 a6 89 74 Data Ascii: )C:T 17z"~S)NRnyF&W8d,%NOSk?R~_Q2sJ)HS1'Q5WWwW8EKE7qC~N&_)[d)l)04)EAlr6D<\|~(,!px1X,I1H(T?eDBI~t
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 9a 33 89 ea da a2 06 6b ae 03 2a f0 a4 8a 70 8d 8b 82 2a c3 a2 a0 6a 63 a2 a8 6f b4 38 df 9d 24 6a 11 68 aa 72 f5 6f f1 94 10 a5 ad 0a a2 cc ab 72 21 4a 43 55 7e aa dc 45 5d 70 5c 88 d2 40 ac 38 39 ac be d4 e7 81 c3 d8 85 28 1d 55 b9 ef e8 06 4a 9f 06 eb 6e ee a8 ba 68 46 d5 0a 4c 19 af 7f 8f 0d 98 7a ec 30 9e 1d ea b3 ee 70 56 21 4a af fe 19 af 7d a0 8a 48 69 93 13 aa 07 2f 81 d9 50 ad 21 52 9a a1 32 1e 29 a8 32 1e 29 b0 8c 51 4a 1b 21 31 4a e9 8d 54 1b 87 26 d8 70 18 18 a5 74 47 2a e3 91 02 28 7e f3 28 7f 38 93 32 5d fe d6 8d 98 5a 37 5a fc 78 f9 33 6f ca 35 66 ca f8 30 05 9c 0c a7 46 4c 3d e3 35 0a a6 34 d9 30 73 ce cb a9 c2 94 36 95 fb 65 ea f4 0f 6b 4a 70 53 2f ad a9 52 66 ca 9a b2 99 b2 a6 ee 20 53 9f 18 bf 7e 8e b0 a6 4a 97 a9 f7 59 3e 7c ff 53 84 Data Ascii: 3kpjco8$jhror!JCU~E]p\@89(UJnhFLz0pV!J}Hi/P!R2)2)QJ!1JT&ptG*(~(82]Z7Zx3o5f0FL=540s6ekJpS/Rf S~JY>\|S
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 4c af 17 e1 ce 69 be f4 5d 23 f3 a5 ef ce 6b 16 ee 55 87 a1 6f 09 8b 10 d4 84 e1 d6 0f b8 46 ca df 2a 3b ac 09 53 cf 5c 67 3e 03 15 b2 6a be fc 55 b1 00 8b a1 48 99 2f 7f cf 1d c6 ae f1 48 81 75 d3 91 02 ae 91 48 11 2b c2 50 e7 67 7e 6e fb c7 ae c3 70 9f 99 9c 2d 9d 87 ca fc b2 46 55 13 91 82 2a c3 4b e5 80 d5 c7 ba a2 56 73 0f fb 4c 57 14 0e cb d2 7a ae 29 0a b5 cf 7c fd 5b 76 00 54 69 ac bf 67 5e 15 44 99 56 05 51 86 55 41 94 eb 98 52 c5 13 05 2a 42 98 5d 7c 0f b8 cf 75 c6 a8 89 07 5e 55 5f 2c ec f4 14 ef a7 e9 e5 f7 ce 51 fa cc 2f bf b7 06 51 a0 52 13 4a 14 2d 3e ba fa fc 89 5a 9e 9e af 3a 20 df d5 fa a9 0a cf 76 57 8b 96 1e 3d 57 62 1d 8b 8f 1a 77 b5 5c 75 18 ae 02 ce 0c b8 ab f2 b8 73 3d ac f9 03 3b b3 e0 2a 60 97 2f b6 58 2c 16 8b c5 62 b1 58 2c 16 Data Ascii: Li]#kUoF;S\g>jUH/HuH+Pg~np-FUKVsLWz)\|[vTig^DVQUARB]\|u^U_,Q/QRJ->Z: vW=Wbw\us=;`/X,bX,
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 1e 9e 24 7c 60 4d 85 9e 29 2e ea ed 76 8b 0f 52 12 a6 58 05 f4 db 00 cd bb 9c a9 fa 22 63 49 e4 44 0a d4 8a 4d a1 dd 13 f5 ec 8e 86 de 99 2f 3a 74 70 38 62 9d ba 96 29 2e ea 7d e4 84 0d 52 d2 a6 40 df 6f 13 4c 95 c4 38 85 48 e5 85 ea ab 3c 8a 4d a1 05 cc d9 a1 67 0a 1d 3a e8 b6 df b3 50 e9 98 e2 89 22 29 df b3 da a7 60 0a 15 90 ab 92 ca 94 b7 98 43 03 91 ca 43 14 9a 42 b9 f3 b2 3b ea 7a a6 d0 4e 80 b0 dd be 3c 4e e1 6b 9b e2 89 22 5a ac f6 49 9b 02 97 d0 d3 ef f7 47 3e c6 2a 19 53 54 fc 38 02 67 52 39 d4 66 31 55 cf b6 0f 1e 1a 41 0d 53 68 27 40 10 ed 48 87 ea bd a6 29 9e 28 58 c9 f4 7d ca a6 06 e9 4b b3 68 2d fc 3b 32 c5 fb 74 af 91 dd a1 66 8a b7 13 3d da e1 bf 65 f5 4f d9 14 4f 14 68 a5 6b 9f 86 a9 11 44 b1 cd 59 c7 a9 86 79 53 5e fa 34 97 ed 50 36 d5 Data Ascii: $\|`M).vRX"cIDM/:tp8b).}R@oL8H<Mg:P")`CCB;zN<Nk"ZIG>*ST8gR9f1UASh'@H)(X}Kh-;2tf=eOOhkDYyS^4P6
2024-03-27 20:21:10 UTC	12	IN	Data Raw: 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50356	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1754	OUT	GET /blob/1232025/Features_Editor.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 5456 Connection: close CF-Ray: 86b215d43fc30586-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 415880 Cache-Control: public, max-age=2592000 ETag: "e4605eda6abc583fd2e7be12b5ba9931" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:37:17 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=5938 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: g6bWXqTR8qzSbCWyxJdWkcWF8uCvnYAdZ1sKIdWaAQ6+OtvgKaGUhaMKHU2Vp6rChhz5eFIoBOQ= x-amz-request-id: CAXFT63TQQ3SE6BF x-amz-server-side-encryption: AES256 x-amz-version-id: mWN7ZBO2g7wEm5kkud6U1LCfUgVnnpsc X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxM4e0SJDStyzrYr19XNF6YxApvgzBGWosNdWxE9ZlvaP9rypu1lNGgwBzPwbm8gy66zcpdMMal1JifoObuAnw7NGNsEtJEjdwZV%2FeK7qX3Q9OmODYpi88VJzNGslbDo%2BqumtsSQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1356	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a2 50 4c 54 45 47 70 4c 31 3c 50 c8 cc d2 ff d2 00 26 33 46 5a 4d 16 d9 d9 e1 19 19 21 8a 3d ff 87 3b ff 9e a5 af 87 3a fa ff cf 00 ff ff ff ff d2 02 ff d2 00 ff d2 00 ff ff ff ff d1 00 ff d2 00 f8 f9 f9 bf c3 ca fb fb fd e1 e3 e6 8c 93 9e f3 f4 f6 72 42 c5 81 3a ec aa 89 e2 71 3c ce ff d2 00 ff ff ff 8b 3d ff fe fe fe fc fc fc f6 f7 f7 f9 f9 fa ee ef f0 e7 e8 ea f3 f3 f4 d4 b7 ff e3 d0 ff de e0 e3 9a 56 ff b7 85 ff f1 e7 ff ff ec 91 ff f8 d2 ff da 2d c7 a3 fe a8 6d fe ff e4 63 92 49 ff 7e 3b e7 d9 04 b6 d3 00 00 00 1e 74 52 4e 53 00 33 b1 e5 17 0d 1f 05 9f 20 66 Data Ascii: PNGIHDR"trgAMAasRGBPLTEGpL1<P&3FZM!=;:rB:q<=V-mcI~;tRNS3 f
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 93 d4 69 73 06 16 f3 e9 67 14 30 87 c0 ad 34 f7 3b a5 b8 07 f3 0b 3e 19 94 64 22 da 31 e1 08 5a 4f 1d 4c 22 03 4b 4c 2b df c3 89 92 c0 a0 a8 9a 34 14 ce 64 40 c9 a8 ee 77 1b 54 09 55 68 6f 83 8a 45 24 e5 ca 22 95 01 04 16 52 bf 6f b3 68 8f a2 dd e1 5e aa 3b 42 a7 c2 51 e7 bd d8 1d f6 8f 16 8e d7 80 53 7d 5f 03 9f 1a 75 b7 17 e7 48 e1 08 19 42 ea af df ff b4 f9 ba cb 81 a3 1f 8f 8f 3f ec 41 ff d4 13 1e f8 dd e3 d4 f1 5e e3 db b7 87 df 16 1e 52 76 8d 1b 40 aa 42 b5 29 b6 d1 ca 26 2f ba 18 65 f3 fc f8 f8 bc 3f 82 53 73 65 63 d0 03 f1 a9 ee d7 80 a3 69 5e 63 b5 7c fd fe cd 43 2a 0c aa 4a b9 b3 97 52 37 9e d5 1f 1e 52 50 ac b8 5a 4a a5 67 22 a5 fe f9 c3 47 ea 4b 72 6d 28 c8 dd 4a 41 af f2 91 8a 92 00 7a d4 4c a4 d4 3f 2e a9 a0 97 55 8d 82 cc 41 6a f5 b0 70 48 Data Ascii: isg04;>d"1ZOL"KL+4d@wTUhoE$"Roh^;BQS}_uHB?A^Rv@B)&/e?Sseci^c\|C*JR7RPZJg"GKrm(JAzL?.UAjpH
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 49 54 de 3d e5 ee 6e 38 db e1 65 3c af c8 86 08 04 05 61 f2 e0 5b 58 ca dc 93 f1 06 0d 7f fe 52 76 f8 5b a9 9f 30 ee 6d 1a 57 af af af 56 0a 7c 70 f6 70 70 1b 37 e3 16 c0 04 63 57 a0 4b 4e 54 4d c2 95 24 71 64 ae 81 3f eb c7 52 ba f4 1f fe 40 0a 66 7f 4f 30 fc bd bd 5b a7 16 aa 30 f9 75 03 cc ba cb 34 52 1c cd ce 9d 52 29 da e8 84 34 30 55 ed 27 05 9d 4a 9b 8f 3d d4 d2 3a 6d a0 56 c6 4a b5 3f c6 e4 e6 70 72 fb 6b d7 9c ef ee 3b 37 79 3e f0 dc 90 ae 67 4d 22 25 7a 50 fc 48 e5 36 81 0d ee 4e a9 4f 54 95 bf 94 ca 8b 5f 96 54 2f 6a d9 3a 75 50 26 80 00 17 50 8d 2b 95 20 28 97 d4 be cb c5 58 aa 9f 12 35 fa 4a 19 58 52 ad 5b a8 0d d3 aa 28 4c 97 62 73 ab 38 12 d3 bf 0d 69 1f 6f 7a 77 9b fe 1f 06 ee c7 e9 69 a9 76 0c 1c 5f 8a a3 f5 ae 6b 02 cf 60 c6 c8 1c 52 68 Data Ascii: IT=n8e<a[XRv[0mWV\|ppp7cWKNTM$qd?R@fO0[0u4RR)40U'J=:mVJ?prk;7y>gM"%zPH6NOT_T/j:uP&P+ (X5JXR[(Lbs8iozwiv_k`Rh
2024-03-27 20:21:10 UTC	1362	IN	Data Raw: fd 11 d7 b8 52 fd c6 f6 b6 54 fe 30 85 ba 87 21 f2 61 1d 82 8a ce a7 be 13 94 84 21 bc ae 4b a2 7a d1 1c 45 a7 41 57 0a 84 2f 05 40 e7 53 0d 88 71 df 16 1f b4 d2 88 d4 b6 42 41 d5 e0 62 25 ba 5e 5d 57 4a a8 0b a9 4e 21 e9 ed 39 0a 82 7a 84 73 c4 6e dd af 5a b2 14 42 09 80 09 55 4e 7d 3e 36 b8 35 ef a7 aa e1 03 d0 4d a5 41 a0 47 a3 95 b1 40 40 5c d4 36 66 ef 83 6e c7 c9 bf ca 94 23 53 3d 8c 66 ea d0 28 53 99 82 f5 df a2 ab f0 a9 c5 15 95 b6 52 ba 47 c2 26 57 a4 c0 95 da 62 45 51 e4 7a 83 54 8b 93 22 a8 12 2b 8a 22 ea 42 10 95 57 53 51 65 7e 8e 02 a1 36 0f e0 e4 87 f5 76 b1 52 0c cb a5 a8 dd 75 45 9d 8b 89 14 5b 80 94 5f 53 54 52 14 b1 de 2c 59 8a 4a 8a fa bf 42 10 15 e3 4b 94 b2 af 52 12 dc ec 70 fc b7 4c 29 2c 29 59 0b 70 63 c7 7f cb aa 29 e1 8e 28 ec 99 Data Ascii: RT0!a!KzEAW/@SqBAb%^]WJN!9zsnZBUN}>65MAG@@\6fn#S=f(SRG&WbEQzT"+"BWSQe~6vRuE[_STR,YJBKRpL),)Ypc)(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50316	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	589	OUT	GET /web/1c6dfi.ac74f1501d78f5cf.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1350	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/css Content-Length: 105531 Connection: close CF-Ray: 86b215d3ee9e5a58-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 63835 Cache-Control: public, max-age=31556926 ETag: "51a2c4b467124f2be0316be2890b1cee" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Wed, 27 Mar 2024 02:26:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: Po6ErWzPifHam3J2B5EqSjM8Tc2IWtey4vPEGxOjCxfIw8jmf8jCHTQHXLkZrWDaS0M/vbqJQeY= x-amz-replication-status: COMPLETED x-amz-request-id: ZQ59P3Q8B7GNBDGX x-amz-server-side-encryption: AES256 x-amz-version-id: KM3ayg.VTE8dhU2nw2IXbfkHN4r3WvOq X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 5f 47 61 39 44 66 6f 65 4e 44 4c 37 6c 4d 30 75 36 4a 58 4d 58 46 61 55 47 73 45 68 63 71 71 63 52 35 4f 4f 66 57 47 68 4a 66 55 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 7a 73 76 4e 64 4c 68 59 61 37 30 48 63 43 32 74 53 78 34 72 70 52 64 31 47 31 76 5a 30 4e 6b 43 4a 36 35 41 36 4d 53 55 51 41 4d 53 72 75 62 48 54 32 76 51 67 31 4e 75 53 2e 70 59 33 4c 31 41 6c 39 71 43 49 74 6b 78 75 51 68 59 58 5f 2e 33 41 50 6e 4b 6d 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=_Ga9DfoeNDL7lM0u6JXMXFaUGsEhcqqcR5OOfWGhJfU-1711570870-1.0.1.1-zsvNdLhYa70HcC2tSx4rpRd1G1vZ0NkCJ65A6MSUQAMSrubHT2vQg1NuS.pY3L1Al9qCItkxuQhYX_.3APnKmA; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	609	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 54 57 46 34 72 77 29 7d 2e 6c 69 67 68 74 7b 2d 2d 54 57 46 34 72 77 3a 6c 69 67 68 74 3b 2d 2d 74 4e 31 4d 4d 41 3a 23 30 30 63 34 63 63 3b 2d 2d 5f 6d 48 4c 72 41 3a 23 38 62 33 64 66 66 3b 2d 2d 73 30 64 4f 59 41 3a 23 37 37 33 31 64 38 3b 2d 2d 74 2d 69 38 68 77 3a 23 36 31 32 64 61 65 3b 2d 2d 36 38 39 39 73 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 34 59 6f 62 6d 67 3a 23 66 66 66 3b 2d 2d 39 51 52 5f 68 67 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 31 32 78 6a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 42 32 54 48 66 67 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 51 59 Data Ascii: .theme{color-scheme:var(--TWF4rw)}.light{--TWF4rw:light;--tN1MMA:#00c4cc;--_mHLrA:#8b3dff;--s0dOYA:#7731d8;--t-i8hw:#612dae;--6899sQ:rgba(64,87,109,.07);--4Yobmg:#fff;--9QR_hg:rgba(36,49,61,.4);--K12xjw:rgba(64,87,109,.07);--B2THfg:rgba(57,76,96,.15);--QY
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 30 29 3b 2d 2d 66 67 41 4c 55 77 3a 23 30 64 31 32 31 36 3b 2d 2d 6e 34 4c 31 73 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 6e 65 4a 71 41 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 56 44 43 55 4e 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 45 30 35 59 41 51 3a 72 67 62 61 28 35 37 2c 37 36 2c 39 36 2c 2e 31 35 29 3b 2d 2d 73 61 6e 6c 43 77 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 63 39 6b 61 51 51 3a 23 30 64 31 32 31 36 3b 2d 2d 47 56 36 72 75 51 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5f 7a 4b 42 51 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 66 50 4e 5f 77 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 Data Ascii: 0);--fgALUw:#0d1216;--n4L1sw:rgba(36,49,61,.4);--KneJqA:rgba(57,76,96,.15);--VDCUNg:rgba(64,87,109,.07);--E05YAQ:rgba(57,76,96,.15);--sanlCw:rgba(13,18,22,0);--c9kaQQ:#0d1216;--GV6ruQ:rgba(36,49,61,.4);--S_zKBQ:rgba(17,23,29,.6);--fPN_wg:rgba(13,18,22,.7)
2024-03-27 20:21:10 UTC	935	IN	Data Raw: 59 4c 45 67 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 2e 37 29 3b 2d 2d 66 46 55 41 65 41 3a 72 67 62 61 28 32 33 35 2c 32 33 36 2c 32 34 30 2c 30 29 3b 2d 2d 71 4b 33 6e 38 77 3a 23 66 36 66 37 66 38 3b 2d 2d 6a 69 70 57 78 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 4f 72 47 68 4a 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 62 44 62 6c 59 77 3a 23 66 66 66 3b 2d 2d 59 6c 42 4a 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 59 35 68 69 65 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 54 6c 55 75 64 51 3a 23 66 66 66 3b 2d 2d 6d 4d 65 5f 55 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 34 53 76 70 39 51 3a 68 73 6c 61 Data Ascii: YLEg:rgba(235,236,240,.7);--fFUAeA:rgba(235,236,240,0);--qK3n8w:#f6f7f8;--jipWxQ:rgba(246,247,248,.7);--OrGhJg:rgba(246,247,248,0);--bDblYw:#fff;--YlBJZQ:hsla(0,0%,100%,.7);--Y5hieQ:hsla(0,0%,100%,0);--TlUudQ:#fff;--mMe_UA:hsla(0,0%,100%,.7);--4Svp9Q:hsla
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 36 33 4a 41 3a 23 30 64 31 32 31 36 3b 2d 2d 6f 58 6a 65 6b 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 68 6a 56 73 72 77 3a 23 66 31 65 62 66 66 3b 2d 2d 6f 6e 32 31 61 77 3a 23 66 31 65 62 66 66 3b 2d 2d 46 4e 55 51 34 67 3a 23 65 37 64 62 66 66 3b 2d 2d 36 52 64 37 55 51 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 6e 66 75 5f 6f 67 3a 23 36 31 32 64 61 65 3b 2d 2d 75 78 33 64 6f 51 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 6e 65 4a 71 41 3a 23 66 31 65 62 66 66 3b 2d 2d 56 44 43 55 4e 67 3a 23 66 31 65 62 66 66 3b 2d 2d 45 30 35 59 41 51 3a 23 65 37 64 62 66 66 3b 2d 2d 73 61 6e 6c 43 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 63 39 6b 61 51 51 3a 23 36 Data Ascii: 63JA:#0d1216;--oXjekw:rgba(36,49,61,.4);--hjVsrw:#f1ebff;--on21aw:#f1ebff;--FNUQ4g:#e7dbff;--6Rd7UQ:rgba(64,87,109,.07);--nfu_og:#612dae;--ux3doQ:rgba(36,49,61,.4);--KneJqA:#f1ebff;--VDCUNg:#f1ebff;--E05YAQ:#e7dbff;--sanlCw:rgba(64,87,109,.07);--c9kaQQ:#6
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 2c 2e 33 29 3b 2d 2d 58 47 4e 57 4d 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 6d 67 4e 62 39 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 47 5a 77 51 46 77 3a 23 66 66 66 3b 2d 2d 42 62 50 36 76 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 43 4f 58 67 73 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 45 75 44 4c 59 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 35 4b 43 37 6c 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 3b 2d 2d 6c 73 47 4b 57 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 30 37 29 3b 2d 2d 44 6f 34 4c 63 41 3a 23 66 66 66 3b 2d 2d 7a 69 39 6e 49 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 Data Ascii: ,.3);--XGNWMw:hsla(0,0%,100%,.15);--mgNb9w:hsla(0,0%,100%,.15);--GZwQFw:#fff;--BbP6vg:hsla(0,0%,100%,.4);--COXgsg:hsla(0,0%,100%,.07);--EuDLYA:hsla(0,0%,100%,.15);--5KC7lw:hsla(0,0%,100%,.2);--lsGKWw:hsla(0,0%,100%,.07);--Do4LcA:#fff;--zi9nIw:hsla(0,0%,10
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 67 3a 23 65 63 39 39 30 39 3b 2d 2d 30 35 74 76 6a 51 3a 23 66 64 34 39 35 38 3b 2d 2d 55 38 49 70 69 41 3a 23 66 66 38 30 38 38 3b 2d 2d 67 49 48 75 6e 77 3a 23 66 64 34 39 35 38 3b 2d 2d 74 6b 62 79 4e 67 3a 23 61 35 37 30 66 66 3b 2d 2d 65 6c 46 46 70 77 3a 23 62 63 39 37 66 63 3b 2d 2d 33 7a 52 6c 61 67 3a 23 61 35 37 30 66 66 3b 2d 2d 37 68 6e 73 49 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 33 29 3b 2d 2d 68 6d 42 7a 35 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 2d 2d 33 6a 30 4f 32 77 3a 23 61 35 37 30 66 66 3b 2d 2d 36 71 51 43 4e 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 43 67 4f 6d 71 67 3a 23 66 64 34 39 35 38 3b 2d 2d 4f 48 6c 57 62 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c Data Ascii: g:#ec9909;--05tvjQ:#fd4958;--U8IpiA:#ff8088;--gIHunw:#fd4958;--tkbyNg:#a570ff;--elFFpw:#bc97fc;--3zRlag:#a570ff;--7hnsIg:hsla(0,0%,100%,.3);--hmBz5w:hsla(0,0%,100%,.5);--3j0O2w:#a570ff;--6qQCNQ:hsla(0,0%,100%,.15);--CgOmqg:#fd4958;--OHlWbw:hsla(0,0%,100%,
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6c 61 63 65 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 5f 50 5f 72 51 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 6a 31 5a 76 67 77 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 20 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 7d 2e 66 5f 53 30 72 77 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 74 65 78 74 7d 2e 58 44 6e 32 30 77 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 Data Ascii: lay:flex;height:100%;place-items:center;width:100%}.l_P_rQ{display:grid;height:100%}.j1Zvgw{grid-template-columns:minmax(0,1fr) minmax(0,1fr)}.f_S0rw{overflow-y:auto;-webkit-user-select:text;-moz-user-select:text;user-select:text}.XDn20w{height:calc(100%
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 41 3a 76 61 72 28 2d 2d 64 38 31 74 75 41 29 3b 2d 2d 5f 66 32 52 5a 41 3a 76 61 72 28 2d 2d 5f 65 76 50 53 41 29 3b 2d 2d 75 4e 35 4f 6c 77 3a 76 61 72 28 2d 2d 5f 66 32 52 5a 41 29 3b 2d 2d 2d 58 4a 64 50 67 3a 76 61 72 28 2d 2d 5f 65 76 50 53 41 29 3b 2d 2d 63 6d 4a 43 47 77 3a 76 61 72 28 2d 2d 2d 58 4a 64 50 67 29 3b 2d 2d 6d 34 70 32 46 67 3a 76 61 72 28 2d 2d 63 6d 4a 43 47 77 29 3b 2d 2d 6e 75 6b 79 64 77 3a 76 61 72 28 2d 2d 6d 34 70 32 46 67 29 3b 2d 2d 79 5f 74 6d 69 51 3a 76 61 72 28 2d 2d 63 6d 4a 43 47 77 29 3b 2d 2d 44 6d 4c 47 4b 41 3a 76 61 72 28 2d 2d 79 5f 74 6d 69 51 29 3b 2d 2d 61 43 37 52 50 67 3a 76 61 72 28 2d 2d 75 4e 35 4f 6c 77 29 3b 2d 2d 76 33 2d 76 75 77 3a 76 61 72 28 2d 2d 61 43 37 52 50 67 29 3b 2d 2d 38 6a 4f 46 7a 77 3a Data Ascii: A:var(--d81tuA);--_f2RZA:var(--_evPSA);--uN5Olw:var(--_f2RZA);---XJdPg:var(--_evPSA);--cmJCGw:var(---XJdPg);--m4p2Fg:var(--cmJCGw);--nukydw:var(--m4p2Fg);--y_tmiQ:var(--cmJCGw);--DmLGKA:var(--y_tmiQ);--aC7RPg:var(--uN5Olw);--v3-vuw:var(--aC7RPg);--8jOFzw:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 65 45 6f 74 57 67 3a 76 61 72 28 2d 2d 59 56 41 67 49 51 29 3b 2d 2d 76 33 2d 76 75 77 3a 76 61 72 28 2d 2d 65 45 6f 74 57 67 29 3b 2d 2d 33 42 6d 69 31 67 3a 76 61 72 28 2d 2d 55 33 38 30 49 51 29 3b 2d 2d 41 66 48 64 32 67 3a 76 61 72 28 2d 2d 33 42 6d 69 31 67 29 7d 7d 2e 4a 79 42 5f 76 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 4a 79 42 5f 76 77 2e 69 4f 51 4e 31 41 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 7d 2e 79 59 77 5f 46 41 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 3a 31 20 31 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 2e 4a 79 42 5f 76 77 7b 2d 2d 4f 32 5a 41 4a 41 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 2d 4f Data Ascii: eEotWg:var(--YVAgIQ);--v3-vuw:var(--eEotWg);--3Bmi1g:var(--U380IQ);--AfHd2g:var(--3Bmi1g)}}.JyB_vw{display:flex;flex-direction:row}.JyB_vw.iOQN1A{flex-direction:row-reverse}.yYw_FA{box-sizing:border-box;flex:1 1;min-width:0}.JyB_vw{--O2ZAJA:flex-start;--O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50359	99.84.191.43	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	545	OUT	GET /modules.ad6500eebe72fe1c39dd.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225445 Connection: close Date: Tue, 26 Mar 2024 14:57:14 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "645fc548e91f44aa4e1226ee86502370" Last-Modified: Tue, 26 Mar 2024 14:56:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d19e64e406af1f88f7f96d9dcb2393ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C2 X-Amz-Cf-Id: zKiTNrzO8HyW5Gvugn3BazV_izbtSL6Ri2itbb0GunndHM-6wiYy-w== Age: 105836
2024-03-27 20:21:10 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 61 64 36 35 30 30 65 65 62 65 37 32 66 65 31 63 33 39 64 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.ad6500eebe72fe1c39dd.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c 3d 22 72 74 6c 22 3d 3d 3d 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 74 2e 72 65 67 69 73 74 65 72 4f 62 73 65 72 76 65 72 46 6f 72 49 6e 6c 69 6e 65 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 70 75 73 68 28 65 29 7d 2c 74 29 2c 68 6a 2e 77 69 64 67 65 74 44 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 2c 74 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 65 2e 63 6c 65 61 72 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: exOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl="rtl"===hj.widget.activeLanguageDirection}),"common"),t.registerObserverForInlineWidget=function(e){u.push(e)},t),hj.widgetDelay=function(){var e={},t=null;return e.clear=hj.tryCatch((function(
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 73 22 7d 2c 69 3d 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 69 64 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 6f 72 5f 76 65 72 73 69 6f 6e 3a 32 7d 29 2c 36 30 29 2c 61 3d 36 30 2a 69 2c 73 3d 32 34 2a 61 2c 63 3d 33 36 35 2a 73 2c 75 3d 69 2f 32 2c 6c 3d 36 7d 2c 38 31 37 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 65 78 63 65 70 74 69 6f 6e 4c 6f 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 69 6e 69 74 45 72 72 6f 72 4c 6f 67 67 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 34 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6f 3d 22 66 75 6e 63 Data Ascii: s"},i=(Object.freeze({id:null,selector_version:2}),60),a=60i,s=24a,c=365*s,u=i/2,l=6},8172:function(e,t,n){"use strict";n.r(t),n.d(t,{exceptionLogger:function(){return s},initErrorLogging:function(){return c}});var r=n(8422);function o(e){return o="func
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 68 6a 2e 68 71 2e 6e 6f 6f 70 3b 6c 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 2e 73 65 73 73 69 6f 6e 52 65 73 75 6d 65 64 22 29 26 26 69 2e 6c 2e 74 72 61 63 6b 53 65 73 73 69 6f 6e 52 65 73 75 6d 65 64 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 2e 79 2e 73 65 74 28 22 61 63 74 69 76 65 22 2c 21 31 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 29 7b 76 61 72 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 5f 74 61 72 67 65 74 69 6e 67 5f 72 75 6c 65 73 7c 7c 21 68 6a 2e 73 65 74 74 69 6e 67 73 2e 72 65 63 6f 72 64 5f 74 61 72 67 65 74 69 6e 67 5f 72 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 69 2e 6c 2e 73 65 74 52 65 63 6f 72 64 Data Ascii: nts[0]?arguments[0]:hj.hq.noop;l.Q.get("session.sessionResumed")&&i.l.trackSessionResumed(),function(e){if(u.y.set("active",!1),hj.settings.record){var t=void 0===hj.settings.record_targeting_rules\|\|!hj.settings.record_targeting_rules.length;i.l.setRecord
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6f 29 2c 65 3d 5b 5d 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 6f 29 2c 5b 5d 29 7d 72 65 74 75 72 6e 20 6e 2e 67 65 74 49 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 26 26 28 6a 2e 74 2e 63 61 6e 55 73 65 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 28 29 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6a 2e 74 2e 63 61 6e 55 73 65 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 26 26 Data Ascii: y{e=JSON.parse(t)}catch(t){window.localStorage.removeItem(o),e=[]}return Array.isArray(e)?e:(window.localStorage.removeItem(o),[])}return n.getId=hj.tryCatch((function(){return null==t&&(j.t.canUseSessionStorage()?(function(){if(j.t.canUseLocalStorage()&&
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 6e 20 65 7d 2c 42 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 59 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 46 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 46 28 65 2c 6e 29 2c 4f 62 Data Ascii: n e},B.apply(this,arguments)}function F(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,Y(r.key),r)}}function G(e,t,n){return t&&F(e.prototype,t),n&&F(e,n),Ob
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 3f 22 22 3a 22 3c 21 44 4f 43 54 59 50 45 20 22 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 6e 61 6d 65 7c 7c 22 68 74 6d 6c 22 29 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 3f 27 20 50 55 42 4c 49 43 20 22 27 2b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 2b 27 22 27 3a 22 22 29 2b 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 70 75 62 6c 69 63 49 64 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 2e 73 79 73 74 65 6d 49 64 3f 22 20 53 59 53 54 45 4d 22 3a 22 22 29 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 Data Ascii: Catch((function(){return null===document.doctype?"":"<!DOCTYPE "+(document.doctype.name\|\|"html")+(document.doctype.publicId?' PUBLIC "'+document.doctype.publicId+'"':"")+(!document.doctype.publicId&&document.doctype.systemId?" SYSTEM":"")+(document.doctyp
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 61 3d 53 28 6f 29 3b 69 66 28 21 61 26 26 62 29 72 65 74 75 72 6e 20 67 3b 69 66 28 21 61 26 26 43 28 29 29 72 65 74 75 72 6e 20 45 28 29 2c 67 3b 61 26 26 28 6d 3d 69 2e 66 5f 2e 6e 6f 77 28 29 29 2c 61 26 26 62 26 26 49 28 29 3b 76 61 72 20 73 3d 6e 75 6c 6c 21 3d 3d 28 72 3d 67 2e 65 76 65 6e 74 73 2e 70 6f 70 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 77 28 70 29 3b 72 65 74 75 72 6e 20 6e 3f 73 5b 6f 5d 3d 74 3a 28 73 5b 6f 5d 3d 73 5b 6f 5d 7c 7c 5b 5d 2c 73 5b 6f 5d 2e 70 75 73 68 28 74 29 29 2c 67 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 73 29 2c 67 7d 29 2c 22 64 61 74 61 22 29 2c 67 2e 66 6c 75 73 68 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 63 2e 51 2e 67 65 74 28 22 75 73 65 72 2e 69 Data Ascii: a=S(o);if(!a&&b)return g;if(!a&&C())return E(),g;a&&(m=i.f_.now()),a&&b&&I();var s=null!==(r=g.events.pop())&&void 0!==r?r:w(p);return n?s[o]=t:(s[o]=s[o]\|\|[],s[o].push(t)),g.events.push(s),g}),"data"),g.flush=hj.tryCatch((function(){var n=c.Q.get("user.i
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 4f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 41 28 72 2e 6b 65 79 29 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 Data Ascii: Symbol.prototype?"symbol":typeof e},O(e)}function R(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,A(r.key),r)}}function A(e){var t=function(e,t){if("object"
2024-03-27 20:21:10 UTC	16384	IN	Data Raw: 28 30 2c 73 2e 44 4f 29 28 29 29 2c 63 72 65 61 74 65 64 3a 6e 75 6c 6c 21 3d 3d 28 72 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 72 65 61 74 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 6f 2e 66 5f 2e 6e 6f 77 28 29 2c 65 78 69 73 74 69 6e 67 3a 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 78 69 73 74 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 2e 73 65 74 28 65 29 7d 28 68 29 2c 68 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: (0,s.DO)()),created:null!==(r=null==t?void 0:t.created)&&void 0!==r?r:o.f_.now(),existing:null!==(i=null==t?void 0:t.existing)&&void 0!==i&&i};return function(e){u.set(e)}(h),h}},d=function(){var e,t=arguments.length>0&&void 0!==arguments[0]&&arguments[0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50358	18.223.63.188	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	665	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570869643&gtmcb=831980953 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:21:10 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 01c473f3-d87b-4554-8f1b-1932ac11eccd Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:21:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50361	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1970	OUT	GET /video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1356	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 3561621 Connection: close Content-Range: bytes 0-3561620/3561621 CF-Ray: 86b215d5c91205ca-IAD CF-Cache-Status: HIT Age: 788555 Cache-Control: public, max-age=2592000 ETag: "ae9cd90a083f0bed2557c06483392760" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 29 Feb 2024 01:02:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: r7Oo58qpCGEm7BwKl4ngWtsWoeo5cgl9cYy1Vz3zuJVGyBeoondUiSAFnfu464ANNftQhxVgfI8= x-amz-request-id: QC7RSP7B5QKMCVN6 x-amz-server-side-encryption: AES256 x-amz-version-id: 3auJpNHeEQfbyt82S4CIX3vrn0yzB6bP X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iln75KSxwzYUiwctFQSEy0xIA6oPVfAHgbIsgeuP1isfGF2bv4Tz%2Fi9Fo3Rsh05LGTvxMtP1kl2lTQpoG3AY2UKXWVctj%2F0zxqmXYdOcxmCaxT6nV3B%2FoVVU5%2FiGsaTqDS4n3zcu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1360	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 36 40 10 6d 64 61 74 00 00 03 15 06 05 ff ff ff 11 dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 31 30 37 20 61 38 62 36 38 65 62 66 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 33 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 32 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 31 3a 30 78 31 31 31 20 6d 65 3d 68 65 78 20 73 75 62 6d Data Ascii: ftypmp42mp42iso2avc1mp41free6@mdatEH, #x264 - core 164 r3107 a8b68ebf - H.264/MPEG-4 AVC codec - Copyleft 2003-2023 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x1:0x111 me=hex subm
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: fa 99 63 07 95 fb 60 08 5c 39 aa 4f c0 14 28 6a 86 d7 fb af b9 91 0c a9 7b 14 24 d9 d2 8b 01 fe f7 31 81 78 0c 4b 21 67 7c f6 f1 d7 e6 1c c2 6f b5 b8 f7 07 48 17 1f 59 25 15 4d ff 1d e8 10 88 23 0a d3 2d 12 3d 1a 72 03 3f a3 f6 7d 68 e8 55 11 14 5d 9e a6 ff 8f 5e 68 0e 6d 04 38 b1 57 96 fe ca 3f e7 ee 5b 72 1a e7 14 1d 44 82 31 43 9c 0d 21 86 1b 82 60 5a 6b 5a ab f6 b9 fe 18 a6 75 e1 51 17 c3 52 cb 10 9f d5 e3 b0 0a 61 0e e3 a5 0b 3e f9 95 1c 12 7e ab 34 d3 36 87 76 7a c2 7a 7e 73 f9 3c 12 b7 9c 26 f7 11 cc 14 89 79 9a f0 4e 46 90 3f 95 ec d7 ea bd 43 7f 9c d7 e0 a7 21 f0 67 5f 4f 62 2b 1c dc d1 dc dd 42 0e d5 21 da d2 74 e3 bd 46 57 aa d5 34 d5 38 cd 4f 54 ef dd 36 33 6a 27 09 d8 26 6e a1 84 aa 6b 89 5d 04 c3 80 f0 93 ec d1 ee 8e 27 46 03 b2 83 f1 f9 0e Data Ascii: c`\9O(j{$1xK!g\|oHY%M#-=r?}hU]^hm8W?[rD1C!`ZkZuQRa>~46vzz~s<&yNF?C!g_Ob+B!tFW48OT63j'&nk]'F
2024-03-27 20:21:10 UTC	478	IN	Data Raw: 14 ff 5f 05 43 b8 e7 d4 1b b3 87 d6 fd fd e6 04 ef 0a 96 db 25 03 dd 16 5b 24 89 0b 56 c7 f3 06 19 56 0d 62 9f 73 14 56 2d 04 ef 03 86 af f1 94 d5 12 22 a0 f7 49 d8 00 8e 34 11 6d 33 85 89 3f b7 58 31 21 25 31 be 3a c0 83 87 c8 39 66 54 7a 26 ee 0d c2 b2 f0 a6 eb ac d4 49 cb 21 f7 a3 08 c9 9c 4f d6 aa 02 ad 3f e2 3b ec 97 66 c1 a8 6a 0d bf cf 5e df 8b 7f 9c 92 07 bb 4c 45 f4 7d 24 1f e0 0f b2 6d c1 69 c5 cf 29 43 ce ed 3e 9b d4 90 1d 2d 8b cd 9d 64 9a 44 5e eb 4f 8d 2c 20 41 ed 60 2a ca 2b 61 6f da bc e3 04 eb 92 be 34 87 d4 2f 40 a7 d7 9c 3d d3 66 67 fd ed 22 b2 44 15 f6 f1 81 0a a1 b0 35 89 0b 4d 08 2c 06 3b 76 d1 db a3 20 72 69 b4 e6 af 2a bb 0d 52 70 6c cf fe ee 23 54 4e f9 2e d9 b1 3f 6c 17 fd fe 10 c1 1d 13 99 d9 24 0e 15 33 47 5e 65 35 7f 8b df c2 Data Ascii: _C%[$VVbsV-"I4m3?X1!%1:9fTz&I!O?;fj^LE}$mi)C>-dD^O, A`+ao4/@=fg"D5M,;v riRpl#TN.?l$3G^e5
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: bd df 0c 5b 9c b2 f3 c1 f4 3f bd 06 85 29 74 b4 ea cc bc ea eb 70 d3 6a 60 52 3f 6c a3 81 a2 eb 45 c8 20 5b 26 c6 9d 5f cc 20 84 2a a3 17 e8 c1 b1 20 cc e5 45 56 89 39 85 a1 a4 a6 b6 9e 0c c4 e0 a4 31 36 81 4f 7e 49 57 40 38 75 79 f8 7b 69 dd 58 69 ef 11 db b5 a4 d4 e3 5e 1f 1a 4a f5 63 14 e3 0f fd fe ce 9d ea 0d 83 3b 1c 67 fa 83 1e 2b ef ba 8c 96 b5 0c 37 f0 3d cf 62 0d f8 da 1d 35 f7 bc a1 29 e9 af 4b 6f 59 6f 5a 8b d9 09 c5 e0 e3 ee 38 78 f8 e7 e2 d0 33 38 4f f1 54 4a ea 04 a0 25 cf 8d e1 16 1c 32 b5 64 fa ed dd 92 a0 bb 29 ad 68 df 48 53 0f 5f 2e ee 90 16 b4 25 3c 15 8b 74 2b 18 50 6f 06 4a 57 75 20 a4 4e 17 d2 2e 63 68 01 57 93 7c dc e8 43 2e 61 46 a0 78 86 f0 21 52 b3 57 b3 4e a0 13 44 be 28 24 2c 3b 49 04 7f 4f 86 65 97 91 82 ec 29 27 b4 52 a9 f0 Data Ascii: [?)tpj`R?lE [&_ * EV916O~IW@8uy{iXi^Jc;g+7=b5)KoYoZ8x38OTJ%2d)hHS_.%<t+PoJWu N.chW\|C.aFx!RWND($,;IOe)'R
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: b1 d4 d8 50 a0 ec c4 1a 88 ab fa ad 88 a7 06 a2 28 f1 09 bd 39 fa e3 3e a0 90 c6 64 c6 88 08 92 09 8e be aa 4a 56 7e ad f7 59 0a 44 14 d2 ad d4 02 77 af 5b c6 9d f8 4d 5d e1 7e 5d cc 74 22 a2 51 f4 9a 15 c1 e3 88 b4 05 73 23 9e ea 43 83 3b fa 00 2c e5 03 04 50 aa dd dd e2 d1 08 10 2d 35 0b 7b 58 20 b9 e3 40 85 2c e4 2d 25 44 27 bd 99 68 fb 94 3e ed dd 29 37 e4 01 14 ad 9d a8 58 d1 17 e0 48 d7 a6 21 68 ff 43 f1 d2 64 3c e9 62 5b db 33 ce 03 4d 65 fd 33 55 d6 9b 8e 2e 5d 76 3c d2 a2 84 01 c6 39 79 86 be 80 98 5c 2a 04 c5 cd c3 f8 2d bb eb 02 18 5b 47 2c 08 45 2a 93 55 fc 8b a6 48 e3 89 60 1e 76 98 1f c3 40 cc e1 8b b8 60 fb 03 0b a0 0e 94 3a 28 e2 df 31 37 95 59 53 65 73 c4 25 79 8b 25 f3 58 86 62 03 ca 1d 1b 74 7d 41 cd ef 3d 18 ea 2a ac 17 f1 2a c8 57 c9 Data Ascii: P(9>dJV~YDw[M]~]t"Qs#C;,P-5{X @,-%D'h>)7XH!hCd<b[3Me3U.]v<9y\-[G,EUH`v@`:(17YSes%y%Xbt}A=**W
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: e0 03 ca 22 30 8b b1 16 da 4e 37 33 05 a3 3e ac 94 29 49 76 bd f8 79 aa 84 09 cc 24 f2 f7 f4 9d 62 44 06 3e b0 ff a0 d1 e9 9e d5 6f 8d f0 48 d1 8d dd 4a 97 a5 04 17 3e e4 9a 48 2e 6f 83 78 09 6b 0b bf 87 21 17 84 bc 14 e7 f6 9c 75 16 74 a7 d2 d0 21 b6 ec 40 56 4b 89 73 30 70 bf 0d ea 79 fc c5 7a ca c4 96 78 f2 23 04 60 db 28 15 2e a7 d8 1b 15 f2 f1 a1 f1 dd 36 ec 03 34 40 c0 79 3a 18 3c bb 46 b1 69 8b 4a 93 9a ae cb c6 15 51 02 1b 6e 76 1a 7d 5a f5 74 e4 d9 b7 e0 a8 8f f5 47 78 37 89 13 22 24 5d 5e 93 95 b4 52 39 ba 8b 40 cf 2a 7c b0 a4 5f a7 83 5c 9d ad 62 b9 45 a7 5e 96 dc a2 32 12 4a 74 49 7c 02 83 07 88 5e 6b 84 6c 30 c2 ef 27 b2 71 5f 37 c1 ba 32 30 f6 5a d9 9b 69 65 47 fa 6f 1e 73 fd 86 fc 6b d4 6f 95 85 a2 ae c1 4e 8e 63 40 e5 d7 3c d4 54 04 cd a5 Data Ascii: "0N73>)Ivy$bD>oHJ>H.oxk!ut!@VKs0pyzx#`(.64@y:<FiJQnv}ZtGx7"$]^R9@*\|_\bE^2JtI\|^kl0'q_720ZieGoskoNc@<T
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: a2 2d 1a 33 70 ef d3 cb 30 45 a0 68 a3 55 b5 91 f5 ee 04 7f 4f 4e 8c 40 64 4e 31 9b 12 35 69 73 90 f8 f6 2a 73 e1 c7 df 10 d6 88 af 98 5c 43 dc 0d cd 05 d1 54 00 16 8e 04 66 4e 29 ee f4 15 f2 5a 75 2e 1a 7f 28 77 2c 67 e4 13 b9 80 e6 df e8 06 58 c7 0e 50 ac a3 31 20 97 34 7d 3b b8 6b 99 15 74 3a ec 87 ae 12 0a 1c b6 94 ca fc bd 9f 49 45 75 68 24 fa dc 9d 19 80 3c 55 2b 0f 0b a1 68 55 4f db c0 70 d8 da d5 c7 cd 00 4e 6c ee f3 a4 4d f8 28 c0 27 29 73 9c 1d d7 36 4f 5b c2 d5 c4 d2 f1 cf 6d 74 3c e6 d6 b5 52 a6 17 49 76 ee d5 38 a0 55 88 25 74 27 74 a4 8e 73 d5 9e 4b cd cd 28 5b 66 ff f6 c1 83 69 6c f5 7e 0f bc 78 e9 db b5 18 d6 8c ee 23 e2 2c e6 e1 38 b5 fb e0 9c 69 5d 3c 94 16 88 06 9f f5 6f b3 78 47 a2 33 15 f9 a7 6f 30 fa 0f 31 e9 34 48 81 7b 65 fc 7b 76 Data Ascii: -3p0EhUON@dN15is*s\CTfN)Zu.(w,gXP1 4};kt:IEuh$<U+hUOpNlM(')s6O[mt<RIv8U%t'tsK([fil~x#,8i]<oxG3o014H{e{v
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 26 c4 ae 50 dc 71 63 d4 44 1a 9f df c0 cb 83 d2 75 54 3a 05 c3 f7 7e 94 bf 5a 0c 34 a0 1a cf c8 4a 0a fb 0b 84 ac d4 65 9d 6c 22 8b fa 08 85 95 0b 09 b6 d9 7e 49 26 5a b3 31 60 f5 ab 9d 81 b1 e2 1f db dd d9 cb 6a e5 39 4c 97 b0 ec 45 6b 99 a8 d1 95 12 e7 6c 77 8c 37 bd 89 04 6a 72 a5 53 8c a8 60 b6 9a 9c 90 98 6c f3 f8 b5 9a d1 60 20 28 3a e8 cb 98 a9 9d b9 93 3e c2 70 b7 f0 4e 38 5c 2b e9 16 67 93 8c 49 2e 16 ae 23 bb e1 62 07 66 6c 94 65 b4 74 cb d2 02 bd 63 ed 65 fe 99 48 c9 e3 73 e6 fc d5 14 4f 91 33 9a 0b 2e 75 70 79 7e 54 ec f6 14 cb 02 b4 b3 ca 8b 22 a0 d2 21 ec 1d 27 95 a6 f7 05 65 a0 c4 2c 5b 44 59 7a 74 46 9b fe 45 2b 20 08 c7 81 c6 8d de 20 5b a7 71 20 4a 27 54 6f 54 2c e0 ad 8d c7 31 8f a7 aa a0 d4 f5 2e 1b 53 4a c9 c2 07 bc 49 ae f1 2b 02 ad Data Ascii: &PqcDuT:~Z4Jel"~I&Z1`j9LEklw7jrS`l` (:>pN8\+gI.#bfletceHsO3.upy~T"!'e,[DYztFE+ [q J'ToT,1.SJI+
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 94 8f 6f 90 25 48 fa ba 08 d8 84 7e c8 1d 94 af b0 e3 ae 4b 6e 5b 12 97 ab 14 6e 95 50 02 ee a7 2e 4a 2a c8 a5 9a b3 61 ed f1 bf b9 33 7f f4 57 19 99 e4 36 15 80 f8 b1 71 3b 69 70 db 80 52 4e 23 57 b5 e9 a1 94 e7 0c 97 58 2d 72 02 32 02 20 b8 e6 04 17 6b cc 18 9c c2 95 1f 98 96 bd fa 3d 19 8e d9 67 38 70 41 ee 8a 33 55 75 5f 12 b5 05 a3 0e 49 9c 0f 4d bd da b9 8d c1 fc 24 63 a8 ef a2 f4 d0 1d 01 5c 59 b9 31 b7 f4 84 f6 24 e2 0a 0a af 44 06 73 9c 94 c0 6f 34 d1 73 e9 02 17 d6 93 ed 23 f8 e4 a3 be 50 c5 b5 ff ea eb 9e 27 61 e5 54 50 84 8f d7 45 1a 0f 82 98 b0 75 b2 1d fe d2 19 77 43 ce da 0f 4c 2b 13 9b dd 98 1a 12 c5 92 52 b8 32 7d cd 55 bd 33 1b 45 ef f1 a9 1d 4c fc 67 b9 19 78 64 9d bd fa 32 06 b4 8f 8c b0 c3 03 40 7c a4 4d 89 08 78 ee da 28 81 25 ac a1 Data Ascii: o%H~Kn[nP.J*a3W6q;ipRN#WX-r2 k=g8pA3Uu_IM$c\Y1$Dso4s#P'aTPEuwCL+R2}U3ELgxd2@\|Mx(%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50360	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1972	OUT	GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1364	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 3996868 Connection: close Content-Range: bytes 0-3996867/3996868 CF-Ray: 86b215d5ce729c79-IAD CF-Cache-Status: HIT Age: 777115 Cache-Control: public, max-age=2592000 ETag: "24d94274c1c4cb653ed9d888952a6386" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Wed, 28 Feb 2024 06:47:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 3uCEdueo4RZXePkHS8/rltxEXOc/N4j+1n+ltnRZ/tO25HtmudoGXllkaUY22Nmc7KN6iNkU/wc= x-amz-request-id: E68PR1WNZ7SP2V9V x-amz-server-side-encryption: AES256 x-amz-version-id: oWGnmYjveps65euzJSMUQwkr3LnrBv3h X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Yv4bfC4%2F1iOvMbRqjKvzCHk2ZGV%2F3rcms%2FOI3hxf5sptrKUeKt1t5k80MXSjvRb5HdLV3n7YqGxRYWmF3qG%2F6Oq4avk%2BzhG0541%2BQTocQi0j%2F5w%2FI7r96mYlZc14Au5zZGdHMC7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1352	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 6d 70 34 32 6d 70 34 31 00 00 2f 02 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 01 93 cf e2 01 93 cf 00 01 5f 90 00 1f 95 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 19 26 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 e2 01 93 cf e2 01 93 cf 00 00 00 01 00 00 00 00 00 1f 87 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 82 00 00 04 38 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 Data Ascii: ftypmp42mp42mp41/moovlmvhd_@&trak\tkhd@8$edtsels
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 06 f0 00 00 02 9d 00 00 04 6e 00 00 02 c2 00 00 02 9f 00 00 03 33 00 00 05 49 00 00 03 60 00 00 02 e4 00 00 01 de 00 00 03 69 00 00 01 7a 00 00 00 bc 00 00 00 c8 00 00 17 3d 00 00 01 a8 00 00 02 90 00 00 01 eb 00 00 03 d7 00 00 01 7d 00 00 01 81 00 00 01 7a 00 01 0a cf 00 00 07 34 00 00 01 19 00 00 01 c5 00 00 02 86 00 00 06 bc 00 00 04 85 00 00 04 80 00 00 03 18 00 00 04 91 00 00 04 39 00 00 02 8b 00 00 01 f3 00 00 0a d9 00 00 01 fa 00 00 02 34 00 00 02 4d 00 00 28 46 00 00 09 62 00 00 0e 05 00 00 0f ba 00 00 34 67 00 00 14 1f 00 00 11 7b 00 00 0b e1 00 01 15 75 00 00 08 6b 00 00 03 4c 00 00 03 f5 00 00 03 b0 00 00 0a 7e 00 00 04 55 00 00 04 f5 00 00 03 1d 00 00 07 76 00 00 03 ac 00 00 05 6a 00 00 03 a9 00 00 07 48 00 00 01 ff 00 00 03 04 00 00 01 Data Ascii: n3I`iz=}z494M(Fb4g{ukL~UvjH
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 46 0a 00 00 46 4d 00 00 40 1b 00 00 37 e1 00 00 32 97 00 00 19 92 00 00 1a 90 00 00 23 16 00 00 25 47 00 00 28 98 00 00 2c 9d 00 00 28 3c 00 00 33 99 00 00 18 3d 00 00 22 fc 00 00 10 82 00 00 28 74 00 00 0e 15 00 00 0e 44 00 00 0a f5 00 00 76 b6 00 00 0d 9e 00 00 04 f5 00 00 04 d6 00 00 03 fd 00 00 08 78 00 00 01 ae 00 00 01 b2 00 00 01 83 00 00 05 10 00 00 01 99 00 00 01 97 00 00 01 58 00 00 03 ce 00 00 01 09 00 00 01 2e 00 00 01 25 00 00 02 b0 00 00 00 94 00 00 00 ad 00 00 00 79 00 00 02 0a 00 00 00 8f 00 00 00 a7 00 00 00 88 00 00 78 74 00 00 27 ad 00 00 01 24 00 00 01 6f 00 00 28 5c 00 00 13 12 00 00 3c ed 00 00 1b 30 00 00 3b 08 00 00 3c ff 00 00 3e 26 00 00 3b 45 00 00 2b 60 00 00 27 ac 00 00 1e ba 00 00 11 7d 00 00 0c 10 00 00 14 18 00 00 07 db Data Ascii: FFM@72#%G(,(<3="(tDvxX.%yxt'$o(\<0;<>&;E+`'}
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0b b8 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0b b8 00 00 00 02 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 07 Data Ascii:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 02 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0b b8 00 00 00 02 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 02 00 00 03 e8 00 00 00 01 00 00 0b b8 Data Ascii:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6e 66 00 00 00 10 73 6d 68 64 00 00 00 00 00 00 00 00 00 00 00 33 68 64 6c 72 00 00 00 00 00 00 00 00 61 6c 69 73 00 00 00 00 00 00 00 00 00 00 00 00 41 6c 69 61 73 20 44 61 74 61 20 48 61 6e 64 6c 65 72 00 00 00 00 24 64 69 6e 66 00 00 00 1c 64 72 65 66 00 00 00 00 00 00 00 01 00 00 00 0c 75 72 6c 20 00 00 00 01 00 00 13 cb 73 74 62 6c 00 00 00 5b 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 4b 6d 70 34 61 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 02 00 10 00 00 00 00 bb 80 00 00 00 00 00 27 65 73 64 73 00 00 00 00 03 19 00 00 10 04 11 40 15 00 06 00 00 04 da 30 00 04 d6 d2 05 02 11 90 06 01 02 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 04 36 00 00 04 00 00 00 01 6c 73 74 73 63 00 00 00 00 00 00 00 1d 00 00 00 01 00 00 00 13 00 00 00 Data Ascii: nfsmhd3hdlralisAlias Data Handler$dinfdrefurl stbl[stsdKmp4a'esds@0stts6lstsc
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f Data Ascii: ONNNOOMONONNNONONNOMPMONONNNOOMONONNNONONNOMPMONONNNOOMONONNNONO
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 Data Ascii: MONONNNONONNOMPMONONNNOOMONONNNONONNOMPMONONNNOOMONONNNONONNOMPM
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 Data Ascii: NONONNOMPMONONNNOOMONONNNONONNOMPMONONNNOOMONONNNONONNOMPMONONNN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50363	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1756	OUT	GET /blob/1232028/Features_Insights.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1300	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 3262 Connection: close CF-Ray: 86b215d5de2b6ff8-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 531520 Cache-Control: public, max-age=2592000 ETag: "240d7a40ef80824e9f0350cec7ed8d73" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:34 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=3516 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: dsdDJvTpjXxm+oV2lc4EaBYvIF1bjHOtcYaGSzltvt9xKtYC8qQWLuhJDsp/S5SC+btX7pBPp1g= x-amz-request-id: 8H3DESQ6R6TQ8CKS x-amz-server-side-encryption: AES256 x-amz-version-id: xp9.0vP7ny8h9xerRR_nYMldtxgTCn_B X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GLMEyu6aic7jl37qhMCiVaWP2Cn%2BvCcsUTajzdZBw5JbmOvc70F7%2BHj37ReyNDlN3Hyrvpt%2FjKWPa2UOnAT%2FjpFB7%2FZnvWIDLv3egt5bN%2BNmODrBixjIrOT%2FQ7tcplJ5mM5jICnO"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:10 UTC	1346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 de 00 00 01 46 08 03 00 00 00 f3 75 0e df 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 39 50 4c 54 45 47 70 4c 00 00 00 00 20 20 11 11 11 0a 0a 14 9f 99 aa e3 e3 e3 f4 f4 f4 8a 3c ff eb ec ed ff ff ff c6 c8 c9 a7 aa ab b0 7a ff 8d 8f 91 71 75 78 8b 3d ff 54 57 5a 0e 13 17 19 00 72 f8 00 00 00 0a 74 52 4e 53 00 04 08 0f 1a 2d 6c a0 af fc a5 e1 e3 ba 00 00 0c 0d 49 44 41 54 78 da ec 9c 8d 8e e2 3a 0c 85 eb c2 cc c8 e3 c8 16 fb fe 0f 7b 6f 5b 07 27 84 bf 6c 05 a2 dd 73 34 a2 4d 9c a4 c0 27 3b 6e 48 67 80 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 fa 3c d1 93 16 c2 57 75 4b 74 3e 12 2d 27 e4 2f b4 58 69 b2 2c c7 b0 f8 eb 6c 8b e2 40 2e Data Ascii: PNGIHDRFugAMAasRGB9PLTEGpL <zqux=TWZrtRNS-lIDATx:{o['ls4M';nHg <WuKt>-'/Xi,l@.
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 23 38 43 fb 7d 84 2c 24 6a a7 49 96 a4 35 72 72 a3 f0 ad de 8b 1d 7b d3 df bf ac f1 78 ee 65 fd 53 2a d5 56 39 15 b6 93 dc ef 7d c2 33 d9 9f f6 93 42 c6 13 e2 c2 6a 17 36 7b d0 fb 04 0f 7e 47 6a 45 4f a6 56 1c ce 19 e2 96 6e f0 7b d4 1b cf 75 be 77 cd b9 9b 6e 20 4c 7f ee e2 e3 ff 8b e0 fb c6 dd 1a 43 e7 7d 6f d0 ad 24 6e 3e f3 d6 a4 e7 a6 fc a8 37 1e ed fc 8c cc 39 dc 4f 25 d2 a8 70 5f f1 12 57 9e ae cd bc 3b e7 cc 12 ae 8e f9 f7 55 a9 55 c7 7d 6f f0 35 e7 11 40 2b 7e 5c 7b ab 45 df a0 5f f1 c6 7f cd 78 c7 bf 0c a5 bb 78 83 a7 b6 d1 ba c5 19 f8 4e d1 74 29 86 04 ee fb da 9d 92 d4 bb ac a1 4e b7 4e a6 ca bc 39 05 bd 92 27 5f 43 a9 70 df 97 ee 94 ec 5f b5 92 aa 94 da e0 ac 17 78 2d 1b 03 7e 08 ee fb d2 fb de b5 cf 18 9d 4a 66 ec ac 6b a3 b4 61 3c a4 48 9e Data Ascii: #8C},$jI5rr{xeS*V9}3Bj6{~GjEOVn{uwn LC}o$n>79O%p_W;UU}o5@+~\{E_xxNt)NN9'_Cp_x-~Jfka<H
2024-03-27 20:21:10 UTC	547	IN	Data Raw: a2 d3 38 3d 87 9f bf 0b 13 7f 57 9c 8b 7d 86 57 cd de 46 13 4b 46 99 ec 15 e7 6f 67 f9 58 c4 b9 38 92 de 84 c6 54 df a4 5f 1c 3f 5d dc 35 cb bf 05 ef f3 e5 97 ee a2 fc 8e 5f 91 c5 d9 8c b7 52 56 d8 2a 43 85 1f 90 87 5f 34 b9 f8 30 b3 49 3b 3e f4 4f 43 f4 aa 9f e3 bf 24 bb f6 50 a9 0f 95 7f 2c f1 61 0a a7 e3 aa 5b 23 6b 5c 33 64 e8 58 bc fc 1b f2 9a e5 ff 88 8b b0 36 76 0a 71 b1 b3 05 d4 69 53 99 81 91 c8 14 88 60 a3 51 32 d3 a8 4c 9f dc 20 45 d3 4f d6 5e 91 71 f9 f2 6f c2 7b 5f 7e f2 af b3 05 2f ff ab f0 12 78 09 bc 04 5e 78 e1 85 17 5e 78 09 bc 04 5e 02 2f 81 17 5e 78 e1 85 17 5e 02 2f 81 97 c0 4b e0 85 17 5e 78 e1 85 97 c0 4b e0 25 f0 16 99 d3 e5 f2 fd 92 5c 2e 1e de 9d c5 cb f6 15 c2 1e de 23 ea ca 17 de 1d 45 ba af f2 85 77 3f f1 df 2f cf 09 de e3 55 Data Ascii: 8=W}WFKFogX8T_?]5_RV*C_40I;>OC$P,a[#k\3dX6vqiS`Q2L EO^qo{_~/x^x^x^/^x^/K^xK%\.#Ew?/U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50368	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	571	OUT	GET /web/f57bad7efd13d8bb.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript Content-Length: 51311 Connection: close CF-Ray: 86b215d66c03057f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 151304 Cache-Control: public, max-age=31556926 ETag: "b325a99d878484a9568010a960225980" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Tue, 26 Mar 2024 02:15:26 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: rqP1i6V95FfzsLkprEYRY/KtA+H72A9rOwvESpaGBAXVglhn2ACYWY+tZBx1zol8xgHpmiXD5uU= x-amz-replication-status: PENDING x-amz-request-id: X61W9HJT8ZJ0C140 x-amz-server-side-encryption: AES256 x-amz-version-id: rwQFcCtR7PVP.7u5hkku4gqfJcPAN2v6 X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	773	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 5a 42 49 4f 49 35 72 76 4a 2e 59 53 7a 54 39 31 49 30 42 78 6c 38 4e 39 30 77 53 4c 4c 31 36 49 68 6e 43 4b 35 61 45 56 4b 4f 34 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 67 61 57 5a 47 51 64 52 64 64 4a 4a 54 5f 58 53 69 4d 6a 4f 66 47 35 5f 6a 5f 5a 61 4c 36 37 4d 76 50 31 77 79 30 32 4c 55 77 4a 72 74 79 66 73 38 51 4e 30 39 4b 70 79 47 48 4f 35 35 36 70 4c 7a 34 66 58 48 39 77 4d 78 31 78 56 64 78 34 35 6d 41 52 79 46 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=ZBIOI5rvJ.YSzT91I0Bxl8N90wSLL16IhnCK5aEVKO4-1711570870-1.0.1.1-gaWZGQdRddJJT_XSiMjOfG5_j_ZaL67MvP1wy02LUwJrtyfs8QN09KpyGHO556pLz4fXH9wMx1xVdx45mARyFw; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 45 58 51 36 6e 41 5c 22 3a 5c 22 45 78 70 6f 72 74 20 64 65 73 69 67 6e 73 20 61 73 20 50 44 46 2c 20 4a 50 47 2c 20 50 4e 47 5c 22 2c 5c 22 68 75 43 69 54 77 5c 22 3a 5c 22 43 72 65 61 74 65 20 74 65 6d 70 6c 61 74 65 5c 22 2c 5c 22 44 4c 75 67 78 41 5c 22 3a 5c 22 4d 6f 6e 74 68 6c 79 20 70 72 69 63 69 6e 67 20 66 6f 72 20 74 68 65 20 66 69 72 73 74 20 7b 30 7d 20 70 65 6f 70 6c 65 5c 22 2c 5c 22 4a 54 36 53 41 41 5c 22 3a 5c 22 4c 69 6e 6b 20 53 68 61 72 69 6e 67 5c 22 2c 5c 22 4a 46 70 4a 31 41 5c 22 3a 5c 22 43 61 6c 63 75 6c 61 74 65 20 66 6f 72 20 79 6f 75 72 20 74 65 61 6d 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c Data Ascii: (function() { const messages = JSON.parse("{\"EXQ6nA\":\"Export designs as PDF, JPG, PNG\",\"huCiTw\":\"Create template\",\"DLugxA\":\"Monthly pricing for the first {0} people\",\"JT6SAA\":\"Link Sharing\",\"JFpJ1A\":\"Calculate for your team\",\"nGBlYg\
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 5c 22 63 47 74 68 4b 67 5c 22 3a 5c 22 44 65 6e 76 65 72 20 50 75 62 6c 69 63 20 53 63 68 6f 6f 6c 73 5c 22 2c 5c 22 51 70 2f 66 37 67 5c 22 3a 5c 22 56 65 72 69 66 79 20 75 73 69 6e 67 20 7b 30 7d 5c 22 2c 5c 22 37 37 4e 52 6c 41 5c 22 3a 5c 22 49 e2 80 99 76 65 20 72 65 61 64 20 61 6e 64 20 61 67 72 65 65 64 20 74 6f 20 43 61 6e 76 61 e2 80 99 73 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 54 65 72 6d 73 20 6f 66 20 55 73 65 3c 2f 61 3e 2c 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 31 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e Data Ascii: \"cGthKg\":\"Denver Public Schools\",\"Qp/f7g\":\"Verify using {0}\",\"77NRlA\":\"Ive read and agreed to Canvas <a href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Terms of Use</a>, <a href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopen
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 76 65 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6c 6c 61 62 6f 72 61 74 69 6f 6e 2c 20 61 6e 64 20 61 70 70 72 6f 76 61 6c 73 20 66 65 61 74 75 72 65 73 2e 5c 22 2c 5c 22 57 6a 49 69 77 51 5c 22 3a 5c 22 54 72 75 73 74 65 64 20 62 79 5c 22 2c 5c 22 78 68 69 6a 52 67 5c 22 3a 5c 22 4a 6f 69 6e 20 74 65 61 6d 73 20 74 6f 20 77 6f 72 6b 20 62 65 74 74 65 72 20 74 6f 67 65 74 68 65 72 2e 20 41 63 63 65 73 73 20 79 6f 75 72 20 74 65 61 6d e2 80 99 73 20 73 68 61 72 65 64 20 64 65 73 69 67 6e 73 20 66 72 6f 6d 20 6f 6e 65 20 70 6c 61 63 65 2c 20 61 6e 64 20 67 65 74 20 66 65 65 64 62 61 63 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 64 65 73 69 67 6e 73 2e 5c 22 2c 5c 22 6b 41 53 5a 41 51 5c 22 3a 5c 22 43 61 6e 76 61 20 66 Data Ascii: ve the content management, collaboration, and approvals features.\",\"WjIiwQ\":\"Trusted by\",\"xhijRg\":\"Join teams to work better together. Access your teams shared designs from one place, and get feedback directly on designs.\",\"kASZAQ\":\"Canva f
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 20 61 63 63 65 73 73 20 7b 30 7d 3f 5c 22 2c 5c 22 62 31 30 54 4e 41 5c 22 3a 5c 22 55 70 67 72 61 64 65 20 74 6f 20 7b 30 7d 5c 22 2c 5c 22 5a 46 30 32 4c 51 5c 22 3a 5c 22 52 65 6d 6f 76 65 20 66 72 6f 6d 20 66 6f 6c 64 65 72 5c 22 2c 5c 22 51 36 75 58 6b 77 5c 22 3a 5c 22 46 69 72 73 74 20 7b 30 7d 20 70 65 6f 70 6c 65 5c 22 2c 5c 22 79 34 74 4b 6f 77 5c 22 3a 5c 22 46 6f 72 20 61 6e 79 6f 6e 65 20 77 61 6e 74 69 6e 67 20 74 6f 20 64 65 73 69 67 6e 20 61 6e 79 74 68 69 6e 67 2c 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 6f 72 20 77 69 74 68 20 6f 74 68 65 72 73 2e 5c 22 2c 5c 22 48 66 50 34 76 67 5c 22 3a 5c 22 57 68 61 74 e2 80 99 73 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 7b 30 7d 3f 5c 22 2c 5c 22 38 6c 53 49 70 77 5c 22 3a 5c 22 4b 69 6e 67 20 26 20 57 Data Ascii: access {0}?\",\"b10TNA\":\"Upgrade to {0}\",\"ZF02LQ\":\"Remove from folder\",\"Q6uXkw\":\"First {0} people\",\"y4tKow\":\"For anyone wanting to design anything, on your own or with others.\",\"HfP4vg\":\"Whats included in {0}?\",\"8lSIpw\":\"King & W
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 66 72 65 65 20 7b 30 7d 20 74 72 69 61 6c 5c 22 2c 5c 22 39 59 76 32 6f 51 5c 22 3a 5c 22 50 72 69 63 69 6e 67 20 42 72 65 61 6b 64 6f 77 6e 5c 22 2c 5c 22 67 7a 66 50 45 41 5c 22 3a 5c 22 50 65 72 73 6f 6e 20 34 5c 22 2c 5c 22 4f 41 45 62 69 67 5c 22 3a 5c 22 47 65 74 20 73 74 61 72 74 65 64 5c 22 2c 5c 22 57 33 72 6e 44 67 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 4d 69 63 72 6f 73 6f 66 74 5c 22 2c 5c 22 79 45 30 44 4d 77 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 51 51 20 74 6f 20 6c 6f 67 20 69 6e 2e 5c 22 2c 5c 22 74 2f 58 43 34 51 5c 22 3a 5c 22 46 6f 72 20 61 6e 79 6f 6e 65 20 74 6f 20 64 65 73 69 67 6e 20 61 6e 79 74 68 69 6e 67 2c 20 6f 6e 20 74 68 65 69 72 20 6f 77 6e 20 6f 72 20 77 69 74 68 20 66 61 Data Ascii: free {0} trial\",\"9Yv2oQ\":\"Pricing Breakdown\",\"gzfPEA\":\"Person 4\",\"OAEbig\":\"Get started\",\"W3rnDg\":\"Continue with Microsoft\",\"yE0DMw\":\"Last time you used QQ to log in.\",\"t/XC4Q\":\"For anyone to design anything, on their own or with fa
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 61 74 65 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 20 64 65 73 69 67 6e 73 20 77 69 74 68 20 65 61 73 65 20 61 6e 64 20 73 63 61 6c 65 20 74 68 65 69 72 20 70 72 6f 64 75 63 74 69 76 69 74 79 2e 5c 22 2c 5c 22 61 57 67 6b 4e 77 5c 22 3a 5c 22 54 68 65 20 56 69 73 75 61 6c 20 53 75 69 74 65 5c 22 2c 5c 22 2f 31 56 66 37 51 5c 22 3a 5c 22 54 65 61 6d 73 5c 22 2c 5c 22 34 54 76 55 64 41 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 43 6c 65 76 65 72 5c 22 2c 5c 22 44 61 57 62 4a 67 5c 22 3a 5c 22 43 61 6e 76 61 20 61 63 63 6f 75 6e 74 73 20 75 73 69 6e 67 20 74 68 65 20 7b 30 7d 20 64 6f 6d 61 69 6e 20 77 69 6c 6c 20 6e 6f 77 20 62 65 20 6d 61 6e 61 67 65 64 20 62 79 20 79 6f 75 72 20 74 65 61 6d 20 61 64 6d 69 6e 73 2e 5c 22 2c 5c 22 52 56 33 74 45 Data Ascii: ate professional designs with ease and scale their productivity.\",\"aWgkNw\":\"The Visual Suite\",\"/1Vf7Q\":\"Teams\",\"4TvUdA\":\"Continue with Clever\",\"DaWbJg\":\"Canva accounts using the {0} domain will now be managed by your team admins.\",\"RV3tE
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 3a 5c 22 4d 61 67 69 63 20 44 65 73 69 67 6e 20 2d 20 46 72 6f 6d 20 69 64 65 61 20 74 6f 20 64 65 73 69 67 6e 2c 20 69 6e 73 74 61 6e 74 6c 79 5c 22 2c 5c 22 52 6a 2f 50 31 41 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 7b 30 7d 20 74 6f 20 6c 6f 67 20 69 6e 20 74 6f 20 7b 31 7d 2e 5c 22 2c 5c 22 73 58 7a 49 42 41 5c 22 3a 5c 22 2f 7b 30 2c 20 73 65 6c 65 63 74 2c 20 6d 6f 6e 74 68 6c 79 20 7b 6d 6f 6e 74 68 7d 20 79 65 61 72 6c 79 20 7b 79 65 61 72 7d 20 6f 74 68 65 72 20 7b 6d 6f 6e 74 68 7d 7d 20 74 6f 74 61 6c 20 66 6f 72 20 7b 31 2c 20 70 6c 75 72 61 6c 2c 20 6f 6e 65 20 7b 23 20 70 65 72 73 6f 6e 7d 20 6f 74 68 65 72 20 7b 23 20 70 65 6f 70 6c 65 7d 7d 5c 22 2c 5c 22 4c 7a 63 6a 4b 67 5c 22 3a 5c 22 43 6f 6c 6c 61 62 6f Data Ascii: :\"Magic Design - From idea to design, instantly\",\"Rj/P1A\":\"Last time you used {0} to log in to {1}.\",\"sXzIBA\":\"/{0, select, monthly {month} yearly {year} other {month}} total for {1, plural, one {# person} other {# people}}\",\"LzcjKg\":\"Collabo
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6f 34 4d 77 5c 22 3a 5c 22 4d 61 67 69 63 20 45 72 61 73 65 72 20 2d 20 52 65 6d 6f 76 65 20 75 6e 77 61 6e 74 65 64 20 64 65 74 61 69 6c 73 20 69 6e 20 69 6d 61 67 65 73 5c 22 2c 5c 22 38 6b 52 52 5a 67 5c 22 3a 5c 22 41 64 64 20 74 61 67 73 5c 22 2c 5c 22 61 5a 44 50 5a 41 5c 22 3a 5c 22 55 73 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 61 6e 6f 74 68 65 72 20 73 65 72 76 69 63 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 43 61 6e 76 61 20 28 69 74 e2 80 99 73 20 66 72 65 65 29 21 5c 22 2c 5c 22 69 2b 73 6a 67 41 5c 22 3a 5c 22 45 6d 70 6f 77 65 72 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 77 69 74 68 20 61 6e 20 61 6c 6c 2d 69 6e 2d 6f 6e 65 20 77 6f 72 6b 70 6c 61 63 65 20 73 6f 6c 75 74 69 6f 6e 2e 5c 22 2c 5c 22 6c 41 Data Ascii: o4Mw\":\"Magic Eraser - Remove unwanted details in images\",\"8kRRZg\":\"Add tags\",\"aZDPZA\":\"Use your email or another service to continue with Canva (its free)!\",\"i+sjgA\":\"Empower your organization with an all-in-one workplace solution.\",\"lA
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6e 74 2c 20 6d 6f 72 65 20 70 6f 77 65 72 66 75 6c 20 64 65 73 69 67 6e 20 74 6f 6f 6c 73 2c 20 61 6e 64 20 41 49 20 66 65 61 74 75 72 65 73 2e 5c 22 2c 5c 22 46 31 35 5a 76 77 5c 22 3a 5c 22 49 66 20 79 6f 75 e2 80 99 72 65 20 61 20 73 74 75 64 65 6e 74 20 6f 72 20 65 64 75 63 61 74 6f 72 2c 20 73 69 67 6e 20 75 70 20 77 69 74 68 20 79 6f 75 72 20 5a 50 45 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 67 65 74 20 61 20 70 72 65 6d 69 75 6d 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 61 6e 76 61 20 66 6f 72 20 66 72 65 65 2e 5c 22 2c 5c 22 52 65 6a 53 50 51 5c 22 3a 5c 22 53 69 67 6e 20 75 70 20 77 69 74 68 20 57 65 43 68 61 74 5c 22 2c 5c 22 50 42 6f 6e 30 51 5c 22 3a 5c 22 50 65 72 73 6f 6e 20 33 5c 22 2c 5c 22 48 64 54 37 78 77 5c 22 3a 5c 22 43 6f Data Ascii: nt, more powerful design tools, and AI features.\",\"F15Zvw\":\"If youre a student or educator, sign up with your ZPE email address to get a premium version of Canva for free.\",\"RejSPQ\":\"Sign up with WeChat\",\"PBon0Q\":\"Person 3\",\"HdT7xw\":\"Co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50362	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1755	OUT	GET /blob/1232029/Features_Imports.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1304	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 19376 Connection: close CF-Ray: 86b215d61cd50570-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 419569 Cache-Control: public, max-age=2592000 ETag: "8042e51c4ab1cd7823f05d1b2077e72f" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=21728 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: IhgNI3L3sudN2+Kz329VpOY3947hFB2hhbDdCBVGsgI/fJetRAmLMCpD4slekRHfihbwG5svy4A= x-amz-request-id: 5YZ719GQ44CGY7V8 x-amz-server-side-encryption: AES256 x-amz-version-id: Wwm2uU2U9rPBPKsy3GVXkR5rnH9PWV11 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=byBHKfkj%2FKazW%2B8mtv5YcotFpXjmvYGD43rUnXW%2BDCBtJ%2FiN4q2m7QYqpCHBDM%2B7aUqV%2B0AlPa1%2B2Mh6esr1ReXbhW9RLRrERoLh94%2BkXrOGNTwznFWI7jVURaDkkOL7Lsmp2L4B"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:10 UTC	1342	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 56 50 4c 54 45 47 70 4c 00 00 40 11 17 17 99 99 9f d3 d8 d8 9a 92 a5 db dd dd 97 97 a1 d9 dd e0 ff ff ff db df e3 cd cd c0 c4 c3 cd b4 b1 b1 ac 91 c6 9c 97 aa 86 77 88 ed e3 f2 fe fe fe fa fa fa f6 f6 f7 fe fb 03 ec e6 2d d8 c5 de ce d0 be cf d1 ad dc d1 53 c8 ca 97 d5 b4 e0 df ab ec c4 c4 a1 c9 b8 ce c0 bc bd c0 bb 8f d8 9d e7 be bc 84 b9 b7 a1 c1 aa c8 cc 9e de b7 ad bb c8 b8 4c b8 b5 7d b2 aa af af a8 ba ad a6 b8 cf 8c e4 bc 9a ca ad a9 9a ab a4 b6 a8 a1 b3 b0 9b b9 a8 a1 ab a9 a9 7f a6 9f b1 a4 9d ae a7 9b a7 c8 7e e2 bd 9d 56 bd 82 d6 9d 9a ad a0 99 aa a4 95 Data Ascii: PNGIHDR"trgAMAasRGBVPLTEGpL@w-SL}~V
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 65 88 72 56 f5 33 4f b9 a5 8d 48 79 58 52 2a 1a 62 7c 66 d4 55 86 b2 96 62 6a df 4b fa 48 b3 16 5d 35 7d 07 1c 51 39 d9 8d ea 9e 76 24 85 6d 51 61 c5 74 b8 ca 9c 31 55 9a 96 06 bb fc 11 99 68 08 7d 95 f1 7a 70 cc 3d 75 d8 6a 87 b6 a1 a7 30 25 3a fc 6d 17 31 37 d4 e4 d4 6b ff 97 30 68 0b b5 bc 02 63 90 48 40 8e 0f a3 58 d8 8c 14 8c ce 92 67 a8 65 bd 2a 31 65 0a 09 21 cc 75 6a eb fd c4 fc 01 b1 e4 20 fc 2e 55 f9 06 59 f5 b7 a3 a7 68 77 74 28 20 97 3d f2 09 1a e2 9b 58 cb cd 21 41 4d 1b 05 58 68 73 25 d5 e0 42 49 9e 0a 1e 6b 37 23 65 9b 63 1e ed 9d a9 f5 d3 4f 0d b3 03 2f e1 04 1c 04 94 8a d4 30 22 54 2d 2d 05 25 84 84 1e bb ca 52 d5 d1 c7 6e 15 05 19 61 a3 c1 63 98 07 95 67 a8 08 93 87 44 93 00 d0 77 6a da f9 97 81 b3 9a b7 16 30 8d ac d6 1f 2d fa 8a 7d c7 Data Ascii: erV3OHyXRb\|fUbjKH]5}Q9v$mQat1Uh}zp=uj0%:m17k0hcH@Xge1e!uj .UYhwt( =X!AMXhs%BIk7#ecO/0"T--%RnacgDwj0-}
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 35 2c f5 f4 02 da a7 7a 26 f9 5f 4d f5 38 06 4b a1 a9 30 46 39 b2 aa 2d 50 d0 7e 05 99 0a 30 a1 ea 6d a0 e3 0e 18 e3 7c f6 4b 34 3c 22 a5 5b b2 38 9b 9c e2 38 06 54 30 91 95 5a aa d2 4c 2c f5 98 26 e7 34 bf 1a d5 09 41 91 a5 08 d4 02 50 ad c1 57 d5 72 df c4 54 e2 2a 3e d1 92 ed 25 47 ad 22 b9 51 a9 92 d7 27 a5 39 44 db 2a cd 80 16 53 62 c3 a4 06 46 06 32 84 aa 76 72 58 1e 7e bc 80 3e 73 57 e2 5c 2b db 5f c3 ea f9 f8 65 18 d9 40 57 2d 00 15 c2 5a 2b aa 39 57 aa 07 fd 59 06 2d 55 48 ab d3 56 9d 87 8a 0e 53 79 40 ca b5 9d a4 6e a2 61 28 94 15 ed 75 2a a9 87 c3 09 bf d2 4c 29 b9 3a 97 d9 f2 32 bd 9f 8e 45 58 a0 60 d2 1f b4 14 90 ca 61 6c 36 eb 75 b5 de 91 db bf fb 82 59 dd 09 2b 67 02 54 50 e7 5f 83 f3 65 37 49 5d a5 1d 29 4d e6 84 01 0a 61 32 29 46 75 8b b0 Data Ascii: 5,z&_M8K0F9-P~0m\|K4<"[88T0ZL,&4APWrT>%G"Q'9DSbF2vrX~>sW\+_e@W-Z+9WY-UHVSy@na(u*L):2EX`al6uY+gTP_e7I])Ma2)Fu
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0d 73 8a e5 22 26 05 a5 ee ff 02 54 60 e5 4a 75 36 5a ad 36 f2 9f 59 a5 a8 d2 8e 22 f7 a7 c4 8d 5f 21 25 96 04 e5 42 19 27 d5 46 6f 42 cd 50 39 46 70 e2 4c 4a 40 99 52 c3 e1 ab 41 e8 28 5e 4b a4 c9 ef e8 05 0a d5 4b 2e 29 65 52 65 41 a9 6e c5 a9 3b 77 d7 c7 cf cd a7 b8 88 8e ec 07 a5 14 11 40 b1 4e 51 2a cc aa 0c 55 e5 a4 ca 72 b5 a1 74 24 75 37 b8 12 4c 7d 2e 94 30 62 24 a4 f6 8c 94 2f cd c2 28 64 3f 21 e6 a4 8e 30 62 56 2f f4 e5 91 93 ca 94 f2 87 2f 6f c9 a9 bb f7 fe 79 5d fc eb 27 9c 72 54 41 a9 e0 94 d7 28 a6 3f 4a c5 59 55 a5 5a fd 1a 48 c9 87 9f 5a 47 82 70 5b 0a c2 7d 02 a0 37 21 0e 0f f7 1f 82 14 fe aa 98 00 ca 95 02 a8 e1 f9 c4 49 99 54 8c 7a 0f 18 67 95 52 52 7f dd 54 dc fc b4 f3 1d e3 f4 0f 1d 57 be 81 d4 4f a0 8a 26 40 c5 76 81 26 5d 38 31 fb Data Ascii: s"&T`Ju6Z6Y"_!%B'FoBP9FpLJ@RA(^KK.)eReAn;w@NQ*Urt$u7L}.0b$/(d?!0bV//oy]'rTA(?JYUZHZGp[}7!ITzgRRTWO&@v&]81
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: a0 60 94 fb 44 50 5c 43 72 a3 16 8b 05 9c c2 6e 07 b2 df 54 94 fa 46 a7 58 a9 d8 52 70 ef 23 d9 4e cc 1a f5 c6 d4 a9 72 0d ac f4 80 1f 0f 8f b9 50 2d c7 d4 81 4c ca 0a 46 75 7b 1a a7 31 a9 fb 96 fe 1e ad 8f 27 5b 00 85 09 2f 41 d1 a8 87 00 b5 1f 56 03 83 51 0a 6a b9 58 4c a7 42 8a 1d fa c8 94 ba 88 9c 72 a5 92 46 9d 67 d4 91 00 f3 f4 97 6f 7d 34 c7 29 d2 23 a8 ac 42 99 52 ee 0f c3 3e 77 db dd 6e 37 76 ca a3 2a 56 77 2a f9 d1 57 fb 68 54 0e 8a ab b2 de 4b 08 28 e1 a4 4e 29 a9 7a c5 ef 64 a8 55 2a 73 ca 58 d1 2a c5 e4 73 df ab 2b 15 60 35 ba 4e 95 30 0a a4 e8 13 67 51 9e f8 ba 3a 80 ab a5 6f 22 94 71 ea 75 2b 3a 55 47 91 3c 46 57 47 c9 22 85 89 14 6a 54 0a 8a eb eb 1a 75 8d 5a 58 a0 a3 a0 53 a3 df 17 c2 29 a9 53 90 4a 82 a0 28 95 dc 76 8d 56 06 ab f1 6b 14 Data Ascii: `DP\CrnTFXRp#NrP-LFu{1'[/AVQjXLBrFgo}4)#BR>wn7vVwWhTK(N)zdUsXs+`5N0gQ:o"qu+:UG<FWG"jTuZXS)SJ(vVk
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 34 3b f5 b3 f3 a5 7d dc df d7 c7 74 93 53 98 cb 50 a2 f8 80 14 18 2a 28 86 a1 72 a1 66 1a 1f 67 30 ca 58 09 2a 09 3a c5 45 da d4 29 6a 65 88 20 d5 d1 80 ac 24 b4 b3 50 54 90 aa 71 a4 ca a2 78 54 b9 54 46 c8 03 3c a8 50 c7 dd c2 17 82 c9 9c fa 75 44 a7 14 16 94 72 4e c1 dc 1d a5 64 3f ce c2 fc 26 a0 ce 05 54 d2 bb fb d1 74 e8 a4 94 a8 d4 cc 42 16 95 04 14 e2 87 f5 13 89 53 30 ea 2d 17 69 4d 29 d2 a1 53 83 23 19 27 1a c2 4a c3 68 3d 17 ad 1a e7 14 5a e9 a2 34 a7 24 3a 66 95 c3 a2 53 0c 82 ea 84 22 55 89 54 a7 a9 53 05 00 01 91 43 7b 75 7c 7c 28 21 a0 e2 e4 37 7e 90 82 82 50 68 26 18 f2 49 bb 3f 81 a4 21 77 cb 7d 42 09 a9 ef 6a a7 e4 e2 51 32 86 70 53 5a e8 db 8f 94 d2 89 d0 b2 8a 85 62 a5 4e 09 a8 9d 66 39 55 e2 2a 1c 15 40 c5 9c 88 88 97 d3 aa 7a 9a fc c4 Data Ascii: 4;}tSP(rfg0X:E)je $PTqxTTF<PuDrNd?&TtBS0-iM)S#'Jh=Z4$:fS"UTSC{u\|\|(!7~Ph&I?!w}BjQ2pSZbNf9U*@z
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 4a d4 14 25 c6 00 e2 18 fe 40 2a 94 13 28 2e 2a 5c f3 ae d2 e2 2f a3 a7 d0 fc f3 49 ab 26 35 31 b6 61 aa 2e 49 79 91 14 35 36 0c 65 04 04 2b 91 14 65 13 ab e5 c4 ab 1e 2f bc 0e a4 54 13 90 ea 67 69 9a ae a9 83 d6 06 54 bf 3b 00 03 92 9a 53 58 91 9d e3 45 5b bb 41 2f 01 26 60 da f5 e8 64 c4 86 8e a8 48 89 0c 31 19 6c 9d 5c c0 56 f7 a4 ce 94 54 58 a5 00 a9 a3 da 53 be 48 77 71 dc 61 4f 52 1e 15 2d d5 8f e3 37 be fa d3 3a 9d 07 21 35 75 2b 26 95 e7 3d 09 5a 81 d4 d4 cd 18 23 b0 15 c6 c1 30 20 05 2e 89 c4 ba 91 7a 0a 88 92 c4 c7 3e fa 2f f7 a4 64 ed c8 7b 0a 98 a0 3a d6 b1 ed ce b7 c8 87 a4 b8 58 3b 3f 84 30 b1 f5 df f3 f3 a4 02 36 8f 2e b8 8e 02 aa 76 1c 49 04 14 af 21 71 9d 5c 3c f1 14 30 69 a2 12 52 40 a5 a4 30 d2 71 f0 d4 91 62 52 52 15 48 09 2b 2c fc b1 Data Ascii: J%@(.\/I&51a.Iy56e+e/TgiT;SXE[A/&`dH1l\VTXSHwqaOR-7:!5u+&=Z#0 .z>/d{:X;?06.vI!q\<0iR@0qbRRH+,
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 97 e9 67 a4 a9 db 9b 3b de 42 c4 76 2b a4 00 0d d8 68 2c 21 b5 7b 2a a8 3c a9 88 96 0a a6 8a d6 d7 83 a7 ae c5 53 6f e2 f8 40 ec 74 06 42 1f 22 12 52 2c c0 44 bd f3 d0 d0 a3 06 5c 88 a5 e4 fe 7d c6 23 e8 60 7f 47 4f 55 f2 f4 5f 59 6e bb e9 eb 15 91 72 39 e6 9c 4d 28 f9 11 7a 27 61 d0 7b 2a b7 d3 6d a8 30 b3 37 00 55 e2 81 09 43 40 42 cd 30 53 d1 52 40 d5 19 da 23 4f 6a 4d 49 89 a7 00 4a ab f0 c5 15 39 71 fb f8 dd 7b 0a c4 64 07 c8 6f 72 37 1e b1 10 c7 9b 38 fe e5 86 d8 c8 ea fa fa aa 26 75 1a 48 6d e8 72 9f 4a 6b 0a a2 0a a4 60 2a 10 20 a7 0f d4 24 8e 27 35 a9 3e 3b d2 4a 11 fe 82 a7 14 14 1f 04 4c e3 4c 3f 5a 40 54 6d 92 d2 85 a5 12 09 7b 55 a4 6c be d9 33 e1 9e ac 55 33 e9 ca 92 47 65 0a 7a 8a a4 90 ac 4a b6 b1 21 29 6f 2a c3 e8 07 75 ac 7d 90 a7 b2 b5 Data Ascii: g;Bv+h,!{<So@tB"R,D\}#`GOU_Ynr9M(z'a{m07UC@B0SR@#OjMIJ9q{dor78&uHmrJk`* $'5>;JLL?Z@Tm{Ul3U3GezJ!)o*u}
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 54 4f 0b 91 4a a5 ea 12 4e 8d 4b 45 a6 94 2a b3 6a 37 9f ca 14 a5 70 60 44 9d 80 a6 f5 af 2f 45 a6 70 9a b5 fb 99 8a bb 7e 68 0f 54 6c 28 f8 0c 58 8b 1f 07 5a 91 6a 98 a8 1b 58 91 09 46 86 45 27 46 6a 08 ab 5f 0a 95 30 49 2a a0 82 aa a9 d0 8f 21 a5 ca b6 5c d2 fa 6a e7 2b 4a f9 e8 40 9d 60 e5 9b 8a 57 93 72 25 fb 59 2a 15 3f 90 d6 91 c2 80 53 2c 80 c6 e5 54 6f dc 48 a8 98 ad 17 9d a4 28 45 a8 eb f2 0a fd 7d 3a 1e 4f c7 d3 c9 14 73 69 54 03 c8 94 2e af 4e 88 54 6c 29 02 8a 85 4c 3d 86 14 80 22 55 78 cf 59 5a d8 5e ac 3e 19 2c d5 e9 56 94 15 d5 7c 66 4e 97 2a 57 42 a2 f8 09 b4 e4 3c 05 ac 0e 52 64 4a 1b 74 3a c5 5f 7d 7e b8 17 54 4d 96 31 0a 54 13 7b 29 bf 2b 52 e7 97 d2 b5 f0 d1 5d fa d1 50 21 52 f5 e3 cf 5f 7b e7 a9 0b 1c 99 c4 e4 a5 f2 9d fb 0a f9 0a b2 Data Ascii: TOJNKEj7p`D/Ep~hTl(XZjXFE'Fj_0I!\j+J@`Wr%Y?S,ToH(E}:OsiT.NTl)L="UxYZ^>,V\|fNWB<RdJt:_}~TM1T{)+R]P!R_{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50369	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	566	OUT	GET /web/970c2c838f4208fc.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1355	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript Content-Length: 696 Connection: close CF-Ray: 86b215d63e7b3b8a-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 151304 Cache-Control: public, max-age=31556926 ETag: "8dbb550524f91be15167f52b0654bd47" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Tue, 26 Mar 2024 02:15:22 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 27 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: /m/q2FlKNrU+Wo6lPkfRjjtipm7Y23dWXr2kPpntFqJCOggxj9/cVjlpc+YErnH4zlXV4eTzhwI= x-amz-replication-status: COMPLETED x-amz-request-id: X61MYYT1SW2N9KD9 x-amz-server-side-encryption: AES256 x-amz-version-id: h6K1rSWPUIIK3QqeY10L5Xxc3LhgUeSM X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	773	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 6c 65 50 44 6c 46 46 55 4e 35 39 72 77 46 6e 5f 41 7a 49 76 4d 33 66 63 6f 58 4c 30 56 77 75 65 42 48 7a 74 72 52 77 50 37 68 45 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 79 38 67 61 56 65 61 50 38 69 77 61 39 51 46 74 77 56 45 68 47 7a 46 67 75 6e 54 79 6a 46 5f 38 75 63 6a 33 54 4c 68 42 2e 73 6f 4f 4c 45 31 30 36 79 76 56 67 63 57 4e 41 53 67 41 6c 34 74 63 65 5a 38 59 41 35 6f 31 5a 42 45 73 77 46 5f 74 70 6a 75 48 37 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=lePDlFFUN59rwFn_AzIvM3fcoXL0VwueBHztrRwP7hE-1711570870-1.0.1.1-y8gaVeaP8iwa9QFtwVEhGzFgunTyjF_8ucj3TLhB.soOLE106yvVgcWNASgAl4tceZ8YA5o1ZBEswF_tpjuH7A; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	610	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 31 32 31 30 22 3a 7b 22 6a 73 22 3a 5b 22 64 65 36 33 32 37 32 63 63 34 38 37 31 62 38 65 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1210":{"js":["de63272cc4871b8e.strings.js"],"css":[]},"
2024-03-27 20:21:10 UTC	86	IN	Data Raw: 64 31 39 65 61 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 39 37 34 37 22 3a 7b 22 6a 73 22 3a 5b 22 36 63 33 38 30 36 30 34 38 36 32 37 34 31 36 62 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 7d 29 3b Data Ascii: d19ea.strings.js"],"css":[]},"9747":{"js":["6c3806048627416b.strings.js"],"css":[]}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50366	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	571	OUT	GET /web/7834839043518078.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1356	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript Content-Length: 21916 Connection: close CF-Ray: 86b215d65eff7f56-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 63835 Cache-Control: public, max-age=31556926 ETag: "7da46fe265386be4a5ab6fec07befb9b" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Wed, 27 Mar 2024 02:26:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ChOkFbQq5A/STkykoND8Gc8WSn8EfIcZtmZ84eF6LrjSCbTb8Fp5RDmhOJLZnNUSWw1uShOZSFc= x-amz-replication-status: COMPLETED x-amz-request-id: ZQ57WS2XBJ1QVSYD x-amz-server-side-encryption: AES256 x-amz-version-id: k5d9hLe5AiIfCGfluv9RKzy37hvVMfzw X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	771	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 51 64 69 65 35 67 43 6a 4b 77 6a 6b 43 79 35 58 69 57 75 42 5a 6f 44 39 7a 32 48 50 6e 41 47 64 43 52 52 4f 38 38 38 77 47 4f 30 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 4d 63 70 47 6b 6a 54 71 5f 47 63 32 71 49 66 4e 66 7a 2e 30 67 4e 69 45 70 79 6b 31 4d 63 6f 63 5a 75 77 5f 4e 48 4b 47 66 51 4d 4a 36 57 74 2e 53 43 6e 59 61 6a 62 44 71 38 42 41 4c 49 5a 7a 54 5a 4a 72 64 4a 78 58 61 5f 52 6f 6c 4d 46 56 67 42 64 72 5a 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=Qdie5gCjKwjkCy5XiWuBZoD9z2HPnAGdCRRO888wGO0-1711570870-1.0.1.1-McpGkjTq_Gc2qIfNfz.0gNiEpyk1McocZuw_NHKGfQMJ6Wt.SCnYajbDq8BALIZzTZJrdJxXa_RolMFVgBdrZg; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	611	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6e 2c 66 2c 73 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 72 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 63 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 73 2c 69 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,n,f,s={},c={};function i(e){var r=c[e];if(void 0!==r)return r.exports;var t=c[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,i),t.loaded=!0,t.exports}i.m=s,i.amdD=function(){throw new Error("define canno
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 5d 3b 65 5b 75 5d 3d 5b 74 2c 6e 2c 66 5d 7d 7d 2c 69 2e 6e 3d 65 3d 3e 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 65 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 65 3b 72 65 74 75 72 6e 20 69 2e 64 28 72 2c 7b 61 3a 72 7d 29 2c 72 7d 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 69 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 31 26 6e 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 6e 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 6e 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 Data Ascii: ];e[u]=[t,n,f]}},i.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return i.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,i.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 33 62 36 62 32 31 61 2e 6a 73 22 3b 69 66 28 39 31 32 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 36 32 31 62 39 36 31 63 39 36 30 39 36 31 38 2e 6a 73 22 3b 69 66 28 39 37 34 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 39 38 33 65 64 32 66 66 64 33 31 62 66 31 34 2e 6a 73 22 3b 69 66 28 33 31 32 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 61 37 30 34 35 35 62 63 63 62 38 65 32 31 64 2e 6a 73 22 3b 69 66 28 39 35 37 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 36 38 30 37 65 35 35 37 37 61 30 31 35 38 35 2e 6a 73 22 3b 69 66 28 39 37 35 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 31 65 30 39 66 61 35 64 66 39 64 66 36 38 36 2e 6a 73 22 3b 69 66 28 35 34 38 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 65 31 31 35 64 35 61 37 64 31 30 61 33 34 33 2e 6a 73 22 3b 69 66 28 Data Ascii: 3b6b21a.js";if(9124===e)return"0621b961c9609618.js";if(9747===e)return"8983ed2ffd31bf14.js";if(3124===e)return"ea70455bccb8e21d.js";if(9573===e)return"c6807e5577a01585.js";if(9753===e)return"11e09fa5df9df686.js";if(5482===e)return"ae115d5a7d10a343.js";if(
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 31 64 65 36 64 36 37 2e 6a 73 22 3b 69 66 28 33 37 37 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 63 33 37 32 64 66 33 35 61 38 66 62 30 39 66 2e 6a 73 22 3b 69 66 28 31 35 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 30 62 34 36 36 36 66 32 35 32 62 31 35 65 63 2e 6a 73 22 3b 69 66 28 36 36 36 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 37 35 35 65 66 39 65 37 35 65 66 35 62 63 65 2e 6a 73 22 3b 69 66 28 33 32 33 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 32 35 66 61 64 33 64 63 35 64 31 36 62 65 65 2e 6a 73 22 3b 69 66 28 38 32 36 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 39 36 62 61 36 39 34 64 61 62 63 38 61 63 64 2e 6a 73 22 3b 69 66 28 39 33 37 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 62 62 38 30 35 35 63 61 37 38 36 31 36 66 65 2e 6a 73 22 3b 69 66 28 39 Data Ascii: 1de6d67.js";if(3774===e)return"3c372df35a8fb09f.js";if(158===e)return"d0b4666f252b15ec.js";if(6666===e)return"c755ef9e75ef5bce.js";if(3235===e)return"625fad3dc5d16bee.js";if(8265===e)return"a96ba694dabc8acd.js";if(9374===e)return"0bb8055ca78616fe.js";if(9
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 7d 5b 65 5d 29 72 65 74 75 72 6e 22 65 66 34 36 64 62 33 37 35 31 64 38 65 39 39 39 2e 76 65 6e 64 6f 72 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 7b 35 39 39 35 3a 31 2c 36 39 39 37 3a 31 2c 31 39 38 34 3a 31 2c 38 31 39 30 3a 31 2c 34 32 33 39 3a 31 2c 39 31 37 34 3a 31 2c 33 31 32 34 3a 31 2c 39 35 37 33 3a 31 2c 35 34 38 32 3a 31 2c 38 35 31 3a 31 2c 34 30 37 35 3a 31 2c 37 33 35 3a 31 2c 39 38 37 39 3a 31 2c 38 31 30 30 3a 31 2c 32 38 35 3a 31 2c 34 30 33 3a 31 2c 37 32 38 37 3a 31 2c 31 36 38 39 3a 31 2c 33 32 39 39 3a 31 2c 37 37 33 30 3a 31 2c 39 36 33 34 3a 31 2c 33 37 37 34 3a 31 2c 33 32 33 35 3a 31 2c 38 32 36 35 3a 31 2c 36 31 33 39 3a 31 2c 32 30 3a 31 2c 37 37 32 30 3a 31 2c 33 35 38 32 3a 31 2c 38 37 30 3a 31 2c 34 34 35 30 3a 31 2c 32 33 39 Data Ascii: }[e])return"ef46db3751d8e999.vendor.ltr.css";if({5995:1,6997:1,1984:1,8190:1,4239:1,9174:1,3124:1,9573:1,5482:1,851:1,4075:1,735:1,9879:1,8100:1,285:1,403:1,7287:1,1689:1,3299:1,7730:1,9634:1,3774:1,3235:1,8265:1,6139:1,20:1,7720:1,3582:1,870:1,4450:1,239
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6c 74 72 2e 63 73 73 22 3b 69 66 28 39 33 37 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 35 63 65 64 31 65 36 63 37 37 61 32 38 30 39 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 39 38 30 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 63 35 36 35 35 36 35 66 30 61 63 63 36 38 64 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 33 37 39 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 38 34 39 32 32 63 64 32 34 39 38 33 62 38 34 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 37 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 66 34 64 61 37 31 32 36 64 31 36 30 39 62 62 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 33 36 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 65 63 63 61 34 31 36 39 30 32 65 32 33 61 62 2e 6c 74 72 2e 63 73 73 22 7d 2c 69 2e 6d 69 6e 69 43 73 73 46 52 74 6c 3d 65 3d 3e 7b 69 66 Data Ascii: ltr.css";if(9374===e)return"55ced1e6c77a2809.ltr.css";if(9807===e)return"7c565565f0acc68d.ltr.css";if(3791===e)return"f84922cd24983b84.ltr.css";if(5750===e)return"af4da7126d1609bb.ltr.css";if(1362===e)return"6ecca416902e23ab.ltr.css"},i.miniCssFRtl=e=>{if
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 35 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 66 33 65 34 65 65 63 34 30 62 35 61 65 36 32 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 39 35 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 62 31 37 66 31 33 63 64 30 63 35 39 64 31 34 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 38 34 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 64 61 61 35 31 35 36 39 39 34 31 65 66 36 35 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 33 38 35 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 34 62 38 37 61 34 33 38 62 30 64 38 36 37 37 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 39 33 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 38 37 64 62 62 65 62 65 63 63 64 34 30 61 34 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 32 37 30 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 32 63 65 36 34 31 63 37 35 66 32 33 34 33 32 Data Ascii: 54===e)return"6f3e4eec40b5ae62.rtl.css";if(9550===e)return"eb17f13cd0c59d14.rtl.css";if(8443===e)return"0daa51569941ef65.rtl.css";if(3859===e)return"b4b87a438b0d8677.rtl.css";if(5938===e)return"087dbbebeccd40a4.rtl.css";if(2700===e)return"d2ce641c75f23432
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 75 3d 30 3b 75 3c 64 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 6f 3d 64 5b 75 5d 3b 69 66 28 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 66 2b 74 29 7b 63 3d 6f 3b 62 72 65 61 6b 7d 7d 69 66 28 21 63 29 7b 69 66 28 61 3d 21 30 2c 28 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 63 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 69 2e 6e 63 29 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 69 2e 6e 63 29 3b 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: ame("script"),u=0;u<d.length;u++){var o=d[u];if(o.getAttribute("src")==e\|\|o.getAttribute("data-webpack")==f+t){c=o;break}}if(!c){if(a=!0,(c=document.createElement("script")).charset="utf-8",c.timeout=120,i.nc)c.setAttribute("nonce",i.nc);c.setAttribute("d
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 29 7b 66 6f 72 28 6c 65 74 20 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 64 5b 66 5d 2e 65 6e 64 73 57 69 74 68 28 65 29 29 72 65 74 75 72 6e 20 64 2e 73 70 6c 69 63 65 28 66 2c 31 29 2c 63 28 65 2c 72 2c 74 2c 6e 29 3b 69 66 28 6f 2b 2b 3c 31 30 29 72 65 74 75 72 6e 20 63 28 65 2c 72 2c 74 2c 6e 29 3b 69 66 28 30 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 70 28 69 2c 6c 29 29 2c 30 29 3b 69 2e 70 75 73 68 28 7b 73 72 63 3a 65 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 22 6c 6f 61 64 22 3d 3d 3d 66 2e 74 79 70 65 29 72 28 66 29 3b 65 6c 73 65 20 63 28 65 2c 72 2c 74 2c 6e 29 7d 2c 6f 72 69 67 69 6e 61 6c 4c Data Ascii: l=function(e,r,t,n){for(let f=0;f<d.length;f++)if(d[f].endsWith(e))return d.splice(f,1),c(e,r,t,n);if(o++<10)return c(e,r,t,n);if(0===i.length)setTimeout((()=>p(i,l)),0);i.push({src:e,callback:function(f){if("load"===f.type)r(f);else c(e,r,t,n)},originalL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50371	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	2887	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; gtm_custom_user_engagement={"lock":"yes","page":3,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570864367,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570864.0.0.1176296780; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:10 UTC	913	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d63b283991-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d63b283991 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tmzQnFKtH9Np8UZkj5DtubA5puZAaQ3xCEIHm9mBNB3o24cFP0zugO%2Fkuqhq1cufpgeOy%2BPiBHpn8gL1Or4Uh9m13b1tVod011c6Sf054Q0DWySMa4qhdgQqYyu2JUA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 66 6f 66 56 50 42 50 45 58 4c 68 69 69 50 47 56 6a 2d 75 73 67 45 61 4d 42 70 62 6e 71 6c 78 43 67 73 62 57 6a 75 54 33 4c 6b 62 6c 4c 5a 53 6f 56 43 61 38 69 72 4e 77 61 39 6d 6f 4b 37 6d 46 4a 5f 77 74 32 58 31 6b 6e 5f 78 33 47 37 47 31 71 6b 6a 32 49 39 64 48 67 7a 45 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 37 30 37 38 31 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE","B":1711578070781}
2024-03-27 20:21:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50370	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	570	OUT	GET /web/d0da04d3ab9ebc3a.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1358	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript Content-Length: 206590 Connection: close CF-Ray: 86b215d679b75770-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 777352 Cache-Control: public, max-age=31556926 ETag: "d250ab3110f78a32fc93723478df0e54" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Fri, 15 Mar 2024 02:50:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: dizisNxKIm+Ts6Ls2k+FsrQItZkFJ6TT6kO8ULYYFYo0X2LmHM+19WrMp7N9keWKyLSD7Gn/Fxk= x-amz-replication-status: COMPLETED x-amz-request-id: N5R9N97PKA5K1HQ9 x-amz-server-side-encryption: AES256 x-amz-version-id: d2Sney5J71wChmBpt4DYmIeP9sSN0apX X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 42 4a 6c 61 75 6f 64 62 73 6a 70 69 36 36 4c 66 77 49 42 53 39 54 30 37 34 33 44 52 34 71 45 56 35 68 56 64 75 4e 37 33 65 50 55 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 64 6c 2e 4f 62 66 43 4b 7a 38 6e 38 4f 45 45 74 79 6a 7a 30 4b 34 49 79 31 64 31 43 7a 66 62 44 70 31 36 65 70 44 35 7a 51 32 75 6b 4f 75 62 6a 61 58 66 4a 79 77 50 4a 62 35 67 56 55 48 4d 58 2e 61 58 7a 2e 39 69 47 4d 38 78 67 6b 51 2e 59 6b 4c 71 30 50 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=BJlauodbsjpi66LfwIBS9T0743DR4qEV5hVduN73ePU-1711570870-1.0.1.1-dl.ObfCKz8n8OEEtyjz0K4Iy1d1CzfbDp16epD5zQ2ukOubjaXfJywPJb5gVUHMX.aXz.9iGM8xgkQ.YkLq0Pg; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	605	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 30 64 61 30 34 64 33 61 62 39 65 62 63 33 61 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 36 38 37 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 51 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 36 37 32 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 72 65 Data Ascii: /! For license information please see d0da04d3ab9ebc3a.vendor.js.LICENSE.txt /"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{68743:(e,t,n)=>{n.d(t,{Q:()=>a});var r=n(38672);function a(e){var t=e.children,n=e.re
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 36 37 29 2c 69 3d 6e 28 33 38 36 37 32 29 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 2c 6c 3d 6f 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 66 6f 72 77 61 72 64 52 65 66 26 26 28 30 2c 72 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 29 2e 24 24 74 79 70 65 6f 66 2c 75 3d 6f 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 6d 65 6d 6f 26 26 28 30 2c 72 2e 6d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 67),i=n(38672),o="function"==typeof Symbol&&Symbol.for,l=o?Symbol.for("react.forward_ref"):"function"==typeof r.forwardRef&&(0,r.forwardRef)((function(e){return null})).$$typeof,u=o?Symbol.for("react.memo"):"function"==typeof r.memo&&(0,r.memo)((function(
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 2c 61 2c 69 3d 6e 2e 63 61 6c 6c 28 65 29 2c 6f 3d 5b 5d 3b 74 72 79 7b 66 6f 72 28 3b 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2d 2d 20 3e 30 29 26 26 21 28 72 3d 69 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6f 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 6c 29 7b 61 3d 7b 65 72 72 6f 72 3a 6c 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 26 26 21 72 2e 64 6f 6e 65 26 26 28 6e 3d 69 2e 72 65 74 75 72 6e 29 26 26 6e 2e 63 61 6c 6c 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 6f 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 69 28 28 30 2c 61 2e 75 Data Ascii: ol.iterator];if(!n)return e;var r,a,i=n.call(e),o=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=i.next()).done;)o.push(r.value)}catch(l){a={error:l}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(a)throw a.error}}return o};function o(e){var t=i((0,a.u
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 47 5a 29 28 70 29 2c 70 2e 63 75 72 72 65 6e 74 3f 28 70 2e 63 75 72 72 65 6e 74 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 70 2e 63 75 72 72 65 6e 74 2e 63 68 61 6e 67 65 64 42 65 66 6f 72 65 4d 6f 75 6e 74 26 26 28 70 2e 63 75 72 72 65 6e 74 2e 63 68 61 6e 67 65 64 42 65 66 6f 72 65 4d 6f 75 6e 74 3d 21 31 2c 64 28 29 29 29 3a 28 70 2e 63 75 72 72 65 6e 74 3d 7b 72 65 61 63 74 69 6f 6e 3a 6e 65 77 20 72 2e 6c 65 28 73 28 74 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 29 29 2c 6d 6f 75 6e 74 65 64 3a 21 30 2c 63 68 61 6e 67 65 64 42 65 66 6f 72 65 4d 6f 75 6e 74 3a 21 31 2c 63 6c 65 61 6e 41 74 3a 31 2f 30 7d 2c 64 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 63 75 72 72 65 Data Ascii: ((function(){return(0,o.GZ)(p),p.current?(p.current.mounted=!0,p.current.changedBeforeMount&&(p.current.changedBeforeMount=!1,d())):(p.current={reaction:new r.le(s(t),(function(){d()})),mounted:!0,changedBeforeMount:!1,cleanAt:1/0},d()),function(){p.curre
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 6e 3d 74 26 26 65 5b 74 5d 2c 72 3d 30 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 29 3b 69 66 28 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 26 26 72 3e 3d 65 2e 6c 65 6e 67 74 68 26 26 28 65 3d 76 6f 69 64 20 30 29 2c 7b 76 61 6c 75 65 3a 65 26 26 65 5b 72 2b 2b 5d 2c 64 6f 6e 65 3a 21 65 7d 7d 7d 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 3f 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 2e 22 3a 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 73 20 6e 6f 74 20 Data Ascii: ypeof Symbol&&Symbol.iterator,n=t&&e[t],r=0;if(n)return n.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&r>=e.length&&(e=void 0),{value:e&&e[r++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 75 2c 62 62 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 72 3d 6e 28 36 39 32 36 33 39 29 2c 61 3d 6e 28 31 36 35 38 31 31 29 2c 69 3d 6e 28 37 37 38 30 38 32 29 2c 6f 3d 72 2e 48 3f 28 30 2c 61 2e 47 29 28 72 2e 48 29 3a 28 30 2c 69 2e 56 29 28 29 2c 6c 3d 6f 2e 61 64 64 52 65 61 63 74 69 6f 6e 54 6f 54 72 61 63 6b 2c 75 3d 6f 2e 72 65 63 6f 72 64 52 65 61 63 74 69 6f 6e 41 73 43 6f 6d 6d 69 74 74 65 64 3b 6f 2e 72 65 73 65 74 43 6c 65 61 6e 75 70 53 63 68 65 64 75 6c 65 46 6f 72 54 65 73 74 73 2c 6f 2e 66 6f 72 63 65 43 6c 65 61 6e 75 70 54 69 6d 65 72 54 6f 52 75 6e 4e 6f 77 46 6f 72 54 65 73 74 73 7d 2c 33 35 39 39 33 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 7b 72 65 61 63 74 69 6f 6e 3a 65 2c 6d 6f 75 Data Ascii: u,bb:()=>l});var r=n(692639),a=n(165811),i=n(778082),o=r.H?(0,a.G)(r.H):(0,i.V)(),l=o.addReactionToTrack,u=o.recordReactionAsCommitted;o.resetCleanupScheduleForTests,o.forceCleanupTimerToRunNowForTests},359933:(e,t,n)=>{function r(e){return{reaction:e,mou
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 20 76 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 61 3d 30 3b 61 3c 6e 3b 61 2b 2b 29 72 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 68 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 68 2c 5b 74 68 69 73 2c 65 2c 74 5d 2e 63 6f 6e 63 61 74 28 72 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 5b 64 5d 3d 65 5b 64 5d 7c 7c 7b 7d 2c 72 3d 6e 5b 74 5d 3d 6e 5b 74 5d 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 72 2e 6c 6f 63 6b 73 3d 72 2e 6c 6f 63 6b 73 7c 7c 30 2c 72 2e 6d 65 74 68 6f 64 73 3d 72 2e 6d 65 74 68 6f 64 73 Data Ascii: v(e,t){return function(){for(var n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];h.call.apply(h,[this,e,t].concat(r))}}function m(e,t,n){var r=function(e,t){var n=e[d]=e[d]\|\|{},r=n[t]=n[t]\|\|{};return r.locks=r.locks\|\|0,r.methods=r.methods
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 65 6f 66 20 72 29 7b 76 61 72 20 6f 3d 78 28 74 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5b 6d 6f 62 78 2d 72 65 61 63 74 5d 20 63 6c 61 73 73 20 63 6f 6d 70 6f 6e 65 6e 74 20 28 22 2b 6f 2b 22 29 20 69 73 20 6d 69 73 73 69 6e 67 20 60 72 65 6e 64 65 72 60 20 6d 65 74 68 6f 64 2e 5c 6e 60 6f 62 73 65 72 76 65 72 60 20 72 65 71 75 69 72 65 73 20 60 72 65 6e 64 65 72 60 20 62 65 69 6e 67 20 61 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 20 6f 6e 20 70 72 6f 74 6f 74 79 70 65 2e 5c 6e 60 72 65 6e 64 65 72 20 3d 20 28 29 20 3d 3e 20 7b 7d 60 20 6f 72 20 60 72 65 6e 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 7d 60 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 29 7d 72 65 74 75 72 6e 20 74 2e 72 65 6e 64 65 72 3d 66 Data Ascii: eof r){var o=x(t);throw new Error("[mobx-react] class component ("+o+") is missing `render` method.\n`observer` requires `render` being a function defined on prototype.\n`render = () => {}` or `render = function() {}` is not supported.")}return t.render=f
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 74 72 79 7b 63 3d 28 30 2c 72 2e 24 24 29 28 21 31 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 73 3d 65 7d 7d 29 29 2c 73 29 74 68 72 6f 77 20 73 3b 72 65 74 75 72 6e 20 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 46 59 29 28 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 6d 6f 62 78 2d 72 65 61 63 74 5d 20 49 74 20 73 65 65 6d 73 20 74 68 61 74 20 61 20 72 65 2d 72 65 6e 64 65 72 69 6e 67 20 6f 66 20 61 20 52 65 61 63 74 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 73 20 74 72 69 67 67 65 72 65 64 20 77 68 69 6c 65 20 69 6e 20 73 74 61 74 69 63 20 28 73 65 72 76 65 72 2d 73 69 64 65 29 20 6d 6f 64 65 2e 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 61 72 65 20 Data Ascii: on(){try{c=(0,r.$$)(!1,i)}catch(e){s=e}})),s)throw s;return c}}function O(e,t){return(0,i.FY)()&&console.warn("[mobx-react] It seems that a re-rendering of a React component is triggered while in static (server-side) mode. Please make sure components are

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50364	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: WeIZuLBveA1WYWqRp2zSLYSfliQ_4mLhyBE1gxZ9T1M4IhfhbAxFrNI5wv3_q1Xfyi0ZuvO2YKxeMTFm0nVdHQHOZfE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	814	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 64 31 63 35 32 63 37 34 2d 33 34 32 37 2d 34 37 32 66 2d 62 61 65 63 2d 37 32 39 32 63 62 39 38 63 36 38 33 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 34 33 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 35 34 32 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"d1c52c74-3427-472f-baec-7292cb98c683","E":"2024-03-27T20:21:09.434Z","F":"2024-03-27T20:21:09.542Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:10 UTC	897	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d5b99a3b7d-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d5b99a3b7d X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vzcvbFr9CrJfvkX2KJV4pTK2ZDzUlLUF8U9SrmSS0oapHbynDn1SkenQiQkwNDSfOsZwLS4OOmaF1bfS%2Be9wzeRb0qiNUVXkx9BsqKJ6GjBSGPpVpOhyp4bLa8hUryc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50372	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	2666	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	917	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d67fb01ff7-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d67fb01ff7 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6CUxzP7SUA4URsns2S4cO88oSdilzwVHAyhpZ%2BHlUP6u41ONNmM5p%2FysjeABAG0x%2FmKN7R1FFQMnnVlWR9Hy4Wk4kTbsAQkFGLHelCsuUOD0xVrbbUM%2Bgno05wREzgw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 57 57 4e 66 79 63 48 47 5a 6a 77 32 4a 5a 70 35 38 69 51 42 5f 46 61 79 64 6d 64 6d 34 5a 63 6e 34 51 4c 71 5f 50 57 38 6b 69 74 4f 78 47 34 48 6e 43 56 66 57 73 39 6a 51 75 34 49 4f 42 59 30 61 6a 34 4e 67 72 35 4f 62 34 42 4d 72 36 31 6f 4a 6e 62 54 5a 75 38 44 71 64 6f 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 37 30 38 32 30 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"WWNfycHGZjw2JZp58iQB_Faydmdm4Zcn4QLq_PW8kitOxG4HnCVfWs9jQu4IOBY0aj4Ngr5Ob4BMr61oJnbTZu8Dqdo","B":1711578070820}
2024-03-27 20:21:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50367	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	570	OUT	GET /web/babef07b306f9058.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	1358	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/javascript Content-Length: 222178 Connection: close CF-Ray: 86b215d6bd76200f-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 753174 Cache-Control: public, max-age=31556926 ETag: "7b0e1cd8a226faab9599629df41838ba" Expires: Fri, 28 Mar 2025 02:09:56 GMT Last-Modified: Tue, 19 Mar 2024 03:04:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 7qA6MRAW6qpuHJB1gGK0A2koUd19NgHBkp0IsHPphm3+Lt73oExj9fRaJ9RwJ+fL8Jf9z3OTy1Q= x-amz-replication-status: COMPLETED x-amz-request-id: KVAKQWMQW2FE72AR x-amz-server-side-encryption: AES256 x-amz-version-id: ZtS1u9bZdg9_VLB.X40mGs1RhcyqGs_k X-Content-Type-Options: nosniff
2024-03-27 20:21:10 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 4e 43 48 7a 4b 58 37 74 57 35 62 6e 6d 52 77 6e 59 50 35 64 53 78 31 31 4c 4e 39 54 76 35 32 44 63 46 41 51 37 55 6a 4b 34 71 45 2d 31 37 31 31 35 37 30 38 37 30 2d 31 2e 30 2e 31 2e 31 2d 46 70 32 74 47 53 43 66 51 64 43 76 74 4f 61 39 30 44 42 4e 48 43 48 72 5f 69 57 68 70 79 52 46 61 73 70 62 49 63 63 69 66 6c 63 33 6b 66 5a 58 4c 41 5f 79 69 47 77 43 4a 42 39 66 65 68 31 4d 78 75 31 58 33 42 6f 57 51 6c 5a 7a 33 47 66 49 4c 49 59 6d 6b 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 30 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=NCHzKX7tW5bnmRwnYP5dSx11LN9Tv52DcFAQ7UjK4qE-1711570870-1.0.1.1-Fp2tGSCfQdCvtOa90DBNHCHr_iWhpyRFaspbIcciflc3kfZXLA_yiGwCJB9feh1Mxu1X3BoWQlZz3GfILIYmkQ; path=/; expires=Wed, 27-Mar-24 20:51:10 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:10 UTC	605	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 61 62 65 66 30 37 62 33 30 36 66 39 30 35 38 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 39 35 39 35 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 6e 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see babef07b306f9058.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{95957:(e,t,r)=>{"use strict";function n(e,t){var r=t&&t.cache?t.cache:c,n=t&&t.serializer?t.serial
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 69 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 72 2e 62 69 6e 64 28 74 2c 65 2c 6e 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 68 69 73 2c 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 6f 3a 69 2c 74 2e 63 61 63 68 65 2e 63 72 65 61 74 65 28 29 2c 74 2e 73 65 72 69 61 6c 69 7a 65 72 29 7d 72 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 68 2c 48 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 74 68 69 73 2e 63 61 63 68 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 6c 2e 70 72 6f 74 6f 74 Data Ascii: i}function a(e,t,r,n,o){return r.bind(t,e,n,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}r.d(t,{A:()=>h,H:()=>n});var u=function(){return JSON.stringify(arguments)};function l(){this.cache=Object.create(null)}l.protot
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 41 52 47 55 4d 45 4e 54 3d 32 5d 3d 22 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 3d 33 5d 3d 22 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 34 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 3d 36 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 4e 55 4d 42 45 52 5f 53 4b 45 Data Ascii: ARGUMENT=2]="EMPTY_ARGUMENT",e[e.MALFORMED_ARGUMENT=3]="MALFORMED_ARGUMENT",e[e.EXPECT_ARGUMENT_TYPE=4]="EXPECT_ARGUMENT_TYPE",e[e.INVALID_ARGUMENT_TYPE=5]="INVALID_ARGUMENT_TYPE",e[e.EXPECT_ARGUMENT_STYLE=6]="EXPECT_ARGUMENT_STYLE",e[e.INVALID_NUMBER_SKE
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 5f 43 4c 41 55 53 45 3d 32 32 5d 3d 22 4d 49 53 53 49 4e 47 5f 4f 54 48 45 52 5f 43 4c 41 55 53 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 3d 32 33 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 3d 32 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 22 2c 65 5b 65 2e 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 3d 32 36 5d 3d 22 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 22 2c 65 5b 65 2e 55 4e 43 4c 4f 53 45 44 5f 54 41 47 3d 32 37 5d 3d 22 55 4e 43 4c 4f 53 45 44 5f 54 41 47 22 7d 28 6e 7c 7c 28 6e 3d 7b 7d 29 29 7d 2c 39 37 39 32 36 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 48 49 Data Ascii: _CLAUSE=22]="MISSING_OTHER_CLAUSE",e[e.INVALID_TAG=23]="INVALID_TAG",e[e.INVALID_TAG_NAME=25]="INVALID_TAG_NAME",e[e.UNMATCHED_CLOSING_TAG=26]="UNMATCHED_CLOSING_TAG",e[e.UNCLOSED_TAG=27]="UNCLOSED_TAG"}(n\|\|(n={}))},979263:(e,t,r)=>{"use strict";r.d(t,{HI
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 64 65 50 6f 69 6e 74 2c 76 3d 21 21 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 2c 67 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 64 65 50 6f 69 6e 74 41 74 2c 62 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 2c 79 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 2c 45 3d 21 21 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3f 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 69 73 46 69 6e 69 74 65 28 65 29 26 26 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 3d 3d 3d 65 26 26 4d 61 74 68 2e 61 62 73 28 65 29 3c 3d 39 30 Data Ascii: dePoint,v=!!Object.fromEntries,g=!!String.prototype.codePointAt,b=!!String.prototype.trimStart,y=!!String.prototype.trimEnd,E=!!Number.isSafeInteger?Number.isSafeInteger:function(e){return"number"==typeof e&&isFinite(e)&&Math.floor(e)===e&&Math.abs(e)<=90
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 74 61 78 7d 5d 2a 29 22 2c 22 79 75 22 29 3b 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 43 2e 6c 61 73 74 49 6e 64 65 78 3d 74 2c 6e 75 6c 6c 21 3d 3d 28 72 3d 43 2e 65 78 65 63 28 65 29 5b 31 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 22 22 7d 7d 65 6c 73 65 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6e 3d 4f 28 65 2c 74 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 4e 28 6e 29 7c 7c 42 28 6e 29 29 62 72 65 61 6b 3b 72 2e 70 75 73 68 28 6e 29 2c 74 2b 3d 6e 3e 3d 36 35 35 33 36 3f 32 3a 31 7d 72 65 74 75 72 6e 20 52 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 72 29 7d 3b 76 61 72 20 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 Data Ascii: tax}]*)","yu");_=function(e,t){var r;return C.lastIndex=t,null!==(r=C.exec(e)[1])&&void 0!==r?r:""}}else _=function(e,t){for(var r=[];;){var n=O(e,t);if(void 0===n\|\|N(n)\|\|B(n))break;r.push(n),t+=n>=65536?2:1}return R.apply(void 0,r)};var L=function(){func
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 68 69 73 2e 62 75 6d 70 28 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 28 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 62 75 6d 70 49 66 28 22 2f 3e 22 29 29 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 61 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 22 3c 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 3e 22 29 2c 6c 6f 63 61 74 69 6f 6e 3a 64 28 72 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 49 66 28 22 3e 22 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 65 2b 31 2c 74 2c 21 30 29 3b 69 66 28 6f 2e 65 72 72 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 73 3d Data Ascii: his.bump();var n=this.parseTagName();if(this.bumpSpace(),this.bumpIf("/>"))return{val:{type:a.wD.literal,value:"<".concat(n,"/>"),location:d(r,this.clonePosition())},err:null};if(this.bumpIf(">")){var o=this.parseMessage(e+1,t,!0);if(o.err)return o;var s=
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 50 61 72 73 65 51 75 6f 74 65 28 74 29 3b 69 66 28 6f 29 6e 2b 3d 6f 3b 65 6c 73 65 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 55 6e 71 75 6f 74 65 64 28 65 2c 74 29 3b 69 66 28 69 29 6e 2b 3d 69 3b 65 6c 73 65 7b 76 61 72 20 73 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 4c 65 66 74 41 6e 67 6c 65 42 72 61 63 6b 65 74 28 29 3b 69 66 28 21 73 29 62 72 65 61 6b 3b 6e 2b 3d 73 7d 7d 7d 76 61 72 20 75 3d 64 28 72 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 3b 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 61 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 6e 2c 6c 6f 63 61 74 69 6f 6e 3a 75 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 79 50 61 72 73 65 4c 65 66 74 41 6e 67 6c Data Ascii: ParseQuote(t);if(o)n+=o;else{var i=this.tryParseUnquoted(e,t);if(i)n+=i;else{var s=this.tryParseLeftAngleBracket();if(!s)break;n+=s}}}var u=d(r,this.clonePosition());return{val:{type:a.wD.literal,value:n,location:u},err:null}},e.prototype.tryParseLeftAngl
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 49 64 65 6e 74 69 66 69 65 72 49 66 50 6f 73 73 69 62 6c 65 28 29 2e 76 61 6c 75 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 2c 64 28 72 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 69 73 45 4f 46 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 69 2e 6f 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 43 4c 4f 53 49 4e 47 5f 42 52 41 43 45 2c 64 28 72 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 73 77 69 74 63 68 28 74 68 69 73 2e 63 68 61 72 28 29 29 7b 63 61 73 65 20 31 32 35 3a 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: IdentifierIfPossible().value;if(!n)return this.error(i.o.MALFORMED_ARGUMENT,d(r,this.clonePosition()));if(this.bumpSpace(),this.isEOF())return this.error(i.o.EXPECT_ARGUMENT_CLOSING_BRACE,d(r,this.clonePosition()));switch(this.char()){case 125:return this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50365	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1958	OUT	GET /video/1316641/c_howto_socialmedia_1284x721.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1359	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 631886 Connection: close Content-Range: bytes 0-631885/631886 CF-Ray: 86b215d69c33387a-IAD CF-Cache-Status: HIT Age: 788754 Cache-Control: public, max-age=2592000 ETag: "27f4682c656a0f59000165ae0f691cf9" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Wed, 24 Jan 2024 10:50:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: NArz7aWMDvuvkGv+okr2h/TFLfP3XkWd0RxxTqJs3VSiXP4AcWqNb3vSpsh+dBU6KpSStaKfLDI= x-amz-request-id: CK1WP08SWGQ8AWST x-amz-server-side-encryption: AES256 x-amz-version-id: yaPF9XGDwtkgr90N.WgLodh7Gx4jhiVb X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2H0BWpVlDTH3kVgde%2F6rbJqX9GognWWl%2FZKEX03lo2uQIe7CVnKM%2FZKI2wn1UtInC3yRkWAL10eT3zfk00NEoYRG0qHRvl%2FIl0DikG2d0Um9NGgl9k%2F30yAAMSnZ7Tv%2BL%2BGmHuSa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1357	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 09 90 d1 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 30 39 35 20 62 61 65 65 34 30 30 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freemdatEH, #x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 35 39 30 b1 79 2c d9 2a cb 08 c3 2a 8c 66 d7 5f 43 da 8e 40 8e f6 b4 09 f4 5c 9b 72 50 b5 46 21 36 fa 38 4e bf c5 82 ff 6c c0 62 0f cd d2 c1 24 e5 11 92 6d ff 02 54 fe a3 83 3d 52 2d ad c0 24 33 01 37 67 df a7 af 1a 89 73 c0 60 60 33 8d 99 2f 16 4f 27 81 a7 54 61 52 52 e2 83 00 36 8a 7b ab e1 ae 27 c4 94 0d 96 e0 dc 04 8f cc b3 45 b0 a6 5d 11 87 d1 76 e7 bc bf ce b3 d5 2a 10 7d 1d 04 f0 30 ab 61 5f 2b 77 dd e7 40 d6 cf bc da 57 a9 05 46 cc ba 94 fc b6 9f 8c 4b 2b c8 b1 1e a3 5d 6d d9 e3 d0 f3 b4 43 cc 56 48 35 4b 90 0f f5 a4 88 49 09 51 50 96 39 0f 4b 05 f5 0e cc 80 6e 84 a5 08 ef d4 81 ba 0d a1 af 5b f6 b6 82 07 bf 3b 7f 5c 4a 84 74 bf ea 8a 06 39 25 19 83 1e 73 3a 16 0e d1 3f ae ac 5d 05 b5 f7 0c 41 dd b7 6a 2c 4d 39 82 af a8 7c 36 27 cd 81 8b 7a e2 f7 Data Ascii: 590y,*f_C@\rPF!68Nlb$mT=R-$37gs``3/O'TaRR6{'E]v}0a_+w@WFK+]mCVH5KIQP9Kn[;\Jt9%s:?]Aj,M9\|6'z
2024-03-27 20:21:10 UTC	484	IN	Data Raw: 45 c8 80 3b 58 9d 75 01 ac cc 0a c0 cb 01 72 ae 36 af 82 db 01 0e b4 c9 46 d1 25 65 c1 89 a4 ca 2f eb f0 70 69 6a e6 80 e0 a4 3a 0c b7 1e ab fa e8 f1 06 4a 2d d4 cf 36 42 18 81 95 1e 04 ac 59 a0 a8 78 d1 50 b3 67 39 a9 74 4b 2e ba 1f f2 3f dc 05 29 73 ce 8b 06 12 61 4f 20 26 26 2c de 8d d5 96 3a e0 5d 48 da d6 5b 0f 75 8b c4 e2 f7 c9 69 ae a6 6b af 75 fc 64 51 39 24 d9 b3 e1 cd 9c 2f e4 8f 48 b0 a8 3b eb 28 d4 c7 0f e5 bc 1e 78 d4 36 ef 7e 9e b2 0e 16 9f e6 93 ed 83 92 9a 53 1d 9f 2e 51 ce 77 81 dd 5a 87 4c 00 5e 6b 8a e7 27 90 e6 a5 59 d9 57 fb c1 b6 6d 91 3e 6f e1 8c 54 53 0a 59 5c af fb ff 7b 1e 69 e3 3a ac eb 92 a7 e7 13 84 14 b4 e9 16 5c c6 92 eb 53 4f e6 28 b5 2a ea 2e 17 c3 cd 46 73 38 c4 57 fd bc f1 ff dd d7 7c da 09 1e 25 2d 57 4c 33 b6 f9 fe b4 Data Ascii: E;Xur6F%e/pij:J-6BYxPg9tK.?)saO &&,:]H[uikudQ9$/H;(x6~S.QwZL^k'YWm>oTSY\{i:\SO(*.Fs8W\|%-WL3
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: d6 7c c9 67 30 72 54 35 85 b7 ec ea f7 f7 d8 3f 0a cb 3b 92 7c 0b 04 b0 93 47 5a 5d f7 c3 93 4d cb d9 f1 de d2 9c 19 da 42 56 25 a2 bb 61 e4 c3 6d 68 4b 66 58 f1 03 96 db c6 a8 e2 fe 30 f2 a1 c6 31 b4 08 c0 0a 06 67 46 ef 29 b9 dd 1b 9f f3 5a 4a cf 46 91 69 6c 57 52 0d 57 ac 0a 2b 4a 0a e1 77 74 1c 86 e9 5c 1c a0 24 96 a3 75 26 6f 28 9c d2 f1 58 6c 0c 76 ca c2 87 88 12 d8 62 78 6c f0 fe b9 f7 69 c6 84 74 59 6b 13 6a 67 f9 4c 87 f9 ce 1a 5d fd 04 ed fe 6f 86 17 b3 d3 40 09 15 f1 45 66 cf 9e 69 0a 87 a8 92 9f 64 65 9b d7 20 be c2 67 35 1e 45 86 e5 08 22 65 3c 37 c2 ad 14 36 af eb b5 14 b7 d6 a2 5a fe 35 86 c9 ad 42 15 f4 cc 39 6f b8 c4 a0 71 0a 62 75 55 d0 5b d2 cb 2a 27 17 be be 25 d5 cf 44 14 89 6d af c2 f1 f3 8e 8b 9f 00 e9 b0 43 7b 6b fc 81 f1 aa c9 64 Data Ascii: \|g0rT5?;\|GZ]MBV%amhKfX01gF)ZJFilWRW+Jwt\$u&o(XlvbxlitYkjgL]o@Efide g5E"e<76Z5B9oqbuU[*'%DmC{kd
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: f8 1c f7 2c 1d 00 07 b6 64 a5 1f 50 7f ef 06 bc 40 fc c7 0f b5 91 ff a9 3f c9 1b 9f 7a 7e 1a fa 67 82 65 12 71 3f 98 db 2e 13 44 f4 3e 3b 3f b2 df a7 c6 43 59 46 74 dc 68 f9 05 57 b9 73 99 94 b2 b2 55 d2 e1 a0 11 d9 c2 6b 70 89 e8 78 e7 b7 0e 70 83 f7 1b 0d 4a a7 b1 2e 73 9e 54 3b 31 df 9f 16 bb e1 37 5a 36 5f 7f ba 6e 3e 8e b3 76 18 dc 07 33 88 da fd 06 58 e7 ad c9 e7 ed 01 e2 1c cc 73 f7 ec 00 4a e7 70 7d 99 94 0b 78 0e 00 10 08 3e 9b 40 2a 5b 03 e9 bf f1 df c9 3c 7c de df 94 d5 7f b2 9b 09 5c 97 ef 33 10 99 f3 0c 5c f4 40 4a 9e 90 72 55 bd c7 46 d1 89 07 0f 1a 55 22 ad b3 bf fc b6 45 0e 70 00 00 03 00 c3 4e 57 e7 e4 6d fd 06 9b a9 b7 d8 b0 1a ad fd a1 9f 57 fc d1 03 e9 14 5f 06 d0 9e aa c7 f6 e6 82 2c 89 3c 19 3f eb 24 a5 2f 21 d8 a8 99 f8 f9 51 0e 9b Data Ascii: ,dP@?z~geq?.D>;?CYFthWsUkpxpJ.sT;17Z6_n>v3XsJp}x>@*[<\|\3\@JrUFU"EpNWmW_,<?$/!Q
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: fc 9d d4 06 52 90 e7 24 9b 87 74 4d 47 87 25 31 6d 6a e4 50 7b e2 81 cc e3 1a 34 1c 78 59 b9 65 b6 aa 86 d3 81 ad f4 aa 41 a4 e2 39 13 8d d8 19 5b c3 7a 30 41 fe 65 36 f4 8e 68 90 83 ea 8d 50 50 c2 7b d6 16 95 9e 9d 87 c4 43 03 87 85 08 5b 36 e5 28 71 8c b4 88 b4 ef 73 9a 5b cc fc 6c 71 f6 3d ca 08 10 42 f4 07 59 1b c8 8c f0 b3 a1 84 fa c3 e2 8c 6c 03 6a e2 c7 ba 32 e2 bc 06 58 fb f7 c9 8b c4 5c fb 6c 91 57 07 69 46 7e 8f c2 b1 f0 ca d2 06 11 5f 37 ae 3c c0 17 89 c8 6b d0 02 90 c6 34 e9 7a d0 4b 1a 20 6b 1a 08 f5 81 03 33 9d 14 11 59 a2 70 75 56 2a 56 a4 54 a8 da 23 70 c5 bd da 4f d6 54 00 fd b3 32 72 89 fc 00 d3 8c 50 7c 5f 47 8d 62 6f ed 72 b3 42 75 55 c8 bf 0d dd 11 9c c2 b9 5a 89 6b e5 e2 00 94 35 fd b2 fd 9a f1 84 ce 11 36 c4 92 81 2c 34 eb 19 bd 0b Data Ascii: R$tMG%1mjP{4xYeA9[z0Ae6hPP{C[6(qs[lq=BYlj2X\lWiF~_7<k4zK k3YpuV*VT#pOT2rP\|_GborBuUZk56,4
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 1a 6e f1 ee 64 18 6b a9 dc 3f 2c 47 79 49 04 89 31 72 93 97 e2 cf 2a c2 31 db 11 d5 47 da 74 40 0f 3d 25 5c 4a 3b f6 be 72 7d dd 88 4d ab 0f 71 4e 83 cd 05 32 cb f3 a9 7e ce 83 27 10 fc 12 74 df eb 65 9d e3 34 ff 83 ba 8a 77 54 ef 6b e9 86 ab 4f 54 b1 6d b8 51 e4 5d 00 6a 1d 2b 71 05 db f8 00 00 03 00 01 06 58 97 92 c4 6e 23 8d 2b ef 30 92 da ba 99 69 56 81 c5 b2 9e 08 01 67 5b c3 cc 1a e9 99 a1 cc 0d 70 06 ac e3 19 b0 5d a1 8f f1 95 d3 0f 44 79 47 80 38 02 7b 8a 74 8e fd d9 de 42 9d 40 d8 d4 00 9b 19 90 68 f8 cc bc 02 69 64 b7 ff 52 bb 98 e8 6d 5c d6 fb 5b be 00 36 42 43 62 f9 7a c6 b6 f1 9a b1 9f d2 33 2e 39 69 de 69 b6 46 6c d0 b3 df 7a 34 ba 27 cf 4a f3 61 2e 34 bc 98 5c 0c 38 c2 7d 96 b3 44 aa 15 92 c9 c9 73 ca a8 5c a2 93 bd 41 f4 ab 43 f3 59 18 6b Data Ascii: ndk?,GyI1r*1Gt@=%\J;r}MqN2~'te4wTkOTmQ]j+qXn#+0iVg[p]DyG8{tB@hidRm\[6BCbz3.9iiFlz4'Ja.4\8}Ds\ACYk
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 03 d6 2d 3b 89 ca bc 06 66 25 27 64 db 4e 41 e7 1a c7 3a fc 79 93 20 67 2c db 64 68 9f 4c ac f3 ee 5f 2d 3e db 1e d5 49 70 c0 36 f0 ad 85 fc 71 9e cb 00 b4 49 47 9b c4 5c b4 ad 14 28 84 b8 48 c3 a0 ad cb 62 ee bb 8e 45 6c d6 55 85 a8 92 9b ba 87 63 53 f4 f9 73 08 b3 ae 09 ad 50 49 7c 5f b1 92 44 6c a5 40 a0 8a 77 b7 79 0d fb 00 a1 72 32 f4 0c cd ee d4 b5 84 42 23 32 b0 9d d6 64 09 10 1f 5b f2 f8 89 88 c5 72 74 6c 6a d2 7e c4 96 a9 dd 1e 6b d8 3f ca b6 e0 0b 9e be 44 e3 6f 67 60 85 d9 5d fa 0f 30 49 a7 a4 14 36 8d ec 04 15 c1 c0 c7 b0 36 d0 75 0d d4 a6 c0 e9 c7 80 cb 0c 11 c2 e6 e2 77 88 c1 10 83 b9 91 aa da 61 4e a6 48 0e 7b 83 62 39 9a 0f 87 db a1 a8 29 f5 e9 b2 80 2a cf 98 88 37 8a 54 4d 02 f5 20 fb 6f 86 08 26 ad b1 8e 85 89 04 e2 8e e2 3a d1 9e 8b a5 Data Ascii: -;f%'dNA:y g,dhL_->Ip6qIG\(HbElUcSsPI\|_Dl@wyr2B#2d[rtlj~k?Dog`]0I66uwaNH{b9)*7TM o&:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0f 64 bd c9 3b d0 00 7f aa e3 c2 27 3c af d0 f7 9e 6c c5 70 56 86 69 6c 54 86 50 b1 9c a0 ee dc 78 30 49 aa 58 94 89 51 a1 f6 5c 04 c0 59 26 63 23 cc 97 3a d7 bd 9e 26 28 4c 65 28 f0 37 b2 11 89 f7 90 c1 36 45 3f 60 2f fd c3 1a 5a 10 53 f6 4a e6 3b 40 f9 dd da 2d e3 2a 7e d5 8b 69 bf 79 87 21 27 68 a8 03 aa 2a d6 3e 5c f2 7c 4b 8f c5 1d 4b eb 16 b3 94 eb 60 36 df d6 33 7a 21 5d 8b 7f b9 36 14 d4 9b ff 26 92 2d 4f 4b f6 64 e1 37 0c 59 ab a6 af c8 49 46 6a 46 63 d4 23 42 ee a9 5e b6 72 e3 23 56 36 70 64 48 18 72 a0 50 4c bb 49 32 09 a5 f4 56 8c a1 da 55 4c 9c d4 c2 68 ab 0a e6 0a 7f d9 2d 12 fb 73 e5 c6 10 4b 6b e1 e5 ed 4e e9 a4 00 00 bf 00 08 bf 23 99 38 18 4c fd 06 a1 87 a7 4f 00 fc 0e 55 c7 6a d7 33 b5 17 8c 29 37 d1 55 40 75 31 03 0c c6 be df 1c ea 00 Data Ascii: d;'<lpVilTPx0IXQ\Y&c#:&(Le(76E?`/ZSJ;@-~iy!'h>\\|KK`63z!]6&-OKd7YIFjFc#B^r#V6pdHrPLI2VULh-sKkN#8LOUj3)7U@u1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50375	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1754	OUT	GET /blob/1232030/Features_Collab.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1360	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 6435 Connection: close CF-Ray: 86b215d69f3a3b47-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434827 Cache-Control: public, max-age=2592000 ETag: "60e5223b189a293e164433bc70a50777" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:39:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=7358 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: zaLsHSIk/s2F5vAl/Ix6+ZBXodunoKJKaejvSsaFjFyfBXu/oaDATNBj0dWVNK+2vNl6fypU9Cg= x-amz-request-id: A815YMJWXJBHCQZ5 x-amz-server-side-encryption: AES256 x-amz-version-id: SIdAy6ktsTo33yeEygrpi6aX8YNTnnI1 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FoNhEFDEwpNcWesEyAeDPFXLsJjj38ARDdhJOIBEyQWrwuz4GQaHxCTQjuhmT7wXK8vBAQPtPAY23nI6qo2JWENuNrq9oWROcLvSkFD8j7ViWQSx%2FriF40j6CtDHrQZkW3Q2dJco"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1356	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a9 00 00 01 22 08 03 00 00 00 74 85 dd 72 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 57 50 4c 54 45 47 70 4c 14 14 28 15 15 15 0f 0f 1e 16 1f 21 d5 d5 d8 c3 c3 c6 e6 e6 e8 ed ed ed f0 f2 f2 f9 f9 f9 f5 f7 fe ff f8 e7 ff ff ff da eb ff ff e0 9d f0 d6 f6 ff d4 79 b5 d6 ff e4 b5 ee fe c3 46 fe bc 2e da 9a e8 83 ba fe 61 a8 ff cd 75 df bc 48 d4 43 79 dc b4 32 cf 0b dd f8 3e 00 00 00 0d 74 52 4e 53 00 06 0c 11 1a 43 55 70 90 ab c8 f5 fd 5a 27 86 3c 00 00 18 51 49 44 41 54 78 da ec 9b 89 72 e2 3c 10 84 d7 87 f0 31 f4 96 2a ae d2 ae 14 de ff 39 7f 74 40 73 18 ec 18 f6 17 38 e9 c0 da 32 b2 c2 fa 73 cf 8c 44 f8 f5 a3 1f fd e8 ff 56 41 fd 5c 8c d7 a7 44 58 Data Ascii: PNGIHDR"trgAMAasRGBWPLTEGpL(!yF.auHCy2>tRNSCUpZ'<QIDATxr<1*9t@s82sDVA\DX
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: d9 9a e3 a9 a7 cd 7c 95 27 55 e6 f1 54 39 9b d4 4e 60 c3 0d ab 0f c7 79 d4 62 88 bd ad c8 30 68 c0 46 88 60 eb 06 29 a7 e1 53 e1 c1 b0 d0 06 3a 9c 62 21 7e 6b 76 c7 91 b4 a4 a6 93 78 8a d8 d9 79 aa 96 a7 90 da f8 61 bd 5e 33 fa 71 7f 48 a4 68 88 b4 e3 0e a4 44 bb 68 bf 74 b2 63 5f 92 e2 70 e1 c5 e8 d4 78 18 10 1b 8f 8a 09 5b c4 57 d3 48 11 fa 10 d1 1b ed e6 7b ea 39 6b e9 35 87 7d 65 4f 99 03 29 1a 2c 5d 35 7a 4a bb 53 fb c5 2e ee 82 94 75 7b d9 43 df 14 df 34 6c 7a 35 0d 30 f0 70 84 ca 79 9b e6 db 9d ed a9 e6 41 4f f1 5b 4b 6f 41 4a f3 ba 9b 63 20 72 91 14 6d c2 eb 4e db 51 48 92 88 88 f5 8a a5 e3 2e 6e 04 0e e7 00 c7 37 35 7f 3e 55 d6 ea 19 a4 5a 4f aa cc 55 fb 2d 24 e5 20 44 c4 e8 67 2f 48 39 6b 34 20 57 f3 29 0d d6 19 ce 5a 0d 1c 48 a5 01 48 8a fc 98 Data Ascii: \|'UT9N`yb0hF`)S:b!~kvxya^3qHhDhtc_px[WH{9k5}eO),]5zJS.u{C4lz50pyAO[KoAJc rmNQH.n75>UZOU-$ Dg/H9k4 W)ZHH
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 4b 0f 5a eb 44 2c 1c eb 57 42 96 e8 0b 9c b6 0e 0b 7f 60 7e 8d 17 c4 75 64 7b 55 00 ba 5d 52 f6 8b 76 4b f6 1b 45 85 b0 73 b4 35 d9 4e fe 68 a4 b6 1b 44 90 e8 68 70 a8 c0 6d 90 0d b9 01 8a 0e 82 01 69 e4 80 63 e6 0f 05 b5 90 fc 5d 27 88 c3 9e 24 f6 aa c3 bf 28 f0 8a 89 6e de 87 4a 14 3a e0 05 4f 26 87 b0 3d 0a f5 0e 77 b9 94 5b 3a 6f 12 0b 75 9b 8a 5b 51 ea c0 9a 91 78 29 5e 88 1f 47 1d c6 c2 62 b1 58 4f 29 cb f8 18 ec 41 a7 82 c8 9c 32 ee e5 36 2e 71 22 af cb 89 9d b5 69 09 43 64 ad 09 b0 14 1f 90 ad 4a 64 44 f6 fb fb db 5a 72 3a 73 14 dc a6 84 d4 44 e5 77 a3 da 96 d4 c8 9c 33 3e 61 de a0 84 ba 10 7d 7b 01 56 3e d1 65 61 8a 04 33 21 98 0e f1 13 31 31 d1 2f 2e 0e 28 e6 32 a1 b6 4f 63 16 3c ee 0b 79 54 0d 93 35 d8 8a 86 30 2b 94 ec 14 80 10 ea e4 c2 1f 60 Data Ascii: KZD,WB`~ud{U]RvKEs5NhDhpmic]'$(nJ:O&=w[:ou[Qx)^GbXO)A26.q"iCdJdDZr:sDw3>a}{V>ea3!11/.(2Oc<yT50+`
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: cd ba 7e ea 90 ee f9 14 ba 7e a4 fd 11 b2 7e 8e c2 5a 53 5a 2a ed 38 a9 40 88 dc 60 04 53 50 a5 b5 2e bb 10 fd 42 69 63 6d 19 4b 97 64 6c 1d de b9 bb 77 9a 94 46 3f 75 48 fb 7c aa 36 25 32 d6 84 23 44 01 c2 3d 5f 97 64 9a 62 ae 3a 12 dd af dd 9a b2 8e f9 b2 9d 35 25 de 05 9f e6 22 51 5b 4c 12 7a 03 db 80 db 95 2a b1 77 cd d8 2f f9 cf a7 86 aa 31 9c 9b 17 ca 4d 67 d7 57 46 a6 5e 6e 0b a4 64 7a 73 e9 c9 68 48 2a 9d 8e 2a 69 52 a9 9c 4f f1 f5 7e db 17 fa 29 9d ec 37 08 74 f0 14 40 ed d9 54 09 7f 2b 27 99 a9 74 98 ca 90 49 f0 9b 6e c7 34 ae a1 15 87 96 a7 f2 24 bf 3d da bd dc 2f a1 8b 68 93 52 9d c0 d0 0f a0 60 2a 55 90 49 36 f8 a1 9f 4a 61 e6 ef 44 54 26 06 ea a2 03 a9 66 39 ec 9c 14 be ed a1 4d 22 f1 0f 73 84 59 12 dd 14 50 45 52 c7 a4 ee 70 65 88 f2 08 0a Data Ascii: ~~~ZSZ8@`SP.BicmKdlwF?uH\|6%2#D=_db:5%"Q[Lzw/1MgWF^ndzshH*iRO~)7t@T+'tIn4$=/hR`UI6JaDT&f9M"sYPERpe
2024-03-27 20:21:10 UTC	972	IN	Data Raw: aa 90 86 6e 15 7b ea 0d dd d4 02 a9 aa 8d e1 46 05 72 28 42 c5 52 bd db 6a 52 0e 15 93 1a 99 a1 50 0b a4 0a ba 75 8e e5 6d 91 14 ea a1 da f5 19 52 3c a2 18 92 92 eb 48 41 57 64 a6 49 81 0e da 58 4d 8a c3 df dc d0 6f 99 14 b4 4c 0a 81 12 c9 f5 fd 94 56 8a e7 93 c6 87 7e 2f 93 aa 2a 90 72 d9 6a ac 22 ec 85 32 b3 9e 62 52 63 a8 9e 25 55 15 ae dc ad b8 55 d7 c2 5d 72 16 49 dd 0a 22 ef 22 1c f7 02 4d e0 7e 0a c5 6d 85 a7 24 cf 27 41 de 52 cf 92 8a 97 48 df 8a a2 70 ac c2 d6 eb fd e7 5a 00 15 c2 9f 4b 78 ca e4 eb 5c e7 3d c5 f3 49 d3 9e d2 cf 93 2a 8a ca 1f 7c f7 42 e4 0b 15 9e 02 6a 22 f8 b9 9d a1 ce 6d d6 53 fc 11 d5 08 28 f9 32 29 47 c8 99 cb 93 ba c2 3d 83 f0 d7 e0 c4 3e 24 46 49 69 f6 54 5f c2 e9 95 e8 07 06 20 55 61 37 0a 13 10 a1 1d a4 26 49 29 f6 d4 ef Data Ascii: n{Fr(BRjRPumR<HAWdIXMoLV~/rj"2bRc%UU]rI""M~m$'ARHpZKx\=I\|Bj"mS(2)G=>$FIiT_ Ua7&I)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50373	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1964	OUT	GET /video/1376274/BRCA24001_WWYDT5_LandingPage_Video.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1352	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 5123929 Connection: close Content-Range: bytes 0-5123928/5123929 CF-Ray: 86b215d6b8c90808-IAD CF-Cache-Status: HIT Age: 792726 Cache-Control: public, max-age=2592000 ETag: "c6bfb095f383a1b3eb70942105963852" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 29 Feb 2024 01:02:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: pSJQLJO86om4VKu8MMlT0tlMQsBRyRzt00qhPtScUz23H804In4EvQBaAS/AeAYWfZ6cwwFw3rQ= x-amz-request-id: AVRH2G5Q3K8EMY4Z x-amz-server-side-encryption: AES256 x-amz-version-id: V6cPimFLbhVrBKmupL.kE.iGEPbI_ME5 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FqwU3RKmpeIv4hfBUrBr%2FpAIZJSw9FrtGPpDaBwomSXtB88MjIRnQZMFNc%2FnzbLnVUpYsryOr0LjewXBPxvrgYcRS37jRU8vy7Sd85Tz6apMaJ76JBFQfWQ5y86e1TTRVK6f8nOm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 6d 70 34 32 6d 70 34 31 00 00 1a af 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 03 13 95 e2 03 13 95 00 01 5f 90 00 22 c5 90 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 1a 01 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 e2 03 13 95 e2 03 13 95 00 00 00 01 00 00 00 00 00 22 c5 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 82 00 00 04 38 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 Data Ascii: ftypmp42mp42mp41moovlmvhd_"@trak\tkhd"@8$edtsels
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 01 97 00 00 02 17 00 00 02 e0 00 00 0a 76 00 00 03 8b 00 00 04 65 00 00 02 38 00 00 05 33 00 00 02 ec 00 00 02 5b 00 00 01 cf 00 00 06 30 00 00 01 5f 00 00 01 dc 00 00 00 ea 00 01 28 38 00 00 02 bc 00 00 00 bc 00 00 00 a7 00 00 00 5b 00 00 0b fb 00 00 02 1c 00 00 02 f0 00 00 03 47 00 00 23 2c 00 00 05 49 00 00 09 cd 00 00 08 3e 00 00 26 7c 00 00 0b 53 00 00 0b ea 00 00 09 fe 00 00 1c c2 00 00 08 fb 00 00 09 89 00 00 07 c1 00 00 17 0b 00 00 06 53 00 00 05 a6 00 00 03 e4 00 00 f9 41 00 00 38 83 00 00 04 2e 00 00 04 da 00 00 0e 73 00 00 6c 5f 00 00 23 4a 00 00 2f e2 00 00 36 35 00 00 8b 28 00 00 2e 4a 00 00 40 ea 00 00 6d 38 00 00 31 02 00 00 63 ba 00 00 33 d3 00 00 2e 63 00 00 4f e7 00 00 26 43 00 00 2d cb 00 00 20 e9 00 00 3f f9 00 00 20 ca 00 00 28 00 Data Ascii: ve83[0_(8[G#,I>&\|SSA8.sl_#J/65(.J@m81c3.cO&C- ? (
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 06 5f 00 00 0a 9d 00 00 08 53 00 00 22 07 00 00 06 20 00 00 08 12 00 00 06 5d 00 00 1e 29 00 00 05 e1 00 00 07 3a 00 00 06 43 00 00 1b 4d 00 00 04 ef 00 00 06 df 00 00 05 d7 00 00 1b cc 00 00 05 4f 00 00 06 28 00 00 05 2e 00 00 1c d6 00 00 04 15 00 00 05 a5 00 00 04 b4 00 01 4f e0 00 00 22 0b 00 00 05 ad 00 00 08 0c 00 00 06 35 00 00 24 17 00 00 07 ac 00 00 0a 0a 00 00 06 c9 00 00 1d 54 00 00 06 39 00 00 07 d5 00 00 04 d4 00 00 20 f8 00 00 04 f5 00 00 04 65 00 00 03 18 00 00 18 a0 00 00 04 c4 00 00 05 4b 00 00 03 ab 00 00 11 14 00 00 04 8d 00 00 05 d4 00 00 03 f8 00 01 3b 7c 00 00 36 f3 00 00 05 0c 00 00 09 62 00 00 06 b2 00 00 20 2d 00 00 07 82 00 00 05 d2 00 00 04 a9 00 00 26 cc 00 00 06 71 00 00 07 e2 00 00 05 a8 00 00 2b b1 00 00 06 92 00 00 09 c1 00 Data Ascii: _S" ]):CMO(.O"5$T9 eK;\|6b -&q+
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 Data Ascii:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 03 e8 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 0f a0 00 00 00 03 00 00 00 00 00 00 00 01 00 00 Data Ascii:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0d a9 54 53 5a 00 01 00 00 31 00 05 e5 80 75 75 69 64 be 7a cf cb 97 a9 42 e8 9c 71 99 94 91 e3 af ac 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 31 20 37 39 2e 63 30 32 30 34 62 32 2c 20 32 30 32 33 2f 30 32 2f 30 39 2d 30 36 3a 32 36 3a 31 34 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: TSZ1uuidzBq<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c001 79.c0204b2, 2023/02/09-06:26:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 65 22 0a 20 20 20 78 6d 70 44 4d 3a 76 69 64 65 6f 50 69 78 65 6c 41 73 70 65 63 74 52 61 74 69 6f 3d 22 31 2f 31 22 0a 20 20 20 78 6d 70 44 4d 3a 73 74 61 72 74 54 69 6d 65 53 63 61 6c 65 3d 22 32 35 22 0a 20 20 20 78 6d 70 44 4d 3a 73 74 61 72 74 54 69 6d 65 53 61 6d 70 6c 65 53 69 7a 65 3d 22 31 22 0a 20 20 20 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 0a 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 61 65 39 36 62 66 65 2d 32 62 34 32 2d 34 32 37 66 2d 61 63 66 62 2d 62 30 32 66 62 33 37 30 32 32 61 65 22 0a 20 20 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 39 36 62 36 33 63 37 66 2d 31 33 38 38 2d 34 32 62 66 2d 62 30 38 34 2d 36 63 65 36 30 30 30 30 30 30 37 37 22 0a 20 20 20 Data Ascii: e" xmpDM:videoPixelAspectRatio="1/1" xmpDM:startTimeScale="25" xmpDM:startTimeSampleSize="1" tiff:Orientation="1" xmpMM:InstanceID="xmp.iid:2ae96bfe-2b42-427f-acfb-b02fb37022ae" xmpMM:DocumentID="96b63c7f-1388-42bf-b084-6ce600000077"
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 2d 39 64 32 65 2d 66 39 62 30 38 36 61 39 64 34 37 31 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 31 2d 32 39 54 31 36 3a 31 34 3a 31 39 2b 31 31 3a 30 30 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 41 66 74 65 72 20 45 66 66 65 63 74 73 20 32 30 32 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 63 6f 6e 74 65 6e 74 22 2f 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 39 63 35 64 32 37 61 2d 63 36 66 63 2d 34 64 66 35 2d 38 Data Ascii: -9d2e-f9b086a9d471" stEvt:when="2024-01-29T16:14:19+11:00" stEvt:softwareAgent="Adobe After Effects 2024 (Macintosh)" stEvt:changed="/content"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:a9c5d27a-c6fc-4df5-8
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 32 2d 32 30 54 31 31 3a 31 32 3a 32 31 2b 31 31 3a 30 30 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 41 66 74 65 72 20 45 66 66 65 63 74 73 20 32 30 32 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 37 31 65 31 63 37 64 2d 37 31 38 65 2d 34 61 35 31 2d 38 62 39 39 2d 64 63 38 65 32 39 61 30 30 63 31 66 22 0a 20 20 20 20 20 20 73 74 45 Data Ascii: stEvt:when="2024-02-20T11:12:21+11:00" stEvt:softwareAgent="Adobe After Effects 2024 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:671e1c7d-718e-4a51-8b99-dc8e29a00c1f" stE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50374	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1952	OUT	GET /video/1316640/c_howto_print_1284x721.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1369	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 828213 Connection: close Content-Range: bytes 0-828212/828213 CF-Ray: 86b215d6bc8081fd-IAD CF-Cache-Status: HIT Age: 777115 Cache-Control: public, max-age=2592000 ETag: "6e7627be244b41c5e3b529cd8e1cb6d9" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Wed, 24 Jan 2024 10:50:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: m1q69Es6NtO8vKvtgCLXAyQ4ebCMZkfx07/VA8p3gfUMD5z1uuaU5DhcqzRRVTnu42u7EfuhvlU= x-amz-request-id: E68XPQ13BX8NDS8Y x-amz-server-side-encryption: AES256 x-amz-version-id: Ggbr8Mabj854gKqxm_0IOKrBilC1D15b X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=juMPFhIUPreBAr0yXNmLW2WDl7WUUWH7zlKnnu02t5rkXmUlFqgvnLX3luovo%2F3GPb7XOuaGHOuu3CcvAeY5iS4Ntg3iM5nznCwhZsEPFvOUeNCFw2qm7mIIXgZngLh1VvmlnZA5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 0c 90 18 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 30 39 35 20 62 61 65 65 34 30 30 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freemdatEH, #x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: e2 12 50 d6 ed 5b c6 69 7f 9c c1 62 50 19 bc 71 3e 86 81 50 6c b7 b3 e3 c7 47 47 6c 29 47 4a fb 25 7f 94 07 eb e5 e3 09 8e 2e e1 e1 58 29 46 a0 83 19 01 48 0a 4e 80 5f cb 2f 30 31 d7 14 58 6b 19 ae ba 45 bd 06 3e 47 92 7e 44 a3 c7 c8 bd bb cd e5 2f 9b c3 8c d0 fc 69 0c 8f a2 c1 39 ac 21 64 0a c1 94 d9 f6 68 6a 01 09 7a 40 9e c4 10 94 fb 40 a5 08 ba 19 94 ee d2 da 50 2d 2d 91 69 ed 50 53 3e ea 43 c7 5d c3 78 0f 51 82 38 6f 8d d8 7d aa 63 93 e5 09 f2 8c 98 41 07 43 32 92 5a 89 91 d7 12 ad a8 7d 86 86 25 f7 1d 18 94 af 5b 9c 19 8c d3 51 55 32 97 42 68 da 36 f2 0f cf d9 24 b4 0c cc 33 82 1c ce ee a9 63 80 1b 73 ca b9 37 97 96 26 29 9b b3 1d 5c d9 eb 11 38 59 c7 3d f0 98 cd b3 df 66 ea b1 e4 a9 ac 02 4f bf 7b fe 1c 9c fe d2 8b dc 1a 54 aa 85 85 5a df d6 59 c2 Data Ascii: P[ibPq>PlGGl)GJ%.X)FHN_/01XkE>G~D/i9!dhjz@@P--iPS>C]xQ8o}cAC2Z}%[QU2Bh6$3cs7&)\8Y=fO{TZY
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 73 0e 73 6c 51 49 17 0c d6 55 1f 99 2c 2a d2 a4 ac 76 30 1b c4 c5 4b 1c 50 74 6b e0 c2 f4 30 49 19 86 e3 cb d1 5d 2e df 40 5f a7 2e 6c 19 44 71 d7 07 aa 49 4a de 53 6e 3b 16 e7 a9 0f cf 5c 54 63 de 7b 6c d7 14 9d 91 a2 5d 75 d5 dc c1 5a 0c 46 94 45 00 53 52 61 2f cd de 33 62 8d 38 9d c9 39 0d e7 f1 70 82 69 4c 50 5d 1f 53 4c 59 9a 11 63 b6 fd c0 e1 95 65 45 06 ed c0 d7 e1 09 46 78 b5 03 14 10 d0 e5 64 1d a6 c4 1b 6b 93 af a3 d8 01 73 9e 84 52 18 34 26 b0 f8 ec bc a7 b4 4a 9c e7 3d 2b d2 eb 12 94 aa 99 a6 12 86 cf 0a ee 9c 08 3d a0 7d 06 92 de 64 ac 65 0c aa 7e 50 03 b3 15 86 23 64 c9 8d 55 51 47 36 e6 a1 fd 62 5a 63 6f 36 a6 09 50 4c a4 ec c7 39 91 e4 09 a4 1a 34 ca e5 1e aa a1 bb a1 89 9a 39 ab 1d 47 8a 94 79 98 fe e8 15 52 ac 80 b5 48 a1 61 06 7d 8b 79 Data Ascii: sslQIU,*v0KPtk0I].@_.lDqIJSn;\Tc{l]uZFESRa/3b89piLP]SLYceEFxdksR4&J=+=}de~P#dUQG6bZco6PL949GyRHa}y
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 72 5b e3 94 f5 b4 09 51 ba 83 df b2 83 df 56 fa cb df 7d 71 3c 4b 95 95 5c 8a 02 b1 a6 7c 42 5f bd 24 53 df 02 40 b0 00 17 3b db 0c 36 99 b3 b3 98 29 10 a3 01 b6 aa 2a b9 33 12 63 b5 d1 84 ae 13 6c 09 f1 9f 7e 10 30 db eb 68 5f 88 b8 54 ab 4d 7c 50 a0 6f 02 68 23 b2 b8 04 0a 90 98 48 81 ff e0 96 07 d4 03 26 03 13 7b 7a 1f c1 34 43 5d 41 02 19 d2 d3 24 99 e5 9c 49 6f e7 50 67 ea b3 7f bb e0 cd d3 1a ba db 82 26 5b 1a 15 81 af ff 6a 8b 60 e2 6f fe 8a d8 fe de 10 df 10 f2 0c dc 9e 5f 58 d9 9f ec 3b d7 1d 10 72 5e ab bd 63 21 e0 16 ae d4 6c 1e 6b c5 8c a2 c0 bf 78 b3 3b ca 57 91 df a7 a1 40 b5 0a e2 44 73 01 bd a8 2f 40 fd f0 f2 9a a4 80 45 71 71 ca 21 88 a7 43 f8 a2 53 49 9f 14 4e 52 7c 20 7f 4b 3b 0b 25 dd b8 b9 df d5 75 7f 29 1b f6 f2 8c 4c 8c f1 62 49 d0 Data Ascii: r[QV}q<K\\|B_$S@;6)*3cl~0h_TM\|Poh#H&{z4C]A$IoPg&[j`o_X;r^c!lkx;W@Ds/@Eqq!CSINR\| K;%u)LbI
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 1d 0d 54 d7 72 2e 1d 77 33 48 39 6a 28 97 ab 92 b9 04 a3 4b 3a 92 df a3 f8 c7 5a b8 47 7b 82 5a e4 59 e2 6a 3d 67 2e 60 68 67 b4 3b 27 37 a0 cd a8 7b 8a 9f 9a 62 94 54 47 a0 4d bd 7e e5 5e 62 ab 5a e8 88 09 18 d5 b6 3b 93 94 97 31 b6 fb c7 22 46 4b eb 26 a4 fd 68 d6 db 25 3a 84 4e cf f6 d3 8e dc 5e 0d a3 35 44 b0 c9 e5 7e 56 12 1f db 31 16 f6 11 03 bb 32 72 4c 2b d6 2e 8e 02 d9 63 c5 f8 34 39 14 02 a7 80 01 59 98 8f c6 e0 44 ae 66 3b e3 5c 39 89 a0 8a ca f5 cb 82 01 20 ca 20 03 a6 81 82 94 e2 fe c1 ac 5e 64 b2 5c 8e 7a c6 94 fc 4a 84 a5 70 c8 f0 7e f1 48 49 a3 cc 06 20 53 f6 77 6f 30 15 6a f6 fd 22 d1 6e 71 07 3e a0 0c fc 78 ad 34 30 db e8 d7 e4 7e 27 07 6e a3 34 3a fc cf e9 2f 47 08 85 f1 fb 24 c4 dc 50 e2 77 41 2c 11 a9 cf 7b 81 a1 ab 06 3b 00 1e eb 9b Data Ascii: Tr.w3H9j(K:ZG{ZYj=g.`hg;'7{bTGM~^bZ;1"FK&h%:N^5D~V12rL+.c49YDf;\9 ^d\zJp~HI Swo0j"nq>x40~'n4:/G$PwA,{;
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 2d ad cd 51 e3 a0 e8 8a 65 57 f8 39 ad 8f ff 5a e7 ff 35 15 1c f3 7b 5b 09 d6 44 8b cf 8f 9a 5e 55 19 b5 86 d0 fa 21 06 4b fa 28 1f 82 ca 56 16 e3 90 82 b1 c5 01 6f 37 5e 6b 38 35 ff e6 c4 7d c7 c6 77 dd b1 37 c1 f9 8b 72 a8 34 74 20 d1 42 8a 29 41 9d 07 7e 8c 9c 43 b8 7f c0 42 8f 51 eb 13 55 77 fb fb 2d d6 c8 ea 6b 79 64 24 de de d3 fe 8c ae cd 7d b9 08 37 cb b1 57 6b ad 84 88 dd 00 17 b8 8d bc 12 91 62 93 bd d6 e8 d8 ca 40 c0 bc af 7e d5 fa 83 af 98 ba 02 f7 84 65 f9 df 6a d0 28 23 c4 29 8f e8 7e 79 14 1a ec f0 3f ef c1 e1 84 17 08 85 21 ca a3 13 32 2c c6 5b a3 1a 7b 05 b4 06 9b 47 c8 14 b1 40 3f 76 7a 94 75 3a 80 54 c8 6f d0 62 23 42 12 1d f3 27 7f 45 b1 fb 37 1a 5a 71 30 b1 35 cb a3 08 68 76 c0 24 2c 2a 8c 27 42 6c 67 f9 16 06 72 0a 25 66 a3 d8 0b 8e Data Ascii: -QeW9Z5{[D^U!K(Vo7^k85}w7r4t B)A~CBQUw-kyd$}7Wkb@~ej(#)~y?!2,[{G@?vzu:Tob#B'E7Zq05hv$,*'Blgr%f
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: d4 7d f5 3e f4 6c 05 c1 c8 78 63 b7 7c be d0 a3 85 46 2d 33 b0 e2 22 98 04 8e 45 3a a8 50 87 e2 5c 46 85 9e a6 17 f2 b0 3b 8b 62 56 80 c1 12 b1 8d 5f 08 26 63 bf 0c a6 25 dc 35 ba 86 f9 e2 4c c5 3b 68 01 d1 56 5e 7e 0b 27 2c f3 fb fe eb f2 f4 0a 8c 66 be dd d7 4c 1e 8d aa 6c 37 ab c7 3d 14 2a 42 82 72 e5 35 8a 73 d8 82 49 8d 2b f5 43 34 b0 1e ee 4e 15 6b 7e bf 99 71 a8 32 9a 4c af b0 f5 ed 74 ea 29 f7 40 35 c6 40 27 04 c2 7e b1 25 1d 02 88 05 b8 07 5c 82 c9 0b 87 7d 0f 1b f2 85 0d 10 8e f9 17 88 ff 2d 7b ee 8d 8b 05 09 ec 31 49 7a 19 45 11 8e 1a b4 4e 9d ac be 26 83 92 a2 20 0c 3b f2 b9 af 60 cc 0c e6 5c 5d 5e af a7 74 7d 50 b5 a7 9d 22 40 89 34 13 2c 7f 15 59 97 b3 70 2b ac 1d 50 da ed 74 db bb 03 b7 a6 56 2e dc b4 0e 29 bf 3e 3f ed df f7 c2 a3 70 d1 c8 Data Ascii: }>lxc\|F-3"E:P\F;bV_&c%5L;hV^~',fLl7=*Br5sI+C4Nk~q2Lt)@5@'~%\}-{1IzEN& ;`\]^t}P"@4,Yp+PtV.)>?p
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: c4 53 35 90 ea ec 75 93 1a 1c ad 75 61 b7 9b d5 42 8a 64 7c 0e 5c 95 a5 f8 b8 b7 b8 76 f2 b8 c4 ee 66 a3 25 9f 52 7c f0 b6 a4 37 0a aa 2e e1 e9 71 56 a0 13 ee e9 58 cc c3 33 ae 2e 40 2f 54 9c ad a5 c2 a3 63 4a 1a f0 d7 79 b2 e9 ba 02 4b 1f 46 12 69 49 69 17 78 b8 e4 fa 0e be ea 38 1f b7 49 8b 55 c6 e4 a7 a9 e1 cf 49 97 b1 4a 86 39 16 2a 6e 33 ac 3e d4 60 9e a3 d1 42 75 b7 45 a5 7e b3 34 aa a6 ba f6 63 dc 76 ad 08 7c ec 7c ee db ba 53 21 61 c0 bd 93 87 90 3a 84 7f 1e 49 93 d1 09 5c 96 73 2a 3a 6a 1b 0d bf e8 b0 43 2d f4 ee c2 e6 83 3f a0 ac bf 45 ff 9e f6 c2 86 bd ea 74 6f aa 92 10 0e 68 62 f2 f1 cc b8 67 b9 29 46 62 9e 1b 9b 55 f3 34 b0 3a 7c 29 57 02 a9 9a 7c 0e a4 e5 54 ff c6 71 f9 90 67 fa b1 a8 80 6c 37 b8 1d a5 bd 34 27 6f 8a 8c 07 46 9a 55 88 33 bc Data Ascii: S5uuaBd\|\vf%R\|7.qVX3.@/TcJyKFiIix8IUIJ9n3>`BuE~4cv\|\|S!a:I\s:jC-?Etohbg)FbU4:\|)W\|Tqgl74'oFU3
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: c7 4e 0a 6d 2a fd 1a 0f 51 40 e1 42 2c 16 4f 71 fc 94 62 b8 62 f5 b7 c0 66 21 13 d5 9d 89 78 49 eb c4 74 bd 3c 11 81 83 e6 98 e9 9e 48 99 77 e1 7e bb 2e e7 70 3c 4b 66 a2 27 68 ba 01 2b c7 0c bc 4d 76 a1 06 ec f7 49 e3 6c fd 8a 3c 59 49 44 8f c4 f9 2c 30 27 3c 15 ad 3d a4 4d 9d d8 73 94 45 7f f7 e2 7b 90 a1 c9 d2 79 2d d7 2f c7 15 fe c2 84 d0 7b 31 4a df 57 ea d6 84 30 37 bf 74 79 4a d3 4e fe 50 f9 6d 12 9d 44 a8 66 a4 e8 ae c1 79 1a 8d 26 9b 15 99 fb 4a c8 5b 8c 94 d4 cd 01 a7 16 86 24 ce 7d b3 a8 cb d1 87 6b 22 75 bd 46 b8 24 25 02 0b da a9 4b d0 c2 c1 e4 69 39 5a 1c 10 21 78 91 cb a8 9c 46 c7 88 29 8e 5a 16 6b 7f d3 4c 91 42 6c e5 2f 72 5d 88 fa 80 69 e8 4f ef 30 2b 13 db 98 71 a7 cb 26 8b 07 39 7c 7e 21 d2 1d bc 98 b8 f8 64 dd ce 40 81 7f 71 eb e8 c3 Data Ascii: Nm*Q@B,Oqbbf!xIt<Hw~.p<Kf'h+MvIl<YID,0'<=MsE{y-/{1JW07tyJNPmDfy&J[$}k"uF$%Ki9Z!xF)ZkLBl/r]iO0+q&9\|~!d@q
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 03 a6 ae e6 0b 5a 33 0f cf f6 51 1d 1c fd a2 ec 3b 1d c4 85 9f ae 89 28 1f 76 be 17 96 33 cb af 93 59 28 07 01 5f 90 a9 82 ff 61 a5 99 6c 7a 76 58 e7 0a b4 d1 e0 e3 d9 3c fb 11 82 5a 41 02 ac 7a 8e 28 15 ee c4 15 0c ff ec dc 3c 08 13 99 a9 aa f8 67 59 a5 1d de 1e d5 4c c3 aa 77 cf fa c2 34 05 fb 81 33 ac dd 52 4a 04 5c ff eb 45 aa 90 78 36 d4 64 14 c7 10 2c 36 62 59 0d f0 c0 d2 e4 d4 26 ce 85 00 9a 50 10 92 a5 d6 4e 49 a5 20 ca f4 fc e4 23 ab 66 db 8d 54 6f 8a f0 03 38 0f 3a 42 28 9b 2a 82 fa 5d 4c 45 e9 9a 00 ca 6c a5 0e 33 9f e6 d9 9d 2d c1 c2 a0 a6 ff 3f 81 b2 75 81 fe 9c 8b 2b a9 c7 df f0 1b 15 46 84 22 25 30 c2 65 53 f9 7b 16 63 39 ce bf 64 be d6 5b 34 88 04 09 63 df 5b 04 f4 64 18 a1 e0 c0 22 77 0c b6 c3 9c 8c c0 9d 2a bd ee 47 b9 db 81 77 94 5e 14 Data Ascii: Z3Q;(v3Y(_alzvX<ZAz(<gYLw43RJ\Ex6d,6bY&PNI #fTo8:B(]LEl3-?u+F"%0eS{c9d[4c[d"wGw^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50376	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1954	OUT	GET /video/1375446/c_howto_website_1284x721.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=0-
2024-03-27 20:21:10 UTC	1358	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: video/mp4 Content-Length: 1752695 Connection: close Content-Range: bytes 0-1752694/1752695 CF-Ray: 86b215d6bd4a0838-IAD CF-Cache-Status: HIT Age: 782120 Cache-Control: public, max-age=2592000 ETag: "f967e9962694b5224409d80b80f2c960" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Tue, 27 Feb 2024 03:31:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: C+W2am6F1WsPlOZxefm2Y6vRxSEX4uBbE6FppQawsXzBZqfY4KQ3mZqUKognxV2RdTD8Gb194vY= x-amz-request-id: VSDF1BFNGN5YXQ2M x-amz-server-side-encryption: AES256 x-amz-version-id: OfrsjLeUj9WuOq2z3Bm2UvsLXHQLbNjE X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfPRpEx007iYQFJ7EDiY1QDjFWg8P2io94U3r0sRoWzAL4ATqisI%2BOKIEG9WOt8%2ByNZDLZzCdwJs%2B8DWlrozJ5hRkY8msLALU8YW4%2BsDkWR5dq3d1yqmquJmO0RHngpQu%2FMxShI8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:10 UTC	1358	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 1a ac 66 6d 64 61 74 00 00 02 af 06 05 ff ff ab dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 34 20 72 33 30 39 35 20 62 61 65 65 34 30 30 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 32 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 33 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freefmdatEH, #x264 - core 164 r3095 baee400 - H.264/MPEG-4 AVC codec - Copyleft 2003-2022 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 51 c6 37 17 64 d0 af 98 c3 ac 07 b4 80 b9 a7 d2 6c bb cd 8b 35 8a d0 cc ea 78 50 9c d3 15 38 eb 33 76 cf 79 79 87 97 09 b1 90 41 c0 b7 3b 8d 9a bb 5c 48 d5 1a 18 8f a6 8c 13 a5 a1 ad e3 c6 5a de 3d 51 bc 2c 5e b3 f1 3d 3e f1 75 64 ac 72 8c 33 fe 28 b5 dd ab 19 41 04 2d 82 e9 5a 88 6b b0 53 be 80 58 a0 a1 da 4c e3 bf 1c 1a 53 27 79 3f 9b 08 7d 63 20 b2 e2 74 13 a8 2f e9 d7 68 1f 9f dc 15 89 6c c4 e7 aa 5b e2 76 9d aa 38 1d df f5 1a 2a 32 10 3b a6 e6 6d ec 1b d8 d5 21 1c a8 7d 3a af 02 aa c1 1f 7d 7d fe d3 73 d1 fd bb 11 c3 8a d6 78 fb df 0e db b6 14 1c a2 e1 d0 8d 25 29 31 42 93 e1 f3 10 74 a8 6b 72 80 0a 47 43 b4 09 fa 84 84 d9 8d ba eb 95 37 8d 7b 68 06 b9 3d e1 11 44 97 38 50 93 7f b5 ec bd eb 4a db 65 d8 4c 88 76 2a 85 8f 3e ed c8 09 0c b5 97 db 33 e6 Data Ascii: Q7dl5xP83vyyA;\HZ=Q,^=>udr3(A-ZkSXLS'y?}c t/hl[v82;m!}:}}sx%)1BtkrGC7{h=D8PJeLv>3
2024-03-27 20:21:10 UTC	480	IN	Data Raw: 86 86 88 d6 3c eb 04 7d b5 e4 44 5d 09 2a 61 29 07 b0 41 50 a1 c2 91 89 d6 5f 93 9b 81 bd 01 fb 25 dd 93 65 a2 6b cc c4 be 8d fa 8d ca 01 d5 56 b1 2c 56 38 6e ac 30 37 60 b1 75 31 e0 2e 5c 99 78 49 ad 5d 58 0e a0 8f e9 0d ce 1f fd a7 95 fd bf 63 44 93 3b e4 35 d3 13 8f e8 d4 32 bb 4a 09 8a 8c 19 94 94 48 a7 28 fa 69 22 c9 7d b4 32 f8 87 7b 90 4e 8e e6 d4 ce 54 ea 61 46 93 58 d6 51 61 a8 27 1b 23 36 73 42 7d 6b ee 07 5f d5 c9 7c f8 ab 27 96 27 01 06 82 7a 4c c6 21 79 a9 cb a4 1f 3a d4 5d 34 46 a9 80 fc 7c 42 52 3b 1a 5b 1e f8 fa 63 5b ca e1 7b 5d 33 0f 25 fd 79 a8 31 4e 4e 49 53 98 d3 74 61 cd 0a 6b f0 0e eb a2 99 bb fc 56 3f 22 ba 4a 71 d2 b1 65 99 d1 fc 6b 40 c5 48 69 2e e5 88 80 c7 97 ad bb 85 1f 77 d8 04 17 6a cf 02 74 21 f8 da c9 be a1 25 1b df 13 e4 Data Ascii: <}D]*a)AP_%ekV,V8n07`u1.\xI]XcD;52JH(i"}2{NTaFXQa'#6sB}k_\|''zL!y:]4F\|BR;[c[{]3%y1NNIStakV?"Jqek@Hi.wjt!%
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 88 97 f7 f9 a9 40 e2 47 0c 27 60 1c 7a 9d fd fe fe 49 e7 8c ff c7 67 f8 6d 67 c1 2e 77 d6 36 86 b2 83 f4 17 7a 62 56 7a a1 89 9b b8 3a bf 82 54 57 7f f8 37 64 0a 05 4e d3 56 34 76 b4 91 9a 0d 10 0c 2b e0 38 12 6b cb 83 b1 ae 8f 8f 98 a4 0e 25 a4 4a d2 3b 07 d0 e5 e3 18 a9 0e 8b b6 9b 01 ca fe 4b ef fc 8d 80 0f 41 0f 54 3f 70 90 18 28 b2 b6 0d 8d 44 c1 7e 8c 32 26 d5 29 03 99 e1 1c f6 ba 79 a8 eb fe b3 fa 5b ef 9f ac 0e f4 5b 3d b1 3c e7 4b 0a fb ea 3b fd 8a cb 75 ae 4e fe 2e b2 6b 62 52 76 bd 90 6b 7d f9 f4 9c a2 1f ab 1e ce 46 f9 8d 86 5d 13 e7 4f fe 52 6a f2 ff 5d 5b e6 36 37 e3 c8 0d 78 a2 1c f6 4f 39 5b 13 c9 24 fe f1 f2 28 69 49 62 c0 b2 e3 3a 9c a9 70 7f 4c 97 56 38 6a 47 11 49 b4 39 5e 8b 36 35 b0 2b e1 d7 2f 43 46 73 bd 52 d9 3b b2 03 24 b8 9e dd Data Ascii: @G'`zIgmg.w6zbVz:TW7dNV4v+8k%J;KAT?p(D~2&)y[[=<K;uN.kbRvk}F]ORj][67xO9[$(iIb:pLV8jGI9^65+/CFsR;$
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 3a dd b3 35 e9 4e 7d 18 53 0f c4 89 7e 37 60 9e a6 48 2c 17 90 b8 23 9e d8 50 58 0d e3 7b f1 e8 e8 0d c8 2d 93 bf a1 eb fd 86 a3 20 db ca 2f 32 df b9 14 04 60 d0 2d 7d 64 c7 ad 74 6a 0c 52 63 34 73 5b 66 e2 bc d7 d8 61 16 dc 94 f6 67 76 b5 f5 98 5e 50 43 ae 74 ac d5 67 7a 2d a2 56 f2 81 0b 03 f0 23 ff 96 3b 3f 3d f5 8c e3 6a dc 34 0c 5e a4 c5 3e 17 a8 52 5f 82 d5 6d c8 f8 03 f0 71 d0 fb e7 a8 34 5e 7a a4 88 45 81 c3 3a bb 26 d5 95 ce 55 27 3e 7e 78 79 31 0a f9 50 2c 56 f8 47 af ef 3a cb 46 68 dc 56 85 d7 0e 85 31 df 3e ce ee fc ff 4a 8c f0 22 6c 66 e9 fb 96 d9 fe b9 aa fc 83 95 85 fd 4f eb a9 90 93 82 dc 3e 90 54 27 3a 2e b6 87 a0 09 d4 18 fd 94 84 b7 08 fe e7 90 2a 1e c3 34 08 1d 72 cc 77 05 15 0c f7 4a 76 70 cd 78 6d e0 21 f8 e7 5b e6 b1 55 ec 25 2b 3a Data Ascii: :5N}S~7`H,#PX{- /2`-}dtjRc4s[fagv^PCtgz-V#;?=j4^>R_mq4^zE:&U'>~xy1P,VG:FhV1>J"lfO>T':.*4rwJvpxm![U%+:
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: b1 11 df 49 1b 1b a2 c8 67 2b ad e7 d0 c3 12 0c 1d dd 46 fb 33 de 58 b7 6c f4 5d d1 ad fb 16 d7 1f f8 f7 1e b7 a3 c8 27 0c 84 2d c9 06 7f bf c9 48 44 13 b6 ae fc ff 75 01 cf 8f 47 21 bd 4c d1 ae 65 ae bd b5 97 59 14 3b 74 71 38 e9 c5 7a 92 38 ef 5c 13 ba 4a e0 32 c0 6d f1 7b 70 e4 21 88 3c 16 47 b2 ae b6 47 d7 e6 79 6d 72 c0 04 85 df 4f 68 ed 47 31 2e 39 5f fc 97 bd ed 4f a8 6f b6 39 8e 1e c8 63 cc 7c 4b 3a 08 3b 55 e4 eb f9 06 20 03 ad 05 20 6b 11 86 97 59 b3 63 61 f0 48 c5 b6 51 21 bd 99 f5 e4 f6 9f 92 c0 03 ba 02 cc dd c0 89 0a db 41 8c a4 80 2c 56 ab c7 23 50 8f 6f c0 c1 c3 df 42 11 c7 d8 f0 02 62 28 a0 5f 7b 77 89 13 0f 9e 58 d6 71 9b b5 0e 51 79 1f bd 74 cf e4 4a 70 63 9a d5 81 0b ba 83 06 12 6d e3 fd b8 d2 42 1a 6a a0 aa 35 75 18 08 45 ee 4d 31 79 Data Ascii: Ig+F3Xl]'-HDuG!LeY;tq8z8\J2m{p!<GGymrOhG1.9_Oo9c\|K:;U kYcaHQ!A,V#PoBb(_{wXqQytJpcmBj5uEM1y
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 0b 54 28 42 12 9d b1 a5 a7 9b ba c9 a5 63 2d cd 59 1e 8e b5 ca 64 74 2e 02 58 25 f4 3f de e9 f3 ce bc e7 2e 8b a9 26 0b ae 5d 7a d5 7a e1 4b 16 38 88 32 fc 13 19 e6 13 22 41 3d 43 bd fe 18 66 bf 88 ab 2c fc df c8 b7 07 20 b6 59 72 a2 03 3c ea b2 7a 1d ea 06 64 26 54 3c e8 d5 cb 3e 04 30 a9 49 2d b3 d5 a5 bd 20 9f 65 5b f7 44 97 55 f8 0c 40 aa e8 6d ee 83 16 6e ba 50 0f a2 ba 00 19 5d de 94 9a a5 59 b9 35 dd ff e9 c2 ea 80 f5 8a 1f d9 44 c3 3b 15 ef fd 6c a4 b9 ae 19 28 e4 23 98 b0 79 82 60 e8 93 79 23 ab 4d 8d a8 13 cb 91 d9 d2 94 3e aa 1c e2 36 8c c0 77 5f 28 1a 5f 35 67 9c 7a c3 06 00 0d 72 6a 0f 28 c7 d5 65 72 4c 9a f2 b8 6d 23 04 aa 3b db 4c 0f 7e 1d 4a cd 19 07 71 1f e7 8c d0 22 54 91 64 b9 5c a5 9f 66 25 ac 5e 70 79 a1 81 52 5f 10 ef c5 df ac c3 ab Data Ascii: T(Bc-Ydt.X%?.&]zzK82"A=Cf, Yr<zd&T<>0I- e[DU@mnP]Y5D;l(#y`y#M>6w_(_5gzrj(erLm#;L~Jq"Td\f%^pyR_
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: 18 3a 7e 04 7b 28 6e 73 c1 6c 0e 45 c8 9e 96 79 4f 40 ba 0d 5f d1 16 1e b3 7b 00 ed 0e f9 f0 2e d8 09 36 42 b3 da 0e cd 82 bb d2 ff 1f 6e 2d 05 37 a1 cc 35 88 55 45 d1 5f fa 98 3f 9c 37 db 32 78 35 b1 f4 61 ab d6 1c d9 b5 45 b1 36 49 48 ba 8c 57 d2 26 44 32 7a 55 39 37 60 ed 8a 17 30 8d a3 59 4d 7a 7d 81 de 29 ab ed 29 cf 68 3c a8 ba f8 7e b8 41 f1 0d 7a f9 a6 62 af b9 97 4b f6 36 a1 37 3a 01 b5 60 be 3e 28 2a fe 49 03 d5 b2 de f6 40 27 ef 05 23 a0 dc 36 24 48 40 91 2c 64 91 b8 69 34 ef c7 0b 89 9a 42 3d a7 ed aa 23 b2 11 59 f1 78 73 32 ce 02 84 d6 da bb 6b b4 53 99 c0 d9 cf 0e 55 35 da 58 4b c9 3c 0f fd 9a 82 92 5c 1b 8d d6 ff 9e c8 bf 99 8a e1 63 98 5c 8b 69 3e ad 44 d2 41 4b 63 5e a4 f4 31 a6 42 0a a3 ec d3 29 0a d5 10 98 1e 70 ea d0 a2 2b 3b 4e 4d 4d Data Ascii: :~{(nslEyO@_{.6Bn-75UE_?72x5aE6IHW&D2zU97`0YMz}))h<~AzbK67:`>(*I@'#6$H@,di4B=#Yxs2kSU5XK<\c\i>DAKc^1B)p+;NMM
2024-03-27 20:21:10 UTC	1369	IN	Data Raw: c4 33 45 40 f2 f6 3a f7 59 87 c5 2c 9e 37 1e 73 a9 65 23 f7 1d ae f4 f3 54 96 11 09 95 35 e0 d4 24 4a 3c 3b 79 03 14 df fd 50 ef 55 a9 0f 67 20 8e 3f 9f b3 ae c0 53 5c 47 1d 60 0f 2a 2b 9f a8 04 17 23 66 36 09 93 d0 0e 65 44 e7 38 14 e7 5f 9e 03 df 38 38 8d 28 80 43 5b 40 1f 1b c2 90 22 92 3e ce 17 89 82 7c 44 bb 43 30 da 24 18 3e c2 02 f5 a8 df 23 5f 08 8f 25 56 49 6a 95 c0 fa 25 84 36 9a 69 e8 54 82 3a b2 4e a6 d1 79 ee b7 01 68 f7 33 d2 b4 48 39 9f 7e db d2 4f 72 27 8a 76 3b 58 2b 0a 76 5e 07 f3 5b 00 01 4e d1 99 70 40 41 83 72 7c bd 4d dc c1 48 21 d0 5d 15 e7 d8 a8 80 03 d0 35 f2 8f 75 7a e6 f0 5e 8c d1 82 03 6f 39 62 a4 cb 3a 60 c8 f0 21 0e 4f 4a 99 eb 58 78 95 9e 5e e9 ef a1 67 e8 ce b5 bb f4 a0 99 82 9c fd 81 b5 a6 75 16 58 96 bc b4 0e ec 76 aa b7 Data Ascii: 3E@:Y,7se#T5$J<;yPUg ?S\G`*+#f6eD8_88(C[@">\|DC0$>#_%VIj%6iT:Nyh3H9~Or'v;X+v^[Np@Ar\|MH!]5uz^o9b:`!OJXx^guXv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50377	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1776	OUT	GET /blob/1232037/integrationsDownloadCardGraphicMobile.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	1302	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 2612 Connection: close CF-Ray: 86b215d6db013aff-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 524106 Cache-Control: public, max-age=2592000 ETag: "59ab06623c5238411a6e8023fcd3b807" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:52:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=2835 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: NmDj0hNk4rw8roLcbnwbKkYlrGBGqT2THCEROQnf5D6MhFYl4ep867dl27YhPkqvhKUB9Blalzk= x-amz-request-id: M94844SKPQMZTNZQ x-amz-server-side-encryption: AES256 x-amz-version-id: B0IH5mUuU62aWl2AxqUWqqaztMnh87BP X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhDxe%2Fk%2FMZBCqgnRP9jMeo8AmkIch9HmPt3LKHej5RshyhCXUfCCNq%2BAVF8M6izjILChb%2BqLMjvQEnr1QY%2FvBD8AecY5crB4To01NSK4phe%2BWykpelgvBkn3id3N%2FQ%2FHAVKJwclD"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:10 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:10 UTC	1344	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 97 00 00 00 97 08 03 00 00 00 2f 41 39 4b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 9f 50 4c 54 45 47 70 4c 35 35 35 18 18 18 0f 0f 0f 07 37 5f 04 39 61 04 3d 66 04 3c 63 03 3e 68 f8 f9 f9 f4 f2 d4 f6 f1 47 d4 df f3 de d9 ae c9 d0 d5 e0 d8 4f bf b8 95 b1 aa ea be b5 57 4e cc dc 9e 84 ee 8c 9a a4 9f 94 72 8a 7d c6 0a ba ce 89 6a ea 11 ac cd 1d a2 d2 29 93 d5 82 74 80 3a 7e da 79 6b 5e 4e 67 de 6e 5d b9 24 76 b7 62 4e e2 73 39 e6 66 54 79 43 50 bd 08 6e 88 4b 3b 64 43 2b a2 3a 29 80 37 26 66 04 3a 63 28 0e 97 04 2e 50 1d 0b 6c 00 23 3c 1c 00 94 18 02 7a 14 00 68 00 02 02 ce 5f 25 08 00 00 00 09 74 52 4e 53 00 04 0a 10 46 79 8f a9 f2 57 13 42 5c 00 Data Ascii: PNGIHDR/A9KgAMAasRGBPLTEGpL5557_9a=f<c>hGOWNr}j)t:~yk^Ngn]$vbNs9fTyCPnK;dC+:)7&f:c(.Pl#<zh_%tRNSFyWB\
2024-03-27 20:21:10 UTC	1268	IN	Data Raw: c4 be 7a 8f e0 cb 1f 32 1e 09 8b ad 1e 25 5f 7e 77 5f d2 85 94 7d a5 ec 5e 5f 2f 52 ff 42 5d a2 2f bf bb 2f 81 aa e4 cb ef 59 5f 7c 9b 95 ca 4b ae af 94 c3 7d d1 ac 50 f6 85 39 a0 7f d5 f6 fb 94 7d ae 23 f9 92 e7 13 29 6f c7 71 a1 06 0c 3d 54 56 f8 f2 3b 70 15 56 dc f2 fd 71 5e d7 f0 f8 28 f3 0d 57 71 5e 48 d3 2f f8 e4 5c 21 cb 4d 95 b5 7c 1d b3 3e 21 af b7 95 5c 72 ca 7d 42 be 3f 36 99 30 91 2b 3c d9 17 81 c9 f5 45 ba b8 2f ca b3 af a3 d0 27 d8 fe 04 ea 3a 92 8b 4d 58 15 f5 a5 05 ab 59 d7 36 42 79 21 95 92 4b ef ab b0 6d 52 ae 2f cc 33 7d f1 02 e3 c2 c8 d7 11 5c dc 17 72 29 ea 4b 0f b6 96 7c f1 f9 04 f7 25 f7 2f 8a 86 ab ec 8b c8 44 5f c7 71 b1 27 44 cc 97 dc bf 78 94 e5 25 f7 7b f9 a5 80 44 95 52 e4 52 eb e2 be e4 fa c2 c0 97 40 25 8d 47 1e 05 97 a2 7f Data Ascii: z2%_~w_}^_/RB]//Y_\|K}P9}#)oq=TV;pVq^(Wq^H/\!M\|>!\r}B?60+<E/':MXY6By!KmR/3}\r)K\|%/D_q'Dx%{DRR@%G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50378	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	2637	OUT	POST /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570869576&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570869576&sst.ude=0&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Introducing%20the%20Visual%20Suite%20%7C%20Canva&_s=1&tfd=3890&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive Content-Length: 891 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source, not-event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	891	OUT	Data Raw: 65 6e 3d 4c 6f 61 64 65 64 25 32 30 61 25 32 30 50 61 67 65 26 65 70 2e 67 74 6d 5f 77 65 62 5f 64 65 74 61 69 6c 73 3d 47 54 4d 2d 54 5a 50 54 4b 52 52 25 32 30 25 37 43 25 32 30 32 36 31 26 65 70 2e 65 76 65 6e 74 5f 69 64 3d 31 37 31 31 35 37 31 37 31 37 38 38 36 5f 31 37 31 31 35 37 31 30 33 36 35 35 36 35 31 26 65 70 2e 63 75 73 74 6f 6d 5f 64 69 63 62 6f 3d 6e 6f 74 25 32 30 73 65 74 26 65 70 2e 63 75 73 74 6f 6d 5f 63 6f 6e 73 65 6e 74 5f 67 74 6d 5f 6f 75 74 62 72 61 69 6e 3d 79 65 73 26 65 70 2e 63 75 73 74 6f 6d 5f 63 6f 6e 73 65 6e 74 5f 67 74 6d 5f 66 70 63 5f 72 74 69 64 3d 79 65 73 26 65 70 6e 2e 63 75 73 74 6f 6d 5f 64 61 74 61 5f 6e 65 77 53 65 73 73 69 6f 6e 32 3d 30 26 65 70 2e 63 75 73 74 6f 6d 5f 64 65 76 69 63 65 5f 63 61 74 65 67 6f Data Ascii: en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157103655651&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_catego
2024-03-27 20:21:11 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:11 UTC	599	IN	Data Raw: 32 35 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 35 34 36 39 34 33 30 30 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 76 69 73 75 61 6c 2d 73 75 Data Ascii: 250event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-su
2024-03-27 20:21:11 UTC	536	IN	Data Raw: 32 31 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 35 34 36 39 34 33 30 30 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 76 69 73 75 61 6c 2d 73 75 69 74 65 25 32 46 3b 75 36 37 3d 67 75 65 73 74 3b 75 36 36 3d 66 Data Ascii: 211event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=f
2024-03-27 20:21:11 UTC	249	IN	Data Raw: 66 33 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 7a 49 65 36 4c 46 7a 79 6b 76 72 50 47 47 78 4e 79 4a 76 47 38 32 4d 6f 6e 31 63 72 53 41 59 33 53 69 74 52 55 30 6e 5a 25 32 42 4d 58 44 68 69 61 74 72 51 41 58 6d 70 34 79 6c 71 43 4e 6e 58 72 77 37 79 6c 55 6e 4c 61 75 53 56 64 62 25 32 46 33 4d 7a 69 41 32 6e 35 74 44 48 45 6b 64 53 73 59 31 50 65 42 63 37 77 6a 4c 63 73 61 67 76 74 35 4d 61 4a 6e 35 54 79 5a 34 61 4f 50 6e 32 63 56 36 50 39 39 52 44 4d 46 38 70 34 46 70 39 55 54 34 4c 6c 78 4f 62 49 6a 79 47 6f 39 38 69 47 56 62 53 75 52 39 79 22 5d 7d 0a 0a 0d 0a Data Ascii: f3event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=zIe6LFzykvrPGGxNyJvG82Mon1crSAY3SitRU0nZ%2BMXDhiatrQAXmp4ylqCNnXrw7ylUnLauSVdb%2F3MziA2n5tDHEkdSsY1PeBc7wjLcsagvt5MaJn5TyZ4aOPn2cV6P99RDMF8p4Fp9UT4LlxObIjyGo98iGVbSuR9y"]}
2024-03-27 20:21:11 UTC	527	IN	Data Raw: 32 30 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 38 39 34 30 37 39 33 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 Data Ascii: 208event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520C
2024-03-27 20:21:11 UTC	464	IN	Data Raw: 31 63 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 36 38 39 34 30 37 39 33 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 Data Ascii: 1c9event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132
2024-03-27 20:21:11 UTC	520	IN	Data Raw: 32 30 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 201event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:21:11 UTC	457	IN	Data Raw: 31 63 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 1c2event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:21:11 UTC	572	IN	Data Raw: 32 33 35 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 33 36 38 32 31 32 34 33 33 26 66 73 74 3d 31 37 31 31 35 37 30 38 37 31 30 31 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 72 Data Ascii: 235event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=368212433&fst=1711570871016&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&ur
2024-03-27 20:21:11 UTC	296	IN	Data Raw: 31 32 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 61 79 35 68 4b 6e 30 76 7a 43 6c 65 43 76 6a 66 71 31 36 67 64 50 5a 4a 62 49 72 36 38 53 7a 77 66 77 25 32 46 70 4b 6a 56 61 6f 38 33 66 35 36 74 4c 61 51 32 33 71 31 65 43 38 32 32 6d 67 69 6f 25 32 42 47 5a 6e 35 48 49 37 54 6d 56 57 7a 75 53 25 32 42 78 68 64 73 69 34 62 6b 6c 38 38 69 72 67 34 25 32 42 75 72 76 78 4c 4e 57 6e 42 25 32 46 30 71 43 61 6c 55 36 54 5a 63 74 53 4e 38 79 25 32 42 6b 52 31 25 32 46 47 75 6f 4d 44 45 57 72 4d 42 33 4d 76 77 57 57 31 4f 4e 4e 46 74 52 63 70 44 76 68 37 64 65 43 36 48 6f 4e 58 75 31 4a 45 Data Ascii: 121event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=ay5hKn0vzCleCvjfq16gdPZJbIr68Szwfw%2FpKjVao83f56tLaQ23q1eC822mgio%2BGZn5HI7TmVWzuS%2Bxhdsi4bkl88irg4%2BurvxLNWnB%2F0qCalU6TZctSN8y%2BkR1%2FGuoMDEWrMB3MvwWW1ONNFtRcpDvh7deC6HoNXu1JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50379	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	1765	OUT	GET /blob/1232032/Fordesigners-16x9.f02b27fe.png HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	1300	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:10 GMT Content-Type: image/png Content-Length: 79402 Connection: close CF-Ray: 86b215d75ffc81eb-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 390840 Cache-Control: public, max-age=2592000 ETag: "b1d489c7324d5bf72dde07b9ed5325c1" Expires: Fri, 26 Apr 2024 20:21:10 GMT Last-Modified: Thu, 23 Nov 2023 08:44:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=86768 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: /kTCNRv5dgwku4tBbK7HuqyTsxl1ZZSPi+5YXk2Sy+p0WRoLA49jv07P/trMWOeWs6LFprSSQdE= x-amz-request-id: M4Z316BSFJ4R48VB x-amz-server-side-encryption: AES256 x-amz-version-id: 6EfZUis9uXxa3_.npF1W8p6ktGXLDfjD X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kZ4v%2BDqynxq6%2BSM8TYUNRQ95gdQiRpEjayh8QoThhIXwXcnyUccXpX0HeXqh1MvS0gWUhnC7njPdkxkGVluwPlzS3fRd%2B6FqBGt2VHTxF952%2BsiRtYUjtOyLe%2FJ%2BRWfJoPnj7SQE"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:11 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-03-27 20:21:11 UTC	1346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 01 51 08 03 00 00 00 9f 5f 23 bb 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 f9 e4 ca f9 fa fc fa f2 f1 e8 f5 ff fd ee db ef f0 f4 ed ed ee ea e7 e5 dd e8 ff e3 e1 e2 e5 dd d9 ae f0 fe f5 d9 b6 ec d9 ca ce dd fc f9 f0 1c f0 e8 54 de d6 d3 d5 d8 dd e6 d3 c5 e7 d0 bd da d0 cb e5 cc b7 c0 d1 fa ed ca a3 f7 bd ca c5 d0 dd cd ce d1 d6 c9 c3 e0 c7 b3 de c2 ad d1 c4 bd b7 ca d8 c4 c5 c9 d4 be b2 ad c4 f8 da bc a5 cb bd b7 e1 b5 8e 65 df f8 a3 c6 d1 f4 a2 b5 d7 b5 9b d0 b6 a5 bb b9 ba c4 b4 ad 9e ba f0 b9 b2 c9 d2 af 93 a8 ba c4 cb af 9c fd 8f ac d8 aa 82 cb c2 22 c8 ab 95 cf a9 8c 8e b5 f2 bc ab a5 aa b1 af ca a7 8d bf a8 99 b7 a5 Data Ascii: PNGIHDRXQ_#gAMAasRGBPLTETe"
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 91 0f 2b 0e 8d 15 2f 86 03 0b 93 0f ac 96 d7 80 d5 e4 25 8b 50 19 ae 64 54 83 35 0f 8a 10 d0 bc 68 99 61 25 58 61 00 aa ab b7 00 16 c6 55 0b d6 f2 fc f4 50 6f 57 7b 5b 5b 40 29 d8 16 24 5f fd 0c 50 36 38 06 6c c9 c3 27 57 97 3f b9 ca 20 59 3a 38 38 fd 13 ba 41 b0 f2 20 2b 15 4b c4 fb a9 be fe 60 30 e0 c0 02 59 88 d7 83 b5 b1 79 d7 80 75 4c 52 1e 2b b0 9a 88 d5 19 4e 20 0b 6c 09 58 ad ad d6 b1 7e fa 85 8e 65 c1 aa af 6d 0e c5 52 f9 a2 0f 29 4b 95 99 d7 bd 64 55 39 d6 86 c3 ca 03 56 11 22 58 ca b1 92 54 66 75 7b f7 e0 f8 b8 7c 50 de db 17 9f 22 4c 04 eb e4 e4 e8 04 cf 34 58 a2 bd d9 86 37 ab 1d cb e8 ac b3 2c c7 14 55 87 2f bd 1e e4 00 ac f6 b6 10 2e 09 cb 15 86 e6 8a 83 58 e1 72 8e 85 ab 0a ac f3 20 8b 44 cd cd cf 15 0a 85 b9 b9 42 31 9b cd e3 49 61 01 3f Data Ascii: +/%PdT5ha%XaUPoW{[[@)$_P68l'W? Y:88A +K`0YyuLR+N lX~emR)KdU9V"XTfu{\|P"L4X7,U/.Xr DB1Ia?
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 21 8e 35 37 01 ae 98 6b f1 d7 05 bb fb 30 83 60 82 15 cb af ac 49 f1 8e d0 b6 45 dd a7 63 ad 31 1b 17 aa 1c 0b da f7 80 e5 f9 6e 0b 58 fe 54 78 44 cb 3a dd b1 18 7c 84 08 94 57 d5 5c dd 16 ac 7c 60 ad 1b b2 2c 57 1a ac 5c 26 56 da d9 a7 b5 02 24 e8 08 17 19 03 5b 44 4b b8 aa 14 6b 79 0c 5e 87 e5 af 42 b0 28 d3 67 70 52 29 df a9 8e a3 ae b1 ce 19 16 43 21 a6 d5 42 05 74 2a 6c 64 e8 a1 c8 92 51 05 56 32 d1 df d7 d9 03 91 ab 48 0f c1 b2 fa 78 49 1c ab 5a b2 2a 34 60 bd 8d 44 18 9f 5d 84 53 51 64 2b 8e c5 5a 00 60 4d 4c 4f 0f 81 ab 50 77 77 67 1f de a9 08 35 10 01 59 59 80 f5 5a 19 a0 38 1c 58 ca 5e fb d8 66 08 06 78 81 2b 07 96 59 16 e2 09 88 e2 23 2e 82 e5 73 ac bb 7f f4 d6 58 5f 19 b0 8c e8 58 6c 37 d0 b1 5a 3d 60 fd a2 1c ab 24 60 d5 5b b0 48 54 49 5b 95 Data Ascii: !57k0`IEc1nXTxD:\|W\\|`,W\&V$[DKky^B(gpR)C!BtldQV2HxIZ4`D]SQd+Z`MLOPwwg5YYZ8X^fx+Y#.sX_Xl7Z=`$`[HTI[
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: a6 e7 e6 e6 66 e6 66 a6 e7 48 96 c5 8a 48 19 59 b0 16 17 2f 5d fa 74 72 12 8b 4b fc 08 74 52 81 4e 69 bc 13 2c 86 69 b9 db 1d 1d 07 56 b5 63 3d d6 ab 42 db 78 a7 ea 09 16 1c 91 7b 85 16 ac 9f 4f 77 2c 52 75 cd 5f bc f3 a1 92 ac df e6 58 2b 90 76 ac 6c e6 ee ee 1e 5e e4 3e 9b 9d bc 60 5a 30 2e 0e 4e c4 06 13 a4 99 62 60 78 c9 b2 3a de 5f 6a 6b 43 43 85 68 55 15 58 50 bd ed 34 00 29 84 ca 86 08 18 16 06 e5 af e1 ad 67 f9 e1 aa 4e 85 7d 28 81 fe 87 ca 85 e8 0a f4 11 2c da d6 68 3c 97 7f ad 63 cd f8 da 0d 8b 00 8a 58 69 c3 0a b4 21 15 a2 76 0f 03 ac 73 e7 00 56 5f 44 d4 a7 c0 22 55 33 33 13 13 13 49 a5 11 c6 d8 0c b7 ad 4d 16 14 a2 de 3f ff fe fb ef 9f 27 59 04 2b 4f b0 fe ed ca e4 38 c8 82 26 3b 05 54 0b 16 74 8b 83 55 bc ea 38 88 63 cd 3b b0 36 ef 3a c7 2a Data Ascii: ffHHY/]trKtRNi,iVc=Bx{Ow,Ru_X+vl^>`Z0.Nb`x:_jkCChUXP4)gN}(,h<cXi!vsV_D"U33IM?'Y+O8&;TtU8c;6:*
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 2c ab 3a 19 6e 7c 51 bd 2a 94 4f 57 d6 58 ab 5b 00 6b 1f 39 90 70 19 b0 38 13 2d 01 0b 93 91 43 cb a6 44 82 f5 e3 5f 9f fd e5 af 3f 3c 57 68 1d 1f 3c 1a d2 60 b9 9d 2b 8b 15 64 89 52 83 97 d8 98 e9 6a 91 ab 90 6d c1 07 30 f1 09 3f 26 7d 2d 75 90 86 64 e1 59 8b 4d 85 c4 8a 22 57 4e 28 99 96 74 1f ab da b1 a0 b5 79 1e f4 6b ac 95 43 33 62 58 09 82 c5 03 07 7a 67 38 a9 52 21 16 9b 64 2b 02 b0 10 da b1 08 96 78 99 fa e4 7b 3d ef 7d d0 d1 31 60 c0 22 57 a8 db eb f0 6e bf c1 93 1f 35 8d 5d 43 0b 6b 5f 00 ac 54 22 8d 7f a4 af db b1 75 05 a9 50 81 45 c3 32 41 a6 c4 c1 aa 6a 2c e7 58 fb 0a 2c 57 63 bd 59 0d 96 76 ac 97 28 de 1d 58 ce b1 b8 10 d4 69 d0 74 b3 aa cf 36 30 fc 96 c5 a7 af 74 ac 6c 7e 63 0b c7 1a f6 41 92 94 ee d4 89 b6 2c 53 b6 e3 02 4e 7a 22 5c 2a b4 Data Ascii: ,:n\|QOWX[k9p8-CD_?<Wh<`+dRjm0?&}-udYM"WN(tykC3bXzg8R!d+x{=}1`"Wn5]Ck_T"uPE2Aj,X,WcYv(Xit60tl~cA,SNz"\
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 36 c7 c5 9e 0f 3e a0 6b 89 3a 15 58 57 55 8d c5 f6 68 13 c0 7a eb 77 bf 7b eb ed fa b6 e8 cc f2 17 77 b0 3f 59 40 dd 36 32 02 17 4e 27 a0 28 22 95 c1 3b bc 4a 80 a8 05 5e 12 4e 0b f3 85 d7 a4 c2 28 b7 0a 4f 6f 90 b6 be d2 b1 1a 83 00 2b 6f b7 74 38 5e d9 6d 70 fd 06 bb 2a 64 e9 5e ed 58 1a ac 0d 59 13 32 0f 12 2c 9d 09 6d 12 a4 e4 99 ab b1 3c 32 b5 fb 21 56 85 df 7d 27 60 c1 b4 1e fc f5 f9 d3 dd 47 9b db db 8f 31 1e e3 66 fd d2 52 0e c9 05 8a f3 7b 48 b4 a2 1e ac cc 03 87 a9 e0 75 84 a3 c0 2a 45 87 b9 56 ba c6 8a 30 19 63 81 66 1a a8 2d 52 ba 11 ac 02 c0 8a a2 8c a6 50 55 60 04 3a 03 50 90 b7 73 89 13 e5 d4 36 cd a5 a9 c5 29 cc 97 2e 2d 5e ff 0c ba 49 b6 8a 79 bc 3c de 3b da df 87 e8 8f f3 3c fb 85 e1 61 0c 6a 96 60 e5 12 f1 d1 01 ae 07 c7 0d 57 4c 85 29 Data Ascii: 6>k:XWUhzw{w?Y@62N'(";J^N(Oo+ot8^mpd^XY2,m<2!V}'`G1fR{HuEV0cf-RPU`:Ps6).-^Iy<;<aj`WL)
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 05 ac af 1f 02 2d 58 d6 d7 28 af 10 00 8b da db dd d9 26 5a 24 4b 83 15 73 fd 2c 3e 63 d8 2a 2b 0a 8d 64 8a 25 9a 15 45 ae 3e fa e8 a3 3c d0 02 5b 06 2c bd 53 cd b7 63 82 a9 70 90 60 11 27 0e 4c 3a 48 56 77 5c 1b 16 83 6c 5d d6 7e 05 b1 8e d7 86 65 c3 88 ee 15 21 58 e8 3a c5 b9 5f 0c b1 27 cf d6 a9 06 2b 8f ad 24 f4 ce 7a 3a 70 db 29 73 57 3b d0 42 b3 3e eb 52 a1 e8 3c 35 0d 7d 38 ff e1 34 b9 c2 f1 74 51 83 0b 6c 4e f1 2f 68 c3 1e 25 c5 9c 4e 2c 28 f4 ff 63 19 24 43 05 d6 ba 73 ac 32 53 21 c1 2a a5 d0 88 91 1b 56 bd f7 dc 55 a5 42 bc 77 3f 19 b0 6a fd ab 42 15 32 2a ef 80 76 76 e5 b8 72 e7 66 fc 45 96 ce 84 04 eb f1 be 02 8b 99 50 2a 2d 69 35 28 f9 cb ab 97 12 8e 34 03 18 d1 12 b0 60 59 f7 e1 58 0f 1f 3c 78 ba bb 03 11 ac b2 14 5b 44 8b 64 11 ac ac 90 05 Data Ascii: -X(&Z$Ks,>c+d%E><[,Scp`'L:HVw\l]~e!X:_'+$z:p)sW;B>R<5}84tQlN/h%N,(c$Cs2S!VUBw?jB2vvrfEP-i5(4`YX<x[Dd
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: f7 07 58 14 ee 81 aa 3f a3 9a 57 96 55 cc 6b b4 48 56 32 86 96 a7 b4 a0 05 2b 54 57 a5 75 5b 5d 15 a9 52 e9 da fa b5 75 fa eb 1c f3 a0 df b0 1c 58 73 63 d1 70 90 96 e5 b8 6a 40 38 b0 2e 6b b7 72 86 45 b0 ae 53 38 33 4a c7 b2 5c 51 78 2f de 39 67 c1 ca 67 b0 a9 87 f6 7c 3c 9e 26 59 5c 19 d2 b0 16 16 00 d6 e2 24 04 b0 02 5c a2 e2 22 58 70 2c b0 8e d7 6a f2 fb 48 2a 97 63 ab 25 95 d2 60 9d ad ad 39 8b 20 54 da b2 ea 01 16 b6 47 1b 9b 6b 29 eb 5a c0 ab da b1 78 20 ea 91 76 ac 7d 03 56 3b 8b ac 3a 1f 5a bc cb da bb 09 7d 52 e9 58 01 82 65 d2 ab f6 20 45 56 f5 9a 70 c3 ef 58 98 2a 57 85 ee 7f c7 ba b9 0f 89 9f 92 2b 0a 1c 19 a7 fa 05 2f 03 4f 84 ab 63 bb 07 6d 00 53 b2 60 41 3f 12 2c 62 85 eb d6 17 4f e1 57 7f 2f ff fd ef 04 8b 3b 3b ff a1 c0 ba 5b 22 59 82 56 Data Ascii: X?WUkHV2+TWu[]RuXscpj@8.krES83J\Qx/9gg\|<&Y\$\"Xp,jHc%`9 TGk)Zx v}V;:Z}RXe EVpXW+/OcmS`A?,bOW/;;["YV
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: fb 4e 26 91 52 8a 15 c1 d2 80 1a 97 60 39 bc 16 3c 63 c1 d0 d6 6a 30 b0 32 c6 71 aa 1d 0e 5f 84 50 f8 9c 81 e5 3e 10 85 f7 62 fe 03 d2 af cd 40 65 fd ee 3b 69 45 4a d1 f2 91 07 cb d1 24 e7 f2 8a 8e 95 e4 8a 97 08 56 f1 4c c7 72 ab 71 27 c0 9a e1 58 b3 a7 1d 4b 33 56 03 58 8f cd 8e 60 89 ab 6b d7 0c 2c 79 91 52 ae 16 6e 6a a2 a2 61 89 2a 29 0e c8 8a b2 32 16 83 dd 87 88 83 96 ba 8b 2f 31 14 c2 61 10 6f cd 54 32 c7 8a 5c 0d 63 59 c4 41 2c ab f6 70 15 b5 77 45 c1 66 13 e9 95 0d 71 30 ae 4c 3e 18 6e d6 48 18 da 86 9d 21 bf 22 0c 92 a8 8b 2b 3d ae e8 53 cb b0 18 77 be 6e 86 61 05 b0 8a 01 6b 13 56 90 1d 05 53 26 6e 31 2c c0 12 4a 62 69 a6 63 9d 34 b0 e8 76 0e 92 6d 2d 30 c7 5a 90 09 d6 31 31 c5 95 f1 c2 c7 68 06 56 b1 42 e1 a1 69 b0 e6 2a 14 ae 31 b0 f0 58 3d Data Ascii: N&R`9<cj02q_P>b@e;iEJ$VLrq'XK3VX`k,yRnja)2/1aoT2\cYA,pwEfq0L>nH!"+=SwnakVS&n1,Jbic4vm-0Z11hVBi1X=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50380	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	570	OUT	GET /web/1c6dfi.6455dfe21cb752c0.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:11 UTC	1357	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript Content-Length: 757885 Connection: close CF-Ray: 86b215d7a88c0820-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 63835 Cache-Control: public, max-age=31556926 ETag: "697626fb6e72876b644bd5a6509eebe4" Expires: Fri, 28 Mar 2025 02:09:57 GMT Last-Modified: Wed, 27 Mar 2024 02:26:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: SBn0gx7LfTkRmb+7EqLNlW++I8wmf3Ks+18cO6UKjAk4nF4HPfX3h7qpJwFR4buWlA8JsPVNAtA= x-amz-replication-status: COMPLETED x-amz-request-id: DTG3ZT0SHJH272CB x-amz-server-side-encryption: AES256 x-amz-version-id: N_auKEZc6kybutChYLYqBrCktctgqKPM X-Content-Type-Options: nosniff
2024-03-27 20:21:11 UTC	779	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 32 6c 74 73 37 53 4b 68 6b 68 59 4e 75 79 32 56 51 6c 2e 73 75 55 63 6f 4b 4f 35 52 61 71 71 5a 5a 4a 4e 30 39 30 72 71 46 55 59 2d 31 37 31 31 35 37 30 38 37 31 2d 31 2e 30 2e 31 2e 31 2d 76 69 70 62 31 4d 63 45 6c 6b 6d 77 59 61 63 62 51 70 75 57 7a 74 77 78 46 43 50 55 36 64 79 41 4d 56 77 74 74 7a 63 61 42 79 41 65 77 6b 61 4f 32 36 79 41 30 58 43 2e 69 31 6f 4d 31 55 56 6a 4e 66 61 5a 5f 57 4d 4c 74 49 57 33 4b 6f 30 47 52 73 65 6c 50 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 37 2d 4d 61 72 2d 32 34 20 32 30 3a 35 31 3a 31 31 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=2lts7SKhkhYNuy2VQl.suUcoKO5RaqqZZJN090rqFUY-1711570871-1.0.1.1-vipb1McElkmwYacbQpuWztwxFCPU6dyAMVwttzcaByAewkaO26yA0XC.i1oM1UVjNfaZ_WMLtIW3Ko0GRselPw; path=/; expires=Wed, 27-Mar-24 20:51:11 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-03-27 20:21:11 UTC	602	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a8
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 3b 76 61 72 20 6f 71 3b 76 61 72 20 74 3b 76 61 72 20 6d 71 3b 76 61 72 20 53 3b 76 61 72 20 6e 3b 76 61 72 20 62 62 3b 76 61 72 20 76 3b 76 61 72 20 4f 3b 76 61 72 20 51 3b 76 61 72 20 6e 71 3b 76 61 72 20 52 3b 76 61 72 20 6d 3b 76 61 72 20 71 62 3b 76 61 72 20 74 71 3b 76 61 72 20 50 61 3b 76 61 72 20 77 3b 76 61 72 20 55 3b 76 61 72 20 41 3b 76 61 72 20 43 3b 76 61 72 20 77 70 3b 76 61 72 20 6b 70 3b 76 61 72 20 6b 6f 3b 76 61 72 20 44 6c 3b 76 61 72 20 74 6d 3b 76 61 72 20 46 6c 3b 76 61 72 20 75 64 3b 76 61 72 20 64 66 3b 76 61 72 20 56 6c 3b 76 61 72 20 51 66 3b 76 61 72 20 76 64 3b 76 61 72 20 52 6c 3b 76 61 72 20 48 6c 3b 76 61 72 20 45 6c 3b 76 61 72 20 7a 6c 3b 76 61 72 20 5a 6b 3b 76 61 72 20 62 6a 3b 76 61 72 20 4b 68 3b 76 61 72 20 4c 6b 3b Data Ascii: ;var oq;var t;var mq;var S;var n;var bb;var v;var O;var Q;var nq;var R;var m;var qb;var tq;var Pa;var w;var U;var A;var C;var wp;var kp;var ko;var Dl;var tm;var Fl;var ud;var df;var Vl;var Qf;var vd;var Rl;var Hl;var El;var zl;var Zk;var bj;var Kh;var Lk;
2024-03-27 20:21:11 UTC	935	IN	Data Raw: 2c 79 63 61 2c 78 63 61 2c 41 63 61 2c 42 63 61 2c 4d 65 2c 44 63 61 2c 43 63 61 2c 59 65 2c 5a 65 2c 46 63 61 2c 24 65 2c 47 63 61 2c 65 66 2c 66 66 2c 67 66 2c 68 66 2c 6a 66 2c 6b 66 2c 48 63 61 2c 6d 66 2c 6c 66 2c 6e 66 2c 70 66 2c 49 63 61 2c 72 66 2c 73 66 2c 50 63 61 2c 51 63 61 2c 54 63 61 2c 42 66 2c 56 63 61 2c 48 66 2c 4a 66 2c 58 63 61 2c 4d 66 2c 54 66 2c 57 66 2c 58 66 2c 59 66 2c 63 67 2c 65 67 2c 63 64 61 2c 6a 67 2c 6c 67 2c 6d 67 2c 65 64 61 2c 64 64 61 2c 66 64 61 2c 72 67 2c 73 67 2c 70 64 61 2c 72 64 61 2c 79 67 2c 73 64 61 2c 46 67 2c 74 64 61 2c 78 64 61 2c 4a 67 2c 41 64 61 2c 7a 64 61 2c 79 64 61 2c 44 64 61 2c 45 64 61 2c 46 64 61 2c 48 64 61 2c 47 64 61 2c 51 64 61 2c 65 68 2c 66 68 2c 54 64 61 2c 67 68 2c 57 64 61 2c 6a 68 2c Data Ascii: ,yca,xca,Aca,Bca,Me,Dca,Cca,Ye,Ze,Fca,$e,Gca,ef,ff,gf,hf,jf,kf,Hca,mf,lf,nf,pf,Ica,rf,sf,Pca,Qca,Tca,Bf,Vca,Hf,Jf,Xca,Mf,Tf,Wf,Xf,Yf,cg,eg,cda,jg,lg,mg,eda,dda,fda,rg,sg,pda,rda,yg,sda,Fg,tda,xda,Jg,Ada,zda,yda,Dda,Eda,Fda,Hda,Gda,Qda,eh,fh,Tda,gh,Wda,jh,
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 4d 6a 61 2c 47 6c 2c 4a 6c 2c 4e 6a 61 2c 4f 6a 61 2c 51 6a 61 2c 52 6a 61 2c 54 6a 61 2c 55 6a 61 2c 57 6a 61 2c 58 6a 61 2c 24 6a 61 2c 62 6b 61 2c 63 6d 2c 64 6d 2c 65 6d 2c 67 6d 2c 63 6b 61 2c 65 6b 61 2c 67 6b 61 2c 69 6b 61 2c 6a 6d 2c 6a 6b 61 2c 6b 6b 61 2c 48 6b 61 2c 4b 6b 61 2c 4a 6b 61 2c 4c 6b 61 2c 50 6b 61 2c 4d 6b 61 2c 52 6b 61 2c 48 6d 2c 4a 6d 2c 56 6b 61 2c 24 6b 61 2c 4c 6d 2c 61 6c 61 2c 4e 6d 2c 64 6c 61 2c 50 6d 2c 65 6c 61 2c 51 6d 2c 66 6c 61 2c 54 6d 2c 52 6d 2c 55 6d 2c 57 6d 2c 58 6d 2c 6a 6c 61 2c 6b 6c 61 2c 62 6e 2c 63 6e 2c 64 6e 2c 65 6e 2c 66 6e 2c 67 6e 2c 6b 6e 2c 6e 6c 61 2c 70 6e 2c 71 6e 2c 72 6e 2c 73 6e 2c 71 6c 61 2c 74 6e 2c 78 6e 2c 74 6c 61 2c 77 6c 61 2c 7a 6c 61 2c 7a 6e 2c 41 6c 61 2c 42 6c 61 2c 44 6c 61 Data Ascii: Mja,Gl,Jl,Nja,Oja,Qja,Rja,Tja,Uja,Wja,Xja,$ja,bka,cm,dm,em,gm,cka,eka,gka,ika,jm,jka,kka,Hka,Kka,Jka,Lka,Pka,Mka,Rka,Hm,Jm,Vka,$ka,Lm,ala,Nm,dla,Pm,ela,Qm,fla,Tm,Rm,Um,Wm,Xm,jla,kla,bn,cn,dn,en,fn,gn,kn,nla,pn,qn,rn,sn,qla,tn,xn,tla,wla,zla,zn,Ala,Bla,Dla
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 3b 7d 3b 0a 6e 61 3d 5f 5f 63 2e 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 2e 2e 2e 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6e 75 6c 6c 3d 3d 62 3f 22 61 72 67 75 6d 65 6e 74 20 69 73 20 6e 75 6c 6c 22 3a 5f 5f 63 2e 6a 61 28 62 2c 2e 2e 2e 63 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6f 61 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 65 76 65 72 79 28 63 3d 3e 6e 75 6c 6c 21 3d 63 26 26 74 79 70 65 6f 66 20 63 3d 3d 3d 62 2e 74 79 70 65 29 7d 3b 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 70 61 2e 6f 61 3b 62 3d 62 5b 61 5d 3b 69 66 28 6e 75 6c 6c 21 3d 62 29 7b 69 66 28 21 63 61 61 28 Data Ascii: ;};na=__c.na=function(a,b,...c){if(null==a)throw Error(null==b?"argument is null":__c.ja(b,...c));return a};caa=function(a){var b=oa;return Array.isArray(a)&&a.every(c=>null!=c&&typeof c===b.type)};qa=function(a,b){var c=pa.oa;b=b[a];if(null!=b){if(!caa(
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 62 3f 62 5b 31 5d 3a 79 61 2e 68 61 73 28 61 29 3f 79 61 2e 67 65 74 28 61 29 3a 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 41 61 2e 68 61 73 28 61 29 3f 41 61 2e 67 65 74 28 61 29 3a 61 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 6b 61 28 79 61 2e 68 61 73 28 61 29 2c 22 62 6f 6f 6c 65 61 6e 20 76 61 6c 75 65 20 65 78 70 65 63 74 65 64 3a 20 7b 7d 22 2c 61 29 2c 79 61 2e 67 65 74 28 61 29 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 6b 61 28 22 22 21 3d 3d 61 2e 74 72 69 6d 28 29 26 26 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 4e 75 6d 62 65 72 28 61 Data Ascii: ;return null!=b?b[1]:ya.has(a)?ya.get(a):""!==a.trim()&&Number.isFinite(Number(a))?Number(a):Aa.has(a)?Aa.get(a):a;case "boolean":return ka(ya.has(a),"boolean value expected: {}",a),ya.get(a);case "number":return ka(""!==a.trim()&&Number.isFinite(Number(a
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 7d 3b 6e 3d 5f 5f 63 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 7a 63 3a 65 2c 69 6a 3a 66 7d 3d 4e 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 64 68 3a 32 2c 7a 63 3a 65 2c 6f 62 6a 3a 66 2c 52 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 74 3d 5f 5f 63 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 7a 63 3a 65 2c 69 6a 3a 66 7d 3d 4e 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 64 68 3a 33 2c 7a 63 3a 65 2c 6f 62 6a 3a 66 2c 52 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 76 3d 5f 5f 63 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 7a 63 3a 65 2c 69 6a 3a 66 7d 3d 4e 61 28 Data Ascii: };n=__c.n=function(a,b,c){const {tag:d,zc:e,ij:f}=Na(a,b,c);return{tag:d,dh:2,zc:e,obj:f,Rb:"object"}};t=__c.t=function(a,b,c){const {tag:d,zc:e,ij:f}=Na(a,b,c);return{tag:d,dh:3,zc:e,obj:f,Rb:"object"}};v=__c.v=function(a,b,c){const {tag:d,zc:e,ij:f}=Na(
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 63 28 29 3b 63 6f 6e 73 74 20 68 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 64 2e 70 72 6f 74 6f 74 79 70 65 29 3b 66 6f 72 28 63 6f 6e 73 74 20 79 20 6f 66 20 67 29 7b 63 6f 6e 73 74 20 42 3d 79 2e 63 6f 6e 66 69 67 2c 44 3d 79 2e 6e 61 6d 65 3b 76 61 72 20 6c 3d 79 2e 6b 67 2c 70 3d 79 2e 6a 6b 2c 71 3d 6c 3b 67 3d 65 5b 71 5d 3b 6e 75 6c 6c 3d 3d 67 26 26 6e 75 6c 6c 21 3d 70 26 26 6e 75 6c 6c 21 3d 65 5b 70 5d 26 26 28 71 3d 70 2c 67 3d 65 5b 71 5d 29 3b 73 77 69 74 63 68 28 42 2e 64 68 29 7b 63 61 73 65 20 33 3a 69 66 28 6e 75 6c 6c 3d 3d 67 29 7b 68 5b 44 5d 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 21 3d 3d 42 2e 52 62 29 74 68 72 6f 77 20 54 61 28 7b 6b 67 3a 6c 2c 6a 6b 3a 70 7d 2c 67 2c 42 2e 52 Data Ascii: c();const h=Object.create(d.prototype);for(const y of g){const B=y.config,D=y.name;var l=y.kg,p=y.jk,q=l;g=e[q];null==g&&null!=p&&null!=e[p]&&(q=p,g=e[q]);switch(B.dh){case 3:if(null==g){h[D]=void 0;break}else if(typeof g!==B.Rb)throw Ta({kg:l,jk:p},g,B.R
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 67 29 3b 72 3d 41 72 72 61 79 28 70 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 78 3d 30 3b 78 3c 70 2e 6c 65 6e 67 74 68 3b 2b 2b 78 29 7b 63 6f 6e 73 74 20 5b 45 2c 47 5d 3d 70 5b 78 5d 3b 69 66 28 6c 29 7b 69 66 28 7a 3d 4e 75 6d 62 65 72 28 45 29 2c 69 73 4e 61 4e 28 7a 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 6e 75 6d 62 65 72 20 6d 61 70 20 6b 65 79 2c 20 66 6f 75 6e 64 3a 20 4e 61 4e 20 24 7b 57 61 28 5b 2e 2e 2e 66 2c 71 5d 29 7d 60 29 3b 7d 65 6c 73 65 20 7a 3d 45 3b 69 66 28 74 79 70 65 6f 66 20 47 21 3d 3d 42 2e 52 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 24 7b 42 2e 52 62 7d 20 6d 61 70 20 76 61 Data Ascii: Object.entries(g);r=Array(p.length);for(x=0;x<p.length;++x){const [E,G]=p[x];if(l){if(z=Number(E),isNaN(z))throw new TypeError(`Expected number map key, found: NaN ${Wa([...f,q])}`);}else z=E;if(typeof G!==B.Rb)throw new TypeError(`Expected ${B.Rb} map va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50381	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	740	OUT	POST /api/5715036/envelope/?sentry_key=31b80c12758c45b59038e73ab88ff644&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 33 31 30 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 39 64 39 61 61 34 39 32 62 30 34 66 34 31 62 30 39 36 34 39 30 65 61 38 39 35 63 32 39 66 30 30 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 33 31 30 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 33 31 30 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-03-27T20:21:10.310Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"9d9aa492b04f41b096490ea895c29f00","init":true,"started":"2024-03-27T20:21:10.310Z","timestamp":"2024-03-27T20:21:10.310Z","stat
2024-03-27 20:21:11 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:11 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50382	18.223.63.188	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	432	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1711570869643&gtmcb=831980953 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:11 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Wed, 27 Mar 2024 20:21:11 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: cc3001a9-85c4-4764-949e-0cffa21d9021 Server: nginx Content-Length: 42 Connection: Close
2024-03-27 20:21:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50384	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	3226	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 8990 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json sec-ch-ua-platform-version: "10.0.0" baggage: sentry-environment=prod,sentry-release=0d66acdc504f9e2d0904904a4020e4bf0fdbea03,sentry-public_key=d1e5ff4b423a49d1a73e21b46496148c,sentry-trace_id=4c7b5bd68b1d4a2299a67c7b3c41f59f sentry-trace: 4c7b5bd68b1d4a2299a67c7b3c41f59f-b0c361825184d82e sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:10 UTC	8990	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 32 34 32 32 35 33 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 38 37 34 30 30 32 36 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 63 73 65 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 61 70 70 2e 35 34 31 39 38 65 37 35 2e 63 73 73 22 2c 22 73 22 3a 35 30 36 2e 37 2c 22 64 22 3a 36 35 30 2e 35 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 35 30 36 2e 37 2c 22 64 73 22 3a Data Ascii: {"memory":{"totalJSHeapSize":42422534,"usedJSHeapSize":28740026,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static-cse.canva.com/_next/static/chunks/pages/_app.54198e75.css","s":506.7,"d":650.5,"i":"link","p":"","rs":0,"re":0,"fs":506.7,"ds":
2024-03-27 20:21:11 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:11 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215d7dec9820f-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50383	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:10 UTC	740	OUT	POST /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 197 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:10 UTC	197	OUT	Data Raw: 7b 7d 0a 7b 22 74 79 70 65 22 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 0a 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 31 35 37 30 38 37 30 2e 34 32 35 2c 22 64 69 73 63 61 72 64 65 64 5f 65 76 65 6e 74 73 22 3a 5b 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 65 72 72 6f 72 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 35 7d 2c 7b 22 72 65 61 73 6f 6e 22 3a 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 22 71 75 61 6e 74 69 74 79 22 3a 31 7d 5d 7d Data Ascii: {}{"type":"client_report"}{"timestamp":1711570870.425,"discarded_events":[{"reason":"sample_rate","category":"error","quantity":5},{"reason":"sample_rate","category":"transaction","quantity":1}]}
2024-03-27 20:21:11 UTC	519	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: application/json Content-Length: 2 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:11 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50386	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	814	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 66 31 63 32 62 34 37 34 2d 61 36 39 36 2d 34 34 30 66 2d 61 37 38 61 2d 64 36 34 37 31 34 35 35 64 37 65 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 34 33 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 35 35 30 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"f1c2b474-a696-440f-a78a-d6471455d7ef","E":"2024-03-27T20:21:09.436Z","F":"2024-03-27T20:21:09.550Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	909	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d86ca387a1-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d86ca387a1 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3DAYLgouSJ2j1TBKz34y4oel8P%2BvQHrRhfMt2tHfPM6M9zuT0MR3W%2FeN9Dnj%2BmGLXyGl%2FLM7s57qZCyJZrirAmX%2BssqD6kdx3od%2BVU2OZvzD1ieCjlpuz%2FrGoTNnqA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50388	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 663 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	663	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 63 31 66 62 64 63 62 66 2d 63 37 32 61 2d 34 35 63 37 2d 62 38 63 66 2d 32 38 38 38 32 65 32 32 66 30 64 61 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 34 34 38 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 30 39 2e 35 35 32 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"c1fbdcbf-c72a-45c7-b8cf-28882e22f0da","E":"2024-03-27T20:21:09.448Z","F":"2024-03-27T20:21:09.552Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d94ecd5830-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d94ecd5830 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c3GXcupHI7AJfWWgOOHg9MjuZ6iWsqAYtjpoYHL4vCH2grUvMW4XRvpAZW4EqZtdnQCX3WPAzu9%2BqHFymizLj6AfJfbKDFthgsm%2B%2F50GvFRI8rpoI5cXVaHXlzRwPLo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50385	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: WeIZuLBveA1WYWqRp2zSLYSfliQ_4mLhyBE1gxZ9T1M4IhfhbAxFrNI5wv3_q1Xfyi0ZuvO2YKxeMTFm0nVdHQHOZfE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	860	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 35 32 32 36 35 61 63 39 2d 37 35 34 66 2d 34 61 35 63 2d 61 63 32 37 2d 38 36 64 34 63 34 32 30 36 33 36 62 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 30 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 30 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"52265ac9-754f-4a5c-ac27-86d4c420636b","E":"2024-03-27T20:21:10.550Z","F":"2024-03-27T20:21:10.550Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d8ca589c84-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d8ca589c84 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cPWp50iCLOSz5avM3MoteGSRB9owOu49%2FWUOVwzyiEBP4fVoMN%2BHiLRiypKIgriAY5envLuTJ1uGhzTqpySfYjY475GkEovC1oAlAxRw2tJFrEnW367bFFK6eap9voI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50387	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	860	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 35 32 36 63 34 37 39 62 2d 39 63 38 33 2d 34 35 63 37 2d 62 36 38 61 2d 39 36 65 38 31 32 38 63 34 31 34 61 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 34 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"526c479b-9c83-45c7-b68a-96e8128c414a","E":"2024-03-27T20:21:10.554Z","F":"2024-03-27T20:21:10.554Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d8d88b065a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d8d88b065a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPDiPI7HNPlSNK4KYVjNa%2BVnnktiq1d1x1mTa8yx87BlYAwAnzdY7d03ojCLL%2BMcK6MnMhcJ6id3GHkL7R%2BN38jfor3n299ViWb8DijB4DaFhCFSUf%2FGUcl1HuOwApw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50390	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2022	OUT	GET /video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=2883584-2908619 If-Range: "9e03c33ee7e7dc5c5363f6a62722a351"
2024-03-27 20:21:11 UTC	1360	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: video/mp4 Content-Length: 25036 Connection: close Content-Range: bytes 2883584-2908619/2908620 CF-Ray: 86b215d98a31878c-IAD CF-Cache-Status: HIT Age: 788737 Cache-Control: public, max-age=2592000 ETag: "9e03c33ee7e7dc5c5363f6a62722a351" Expires: Fri, 26 Apr 2024 20:21:11 GMT Last-Modified: Wed, 28 Feb 2024 06:47:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: WqmJVzBL/QBu0NTMFZCT+H+ehRl8n2mlJM9ORMW5P7In886kFvZWx0Tzra71Qojr4jMixgsmwRg= x-amz-request-id: TJAJWMCK2H19N77V x-amz-server-side-encryption: AES256 x-amz-version-id: zrdARqr8wF3nxKksq84wQ5a.39csM5Ep X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKOfigimnwZVbcsl9eKYJhBoEejfO6AZhnfF4uqXFQMLEi%2F8Pvvu1VVxanO8V55eHEXJflgE1IhrbJ83dKeq%2Fs%2FR6VbbJUO4Ofc9zHFM37BlKKLGIy1Gaqz67RVdct%2B5XPxqC7VS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:11 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:11 UTC	1356	IN	Data Raw: 84 d8 66 1a 27 ca 15 fa e4 51 e7 18 ab 21 f2 5c be a1 98 25 b4 2e dd c4 6a d1 de a4 e7 97 fa 78 32 d8 82 44 3d da d4 f8 55 1e e5 41 ed 6f ad 53 83 eb e3 3f b0 e4 4b 04 ea f3 bf 4e 4f fb 51 12 6d 9e c2 c4 9d 83 39 3b 32 4d 72 1a 8b a2 75 07 ac fd 67 23 34 79 cc b0 a3 1a 9a a5 8c aa de 32 dd b3 72 a3 5a 55 b7 5c 53 2c 41 68 00 79 b8 7e 47 1d c0 69 82 63 72 c9 cf d5 44 8f 40 0e 5f c7 cc 32 7a fa 15 7d b9 06 25 b7 c5 6a 80 0b 71 a3 f0 e5 44 4e 04 ca 9d f3 e3 78 0e c3 9a d0 2e 94 b7 72 7a 2b 63 9f 0b bf e9 ad ba f4 66 84 80 2c 60 9d e1 10 fb e7 4b 85 6f 13 2d 4c 03 83 26 c5 fa 3c 0c 70 c1 5b 67 50 8a ff 46 3c a6 eb 4e 49 65 64 1e 5c 49 83 5e bb d4 20 70 34 75 5d a7 73 8c 74 34 4a 3a 58 8b 49 90 e9 a7 d9 ec 80 5a d2 00 64 ce f3 fa 89 57 02 34 be ab a2 51 d7 3d Data Ascii: f'Q!\%.jx2D=UAoS?KNOQm9;2Mrug#4y2rZU\S,Ahy~GicrD@_2z}%jqDNx.rz+cf,`Ko-L&<p[gPF<NIed\I^ p4u]st4J:XIZdW4Q=
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 20 8d c1 63 da a2 6b e0 37 76 b6 bd 9b 43 f5 53 c6 ef 34 c4 b6 89 9c ff ce e8 e3 bc 59 5e 43 ab 17 62 e8 e0 79 f4 6c a7 43 56 63 76 4e a0 85 41 fc 6d a7 01 c2 ee 97 10 24 c5 19 00 57 f1 2f e3 c1 a7 fc ba b3 14 70 37 f7 c5 4e b9 5e 82 95 6a 29 10 a0 2e e0 6b 6f ea 40 71 df 76 6a 30 30 87 bb df 84 f7 b8 ed 3c cd 87 e1 5f 5f 5e ed 08 c9 32 06 fb c8 d8 00 01 4d 17 ae 87 5b 2f e7 8f d2 0a e1 ca db cf b5 c6 7f f9 d4 c5 5c 70 52 6d 84 8a e3 0b 1c 09 aa 07 65 76 2e 52 b6 4a 2e 2a 69 d3 1a 1a 48 73 31 7a 22 d5 39 f5 7b 60 cf a0 1b 72 7f 10 ed da 8e 90 fd da a6 58 10 44 b8 5e bf ca 51 c1 28 0a e5 46 c8 16 f1 05 6d ff 98 ed d8 7d e1 8e 13 d2 24 28 20 c3 b0 d6 8f a6 d4 1f b9 d4 b8 ae 55 07 9b 06 15 d0 9c e5 06 15 12 ac 6d f8 74 92 91 f8 df e6 ad 11 12 e0 bb 11 14 f0 Data Ascii: ck7vCS4Y^CbylCVcvNAm$W/p7N^j).ko@qvj00<__^2M[/\pRmev.RJ.*iHs1z"9{`rXD^Q(Fm}$( Umt
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: a0 35 39 8b ed 45 12 73 45 c2 78 04 5e 24 61 29 a8 13 2d 34 06 d7 42 cb 8d 20 d2 73 f1 74 cb b1 a8 f2 f3 cf cf be d5 b9 c0 42 ef 09 f6 f2 47 29 60 6b 11 09 5e 66 40 30 2b 56 4e e4 c6 6d 98 78 b3 d7 6c 2f c7 f5 03 11 c2 73 7a ae 9c b3 cd 5f 0f a6 4e 34 5d 90 75 cb 2b 67 fe c7 e7 6f 29 91 ea 2d 1b 17 db a0 79 c5 f8 36 9d f4 0a f2 4c 50 b9 49 fd 7b 71 51 b0 d7 80 8c a0 d4 36 a1 62 d0 3f b6 3f e0 41 ed 45 57 13 da 2f 30 57 03 64 13 fb 6f f7 6c d8 c3 81 cb 88 29 79 43 38 42 d6 1c 94 46 02 24 17 04 2d df 48 54 f2 ee fe 64 30 93 67 dd 31 cd d7 c9 58 67 bf 5e b2 a0 e1 fb 29 97 e5 77 2c 76 c2 bc 1f 8d d2 59 c3 13 1a 63 f8 1d e7 e7 a2 8f dc 70 a7 d0 84 29 45 a5 1c 8d 8d 7f 0c 85 c5 94 02 fe 5b 83 6e 70 f4 20 d0 12 46 04 e7 89 c2 fc 6e 4d ce 97 73 14 d6 40 23 96 27 Data Ascii: 59EsEx^$a)-4B stBG)`k^f@0+VNmxl/sz_N4]u+go)-y6LPI{qQ6b??AEW/0Wdol)yC8BF$-HTd0g1Xg^)w,vYcp)E[np FnMs@#'
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 15 26 ad 31 85 99 90 dc 16 13 e5 f7 c0 4f 84 0e 58 e5 d7 55 d8 75 bd 37 62 7d fe 7c d5 34 68 df 33 c9 ca 17 e6 4d 44 8f a1 47 07 12 97 f4 a4 02 ee 91 5e aa f5 a5 39 a0 d1 68 c1 36 7f a2 2a a3 2c a5 ac 43 b1 c6 d1 d3 0b b5 38 2c 1d 9c b9 ee 78 3a 64 32 70 03 09 4b 49 4a a2 dc 64 64 47 91 9b 81 1a a0 26 2f 01 c7 bd c3 72 51 a1 69 14 42 1f 5c b0 b4 21 07 16 6c f4 f4 f4 2a 1b de a1 97 fa 51 1f 2b b6 78 19 8f 6c a6 d9 db 0c 93 9f 13 4c 65 04 98 fd 4d 86 b8 79 a8 b1 72 0d 61 89 f8 50 ef 1c df f8 5e ad 67 59 9f 26 14 b4 c1 a8 9d 9f 7c de 6c 6a 06 2e 37 4d 37 c6 4e c4 cf 79 b6 5c 04 8f 5b 27 01 99 d8 5d c5 ad 6d 55 e4 45 4c ca bd e2 19 db 51 48 3a 6a d0 c7 f7 57 1d 9e cf 19 9d 3a 66 51 52 e6 0e ac 05 0b 04 15 0a 9c ce 7e 3a 7f e9 2f 21 a9 a8 8d d2 8a ad 0f e8 bf Data Ascii: &1OXUu7b}\|4h3MDG^9h6,C8,x:d2pKIJddG&/rQiB\!lQ+xlLeMyraP^gY&\|lj.7M7Ny\[']mUELQH:jW:fQR~:/!
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: f5 00 6a ec 41 e4 1d 6c 01 31 2b 55 6f 71 b8 86 d9 34 0d 90 98 ba 21 f6 ff 8a db 80 2d f9 b0 19 7a 04 ff 77 7f a4 3d a3 da 60 de 1e 80 3c b2 21 45 bf 10 f1 d5 33 6c d3 0a f3 91 cf 29 8a 78 55 84 a5 74 68 f6 95 d4 71 fc 6e a8 aa 03 03 ff 0e 96 c9 c8 0b ad 22 d8 48 b4 3b a8 d4 e5 07 fb 1d b7 73 38 d3 b8 ae e4 79 34 84 9a fd 2e 8b 29 89 45 20 73 87 a9 fe f8 b1 c5 eb e0 47 c1 51 40 50 99 9e 36 92 5e ed 9c 25 6f d5 43 7f 3d a3 aa 3b 92 ef 49 be a4 86 45 c4 f4 27 a6 70 49 c1 3e 97 77 4a a5 1f db 05 36 34 ae 5e 6e bc b0 ef ed 3e 1b 40 bc 74 fe d1 b2 c3 c6 37 4e ed e0 6d 8b 40 fd 01 3d 99 be 3a 10 18 1b 49 65 38 67 69 34 ba 27 6b 57 f9 8c ca 53 6c 55 63 45 ce d0 14 63 c3 a2 c2 f3 48 00 e5 8c 28 56 5f 62 0e b1 cf 58 99 04 d4 20 50 c7 98 de 65 6c c9 78 e6 a0 1f 06 Data Ascii: jAl1+Uoq4!-zw=`<!E3l)xUthqn"H;s8y4.)E sGQ@P6^%oC=;IE'pI>wJ64^n>@t7Nm@=:Ie8gi4'kWSlUcEcH(V_bX Pelx
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 20 5e 60 a2 69 57 b2 ab 7a 44 d8 95 87 22 f6 09 e2 2b 12 53 32 81 2c 81 6d 0d ea e9 5d cf 8b 46 9a 31 04 d0 74 f3 2f 11 fc 45 0e 32 fb 0a cb d9 ce 26 3f f2 8f c7 00 20 48 47 3b 38 e1 13 dd 4a 79 02 ff 93 b4 8b 90 04 07 b4 71 c3 29 0f f2 b0 49 cf 3e 11 30 5d 36 8c 51 f6 85 96 14 82 8f 86 01 ef 8a 0c a5 c9 b7 ea 8f 9c ee fd fc 03 53 9b 6c 75 79 45 26 9a c0 36 6c 06 06 08 ef 06 0a 84 69 1d bf 84 18 e8 38 3d 3b f0 10 27 b8 64 36 aa f8 bd b2 df bb 0c 39 8d 6f 93 ad f8 bc 6f 06 0b d9 b1 19 a4 30 bf 76 19 d9 49 79 6c 8b ae cf ff 79 6a 8a 1b ca ee ef a1 a2 f0 90 50 03 7a fb 0e 20 01 8a dd d7 a0 f5 5e 22 d1 ef 44 ed 75 b6 21 ec 6d 10 f0 5e c7 f7 df 8f ad 98 26 b1 16 30 42 46 87 28 db e9 68 4b 2b 3e 42 ee 1c 73 50 bb 42 cc dc f3 f1 a5 87 0c 40 c5 0b ad d0 29 f9 ae Data Ascii: ^`iWzD"+S2,m]F1t/E2&? HG;8Jyq)I>0]6QSluyE&6li8=;'d69oo0vIylyjPz ^"Du!m^&0BF(hK+>BsPB@)
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 51 9d 67 b6 22 fa 42 85 10 a3 1c db 6a 30 52 f6 92 32 4c b9 f3 68 04 1b c4 f1 b0 59 01 0a 85 17 dc bb 7a 52 02 90 76 bd 0f ea b4 bc 86 29 5d b4 f0 3a 86 6d 11 42 5c db 4e 9b 2f 36 db 76 26 a5 1e db 32 b9 8e 3f 2c 27 87 30 34 1d fc b6 02 0e 44 36 fc cd cc 4e 80 3f d2 35 bc 7d 09 b2 21 75 7a f3 44 ab b3 81 c2 72 8f 8d 1e e2 17 c9 70 0c 9f 89 cb 26 ea 4b da b6 ba eb 33 3b 29 19 d2 9c 3f f6 65 9d 77 28 8f 58 bf fd 9b 11 7d b8 05 78 97 9f c7 2a 08 4f db 1a 03 03 eb c6 d1 f5 5a 77 39 02 8c ad a0 42 5b 84 1d 96 fa cb 6b da 0d 29 21 33 7f bf 73 6c 7d bc 6a a2 da 72 a2 e7 d5 9b 0f 2e 37 4d ea 90 45 dc d8 18 08 37 6b c4 06 7d 40 a7 72 09 e0 e9 43 15 e1 16 7b 37 31 3d 63 b4 d7 98 21 58 cf 25 73 4c e6 ac 53 06 f8 48 2d ee 21 68 93 dd 53 2b 58 93 36 27 bc 47 09 29 e1 Data Ascii: Qg"Bj0R2LhYzRv)]:mB\N/6v&2?,'04D6N?5}!uzDrp&K3;)?ew(X}x*OZw9B[k)!3sl}jr.7ME7k}@rC{71=c!X%sLSH-!hS+X6'G)
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 4c 6a 0f 14 e1 b9 7b 2c 8e a8 7f d2 11 9a d1 28 ce 70 7a d9 cc 1a ef 88 f4 a6 a1 e7 d8 ba 6f 2a 2d 7a 59 94 ce 95 89 b7 81 22 09 3e c5 6f 3b 5c ab 94 11 49 f6 7b b6 1c a4 74 35 94 28 da 0c 9f c2 94 8a c3 fc 6e 49 3b a1 bb cc f0 2b e4 d7 f2 f6 57 64 cb 8c e1 99 07 20 02 70 98 77 3b 44 7c 7e 11 65 74 d1 33 06 d3 f8 a1 fa a3 8c d3 e1 63 82 7b fe f4 57 75 82 a6 20 10 8d ff fa d9 97 64 fe 1f 3a ef 11 52 74 0f 78 66 55 2a 83 18 8c 5b 4c 45 a5 ae 8e 82 1e b6 50 ef b9 b4 ee ef 7b 0c 2b 64 c6 ec 31 3d 8a 7a 62 10 81 48 01 0c 36 ee d4 08 01 3d af 34 4c b2 1e fe 8c be d7 14 0c 9a 87 99 c9 5c e7 b5 9c 4b bd a7 5e 84 24 94 48 ba c9 ae 18 50 b6 5c 0e bd 9f 5b b3 73 be 1e e8 92 36 26 b1 e4 55 e0 13 a8 33 dd 90 75 72 b3 eb 3c d1 c5 07 20 ba c5 75 ec 90 7a 4a c9 f7 f5 45 Data Ascii: Lj{,(pzo-zY">o;\I{t5(nI;+Wd pw;D\|~et3c{Wu d:RtxfU[LEP{+d1=zbH6=4L\K^$HP\[s6&U3ur< uzJE
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 00 03 40 68 1c 21 00 03 40 68 1c 00 00 37 06 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 03 32 db e2 03 32 db 00 00 03 e8 00 00 5e 94 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 23 24 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 03 32 db e2 03 32 db 00 00 00 01 00 00 00 00 00 00 5e 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 82 00 00 04 38 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 74 00 00 00 00 00 00 00 01 00 00 5e 88 Data Ascii: @h!@h7moovlmvhd22^@#$trak\tkhd22^@8$edtselst^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50391	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2029	OUT	GET /video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=3538944-3561620 If-Range: "ae9cd90a083f0bed2557c06483392760"
2024-03-27 20:21:11 UTC	1358	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: video/mp4 Content-Length: 22677 Connection: close Content-Range: bytes 3538944-3561620/3561621 CF-Ray: 86b215d9885b07f2-IAD CF-Cache-Status: HIT Age: 788556 Cache-Control: public, max-age=2592000 ETag: "ae9cd90a083f0bed2557c06483392760" Expires: Fri, 26 Apr 2024 20:21:11 GMT Last-Modified: Thu, 29 Feb 2024 01:02:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: r7Oo58qpCGEm7BwKl4ngWtsWoeo5cgl9cYy1Vz3zuJVGyBeoondUiSAFnfu464ANNftQhxVgfI8= x-amz-request-id: QC7RSP7B5QKMCVN6 x-amz-server-side-encryption: AES256 x-amz-version-id: 3auJpNHeEQfbyt82S4CIX3vrn0yzB6bP X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z5ORVLpPjcrKC9lMubEYevjvWS1HvWFKTwoJJ01jkPkd5170XiaaES62dRCtlvrj2CuEAXLgV4SiMV97H7P%2BBBAkNNIQfZAPMH5veSGbyMzjKDC%2FIEg7%2BrQ16Lod2D5VhVmE106U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:11 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 31 46 54 73 29 1f dd f1 48 f8 77 48 c2 04 9d 07 fe c9 26 9b 25 34 d2 f6 ea 73 44 9e 35 25 d9 25 22 01 cb 14 be 35 b7 80 28 d2 24 c4 da 38 00 97 29 cc 66 a6 9f 87 80 79 3a 95 0b ce bb 04 b3 ad 52 92 82 57 54 82 7c 42 b4 2c 18 37 2b fc ce 1e eb cf 4b c7 0e 74 66 e7 69 ba 5a f8 7c d5 f9 fa 59 31 c2 89 3f e9 55 65 0e 72 5e c4 72 da e9 53 b5 16 85 83 12 74 46 c9 4e cc 54 52 5e f5 03 2d f3 e8 b7 52 4b be a0 ab f4 21 6a a6 55 7f 56 c4 8f 17 32 34 4e 2f 64 be 5f 84 ff 18 d8 5b 78 7a b8 5c bf 81 c3 2f 78 33 30 81 27 93 63 98 ef ef 2d 9f a3 28 51 87 f3 56 7a 04 f3 c4 d5 54 11 63 3e 8a c1 80 44 85 a9 5b af e3 75 2e 14 91 25 8d 62 11 72 ee 4f 33 f2 21 64 13 66 6e 0f 51 71 22 6a e6 65 aa d2 6c 9e df 28 93 01 b9 ad 44 3b 0f de c6 5d c3 2b dc 7d c7 22 d6 69 21 8d 3d 73 Data Ascii: 1FTs)HwH&%4sD5%%"5($8)fy:RWT\|B,7+KtfiZ\|Y1?Uer^rStFNTR^-RK!jUV24N/d_[xz\/x30'c-(QVzTc>D[u.%brO3!dfnQq"jel(D;]+}"i!=s
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 62 06 2e 99 d8 95 8c 1f e9 60 6f 10 1f b5 c1 19 fd 6d b0 75 18 0d 24 4f a4 d6 a8 43 fb b3 fd 03 43 c8 13 c4 9b b5 4d 58 ac 0c 07 1c d3 00 9e 5f 35 89 9e 93 a3 3d 80 06 d2 72 91 9a b5 f1 54 98 b9 24 bc 4f 95 76 d7 9a 46 f6 a4 4a 25 bf 0b 86 41 a6 e8 e1 17 20 30 a2 7d 80 05 c3 68 fa 97 42 1a 06 7f 13 57 59 7a b8 e9 bb e5 ad f2 e6 f0 07 9f 93 ed 90 c4 0c 75 e9 80 d7 4e da 2f 81 fe de fd a7 ee 0b 9e 34 a6 7b 5e 2c e8 92 72 36 8f 19 71 65 1c 0e 6e f4 0c 52 a2 f5 57 8c 97 b5 b1 bb 38 e7 92 4d 43 0e 06 7b f0 44 1b f3 df f2 2d 51 ca 13 8b bd 09 50 0a e9 7d bf 46 70 6b a5 68 90 fc 4a 67 e7 5c 70 19 64 46 3c 0d ec 5e 93 d9 7d 55 16 a2 b9 79 83 ac dc 2a bf 88 a3 4a b1 65 88 7f 0e e4 39 10 a9 69 1f d5 76 bd 7e 04 12 ec f2 99 3e c8 d0 0f 42 39 4d df 11 6e fe 2f a5 d4 Data Ascii: b.`omu$OCCMX_5=rT$OvFJ%A 0}hBWYzuN/4{^,r6qenRW8MC{D-QP}FpkhJg\pdF<^}Uy*Je9iv~>B9Mn/
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: a9 ff da 8c 56 04 a3 d6 26 f2 6c cf f6 1c a6 af b8 b1 85 11 7f 8b fd ab c8 78 d7 b2 eb bd 77 d6 53 7a b3 4b aa b2 4d 8e 3d a0 fb d6 e8 c8 e3 1a 95 81 47 44 99 f3 e7 6a 88 fd c1 06 b5 fa c5 d8 f2 5a e0 c8 de 22 2f 0a 0a 66 a2 72 ea 31 fa eb 91 96 ee 70 df 7e c0 be cc a9 ff bd 15 3b 5c 3b 49 70 98 b0 1d 18 1c 4f 31 f2 c7 26 07 4c 0b ff ce 37 35 d6 4c ed 1e 69 7e 63 f7 9c 11 38 92 36 a7 69 46 f9 92 7e 92 fd ca aa d5 b7 67 dd 14 87 17 26 39 55 b9 bc 1f 41 16 8d f3 36 b4 71 84 fe d2 a4 89 df a2 0b 2d ec bc fd d1 48 78 db 74 cd 81 5a 94 26 5e 60 10 cd e6 c6 ab d3 cb b4 7d 93 1b b9 a4 7c b9 9b 6e 60 62 e6 d2 df 8e ae 7b 22 09 2b 39 e1 3a c9 b1 40 83 af 92 c1 7c 5e 32 32 9c 90 55 aa 83 99 0a 95 58 39 02 af 19 f6 36 d2 41 d5 d0 16 9a db e1 93 5c de 7e d5 35 62 56 Data Ascii: V&lxwSzKM=GDjZ"/fr1p~;\;IpO1&L75Li~c86iF~g&9UA6q-HxtZ&^`}\|n`b{"+9:@\|^22UX96A\~5bV
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 72 df 1c 55 50 46 b8 cd 2d a2 78 f0 b1 94 77 04 42 42 8b ab 36 e5 59 24 ee 50 cb 1c 69 e6 f0 96 57 64 53 a4 9f 61 8e 73 f5 c9 09 22 c4 29 b0 10 d0 f9 8b f6 b7 c2 6b 82 ff ad 94 1d f9 27 7d bc 2f e4 86 ea 0b 72 7d 3b 09 f7 c2 d5 98 79 a8 a4 ec 69 20 8e d9 8c 12 c0 38 54 3f b2 97 0c cb 84 82 30 ac 32 40 0c db c9 7b f6 b7 5b b9 26 d7 cd b9 2c 22 c1 22 ac a6 6c 1d 93 be 68 08 e3 62 c1 55 fb 1f 25 70 1b 72 68 b2 f0 78 03 f3 f2 3b 4a c5 23 d9 b1 57 23 96 65 50 13 c7 d5 82 ee ad 5b 5d c5 43 5e d6 41 ca 30 bd d8 41 e4 b6 09 ea 04 d6 e2 ae a8 1c 25 57 7b 21 35 81 e1 e8 a0 70 ff 8e df a3 e1 ac 8b 60 fa 72 e2 a7 58 59 5f bb fd 36 c4 30 3d 6a 3c 16 4c 1b ad a4 2d c0 b4 db 97 ee 81 cb 11 16 bd cc ee f6 37 89 fc 26 78 91 e8 a5 72 ac 44 df 8e 2c 6f 96 61 85 28 0b 27 60 Data Ascii: rUPF-xwBB6Y$PiWdSas")k'}/r};yi 8T?02@{[&,""lhbU%prhx;J#W#eP[]C^A0A%W{!5p`rXY_60=j<L-7&xrD,oa('`
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 10 ff 29 3c b7 05 d5 f5 75 d4 21 7b 20 2c 67 ef 84 07 46 24 77 fa cb 7f c9 d9 29 4e e0 71 ac f5 02 f0 1c a0 30 31 19 48 a9 46 7d 89 99 aa f3 a2 28 17 4a 95 c1 7e bd 36 1b cc dc 54 32 a3 c6 cf cf 39 b7 4e 8d 34 62 05 07 d9 c5 46 fa 4e 92 9e 44 5f 63 a7 6b d3 20 0d 18 9a 4d 23 12 3b dc 63 df 13 b3 10 c1 1e f6 6a a1 4e e0 9a 63 e2 60 3a 0f 6c ad 7f 63 4a 5a 78 66 3f dc 1f 5b c5 c3 68 1a 86 3d 5c 45 2c cd ff f6 54 97 56 f5 25 bf 8f 6e ea fa 59 a8 c2 ad b2 4d e6 79 83 db 62 ff 1f 19 d9 2d ce 78 bc 4f ba 8c d4 94 20 06 13 cc 00 fe b3 4c b3 f0 2d b0 da 71 54 a7 31 c2 0f 12 1b 70 2c aa 29 02 1c 3f 5d 0f 52 58 33 0a 89 67 3a 1b 84 84 51 4d cb 6a 86 77 b1 07 e2 4c 7b 1c e3 b4 b0 51 c8 0e a8 b2 9f e5 e8 1a 09 5f 0c e5 d2 09 ba 12 2c dc 04 2e 04 72 bf 1d 86 05 b1 5d Data Ascii: )<u!{ ,gF$w)Nq01HF}(J~6T29N4bFND_ck M#;cjNc`:lcJZxf?[h=\E,TV%nYMyb-xO L-qT1p,)?]RX3g:QMjwL{Q_,.r]
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: e9 45 53 d5 b4 34 db db a8 32 5b 03 76 9d ae 2b ca d8 c7 77 2d ff f0 0c e0 a3 50 82 e4 1e e2 6a 6d d1 9a 55 65 22 6c 0a 6d 41 05 fb ae 4a 7f 23 0c 8e 74 5e 3f bb f7 64 1f fa 2a ac 79 96 52 be a8 02 49 f9 df 82 02 b2 66 5b d7 43 db 20 12 ab 3e 5a 62 bd 35 1f f0 32 41 7c 57 b7 f6 a7 34 69 92 97 aa 13 ce 76 91 05 8a bc 1c ce 2e f2 7f 3e a2 df 58 27 cc 17 a8 69 01 f8 74 20 cd ac 0f 97 a5 6c e1 fd 45 f2 34 6b c2 5d c0 c9 2b 72 9b 56 44 bd c5 e5 77 99 77 e8 6e fc 1f a7 0e 67 6e 8e 3b de 1c ab 9b df b3 78 8f 32 ce 0b 46 6b 83 07 ea 16 a7 ae 25 b5 70 4c a9 11 f5 cd dd bb 89 aa 79 53 73 8e 36 25 4a db d7 e3 c9 62 c2 b8 8a 4e 91 3f ee 16 13 9b d9 a3 ef 05 be 84 75 94 f4 41 b6 c2 f2 e3 b7 5f d7 39 c5 40 94 c2 2a 6d 51 9e 3d 96 d6 98 49 71 e2 89 b8 00 53 bf cd df bb Data Ascii: ES42[v+w-PjmUe"lmAJ#t^?dyRIf[C >Zb52A\|W4iv.>X'it lE4k]+rVDwwngn;x2Fk%pLySs6%JbN?uA_9@mQ=IqS
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 9b e8 3d 11 fc 61 b7 47 da 40 7c 9d 4c eb dc 97 a5 29 f5 a1 86 7a 6e f5 93 02 f4 c9 00 38 d9 b4 b2 cb 4c ed 67 e5 cb 6e 81 38 d1 45 d7 07 22 e0 6c 16 63 0b 1d 25 38 2c 85 65 30 fa fd 76 1f 29 cf fa 4b a1 9c a9 ba 95 89 d7 17 f8 08 e9 7f a3 64 55 b8 3d 84 8a 94 a5 5a 87 7a 35 31 45 79 89 19 3e f6 93 92 19 1c 9c 1b 4b ee d9 bf ee e9 cb ee aa 05 78 97 68 31 43 7e 54 91 b4 31 80 00 93 05 0a 5d 8f a1 64 0c e0 8f 16 b1 cc d1 d0 3b b7 53 71 eb b8 ec c0 94 80 a2 e5 78 d0 9a 6d 57 05 e9 76 2e 86 d7 a9 28 7e e6 7d eb c7 ea 1b e3 ba f5 bd 90 9e f6 ab 30 f8 31 eb b9 a9 8b 77 d5 bd ac c3 69 c3 f7 ae ce fb 35 f7 21 5f e9 e6 b9 9c bb c7 7b c6 d2 81 c5 b8 79 7c b5 1c c3 d8 54 25 81 83 4d fc f8 4c 79 8e 8a a0 e1 ce ea 35 f4 cb 51 45 b3 29 f7 02 f7 74 58 86 00 55 c7 25 b7 Data Ascii: =aG@\|L)zn8Lgn8E"lc%8,e0v)KdU=Zz51Ey>Kxh1C~T1]d;SqxmWv.(~}01wi5!_{y\|T%MLy5QE)tXU%
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 19 fb e7 f8 01 4e bc 68 6a 59 2c 1c 66 e5 b9 16 08 23 a7 b2 fd d1 cd 4f f1 db 49 ae ae 8c 68 35 7f 37 e8 be 1a 08 69 2a 3b 43 7c 72 85 a1 18 e5 ac 1a 9d 8c 9d 7d 03 61 58 b3 53 33 6e 8e b3 e1 9e 05 64 e7 70 31 62 5a e8 ea 98 29 bd eb 65 9d e4 39 bc 64 29 00 eb 92 f6 b3 f1 f6 bb fe f2 b9 a5 88 e8 25 cd 49 39 3b de a4 37 8a 87 42 3c aa ce b6 7a b1 83 85 d2 53 3e 79 18 18 fe e3 39 84 94 4f 2d 9e 79 03 43 01 35 d9 1c 16 7d f5 1c d2 dc ee dd a3 3f 70 77 07 26 98 94 e4 07 f1 52 10 36 e0 cd 98 6a 8c 8a d6 0b e6 3e f0 4c c9 12 2c 02 d2 1d a7 a0 5f ed 69 42 50 4a 38 61 ee 9b 6c 1b 4f 6d 1a 7d db 36 6b 7c d4 8c c4 3c ec 82 e9 74 f5 d8 1f 45 2f 5a e1 77 22 df ef 77 4f 83 50 25 f9 c5 7a 86 b6 5a 76 07 03 c9 5d ed 10 09 dc 5f b2 06 3b db 26 7e 48 b7 f6 47 a6 86 77 d8 Data Ascii: NhjY,f#OIh57i*;C\|r}aXS3ndp1bZ)e9d)%I9;7B<zS>y9O-yC5}?pw&R6j>L,_iBPJ8alOm}6k\|<tE/Zw"wOP%zZv]_;&~HGw
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 4f 88 25 fe 72 0b 94 de 65 a8 c8 0b e5 5f d2 3b 3a f5 9f 8f 80 fc e3 a6 b7 b4 a1 d0 46 89 30 b9 c0 ad 8b c7 ef 80 41 5b fc e4 af 5b 45 17 5f 06 85 32 7d 9e 7c e4 5e 46 91 0f a3 cb 0f 49 f1 31 af 8f 7f 49 ef ea b2 4e 29 b5 bb 58 9e 63 48 58 c2 21 35 39 5f 85 65 5f 3b dc 04 97 69 8c 84 20 56 a6 9a 13 9a 26 d7 ce 64 a3 20 7c e0 2a cb 27 bc 44 c2 f3 e2 37 fe fc e0 c7 47 da b3 a7 8f be b9 75 41 fa db 6c 1c 15 38 22 c1 8b 24 aa fb a2 ee 7f e7 64 91 1d d1 4e 30 8a 5a b9 6d fd 60 24 93 01 a0 3b c1 50 12 f5 9c b9 de 2d 8a 9e 76 50 29 10 cb 11 50 c6 c7 47 4c 1a cf ab a1 db 29 f0 65 d4 62 56 e5 48 96 e2 ab cb 47 fc b8 fa 5c b0 be 39 0b fb ea 27 62 b4 9e f1 d4 2c f0 52 4d fb d4 7f d6 58 3d aa 40 30 a0 b9 2b d0 d6 fa ad b9 e6 1d 50 4a 24 7f 14 dc 91 8e f1 64 30 91 ff Data Ascii: O%re_;:F0A[[E_2}\|^FI1IN)XcHX!59_e_;i V&d \|*'D7GuAl8"$dN0Zm`$;P-vP)PGL)ebVHG\9'b,RMX=@0+PJ$d0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50389	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: WeIZuLBveA1WYWqRp2zSLYSfliQ_4mLhyBE1gxZ9T1M4IhfhbAxFrNI5wv3_q1Xfyi0ZuvO2YKxeMTFm0nVdHQHOZfE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	814	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 62 35 31 34 63 35 64 31 2d 62 34 30 63 2d 34 38 38 32 2d 38 64 37 63 2d 30 32 35 35 63 65 34 39 38 39 32 33 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 38 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 35 39 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"b514c5d1-b40c-4882-8d7c-0255ce498923","E":"2024-03-27T20:21:10.558Z","F":"2024-03-27T20:21:10.559Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d8f9b105dc-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d8f9b105dc X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z3FBLCmuuKiYYf2KDQ%2B6Ha%2B3XDhDqdykMVp1AQ%2Bo1kd7t4VvOmZdNMzSFoyebUI4pMgyCcdG%2BG98r7nZda86AEMbIWHYppQw0PUUhLJFsZ1DKqCI5PJkKR3zXqbykG8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50392	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2666	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	919	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d99e387fd5-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d99e387fd5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qD4PpJXF4xh%2FAptm29BKZI8EPc8tMUN5vsfrS0Hq9cxXBaUL894cNujyPqNTV1Vy2R6qO0OSlBI%2BEE38ui5nJL%2BoSIg3%2Fjl9wnHfpQwee7tuq6puzwWOWqe8CJ2%2BaUE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 6f 36 5a 63 63 6e 54 70 77 4a 5f 72 38 46 6a 4c 57 75 73 57 77 37 54 77 63 53 63 78 69 70 52 66 38 4a 4f 44 78 5a 2d 64 35 30 71 4b 58 6c 44 6c 34 4a 71 5f 53 51 45 46 51 2d 59 37 44 74 6d 43 2d 50 43 6d 54 64 4d 34 68 59 35 45 4f 65 76 4a 54 49 71 6a 69 35 47 6f 53 44 41 22 2c 22 42 22 3a 31 37 31 31 35 37 38 30 37 31 33 33 39 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"o6ZccnTpwJ_r8FjLWusWw7TwcScxipRf8JODxZ-d50qKXlDl4Jq_SQEFQ-Y7DtmC-PCmTdM4hY5EOevJTIqji5GoSDA","B":1711578071339}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50393	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	918	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215d9a9d39c2a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215d9a9d39c2a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OkCoxsmXdrwnTSovqfMNATYE7IXZFmKIhFEwnlCX7jbI7gzKrs2RzTE70UiSmNMWHKScry%2F9uNRl0qWqduOFJtZOQE5VGoj1AdCbZ5INZlzu8u3iv54YiXq9DW25TWw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50394	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	478	OUT	GET /api/5715036/envelope/?sentry_key=31b80c12758c45b59038e73ab88ff644&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:11 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50395	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3094	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	814	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 33 32 61 38 32 32 66 39 2d 64 36 31 61 2d 34 65 63 31 2d 61 63 64 32 2d 39 34 61 65 62 66 31 64 62 61 30 35 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 36 33 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 35 36 33 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"32a822f9-d61a-4ec1-acd2-94aebf1dba05","E":"2024-03-27T20:21:10.563Z","F":"2024-03-27T20:21:10.563Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:11 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215da69053955-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215da69053955 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yibL64LYghuZeLlSTNN%2B6Msrrye3N8tDJ5IoZzo00OyGL%2FmYs%2FOGkQY%2FB7bUvEGz9LvN7kvwgo30W5hZfaDDRkJ1QCcIhOOVYUfB%2Fa0njjTbu4Ba0e4TFCi1BfHGZng%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50396	34.120.195.249	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	478	OUT	GET /api/5742314/envelope/?sentry_key=d1e5ff4b423a49d1a73e21b46496148c&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.100.1 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:11 UTC	516	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Length: 0 access-control-allow-origin: * vary: origin,access-control-request-method,access-control-request-headers access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50397	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2030	OUT	GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780 Range: bytes=229376-3996867 If-Range: "24d94274c1c4cb653ed9d888952a6386"
2024-03-27 20:21:11 UTC	1359	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: video/mp4 Content-Length: 3767492 Connection: close Content-Range: bytes 229376-3996867/3996868 CF-Ray: 86b215db6ff3083a-IAD CF-Cache-Status: HIT Age: 777116 Cache-Control: public, max-age=2592000 ETag: "24d94274c1c4cb653ed9d888952a6386" Expires: Fri, 26 Apr 2024 20:21:11 GMT Last-Modified: Wed, 28 Feb 2024 06:47:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 3uCEdueo4RZXePkHS8/rltxEXOc/N4j+1n+ltnRZ/tO25HtmudoGXllkaUY22Nmc7KN6iNkU/wc= x-amz-request-id: E68PR1WNZ7SP2V9V x-amz-server-side-encryption: AES256 x-amz-version-id: oWGnmYjveps65euzJSMUQwkr3LnrBv3h X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tw1nh0gUo0aVksLDGmSwlFFoBaFNq89vCzHU7Z9oUBZfiYnV2NhbcGvAnigrGX0Xx3cICQVRqnz%2FvwwxRkerbYvMcywYCiUbGO6KX4DP4CY7tT2WS3RaAzyLMFee9Gzo4Hw%2FW%2Fqx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:11 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 61 72 74 3d 22 74 69 6d 65 3a 33 36 32 34 31 39 35 32 39 35 66 32 35 34 30 31 36 30 30 30 30 30 30 64 35 30 34 34 30 37 32 39 36 36 37 33 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 33 36 32 34 31 39 35 32 39 35 66 32 35 34 30 31 36 30 30 30 30 30 30 64 35 30 34 34 30 37 32 39 36 36 37 33 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 Data Ascii: art="time:3624195295f254016000000d504407296673f254016000000" stRef:toPart="time:3624195295f254016000000d504407296673f254016000000" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rd
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 64 61 30 30 30 30 30 30 38 38 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 30 39 31 38 39 62 66 34 2d 62 63 35 66 2d 33 63 39 32 2d 35 31 39 39 2d 30 36 63 37 30 30 30 30 30 30 35 62 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 36 39 39 34 31 32 37 35 36 38 66 32 35 34 30 31 36 30 30 30 30 30 30 64 31 36 35 32 35 37 37 30 37 32 34 33 32 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 36 39 39 34 31 32 37 35 36 38 66 32 35 34 30 31 36 30 30 30 30 30 30 64 31 36 35 32 35 37 37 30 37 32 34 33 32 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d Data Ascii: da00000088" stRef:documentID="09189bf4-bc5f-3c92-5199-06c70000005b" stRef:fromPart="time:6994127568f254016000000d1652577072432f254016000000" stRef:toPart="time:6994127568f254016000000d1652577072432f254016000000" stRef:m
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 63 32 39 66 39 66 62 2d 38 36 61 61 2d 34 65 35 34 2d 61 32 33 33 2d 38 64 62 32 32 36 64 32 62 37 32 66 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 41 72 72 6f 77 3c 2f 72 64 66 Data Ascii: :li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:ec29f9fb-86aa-4e54-a233-8db226d2b72f"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Arrow</rdf
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 62 62 61 33 38 30 30 30 2d 63 38 64 39 2d 34 36 65 38 2d 38 30 63 37 2d 35 35 63 64 63 64 62 65 61 32 34 64 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 38 34 33 32 30 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 31 38 34 33 32 30 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 Data Ascii: rdf:li stRef:instanceID="xmp.iid:bba38000-c8d9-46e8-80c7-55cdcdbea24d" stRef:fromPart="time:0d184320f25600" stRef:toPart="time:0d184320f25600" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients>
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 74 69 6d 65 3a 30 64 35 31 32 35 31 32 66 32 34 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 34 62 64 64 66 30 33 2d 34 36 39 33 2d 34 30 62 31 2d 61 38 34 66 2d 33 61 39 33 66 36 37 37 36 31 61 39 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 35 31 32 35 31 32 66 32 34 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 35 31 32 35 31 32 66 32 34 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d Data Ascii: time:0d512512f240000" stRef:maskMarkers="None"/> <rdf:li stRef:instanceID="xmp.iid:24bddf03-4693-40b1-a84f-3a93f67761a9" stRef:fromPart="time:0d512512f240000" stRef:toPart="time:0d512512f240000" stRef:m
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 39 65 63 62 64 63 62 2d 61 63 31 64 2d 34 33 30 39 2d 38 39 32 62 2d 62 30 62 33 37 34 64 30 66 32 65 65 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 35 31 32 35 31 32 66 32 34 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 35 31 32 35 31 32 66 32 34 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e Data Ascii: rdf:li stRef:instanceID="xmp.iid:89ecbdcb-ac1d-4309-892b-b0b374d0f2ee" stRef:fromPart="time:0d512512f240000" stRef:toPart="time:0d512512f240000" stRef:maskMarkers="None"/> <rdf:li stRef:instanceID="xmp.
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 66 31 63 66 65 32 32 31 2d 36 33 65 38 2d 34 31 32 30 2d 62 30 34 66 2d 66 66 35 39 33 65 36 33 64 36 38 30 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 50 69 74 63 68 20 Data Ascii: /rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:f1cfe221-63e8-4120-b04f-ff593e63d680"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Pitch
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 66 34 33 62 32 36 63 64 2d 39 30 38 34 2d 34 39 65 39 2d 61 66 34 63 2d 65 63 64 39 66 38 37 33 61 64 31 30 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 53 68 61 70 65 20 4c 61 79 65 72 20 31 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c Data Ascii: f:Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:f43b26cd-9084-49e9-af4c-ecd9f873ad10"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Shape Layer 1</rdf:li> </rdf:Al
2024-03-27 20:21:11 UTC	1369	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 65 63 74 73 2e 6c 61 79 65 72 22 0a 20 20 20 20 20 20 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 66 36 31 38 65 30 63 34 2d 33 34 63 62 2d 34 35 30 63 2d 39 65 32 63 2d 65 63 63 33 38 32 34 38 37 32 63 34 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 4d 61 79 61 20 43 75 72 73 6f 72 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 Data Ascii: Description dc:format="application/vnd.adobe.aftereffects.layer" xmpMM:InstanceID="xmp.iid:f618e0c4-34cb-450c-9e2c-ecc3824872c4"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Maya Cursor</rdf:li> </rdf:Alt>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50398	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2294	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570869576&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570869576&sst.ude=0&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Introducing%20the%20Visual%20Suite%20%7C%20Canva&_s=1&tfd=3890&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	227	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:11 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":400,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50399	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2881	OUT	GET /_online?1711570870595 HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	639	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 2 Connection: close Cache-Control: no-store Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TGikuAwrW0ITJqzZKShtgVhPmmOxkUz%2B4MICY03tJI34XsMsCLIg3K4nNRZoH7AoDTCLqcgCPDIctVy%2BkvNB5Yk0zHGU8iY43Tyios1%2F1nNtyfD77p7YYhxt4cFE8TQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b215dbdac705c9-IAD
2024-03-27 20:21:11 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50400	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:11 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215dc5cc481ca-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215dc5cc481ca X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KwyEBnwxDnp56U6qHE4%2BG8oVa1AgMCpS5HHvjTDYbFxXH2HpKtXBpAPjouYO5V5Tb68tVm5y9jUcTK7MNMdZkxSctOGyHju53HLDcLliCyA4iCM%2FpUEBPewAiP6vlT8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:11 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50402	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	2673	OUT	GET /_online?1711570870595 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:12 UTC	639	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 2 Connection: close Cache-Control: no-store Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7z6i7LHEvBYO7gRTJYA68KGd6NQpzZ63oLOV2S3z5jSiBAXSolmEu%2FD1dwPsEzgF%2BF8IEQ6CnQKSssg1QUIpbypWiooYo1MWamqpcPi43JnBfjI6kDaFb9VVz%2FTMnJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 86b215de8c8e827a-IAD
2024-03-27 20:21:12 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50401	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:11 UTC	3457	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1267 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: design_viewer sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 43d6a67 X-Csrf-Token: EEzAHrg9tNGtJ07nGwrsNXdMpM0TIsg34BABwDxBkmRreWsd2ZBid7MDwVC13M5b0x9Hupgc2BWvyAxfkgCV8qF5G3M X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20240325-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:11 UTC	1267	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 36 65 34 63 66 32 62 2d 38 65 35 66 2d 34 61 63 62 2d 61 31 31 35 2d 37 66 36 35 39 31 62 63 61 66 61 62 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 30 2e 36 33 39 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 31 2e 31 37 31 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 54 43 57 4d 42 22 3a 22 41 22 2c 22 58 4c 49 4e 4f 22 3a 22 43 22 2c 22 54 46 53 41 46 22 3a 22 44 22 2c 22 53 50 50 54 50 22 3a 22 42 22 2c 22 53 50 50 53 42 22 3a 22 41 22 2c 22 50 52 4f 45 22 3a 22 41 22 2c 22 4f 43 50 53 22 3a 22 42 22 2c 22 4d 54 41 4f 22 3a 22 Data Ascii: {"A":[{"A?":"D","A":{"A":"46e4cf2b-8e5f-4acb-a115-7f6591bcafab","E":"2024-03-27T20:21:10.639Z","F":"2024-03-27T20:21:11.171Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"TCWMB":"A","XLINO":"C","TFSAF":"D","SPPTP":"B","SPPSB":"A","PROE":"A","OCPS":"B","MTAO":"
2024-03-27 20:21:12 UTC	901	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215de3bde5a51-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215de3bde5a51 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ao%2Bbz44vB3kA5STdbpoYYbJXEfpSRmil7HNGbkXbXzheZqegqIC5GRs1KFh6apD6VsuDwBgCGcGeialRuF8kfC4FhAo3cuh%2BIA8Hezsar3S9%2BSLF8nQ47M2gCtHR8GU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:12 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50403	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:12 UTC	926	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215def9062d26-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215def9062d26 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y6YrHsHz5buMAuxf1n2piTOgkIK9TJtdC%2BlSIl32sSXhIJ5isImVJVK4WXJFeglR1di%2BBCN%2BPLVWIA0qPdMbnKsz3bdYib%2FjkzCYgELd1enp85eLSpoCEDda%2Bn1MYRc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:12 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50404	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1322	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16753090181203190409"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16753090181203190409","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16753090181203190409","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16753090181203190409","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16753090181203190409","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50405	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1222	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	1077	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50412	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:12 UTC	926	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e3298707c8-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e3298707c8 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XCQNncwnHFHVnFhBz%2Bw%2FuZYPPjl2Dka4B1cyBbvi3osE4ArNiigUtmtX0DjBslme9z319b5QLFu0ozzvW5EwciiGUlsXj%2Bx81vK4o%2FnwmZQZtsFz3Ber9oJ4X5LCd%2B4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:12 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50407	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1245	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	2194	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7669178905913048"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7669178905913048","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7669178905913048","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7669178905913048","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7669178905913048","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50409	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1150	OUT	GET /activity;src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	1005	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50408	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1238	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50406	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2130	OUT	GET /_set_cookie?val=zIe6LFzykvrPGGxNyJvG82Mon1crSAY3SitRU0nZ%2BMXDhiatrQAXmp4ylqCNnXrw7ylUnLauSVdb%2F3MziA2n5tDHEkdSsY1PeBc7wjLcsagvt5MaJn5TyZ4aOPn2cV6P99RDMF8p4Fp9UT4LlxObIjyGo98iGVbSuR9y HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:12 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775956; Domain=canva.com; Path=/; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:12 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50413	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2484	OUT	GET /_set_cookie?val=ay5hKn0vzCleCvjfq16gdPZJbIr68Szwfw%2FpKjVao83f56tLaQ23q1eC822mgio%2BGZn5HI7TmVWzuS%2Bxhdsi4bkl88irg4%2BurvxLNWnB%2F0qCalU6TZctSN8y%2BkR1%2FGuoMDEWrMB3MvwWW1ONNFtRcpDvh7deC6HoNXu1JEj%2F7KOG0SCpe0VKi%2BH4IJrnxA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:12 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:12 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50414	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2328	OUT	GET /video/1375993/BRCA24001_WWYDT5_LandingPage_Docs.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0= Range: bytes=58810-2883583 If-Range: "9e03c33ee7e7dc5c5363f6a62722a351"
2024-03-27 20:21:12 UTC	1358	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: video/mp4 Content-Length: 2824774 Connection: close Content-Range: bytes 58810-2883583/2908620 CF-Ray: 86b215e329ba0a85-IAD CF-Cache-Status: HIT Age: 788738 Cache-Control: public, max-age=2592000 ETag: "9e03c33ee7e7dc5c5363f6a62722a351" Expires: Fri, 26 Apr 2024 20:21:12 GMT Last-Modified: Wed, 28 Feb 2024 06:47:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: WqmJVzBL/QBu0NTMFZCT+H+ehRl8n2mlJM9ORMW5P7In886kFvZWx0Tzra71Qojr4jMixgsmwRg= x-amz-request-id: TJAJWMCK2H19N77V x-amz-server-side-encryption: AES256 x-amz-version-id: zrdARqr8wF3nxKksq84wQ5a.39csM5Ep X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W5BXJrmeOSFgbWTeZCmovwSGIUokuEY3NBfAw%2BdTaiFuVgkyHQAH8wH14WOfetWUzQgtlFKXZPZdSOyeX2M%2BhAmb0XCNvUjwgCrDy8zcYZ3CjJEyUCKpXvPAAPToIGkAPw4In%2FN9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:12 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: a0 f2 22 b3 16 c0 7f 78 c8 07 47 bb 40 1c bf 35 90 e7 4c 8b 0b 60 d8 0d 2e 64 d2 55 70 56 83 72 6b 35 a2 99 90 ac f5 ce 9b f7 3a 94 fa af 27 c8 8a f8 f6 b1 34 88 ab 0b 70 2a 1a f9 89 f6 03 99 32 ff e8 5b 9c 6f 50 04 73 8b ba 9b 14 e3 3d 04 64 c3 f0 69 4a c6 f1 8a 8e 3a a4 69 7e 89 03 69 54 55 6d d4 bd 48 7a 43 0d 17 b9 6c 5c 44 d0 36 c0 28 c0 18 81 97 c7 78 4e 20 93 c8 b3 87 86 95 bb a3 73 ac b6 38 12 f2 1a 96 03 27 61 d0 79 23 f0 c2 3e b6 4c 77 55 e8 28 d5 3c 90 f0 9b 20 5e 50 5d c6 0b 56 54 5e 13 e4 c8 ad 06 10 81 32 2e ac ed d8 7b 10 88 55 84 77 f1 19 2d e6 da c7 61 c1 31 d6 3e eb 86 ff ad 17 aa c8 f0 43 20 c8 6f 21 c7 5f c5 13 eb 82 4a 2e 50 74 08 8b 3c 52 16 49 83 c1 7f 58 87 e6 bf e5 5c 23 6f c4 39 bf dd 08 4f 06 f8 24 33 ea 1f 0e fb cf e1 70 89 1b Data Ascii: "xG@5L`.dUpVrk5:'4p*2[oPs=diJ:i~iTUmHzCl\D6(xN s8'ay#>LwU(< ^P]VT^2.{Uw-a1>C o!_J.Pt<RIX\#o9O$3p
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: 5e fd 18 1a dc df 0a 53 10 a0 8b 44 eb 7d 7b 9e df 5f d2 98 65 06 9a 87 82 60 b9 cb f8 b8 6b 72 58 ae 7d 70 b0 10 07 c2 40 27 5b 51 9e 90 98 d7 06 7b f2 41 47 c2 15 58 6c 05 8e 22 a0 3a ab 89 82 31 2d 84 e2 1b a2 da f7 6a 1c 5b 83 1a 50 20 91 9f a1 34 1f 82 2b 20 c9 bb 93 48 1a c1 56 b6 62 39 a1 17 2a a5 35 57 4c 6b 23 68 84 fb ae 53 51 68 75 8c 32 c9 f9 9a 63 e1 47 14 54 78 69 0c 0a 5e f9 ff 1b 00 5f 1f d2 ba 84 95 3c 6a 98 80 e8 d1 69 42 3f 80 21 00 03 40 68 1c 00 00 00 d1 01 9f a2 f2 2f ff 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 04 94 8b 0f b5 c7 d8 00 10 c5 2e a8 4b cd ed 86 d1 50 c0 3c 37 9f 82 36 f8 31 86 e3 f7 4d 8f 27 04 34 eb 3c be cf e9 6a 3f c7 9d 1e c3 cf ad 95 3d 39 08 8d c8 0c ca c2 d3 f7 28 92 fe d8 32 72 c2 38 98 Data Ascii: ^SD}{_e`krX}p@'[Q{AGXl":1-j[P 4+ HVb9*5WLk#hSQhu2cGTxi^_<jiB?!@h/.KP<761M'4<j?=9(2r8
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: 81 3d a5 9c ad 06 0e 47 84 b3 3c 44 7b e0 a4 62 7e de bd 21 b9 d5 10 e9 20 82 a8 07 c9 a7 b7 cc 5f b8 f2 a0 24 de c4 e0 ec c9 3a 82 0d 56 45 ed ed 7c c7 9d ca c6 8f 8f e2 d2 89 f7 f2 f8 19 1f 85 37 ed 50 51 33 a7 57 3a 95 a6 17 07 67 e7 4f fe 8b 4e 30 d0 04 28 f6 96 5a e6 3f e4 e1 e9 60 c4 3c 79 f6 cc 4a e6 e3 81 98 4d 20 4d 05 15 fb 33 ba 90 90 ec 98 64 b6 84 cd e2 3d 9b 3e 8a 9a a6 94 29 6d 3f 91 3a 2e c6 ca 73 c1 3d 18 d0 ab 81 f8 4e 1d c3 82 da ae fd 63 fd 12 6f 76 89 de 5f ef b9 4c 76 dc a8 91 ac 87 be a3 ee 33 34 f4 1c 65 b9 26 1d 6c 59 3f 45 c5 cc a2 2f c4 4d e8 bb 60 b8 ac f9 3d ee 64 89 34 c2 53 48 46 fb ea 87 54 78 a0 02 70 47 db 59 f5 99 a9 45 b5 5c e7 44 df ac 06 08 96 e8 6f 02 33 64 89 8a ca ea 0b 8a e2 c6 d3 8b e8 bd 8f f5 ba b5 f4 17 5f 99 Data Ascii: =G<D{b~! _$:VE\|7PQ3W:gON0(Z?`<yJM M3d=>)m?:.s=Ncov_Lv34e&lY?E/M`=d4SHFTxpGYE\Do3d_
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: f6 51 1b b1 53 05 45 42 ce 6e cb 12 f6 26 06 0b 1b fa b2 1f c2 9a 76 0a 46 39 f2 06 9b f5 83 5c 44 cc 82 aa 30 53 b4 89 cd 22 8d c6 c0 ea 81 00 54 1f 6b c5 7a 51 fe cd f0 81 5e ce 1f a4 43 71 3e b2 3d 3c 03 93 8d 81 8c 26 4e ce 84 49 8c 27 22 66 b1 3c 42 c5 3a 69 ad 42 bc 76 66 99 f9 f1 e5 99 1f 6b b1 30 6f 02 f5 17 cc 8e f2 b8 a5 45 60 ee 11 4f 9d 60 3c 34 e8 84 3a 93 e0 94 d4 ba aa 8b fa d4 3f 5b 02 ee 15 17 65 33 f7 16 9d 90 20 7d 77 90 57 3e fb 16 6b 41 de db ec 79 f3 24 8a 30 02 07 11 aa 59 47 f3 03 bd fa c0 b1 3a 28 38 8e a4 36 b0 87 e3 25 7f 8e ea 20 9e f4 fc 27 3a a7 d1 f9 c3 1f 5f 13 4d d4 49 65 a9 39 ab 9f 44 87 eb 9f 2d ea e1 2e 5b 7f 51 f9 a7 a1 41 7c bc bd 67 31 d5 9f fb 0d 35 c7 97 6f 6d 83 7b 1a db 63 2b 38 5b 83 be 9e ff fc be ef a8 d1 9d Data Ascii: QSEBn&vF9\D0S"TkzQ^Cq>=<&NI'"f<B:iBvfk0oE`O`<4:?[e3 }wW>kAy$0YG:(86% ':_MIe9D-.[QA\|g15om{c+8[
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: e1 2a c0 27 7f f1 19 79 84 11 d5 d8 3e a4 76 bc 45 f8 dc 93 ca c6 32 13 2c 8b 63 9d f2 35 53 72 61 45 30 1f 05 e6 23 c4 23 99 a1 ba f3 33 49 af 33 33 ce e1 92 c0 f4 ee 75 c2 95 0f 23 3d a4 9a 10 82 a6 c4 9d 81 16 db f6 f1 89 52 15 29 6a 98 07 17 70 61 cb eb 7f 21 7a ca ad 60 55 54 99 d3 90 37 af 4a 9c d0 8c 05 30 ed 72 55 ce d5 96 b5 f1 7a cf e5 02 71 5f 4d 62 e4 37 b9 8e ee 0c f1 85 66 be 3f e6 9a 62 50 dd fd 5e a8 f0 07 4d 34 38 d7 b3 c9 1e d4 21 fc b4 3c f2 5c 7b 17 35 28 8f 8b 2d 68 3d 9c e5 df e9 0a cb 40 10 52 f2 13 f9 13 53 b3 ea d9 f6 99 0c d6 32 f2 2f 3d a5 24 8a 94 14 b7 e0 02 66 59 fb 5f b9 63 fc 3e 77 cd c7 fd eb eb 10 5a 77 46 a3 dc 73 e8 5f f8 0d 12 68 2c 43 4a 51 9a a6 e4 fc cd a5 c4 9c 37 c2 70 2e 1a 2e 29 2d fd 9c 64 29 a7 76 c2 6f 17 c2 Data Ascii: *'y>vE2,c5SraE0##3I33u#=R)jpa!z`UT7J0rUzq_Mb7f?bP^M48!<\{5(-h=@RS2/=$fY_c>wZwFs_h,CJQ7p..)-d)vo
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: 2f cb f5 5e d5 62 23 65 09 60 ff c2 79 cd f9 96 e8 fd 82 5d 0d b7 40 94 ae 3e 50 e5 64 8c be 7d ce aa d8 0d cd ce 46 96 ca 0a 99 9a cd c9 9c 63 1b 22 5f b6 75 e9 6b 3e 64 0b fb 89 65 76 a3 33 90 d4 26 f3 00 dc 54 c0 59 dd 8c 0d 43 81 5b 87 e7 81 b0 c9 eb 48 a5 5c bb 3e f4 10 fe 30 36 35 10 f1 ec 95 b6 65 bd b8 dd e9 dd 21 09 ef fa 3c 25 b0 36 67 e5 03 c7 55 03 ed 72 e5 04 af d0 0f 2d 5a ee e5 3f be 2e 03 15 2f 12 fa 83 3f a2 8f aa 0c 1f 04 e2 19 2a ec 98 97 9b fe cf 74 08 6d a0 35 c7 37 75 1b 28 2b 5c ad 00 ae 03 0e 3a f5 ab 29 ba e0 76 b5 3e 7b 7f e2 d5 4b 0d e4 7d 36 e9 67 77 fe 36 fe ae 04 91 70 d5 b6 17 55 c7 44 96 2f 4d 1f 2f c4 50 a7 22 47 1c ce aa d2 b6 b4 30 ca 3c 16 a4 34 fa 1a e8 ab 84 35 13 d7 06 97 9a 04 58 47 ea a2 df c6 d4 8c 13 49 d6 b2 cd Data Ascii: /^b#e`y]@>Pd}Fc"_uk>dev3&TYC[H\>065e!<%6gUr-Z?./?*tm57u(+\:)v>{K}6gw6pUD/M/P"G0<45XGI
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: 5d af 2b 05 51 35 32 aa e6 35 6f 8b dc 2e 2d 11 e7 09 af d0 a9 4a 63 28 2f 44 c8 ef fc 21 5b 27 25 a1 e6 ec 19 ac 10 4f b7 26 a8 0b d8 25 86 8c 80 f6 76 ae 4b fc 02 c8 e3 f8 a0 66 e9 94 9d 0d 6f 53 01 42 09 13 9c 88 0a e1 66 ba f8 99 37 f5 f8 7f b4 01 22 69 97 70 3b f6 f6 10 90 91 dd 62 db 47 1b 9d 32 3b 0c 43 b9 f4 8c 41 a8 9e 7b c3 8d 3f fc 9f 8c 29 6c e9 e2 13 16 b5 bb 95 ff 82 3f bf a1 72 55 88 57 60 9b ef 0d 7f 94 3a cd 19 ac 5e ac b1 11 8f 6e a5 42 40 7a 44 52 c9 54 ce 31 30 ab 05 1e 13 1d 11 9b 74 37 74 c8 1c 08 b8 96 d5 34 d0 9f 9c 3e 61 f8 9e 3a 10 bc f3 17 de 08 82 99 d0 32 75 c3 d8 e9 cd ff 01 d3 8a ef 7c a6 69 d1 a0 15 ae f6 89 63 90 16 49 14 ce 85 9b e9 05 63 57 2a 44 e4 35 f3 3e 6a e4 75 ff 0b a7 cc f9 85 6f 47 20 f9 86 58 1f 69 b0 85 f7 28 Data Ascii: ]+Q525o.-Jc(/D!['%O&%vKfoSBf7"ip;bG2;CA{?)l?rUW`:^nB@zDRT10t7t4>a:2u\|icIcW*D5>juoG Xi(
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: 4c e8 43 23 bd 33 28 29 b3 c4 a6 d8 5e 78 87 1e cd bf a8 87 9f 18 7c fa 89 2b 80 47 e3 55 de 36 4f e3 c0 8e 06 82 ee 4b 48 de a3 bc 85 88 cb ca 87 79 bb 4f 5c 7c 4a 05 c7 f2 f3 9d 0b da 4a 16 5b c3 21 4b 9a 6a 28 78 1b 57 0b 26 44 58 56 55 87 34 84 43 bb 8f 49 3f 2c 6a 69 bc 50 f0 5c 5a 85 85 83 69 f5 a7 b5 04 27 b3 a0 c3 79 13 29 10 4a e6 ec 4b 8e 71 88 60 19 c5 52 3c 12 7b c1 dd 49 c3 00 f5 c6 7a 76 93 41 08 be 04 2c 27 b7 d7 3d 8f 7b ec a7 6e 69 28 da f7 79 0e 62 6b 46 22 7d 84 71 ff bb 03 f8 f5 da e9 37 7b aa 1f 4f 41 58 fc d2 b1 cc af 75 f1 5e 45 7b 3d 08 53 d2 71 c6 e4 a2 1a 02 49 ad 9c a2 b8 53 ab 4b d9 5a 3c 24 c1 a8 68 04 10 2c 00 b7 10 a4 61 49 7e b8 c4 1f 67 14 5f d7 e1 4e 6a b9 6f e8 bd 81 22 bf 70 eb b5 9d 5f 69 b3 46 2a a2 aa f0 ae 3a c5 cb Data Ascii: LC#3()^x\|+GU6OKHyO\\|JJ[!Kj(xW&DXVU4CI?,jiP\Zi'y)JKq`R<{IzvA,'={ni(ybkF"}q7{OAXu^E{=SqISKZ<$h,aI~g_Njo"p_iF*:
2024-03-27 20:21:12 UTC	1369	IN	Data Raw: b3 af 04 4e a9 ce 0b a7 fe 1f a6 12 75 f4 7d 55 0c 78 f2 37 d0 4f cf 4d 01 98 00 00 03 00 00 03 00 00 03 00 10 71 21 00 03 40 68 1c 21 00 03 40 68 1c 00 00 0e b2 41 9b ca 30 47 ff fa 58 1c 0c a9 07 f7 8c 4a 96 c4 97 b6 33 d5 99 c7 35 96 56 be bf c8 43 eb 2c 46 c6 39 00 ec 0f 66 80 00 14 02 21 7c fb d7 2d 1f 80 82 50 fd 25 f9 9c 00 00 a5 a0 8a bf e0 15 a9 55 77 34 8a 73 cd 00 03 c6 fd 68 89 de 7d 0a f0 72 c4 cf e9 c1 c2 02 f9 da f9 fc ac a7 1e 96 60 87 04 b2 7d 37 c0 42 72 17 f1 aa 29 a4 30 4a 5e 23 2b 13 32 ef 76 4a 16 3d fb 90 3a 4f 78 b2 3a 88 a7 f0 fa 57 40 e4 7f ef 7f e5 d6 19 ae 42 89 a5 75 8b 50 cc 6b ad f2 36 ef 17 51 bc 5c a1 41 00 9b d0 c0 a6 13 52 56 60 22 48 95 dd be 9f ca e0 f3 df 00 03 bf f3 e6 b3 9c bf 51 14 7c c3 b9 b6 52 7f 1a 0a f3 70 82 Data Ascii: Nu}Ux7OMq!@h!@hA0GXJ35VC,F9f!\|-P%Uw4sh}r`}7Br)0J^#+2vJ=:Ox:W@BuPk6Q\ARV`"HQ\|Rp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50411	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1258	OUT	GET /pagead/viewthroughconversion/804757079/?random=368212433&fst=1711570871016&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Introducing%20the%20Visual%20Suite%20%7C%20Canva&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:12 UTC	990	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/804757079/?random=368212433&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Introducing%20the%20Visual%20Suite%20%7C%20Canva&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqOqJoKrY3YY-062dw0uHrX4V8zdYxRSBPIA5hMH_OFizAE1Uw&random=4127248248 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50410	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	1143	OUT	GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:13 UTC	998	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50178	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	2221	OUT	GET /web/ad93ef588d339385.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:12 UTC	1186	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:12 GMT Content-Type: text/javascript Content-Length: 750 Connection: close CF-Ray: 86b215e33bfe05ce-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63836 Cache-Control: public, max-age=31556926 ETag: "d59a4ddad62794f43feac3d013caa8a3" Expires: Fri, 28 Mar 2025 02:09:58 GMT Last-Modified: Wed, 27 Mar 2024 02:26:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: NfrBjstQQsyB527/H+NC6UGM3idcBeOrS1EUhQToQCY4Z0b7aT+Jr3AAQZJK1V7RkvDtfIFQxn4= x-amz-replication-status: PENDING x-amz-request-id: DTGEQV2232E5KPSD x-amz-server-side-encryption: AES256 x-amz-version-id: PRp0FqI77GCQD.qenmbsSg7Wd7x9YgX4 X-Content-Type-Options: nosniff
2024-03-27 20:21:12 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 4c 32 58 57 43 51 6b 65 66 6a 64 30 62 42 6a 76 66 6f 71 57 73 25 32 46 39 32 33 48 5a 79 73 41 7a 6f 33 6e 6c 63 75 65 53 6d 6a 43 36 47 47 32 37 69 71 25 32 42 78 34 46 6c 4b 56 71 36 58 31 65 56 67 77 76 53 25 32 42 79 66 74 42 37 4d 32 63 5a 61 25 32 42 66 6d 4b 79 64 6e 4f 75 64 48 50 4d 50 5a 71 46 25 32 46 44 72 77 72 34 63 75 25 32 42 61 6b 47 38 52 68 46 77 36 68 25 32 46 38 33 71 64 54 75 78 42 4c 4b 41 5a 51 71 4f 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL2XWCQkefjd0bBjvfoqWs%2F923HZysAzo3nlcueSmjC6GG27iq%2Bx4FlKVq6X1eVgwvS%2ByftB7M2cZa%2BfmKydnOudHPMPZqF%2FDrwr4cu%2BakG8RhFw6h%2F83qdTuxBLKAZQqO0%3D"}],"group":"cf-nel","max_a
2024-03-27 20:21:12 UTC	750	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 36 32 30 34 37 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[5995],{/***/ 262047:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50415	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:12 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570872463,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:12 UTC	923	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 39 39 66 30 31 32 65 2d 39 36 32 34 2d 34 35 66 33 2d 61 30 35 31 2d 64 35 36 39 32 38 35 39 34 33 63 61 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 33 38 36 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 33 38 36 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"499f012e-9624-45f3-a051-d569285943ca","E":"2024-03-27T20:21:12.386Z","F":"2024-03-27T20:21:12.386Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:13 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e48b61823e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e48b61823e X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gAYHfby%2BT95jDCH6M2%2Bgfcim2OoKIKEEbexqRIZBwU7C0Hmn2KMcuet1mZuZyeT6DYJfSgzqlikMobwi%2B12jG0AsYt5txRTKMjy4%2FYx%2F6ivZORKCVDfcOjsiIQE4aSI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:13 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50416	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2240	OUT	GET /web/7f29663652aa2e36.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:13 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/css Content-Length: 298 Connection: close CF-Ray: 86b215e57ff8884e-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 497400 Cache-Control: public, max-age=31556926 ETag: "2a4352bc2ae94677588246f20a09475a" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Fri, 22 Mar 2024 02:06:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 8WbDs2kRV+IXg2tsjSt/8IBzhLb63AExiLpN89HV+/mS2f13ndXJcSy7zhU3tONGN73Ue5O3VbU= x-amz-replication-status: COMPLETED x-amz-request-id: JM6ZVF1H3K2A284C x-amz-server-side-encryption: AES256 x-amz-version-id: f5fRljvK_L5bLOySlo0eS6.F1ijbKx.E X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 36 33 57 47 49 46 68 6a 78 4c 74 41 39 43 77 55 36 70 44 56 68 78 36 25 32 42 54 47 48 31 45 66 37 62 38 75 55 5a 69 33 39 4f 33 25 32 42 4d 78 61 64 54 4f 38 31 6a 41 4b 43 57 70 43 33 65 68 6c 73 51 76 4d 55 64 66 4a 4f 25 32 46 50 50 4b 79 52 7a 72 4f 53 65 30 4d 75 37 37 4c 37 69 49 65 78 4d 44 6d 58 70 4b 4b 55 6d 56 49 41 30 4e 31 4f 4b 72 4b 33 56 54 72 62 6f 77 41 73 76 45 43 59 75 33 6a 58 58 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=463WGIFhjxLtA9CwU6pDVhx6%2BTGH1Ef7b8uUZi39O3%2BMxadTO81jAKCWpC3ehlsQvMUdfJO%2FPPKyRzrOSe0Mu77L7iIexMDmXpKKUmVIA0N1OKrK3VTrbowAsvECYu3jXXI%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:21:13 UTC	298	IN	Data Raw: 2e 5f 36 58 38 41 53 77 7b 63 6f 6c 6f 72 3a 23 62 64 30 38 31 63 7d 2e 65 42 31 79 63 77 7b 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 7d 2e 68 37 65 55 65 67 7b 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 33 46 59 4c 74 67 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 3a 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 20 2f 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 33 46 59 4c 74 67 3e 2a 7b 67 72 69 64 2d 61 72 65 61 3a 31 2f 31 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 Data Ascii: ._6X8ASw{color:#bd081c}.eB1ycw{color:#1da1f2}.h7eUeg{height:0;position:relative;width:100%}._3FYLtg{display:grid;grid-template:minmax(0,1fr) /minmax(0,1fr);height:100%;left:0;position:absolute;top:0;width:100%}._3FYLtg>{grid-area:1/1}/# sourceMappingUR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50420	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2240	OUT	GET /web/b7d502efeba81d79.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:13 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/css Content-Length: 5992 Connection: close CF-Ray: 86b215e58d3b1737-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 676678 Cache-Control: public, max-age=31556926 ETag: "2b6407d7b37f8412ddce9e9130e3b4d0" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Tue, 19 Mar 2024 03:04:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 20 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: cMHWRfgJexmeD/ZNcAxh5h9V6iPtgANE8pLD6qd9Dz3ET4mTM+/iwUM/7jOriACfJKf8ohBQywI= x-amz-replication-status: COMPLETED x-amz-request-id: 5DQMM5QQT8NC0Q74 x-amz-server-side-encryption: AES256 x-amz-version-id: 5ycj3g17JJF2UBjudrIHtfoxp_WlFzBv X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 43 55 4c 65 46 4b 38 61 73 51 4d 55 78 31 75 72 45 50 5a 53 47 51 71 61 75 6d 4f 6a 36 67 4b 33 46 41 50 53 51 39 4a 38 66 35 25 32 46 6e 67 65 65 77 56 65 76 4f 70 4b 43 76 35 4f 4a 79 25 32 42 5a 43 58 76 45 43 31 6c 66 53 42 74 56 66 25 32 42 6c 72 30 37 44 43 53 69 79 42 77 48 39 67 6d 37 33 37 4d 65 61 70 44 41 37 35 4e 34 70 6f 25 32 42 33 51 39 63 37 69 54 7a 4e 48 68 46 30 42 72 53 4b 32 53 55 6b 4d 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCULeFK8asQMUx1urEPZSGQqaumOj6gK3FAPSQ9J8f5%2FngeewVevOpKCv5OJy%2BZCXvEC1lfSBtVf%2Blr07DCSiyBwH9gm737MeapDA75N4po%2B3Q9c7iTzNHhF0BrSK2SUkMU%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:21:13 UTC	1203	IN	Data Raw: 2e 7a 49 58 34 4f 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 52 6a 65 49 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 5f 37 72 73 5f 71 51 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 51 75 59 37 47 41 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 7d 2e 54 74 63 68 70 77 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 50 46 32 51 48 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 5f 6d 48 4c 72 41 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 39 39 70 78 29 7b 2e 6c 65 75 49 73 41 2c 2e 6c 65 75 49 73 41 2e 5f 37 72 73 5f 71 51 2c Data Ascii: .zIX4Og{overflow:hidden;position:relative}.cRjeIA{align-self:stretch;flex-grow:1}._7rs_qQ{position:absolute}.QuY7GA:not(:first-child){padding-top:24px}.Ttchpw{margin:0;padding:0}.PF2QHw{color:var(--_mHLrA)}@media (max-width:599px){.leuIsA,.leuIsA._7rs_qQ,
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 58 51 5a 55 58 77 3a 6e 6f 74 28 2e 6f 34 32 71 5a 67 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 58 51 5a 55 58 77 2e 6f 34 32 71 5a 67 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 30 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 2e 58 51 5a 55 58 77 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 30 38 73 20 65 Data Ascii: var(--TlUudQ);content:"";height:100%;left:0;pointer-events:none;position:absolute;top:0;width:100%}.XQZUXw:not(.o42qZg):before{opacity:1}.XQZUXw.o42qZg:before{opacity:0}@media (prefers-reduced-motion:no-preference){.XQZUXw:before{transition:opacity .08s e
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 43 34 34 38 61 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 4c 56 34 6d 33 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 5f 36 62 45 75 78 67 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 7d 2e 4d 66 50 59 56 51 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 4c 4d 6e 53 65 41 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 54 6c 55 75 64 51 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 64 69 Data Ascii: on:relative}.C448aw{align-items:center;display:flex}.LV4m3g{margin-right:8px}._6bEuxg{padding-top:16px}.MfPYVQ{margin-bottom:56px;width:100%}.LMnSeA{align-items:flex-start;background-color:var(--TlUudQ);border:1px solid var(--OHlWbw);border-radius:16px;di
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 69 6e 67 3a 30 20 38 70 78 7d 2e 47 31 42 44 69 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 4f 48 6c 57 62 77 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 32 70 78 3b 77 69 64 74 68 3a 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 47 31 42 44 69 67 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 38 70 78 3b 77 69 64 74 68 3a 31 70 78 7d 7d 2e 77 4d 6f 6b 47 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 43 4f 58 67 73 67 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 37 68 6e 73 49 67 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 55 56 37 68 41 29 Data Ascii: ing:0 8px}.G1BDig{background-color:var(--OHlWbw);display:inline-block;height:24px;margin:auto 2px;width:0}@media (min-width:600px){.G1BDig{margin:auto 8px;width:1px}}.wMokGw{background-color:var(--COXgsg);border:1px solid var(--7hnsIg);color:var(--pUV7hA)
2024-03-27 20:21:13 UTC	682	IN	Data Raw: 4c 77 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 34 31 48 6e 57 41 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 32 34 70 78 20 30 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 39 39 70 78 29 7b 2e 6e 4f 75 77 64 77 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 36 70 78 20 32 34 70 78 7d 2e 5f 34 31 48 6e 57 41 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 31 36 70 78 20 30 7d 7d 40 6d 65 Data Ascii: Lw::-webkit-scrollbar{display:none}._41HnWA{align-items:flex-start;display:flex;flex-wrap:nowrap;height:100%;justify-content:center;margin:0 auto;padding:24px 24px 0}@media (max-width:899px){.nOuwdw{padding:16px 16px 24px}._41HnWA{padding:16px 16px 0}}@me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50418	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2221	OUT	GET /web/0f5ea65290dd5dce.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:13 UTC	1186	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript Content-Length: 926 Connection: close CF-Ray: 86b215e5883159aa-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63837 Cache-Control: public, max-age=31556926 ETag: "863aa10af752a9f7f786f51e37549655" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Wed, 27 Mar 2024 02:26:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: H6ynhbwVfZGCQhRQYodVTkLEJkGKi0y1g5AsWPvcM3rqBBJbKNikF5KbIojnUaWqjBufc+y4ZPo= x-amz-replication-status: PENDING x-amz-request-id: DTG43EEKJEAYWPP0 x-amz-server-side-encryption: AES256 x-amz-version-id: GyQjd0A.LJP.JezzCVdgcCRmC07Bs7_9 X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 45 32 6c 34 79 6a 69 61 6c 67 64 73 52 75 6b 75 65 74 42 4d 76 52 72 31 6d 48 56 4a 36 49 4d 6c 67 46 43 78 77 37 47 77 49 4d 50 4f 39 32 33 54 64 44 75 67 6a 69 68 32 30 71 59 7a 54 25 32 46 71 6f 32 69 47 4b 30 56 6f 63 72 4e 5a 54 56 6a 39 46 51 63 70 69 78 67 35 36 42 78 41 37 4b 34 6e 32 61 25 32 42 65 35 44 62 35 6a 76 52 59 25 32 46 6e 6b 33 56 6d 70 70 66 68 61 32 66 62 34 35 41 7a 48 61 33 72 37 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E2l4yjialgdsRukuetBMvRr1mHVJ6IMlgFCxw7GwIMPO923TdDugjih20qYzT%2Fqo2iGK0VocrNZTVj9FQcpixg56BxA7K4n2a%2Be5Db5jvRY%2Fnk3Vmppfha2fb45AzHa3r7c%3D"}],"group":"cf-nel","max_age":604800
2024-03-27 20:21:13 UTC	926	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 39 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 34 32 30 31 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6997],{/***/ 542011:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50419	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2221	OUT	GET /web/dc7743898981ec6d.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:13 UTC	1187	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript Content-Length: 9827 Connection: close CF-Ray: 86b215e59ea40850-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63837 Cache-Control: public, max-age=31556926 ETag: "da0b6b378748dc88e393c6ec5f78cc19" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Wed, 27 Mar 2024 02:26:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: MYUhn0DRnZ0QPoVe9fXgFSgyk2NPybqjPMkO8L3MwDdO2BvptHF6AiVxi8Y1If51BRNvyfUgdHI= x-amz-replication-status: PENDING x-amz-request-id: DTG4YGZ40DQJ78BX x-amz-server-side-encryption: AES256 x-amz-version-id: XWM886M09B2WpURKBzQKWNa7BB5pRHOv X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 57 4e 46 69 36 64 47 33 76 35 6d 45 30 4b 4e 6c 4c 7a 70 63 70 34 6b 4e 7a 6e 42 4d 56 6e 67 6e 57 69 4f 55 72 6e 78 43 6a 6e 47 74 6c 79 6b 68 77 73 74 43 73 48 59 53 67 44 74 64 6b 39 43 4f 38 76 32 75 6d 4e 4b 32 44 73 38 42 72 37 57 58 67 6b 7a 75 48 76 45 68 44 43 55 34 7a 70 34 37 25 32 42 53 41 5a 44 61 74 25 32 42 71 42 70 78 42 74 48 47 41 53 6d 50 6f 4e 6f 53 51 71 44 51 48 58 52 48 43 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4WNFi6dG3v5mE0KNlLzpcp4kNznBMVngnWiOUrnxCjnGtlykhwstCsHYSgDtdk9CO8v2umNK2Ds8Br7WXgkzuHvEhDCU4zp47%2BSAZDat%2BqBpxBtHGASmPoNoSQqDQHXRHCE%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 30 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 30 36 34 30 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6408],{/***/ 206405:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 63 75 72 73 6f 72 3d 61 3b 74 68 69 73 2e 59 67 3d 53 44 7d 61 73 79 6e 63 20 63 6f 6e 74 69 6e 75 65 28 61 29 7b 61 3d 61 77 61 69 74 20 54 44 28 74 68 69 73 2c 61 29 3b 69 66 28 6e 75 6c 6c 21 3d 61 29 72 65 74 75 72 6e 20 6e 65 77 20 59 44 28 61 29 7d 75 70 64 61 74 65 28 61 29 7b 61 3d 74 68 69 73 2e 63 75 72 73 6f 72 2e 75 70 64 61 74 65 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 59 67 28 61 29 7d 64 65 6c 65 74 65 28 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 63 75 72 73 6f 72 2e 64 65 6c 65 74 65 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 59 67 28 61 29 7d 7d 2c 5a 44 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 59 44 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 73 75 Data Ascii: ss{constructor(a){this.cursor=a;this.Yg=SD}async continue(a){a=await TD(this,a);if(null!=a)return new YD(a)}update(a){a=this.cursor.update(a);return this.Yg(a)}delete(){const a=this.cursor.delete();return this.Yg(a)}},ZD=class extends YD{constructor(a){su
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 6e 65 77 20 59 44 28 61 29 3a 76 6f 69 64 20 30 7d 63 72 65 61 74 65 49 6e 64 65 78 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 2e 63 72 65 61 74 65 49 6e 64 65 78 28 61 2c 62 2c 63 29 7d 64 65 6c 65 74 65 49 6e 64 65 78 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 2e 64 65 6c 65 74 65 49 6e 64 65 78 28 61 29 7d 7d 3b 76 61 72 20 44 46 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 58 77 3d 61 3b 74 68 69 73 2e 53 6c 3d 42 46 61 28 74 68 69 73 29 7d 6f 62 6a 65 63 74 53 74 6f 72 65 28 61 29 7b 61 3d 74 68 69 73 2e 58 77 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 24 44 28 61 29 7d Data Ascii: a);return null!=a?new YD(a):void 0}createIndex(a,b,c){return this.store.createIndex(a,b,c)}deleteIndex(a){return this.store.deleteIndex(a)}};var DFa=class{constructor(a){this.Xw=a;this.Sl=BFa(this)}objectStore(a){a=this.Xw.objectStore(a);return new $D(a)}
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 68 69 73 2e 64 62 2e 63 6c 6f 73 65 28 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 0a 62 2c 63 29 7b 74 68 69 73 2e 64 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 64 3d 3e 62 28 64 29 2c 63 29 7d 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 64 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 64 3d 3e 62 28 64 29 2c 63 29 7d 73 74 61 74 69 63 20 64 65 6c 65 74 65 28 7b 6e 61 6d 65 3a 61 7d 2c 62 3d 69 6e 64 65 78 65 64 44 42 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 63 2c 64 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 62 2e 64 65 6c 65 74 65 44 61 74 61 62 61 73 65 28 61 29 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: his.db.close()}addEventListener(a,b,c){this.db.addEventListener(a,d=>b(d),c)}removeEventListener(a,b,c){this.db.removeEventListener(a,d=>b(d),c)}static delete({name:a},b=indexedDB){return new Promise((c,d)=>{const e=b.deleteDatabase(a);e.addEventListener
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 65 74 65 28 61 29 3b 61 77 61 69 74 20 63 2e 53 6c 7d 61 73 79 6e 63 20 67 65 74 41 6c 6c 28 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 74 68 69 73 2e 55 67 2c 0a 22 72 65 61 64 6f 6e 6c 79 22 29 2c 62 3d 61 77 61 69 74 20 61 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 68 69 73 2e 55 67 29 2e 67 65 74 41 6c 6c 28 29 3b 61 77 61 69 74 20 61 2e 53 6c 3b 72 65 74 75 72 6e 20 62 3f 62 2e 6d 61 70 28 63 3d 3e 28 7b 6b 65 79 3a 63 2e 6b 65 79 2c 6f 64 3a 74 68 69 73 2e 6f 61 28 63 2e 72 65 63 6f 72 64 29 7d 29 29 3a 5b 5d 7d 61 73 79 6e 63 20 63 6c 65 61 72 28 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 2e 64 62 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 74 68 69 73 2e 55 67 2c 22 72 65 61 64 77 72 69 74 65 22 29 3b 61 77 Data Ascii: ete(a);await c.Sl}async getAll(){const a=this.db.transaction(this.Ug,"readonly"),b=await a.objectStore(this.Ug).getAll();await a.Sl;return b?b.map(c=>({key:c.key,od:this.oa(c.record)})):[]}async clear(){const a=this.db.transaction(this.Ug,"readwrite");aw
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 31 35 32 5f 5f 61 29 22 20 64 3d 22 4d 31 36 20 34 63 2d 33 2e 32 36 20 30 2d 33 2e 36 37 2e 30 31 2d 34 2e 39 35 2e 30 37 61 38 2e 38 35 20 38 2e 38 35 20 30 20 30 20 30 2d 32 2e 39 31 2e 35 36 20 35 2e 38 36 20 35 2e 38 36 20 30 20 30 20 30 2d 32 2e 31 33 20 31 2e 33 39 20 35 2e 38 33 20 35 2e 38 33 20 30 20 30 20 30 2d 31 2e 33 38 20 32 2e 31 32 20 38 2e 38 20 38 2e 38 20 30 20 30 20 30 2d 2e 35 36 20 32 2e 39 31 41 38 33 2e 36 35 20 38 33 2e 36 35 20 30 20 30 20 30 20 34 20 31 36 63 30 20 33 2e 32 36 2e 30 31 20 33 2e 36 37 2e 30 37 20 34 2e 39 35 2e 30 36 20 31 2e 32 37 2e 32 36 20 32 2e 31 35 2e 35 36 20 32 2e 39 31 2e 33 2e 37 39 2e 37 32 20 31 2e 34 36 20 31 2e 33 39 20 32 2e 31 33 61 35 2e 38 33 20 35 2e 38 33 20 30 20 30 20 30 20 32 2e 31 32 20 Data Ascii: 152__a)" d="M16 4c-3.26 0-3.67.01-4.95.07a8.85 8.85 0 0 0-2.91.56 5.86 5.86 0 0 0-2.13 1.39 5.83 5.83 0 0 0-1.38 2.12 8.8 8.8 0 0 0-.56 2.91A83.65 83.65 0 0 0 4 16c0 3.26.01 3.67.07 4.95.06 1.27.26 2.15.56 2.91.3.79.72 1.46 1.39 2.13a5.83 5.83 0 0 0 2.12
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 2e 46 75 61 3d 7b 4e 62 61 3a 5f 5f 63 2e 67 45 7d 3b 76 61 72 20 68 45 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 33 31 34 20 38 2e 39 31 38 63 31 2e 30 37 31 2d 2e 37 30 39 20 31 2e 38 39 34 2d 31 2e 38 33 20 32 2e 32 38 32 2d 33 2e 31 36 36 41 39 2e 38 32 32 20 39 2e 38 32 32 20 30 20 30 20 31 20 32 35 2e 33 20 37 2e 31 34 63 2d 2e 39 34 36 2d 31 2e 31 31 32 2d 32 2e 32 39 35 2d 31 2e 38 30 36 2d 33 2e 37 38 38 2d 31 2e 38 30 36 2d 32 2e 38 36 35 20 30 2d 35 2e 31 39 20 Data Ascii: .Fua={Nba:__c.gE};var hE='<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M26.314 8.918c1.071-.709 1.894-1.83 2.282-3.166A9.822 9.822 0 0 1 25.3 7.14c-.946-1.112-2.295-1.806-3.788-1.806-2.865 0-5.19
2024-03-27 20:21:13 UTC	244	IN	Data Raw: 75 72 28 69 45 29 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 2c 0a 0a 2f 2a 2a 2a 2f 20 36 34 31 36 39 32 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 32 30 36 34 30 35 29 2c 0a 0a 2f 2a 2a 2a 2f 20 36 39 33 37 39 32 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 32 30 36 34 30 35 29 2c 0a 0a 2f 2a 2a 2a 2f 20 34 36 38 39 37 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 32 30 36 34 30 35 29 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 64 63 37 37 34 33 38 39 38 39 38 31 65 63 36 64 2e 6a 73 2e 6d 61 70 Data Ascii: ur(iE)};}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);},/*/ 641692:(_, __, r) => r(206405),// 693792:(_, __, r) => r(206405),/**/ 46897:(_, __, r) => r(206405)}])//# sourceMappingURL=sourcemaps/dc7743898981ec6d.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50417	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2221	OUT	GET /web/0857cd2b202ef818.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=
2024-03-27 20:21:13 UTC	1189	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript Content-Length: 3924 Connection: close CF-Ray: 86b215e59ef05772-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63837 Cache-Control: public, max-age=31556926 ETag: "1fe27b79925047fcf2aa4c2eecb5dead" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Wed, 27 Mar 2024 02:26:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 8CzafWNfqplfKi/oeOulP1K9aLP/RJ872SQcAes4femIuroMObVnMAKjVDh2TIkILzanR5NBC84= x-amz-replication-status: COMPLETED x-amz-request-id: DTGC21HE7W5Z3GTY x-amz-server-side-encryption: AES256 x-amz-version-id: qC9hVinBd6im99Mw5o87ajIaWfFmmgrW X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 36 51 4b 54 76 33 41 39 77 37 76 55 4d 6b 30 52 74 6c 75 55 30 55 63 6d 51 52 7a 32 77 6a 73 56 75 48 43 79 32 4a 25 32 42 30 50 69 54 62 58 79 78 39 33 47 70 48 6c 6f 6e 33 38 45 51 25 32 42 35 53 57 6f 48 69 43 42 63 25 32 46 38 76 4f 33 39 71 65 6d 37 6b 70 4e 48 59 43 4c 46 4e 73 46 4d 41 59 41 5a 73 55 33 71 30 6a 53 66 67 39 62 25 32 42 55 55 59 72 49 61 6a 4b 62 6d 4f 7a 70 54 57 42 79 62 45 61 79 58 4c 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6QKTv3A9w7vUMk0RtluU0UcmQRz2wjsVuHCy2J%2B0PiTbXyx93GpHlon38EQ%2B5SWoHiCBc%2F8vO39qem7kpNHYCLFNsFMAYAZsU3q0jSfg9b%2BUUYrIajKbmOzpTWBybEayXLc%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:21:13 UTC	1197	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 38 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 31 36 30 33 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1984],{/***/ 716038:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 75 72 6e 20 61 2e 46 39 7d 2c 62 6b 62 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 28 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 62 2e 6d 61 70 28 61 73 79 6e 63 20 63 3d 3e 7b 74 72 79 7b 61 77 61 69 74 20 61 2e 64 65 6c 65 74 65 44 61 74 61 62 61 73 65 28 63 29 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 7b 55 67 3a 63 2c 65 72 72 6f 72 3a 64 7d 7d 7d 29 29 29 2e 66 69 6c 74 65 72 28 5f 5f 63 2e 6d 62 29 3b 69 66 28 30 3c 62 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 61 6b 62 28 62 29 3b 7d 2c 63 6b 62 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 28 61 77 61 69 74 20 28 61 77 61 69 74 20 6c 39 28 61 29 29 2e 67 65 74 41 6c 6c 28 29 29 2e 66 69 6c 74 65 72 28 28 Data Ascii: urn a.F9},bkb=async function(a,b){b=(await Promise.all(b.map(async c=>{try{await a.deleteDatabase(c)}catch(d){return{Ug:c,error:d}}}))).filter(__c.mb);if(0<b.length)throw new akb(b);},ckb=async function(a,b){const c=(await (await l9(a)).getAll()).filter((
2024-03-27 20:21:13 UTC	1358	IN	Data Raw: 6c 6f 73 65 28 29 7b 74 68 69 73 2e 73 74 6f 72 65 2e 63 6c 6f 73 65 28 29 7d 7d 3b 76 61 72 20 6d 39 3d 5f 5f 63 2e 41 28 28 29 3d 3e 28 7b 75 73 65 72 49 64 3a 5f 5f 63 2e 52 28 31 29 2c 52 61 3a 5f 5f 63 2e 52 28 32 29 7d 29 29 3b 76 61 72 20 69 6b 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 66 6b 62 3b 74 68 69 73 2e 6d 55 3d 64 6b 62 3b 74 68 69 73 2e 7a 72 61 3d 61 7d 61 73 79 6e 63 20 4f 31 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 75 73 65 72 49 64 2c 63 3d 61 2e 52 61 2c 64 3d 61 2e 54 2c 65 3d 61 2e 6f 61 3b 61 3d 59 6a 62 28 7b 70 4a 3a 61 2e 71 74 2e 70 4a 2c 75 73 65 72 49 64 3a 62 2c 52 61 3a 63 7d 29 3b 61 77 61 69 74 20 5a 6a 62 28 74 68 69 73 2c 7b 75 73 65 72 49 64 3a 62 2c 52 61 3a 63 2c 55 67 3a Data Ascii: lose(){this.store.close()}};var m9=__c.A(()=>({userId:__c.R(1),Ra:__c.R(2)}));var ikb=class{constructor(){var a=fkb;this.mU=dkb;this.zra=a}async O1(a){const b=a.userId,c=a.Ra,d=a.T,e=a.oa;a=Yjb({pJ:a.qt.pJ,userId:b,Ra:c});await Zjb(this,{userId:b,Ra:c,Ug:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50421	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:13 UTC	926	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e62ba9801b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e62ba9801b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWl7WvqBThGi08FadtJyOE9%2BlkWAXepVtVZfNidZSzOPJNQ8i5bEdnLTFokpx8juZ4W%2BzPdyuq%2FhHvE9PizFYNiVGzCJxwJNiZbWOvcohI17wwXwGiRxxeKk4%2FTI92M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:13 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50422	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2221	OUT	GET /web/22cc66011136881a.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:13 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript Content-Length: 15480 Connection: close CF-Ray: 86b215e65c101ff1-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63837 Cache-Control: public, max-age=31556926 ETag: "bc7b8e4fc98e758ea6ef928a645ed0ba" Expires: Fri, 28 Mar 2025 02:09:59 GMT Last-Modified: Wed, 27 Mar 2024 02:26:02 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: CowYEcDhMDXUqnNFF48hZRwemGW9IIDTzP+vIIL/Rb42LPCCGX86aUQp6lWU6oS2ORzWo9PFRSA= x-amz-replication-status: PENDING x-amz-request-id: DTG6CRT9F2NW67EF x-amz-server-side-encryption: AES256 x-amz-version-id: Aw0RZXITr0HzWzscxrwOkKJ2UOSXgDxi X-Content-Type-Options: nosniff
2024-03-27 20:21:13 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 4c 38 32 79 25 32 46 56 6f 52 7a 79 69 34 53 37 36 25 32 46 6a 37 30 37 45 34 36 66 34 4a 67 34 79 6a 65 61 74 37 76 36 44 37 4c 4e 4c 79 51 6b 4e 6b 34 4a 55 67 65 41 4b 78 30 75 68 79 35 77 6e 62 74 32 43 32 44 35 41 47 32 25 32 42 4b 42 7a 59 57 35 31 73 59 30 64 79 4d 47 45 71 52 6d 48 79 48 51 4c 70 69 52 71 66 5a 6f 68 34 45 43 65 76 70 35 44 59 62 63 43 44 65 55 38 36 47 64 36 37 7a 4b 38 6b 25 32 46 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HL82y%2FVoRzyi4S76%2Fj707E46f4Jg4yjeat7v6D7LNLyQkNk4JUgeAKx0uhy5wnbt2C2D5AG2%2BKBzYW51sY0dyMGEqRmHyHQLpiRqfZoh4ECevp5DYbcCDeU86Gd67zK8k%2F4%3D"}],"group":"cf-nel","max_age":6048
2024-03-27 20:21:13 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 39 34 31 31 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{/***/ 294112:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 67 6c 6f 62 61 6c 2e 73 61 29 29 7d 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 65 28 76 6f 69 64 20 30 29 7d 29 7d 29 3b 61 2e 4a 56 2e 74 68 65 6e 28 65 3d 3e 7b 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 3d 28 66 3d 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 75 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 63 61 6c 6c 28 65 2c 22 53 65 6e 73 6f 72 73 43 68 61 6e 6e 65 6c 22 29 3b 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 61 2e 46 46 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 26 26 6e 75 6c 6c 21 3d 65 2e 69 64 65 6e 74 69 66 79 26 26 65 2e 69 64 65 6e 74 69 66 79 28 61 2e 46 46 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 2c 0a 21 30 29 7d 29 7d 72 65 74 75 72 6e 20 61 2e 4a 56 7d 2c 4b 59 61 3d 61 73 Data Ascii: global.sa))}).catch(()=>{e(void 0)})});a.JV.then(e=>{var f;null===(f=null===e\|\|void 0===e?void 0:e.use)\|\|void 0===f?void 0:f.call(e,"SensorsChannel");null!=e&&null!=a.FF.anonymousId&&null!=e.identify&&e.identify(a.FF.anonymousId,!0)})}return a.JV},KYa=as
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 29 7d 2c 24 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 61 5d 3b 6c 65 74 20 62 3d 30 3b 66 6f 72 28 3b 61 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 70 6f 70 28 29 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 63 29 7b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 62 2b 3d 4e 59 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 62 2b 3d 63 2e 6c 65 6e 67 74 68 2a 4f 59 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 62 2b 3d 50 59 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 63 6f 6e 73 74 20 64 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 63 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 64 7c 7c 61 2e Data Ascii: )},$V=function(a){a=[a];let b=0;for(;a.length;){const c=a.pop();switch(typeof c){case "boolean":b+=NYa;break;case "string":b+=c.length*OYa;break;case "number":b+=PYa;break;case "object":const d=Array.isArray(c);for(const e in c)c.hasOwnProperty(e)&&(d\|\|a.
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 44 61 74 65 2e 6e 6f 77 28 29 2b 31 31 45 33 7d 29 7d 29 7d 7d 2c 65 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 61 76 69 67 61 74 6f 72 2e 6c 6f 63 6b 73 2c 62 3d 62 57 3b 0a 72 65 74 75 72 6e 20 63 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 64 3d 3e 7b 61 2e 72 65 71 75 65 73 74 28 62 28 63 29 2c 28 29 3d 3e 7b 64 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 29 3d 3e 7b 7d 29 7d 29 7d 29 7d 2c 62 57 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 20 22 73 74 61 74 69 63 22 3a 72 65 74 75 72 6e 20 61 2e 6e 61 6d 65 3b 63 61 73 65 20 22 64 79 6e 61 6d 69 63 22 3a 72 65 74 75 72 6e 20 61 2e 70 72 65 66 69 78 2b 61 2e 73 75 66 66 69 78 3b 64 65 66 61 75 6c 74 3a 74 68 72 Data Ascii: Date.now()+11E3})})}},eW=function(){var a=navigator.locks,b=bW;return c=>new Promise(d=>{a.request(b(c),()=>{d();return new Promise(()=>{})})})},bW=function(a){switch(a.type){case "static":return a.name;case "dynamic":return a.prefix+a.suffix;default:thr
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 6c 65 64 20 74 6f 20 6c 6f 61 64 20 55 52 4c 3a 20 22 2b 62 29 29 3b 65 2e 73 72 63 3d 62 3b 61 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 5a 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 4f 67 29 7b 63 6f 6e 73 74 20 62 3d 5f 5f 63 2e 4e 68 28 5f 5f 63 2e 4d 68 28 5f 5f 63 2e 4c 68 28 5b 22 68 6d 2e 6a 73 22 5d 29 2c 61 2e 63 6f 6e 66 69 67 2e 41 68 2c 21 30 29 29 3b 61 2e 4f 67 3d 61 2e 42 4a 28 61 2e 64 6f 63 75 6d 65 6e 74 2c 60 24 7b 59 59 61 7d 24 7b 62 7d 60 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 61 2e 4f 67 3d 76 6f 69 64 20 30 7d 29 7d 7d 2c 68 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 22 63 6f 6e 73 65 6e 74 5f 73 74 61 74 Data Ascii: led to load URL: "+b));e.src=b;a.body.appendChild(e)})},ZYa=function(a){if(!a.Og){const b=__c.Nh(__c.Mh(__c.Lh(["hm.js"]),a.config.Ah,!0));a.Og=a.BJ(a.document,`${YYa}${b}`).catch(()=>{a.Og=void 0})}},hW=function(a,b){a.dataLayer.push({event:"consent_stat
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 7d 2c 67 57 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 22 79 65 73 22 3a 22 6e 6f 22 7d 2c 24 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 2e 66 6f 72 45 61 63 68 28 28 5b 63 2c 64 5d 29 3d 3e 7b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 62 5b 63 5d 3d 64 29 7d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 64 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 62 5a 61 28 61 29 3b 72 65 74 75 72 6e 20 63 5a 61 28 61 29 7d 2c 62 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 2e 72 65 64 75 63 65 28 28 62 2c 5b 63 2c 64 5d 29 3d 3e 7b 22 6e 61 6d 65 Data Ascii: .appendChild(b)}},gW=function(a){return a?"yes":"no"},$Ya=function(a){const b={};Object.entries(a).forEach(([c,d])=>{void 0!==d&&(b[c]=d)});return b},dZa=function(a){a=bZa(a);return cZa(a)},bZa=function(a){return Object.entries(a).reduce((b,[c,d])=>{"name
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 61 74 65 49 6e 64 65 78 28 22 75 73 65 72 5f 69 64 5f 69 6e 64 65 78 22 2c 22 75 73 65 72 5f 69 64 22 2c 7b 75 6e 69 71 75 65 3a 21 31 7d 29 29 7d 2c 74 48 3a 7b 74 79 70 65 3a 31 2c 4d 48 3a 21 30 2c 4e 48 3a 21 30 7d 7d 2c 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 6c 57 28 61 29 7d 61 73 79 6e 63 20 70 75 74 28 61 29 7b 63 6f 6e 73 74 20 62 3d 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 2c 0a 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 2c 63 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 29 2c 64 3d 5a 56 28 61 29 3b 69 Data Ascii: ateIndex("user_id_index","user_id",{unique:!1}))},tH:{type:1,MH:!0,NH:!0}},a);return new lW(a)}async put(a){const b=(await this.db).transaction(["analytics_event_v2","analytics_event_metadata"],"readwrite"),c=b.objectStore("analytics_event_v2"),d=ZV(a);i
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 73 2e 73 74 6f 72 65 2e 70 75 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 58 6a 61 2e 64 69 73 70 61 74 63 68 28 61 29 7d 7d 7d 3b 76 61 72 20 68 5a 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 57 42 3d 61 7d 61 73 79 6e 63 20 64 69 73 70 61 74 63 68 28 61 29 7b 61 77 61 69 74 20 48 59 61 28 74 68 69 73 2e 57 42 2c 6e 65 77 20 56 56 28 7b 65 76 65 6e 74 3a 61 7d 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 7d 7d 3b 76 61 72 20 69 5a 61 3d 6e 65 77 20 53 65 74 28 22 64 65 73 69 67 6e 5f 63 72 65 61 74 65 20 64 65 73 69 67 6e 5f 66 69 72 73 74 5f 65 64 69 74 65 64 20 64 65 73 69 67 6e 5f 6f 70 65 6e 20 64 65 73 69 67 6e 5f 6f 70 65 6e 65 64 20 64 65 73 69 67 6e 5f 70 75 62 6c 69 Data Ascii: s.store.put(a)}catch(b){return this.Xja.dispatch(a)}}};var hZa=class{constructor(a){this.WB=a}async dispatch(a){await HYa(this.WB,new VV({event:a}))}async flush(){}};var iZa=new Set("design_create design_first_edited design_open design_opened design_publi
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 77 20 44 61 74 65 28 74 68 69 73 2e 56 63 2e 6e 6f 77 28 29 29 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 7d 29 29 2c 70 72 6f 70 65 72 74 69 65 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 61 29 7d 61 73 79 6e 63 20 72 65 73 65 74 28 29 7b 74 68 69 73 2e 71 5a 2e 66 6c 75 73 68 28 29 7d 61 73 79 6e 63 20 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 61 29 7b 61 77 61 69 74 20 74 68 69 73 2e 71 5a 2e 64 69 73 70 61 74 63 68 28 61 29 7d 45 6b 28 29 7b 7d 7d 3b 76 61 72 20 59 59 61 3b 5f 5f 63 2e 53 6e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 3d 58 59 61 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 61 3b 74 68 69 73 2e 63 6f Data Ascii: w Date(this.Vc.now())).toISOString()})),properties:JSON.stringify(b)}));return this.dispatchEvent(a)}async reset(){this.qZ.flush()}async dispatchEvent(a){await this.qZ.dispatch(a)}Ek(){}};var YYa;__c.Sn=class{constructor(a,b,c=XYa){this.document=a;this.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50424	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2337	OUT	GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780 Range: bytes=104448-229375 If-Range: "24d94274c1c4cb653ed9d888952a6386"
2024-03-27 20:21:13 UTC	1355	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: video/mp4 Content-Length: 124928 Connection: close Content-Range: bytes 104448-229375/3996868 CF-Ray: 86b215e6fb2c05c7-IAD CF-Cache-Status: HIT Age: 777118 Cache-Control: public, max-age=2592000 ETag: "24d94274c1c4cb653ed9d888952a6386" Expires: Fri, 26 Apr 2024 20:21:13 GMT Last-Modified: Wed, 28 Feb 2024 06:47:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 3uCEdueo4RZXePkHS8/rltxEXOc/N4j+1n+ltnRZ/tO25HtmudoGXllkaUY22Nmc7KN6iNkU/wc= x-amz-request-id: E68PR1WNZ7SP2V9V x-amz-server-side-encryption: AES256 x-amz-version-id: oWGnmYjveps65euzJSMUQwkr3LnrBv3h X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mvGB9iwbdvKDDVIQ9b2hXoSSmtwv8rS7i10YafvNSGCIhMSTtUX3HYWfvImsQMmo1w44Bt8agCAeYM%2FuhLv9aunDv78651AyFZexX89YNOQcU83oCGEN0EQG%2BI8Dc4JfEbV4uN0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:13 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 65 38 66 35 36 66 39 2d 36 31 61 36 2d 34 34 38 63 2d 39 65 66 32 2d 35 35 65 61 66 37 35 66 66 38 66 65 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 33 39 33 32 31 36 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 33 39 33 32 31 36 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 Data Ascii: " stRef:maskMarkers="None"/> <rdf:li stRef:instanceID="xmp.iid:ae8f56f9-61a6-448c-9ef2-55eaf75ff8fe" stRef:fromPart="time:0d393216f25600" stRef:toPart="time:0d393216f25600" stRef:maskMarkers="None"/>
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 22 78 6d 70 2e 69 69 64 3a 35 65 32 65 36 34 61 61 2d 36 34 32 34 2d 34 34 61 37 2d 61 65 63 63 2d 34 37 31 36 31 34 66 39 34 37 64 63 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 4f 50 5f 45 6c 65 6d 65 6e 74 73 2d 49 63 6f 6e 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 Data Ascii: "xmp.iid:5e2e64aa-6424-44a7-aecc-471614f947dc"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">OP_Elements-Icon</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:li> <rdf:li> <rdf:Descripti
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 32 34 34 22 3e 0a 20 20 20 20 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 4c 61 79 65 72 20 31 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 Data Ascii: 244"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Layer 1</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereff
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 37 31 36 38 66 32 35 36 30 30 64 33 31 37 34 34 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 61 66 74 65 72 65 66 66 Data Ascii: stRef:toPart="time:7168f25600d31744f25600" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="application/vnd.adobe.aftereff
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 64 61 37 34 33 63 34 2d 65 62 31 63 2d 34 64 33 63 2d 62 65 62 33 2d 39 32 62 32 65 33 35 63 38 34 62 35 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 Data Ascii: ef:fromPart="time:0d217088f25600" stRef:toPart="time:0d217088f25600" stRef:maskMarkers="None"/> <rdf:li stRef:instanceID="xmp.iid:3da743c4-eb1c-4d3c-beb3-92b2e35c84b5" stRef:fromPart="time:0d217088f25600"
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 6c 69 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 61 36 62 32 36 32 65 37 2d 65 35 32 39 2d 34 31 35 35 2d 62 63 36 65 2d 61 61 37 39 64 33 30 37 39 35 66 39 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 Data Ascii: stRef:maskMarkers="None"/> <rdf:li stRef:instanceID="xmp.iid:a6b262e7-e529-4155-bc6e-aa79d30795f9" stRef:fromPart="time:0d217088f25600" stRef:toPart="time:0d217088f25600" stRef:maskMarkers="None"/>
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 6d 70 2e 69 69 64 3a 65 61 34 65 38 65 66 37 2d 31 63 62 63 2d 34 64 63 30 2d 38 33 62 64 2d 39 34 61 31 38 36 34 31 39 33 38 37 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 32 31 37 30 38 38 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e Data Ascii: mp.iid:ea4e8ef7-1cbc-4dc0-83bd-94a186419387" stRef:fromPart="time:0d217088f25600" stRef:toPart="time:0d217088f25600" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li>
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 65 66 3a 66 72 6f 6d 50 61 72 74 3d 22 74 69 6d 65 3a 33 38 30 35 30 66 32 35 36 30 30 64 32 31 33 35 35 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 38 33 30 36 31 36 32 31 36 32 31 36 66 32 35 34 30 31 36 30 30 30 30 30 30 64 34 36 36 31 36 32 31 36 32 31 36 32 66 32 35 34 30 31 36 30 30 30 30 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a Data Ascii: ef:fromPart="time:38050f25600d21355f25600" stRef:toPart="time:830616216216f254016000000d466162162162f254016000000" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li> <rdf:
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 6d 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 34 35 30 35 36 30 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 74 6f 50 61 72 74 3d 22 74 69 6d 65 3a 30 64 34 35 30 35 36 30 66 32 35 36 30 30 22 0a 20 20 20 20 20 20 20 20 20 73 74 52 65 66 3a 6d 61 73 6b 4d 61 72 6b 65 72 73 3d 22 4e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 3c 2f 72 64 66 3a 42 61 67 3e 0a 20 20 20 20 20 20 3c 2f 78 6d 70 4d 4d 3a 49 6e 67 72 65 64 69 65 6e 74 73 3e 0a 20 20 20 20 20 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 20 20 20 20 20 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 3c 72 64 66 3a 6c 69 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 0a 20 20 20 20 20 20 20 64 63 3a 66 6f 72 6d 61 74 3d 22 61 70 70 6c 69 63 61 Data Ascii: mPart="time:0d450560f25600" stRef:toPart="time:0d450560f25600" stRef:maskMarkers="None"/> </rdf:Bag> </xmpMM:Ingredients> </rdf:Description> </rdf:li> <rdf:li> <rdf:Description dc:format="applica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50423	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	2336	OUT	GET /video/1376273/BRCA24001_WWYDT5_LandingPage_Whiteboards.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780 Range: bytes=114198-3538943 If-Range: "ae9cd90a083f0bed2557c06483392760"
2024-03-27 20:21:13 UTC	1367	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: video/mp4 Content-Length: 3424746 Connection: close Content-Range: bytes 114198-3538943/3561621 CF-Ray: 86b215e70d4f3ad8-IAD CF-Cache-Status: HIT Age: 788558 Cache-Control: public, max-age=2592000 ETag: "ae9cd90a083f0bed2557c06483392760" Expires: Fri, 26 Apr 2024 20:21:13 GMT Last-Modified: Thu, 29 Feb 2024 01:02:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: r7Oo58qpCGEm7BwKl4ngWtsWoeo5cgl9cYy1Vz3zuJVGyBeoondUiSAFnfu464ANNftQhxVgfI8= x-amz-request-id: QC7RSP7B5QKMCVN6 x-amz-server-side-encryption: AES256 x-amz-version-id: 3auJpNHeEQfbyt82S4CIX3vrn0yzB6bP X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2BbjEjVHb7Cjj4bwb9%2BO3oppN4e%2BJHhzqTBs7j4vrpFZsP1qDAiJusyPv18TpuWnCzZjqVwlo%2B%2BIuXnbPpWdG9NwiWRTbJZFF7lj90s27e60mZJjVR%2FY9CJDhgopW5qc59G%2FuwLO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:13 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:13 UTC	1349	IN	Data Raw: 3a d6 26 a5 29 52 a3 e4 3b dc c5 a5 55 8e eb bf 12 1e 85 c3 52 02 14 dd e2 b6 be af a6 8a 6d 0d 86 ff 43 94 16 a0 23 4c 41 43 d9 82 8e d9 c6 cf 95 cd 0f 83 6a b2 41 43 cc 8b 49 d6 d6 7b 91 aa 04 df b3 da 42 d7 97 c5 cd 10 e4 97 c6 52 29 2f ae 32 ce 66 9e e8 9f e6 31 9a c1 5e 1d c3 5b da 69 fd 23 97 01 df 33 ac 93 ea 7f 23 0a 71 73 67 d5 7f bd 22 0f 9e 4f 8a 7e eb 5c e6 92 3d e0 49 42 63 4b 6c e0 d4 1f d2 22 27 ff 0e 11 aa 36 42 29 f9 7d 06 62 d0 f3 ec e9 2f 43 56 6f 28 d1 84 15 e3 dd b0 ae 2c 49 13 80 8e f9 82 e9 41 97 4c 6e 1f 94 11 0f e1 7d 7a e2 79 c1 95 fc 6f 34 da 69 ff 00 c7 4f 26 d5 00 a8 4b 6d 18 ad 87 08 56 68 2c 48 1c 90 51 d2 a2 37 30 b1 ba 35 fa e9 17 01 61 f0 ca 8a c9 c6 a0 65 3e a5 22 ab 78 8e 9a 8f e8 89 15 31 33 1e 70 7e b2 26 f1 78 4f e4 Data Ascii: :&)R;URmC#LACjACI{BR)/2f1^[i#3#qsg"O~\=IBcKl"'6B)}b/CVo(,IALn}zyo4iO&KmVh,HQ705ae>"x13p~&xO
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 08 8d e4 08 95 af ae fc 93 20 26 c3 68 84 e7 2a 28 b6 87 67 e7 21 37 84 5f 10 48 aa 39 82 2f ac 64 1c f0 11 3b 63 1e 7a 78 83 82 ed 83 cb 66 32 44 b9 d0 0e f0 c3 ee c5 7e 6c 44 37 d4 1f 7d 05 c7 05 3f b0 88 6d 56 3a 6b 2c fd 73 24 5f 31 3a b7 93 0b fb cc 8c c2 7f 85 a4 3b 2e 81 af 27 2e 38 47 57 77 9f 1a 5c a6 b5 b2 dc 79 7c d1 bd 89 d7 6d 51 0a 73 5d 96 8d ff ea 4f 95 1b 89 02 d5 fa 1d 96 f2 25 bb f2 49 2d 16 0a 07 06 2b 44 09 4b 57 6b 7f 17 60 25 87 af 7d 77 2e a7 7b 1a 48 00 16 db f5 cf 2b d0 89 27 3e 95 3f 28 09 bc 95 51 20 9e 9a 79 d5 29 09 97 28 25 bd 0c 9b 89 5c 8e cd 26 30 36 f9 37 db fb 78 50 80 67 eb a1 e6 db cb 2d 2b ee 48 35 aa 52 30 86 ab 56 53 a4 3a 31 27 a5 1e ca 74 9b 58 d9 62 4e 02 dc d6 41 b3 b6 c6 a2 c0 a3 fc 31 bb c7 28 36 53 66 77 c7 Data Ascii: &h*(g!7_H9/d;czxf2D~lD7}?mV:k,s$_1:;.'.8GWw\y\|mQs]O%I-+DKWk`%}w.{H+'>?(Q y)(%\&067xPg-+H5R0VS:1'tXbNA1(6Sfw
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 29 4a 7b 04 53 1b a8 5d e8 e4 84 e4 0a ed b3 1e 64 46 e1 d7 99 6f f5 cd ab 4c ea cc 63 d8 8a 34 56 31 5f 8e ee 38 af 81 52 b4 9e 45 dd b9 21 1f 0f 75 0b 96 a7 8c 20 59 54 15 2d 31 be 39 43 e0 c6 a5 51 3e 33 88 c2 4f d6 a6 da df 9c b6 6b 40 19 f2 e3 6a bd c3 33 cc 01 6b f0 76 73 16 42 5d 3e f7 ba ad 8a 28 8f 5c 74 ac 5a cf 00 e7 ab 81 ae ea 6d 0c a0 33 6f fb 76 82 a8 f2 b4 2d 9e b8 8a 66 b9 df e2 6d a8 32 13 9b 32 32 3c 25 60 2d 27 fc bb c7 c3 d3 06 be 96 30 d6 08 53 a6 22 9e f8 64 4a 02 4d 7e 48 6e 58 e2 b1 c1 09 b5 68 fd 25 de 23 9b ce 49 69 53 0b 41 7a 0a 9f cf 0e 21 e2 f0 43 ae 70 d5 6f cd 8c 34 44 d6 e4 db 9b 91 c6 ae a9 fc 4e c5 14 94 bd da 8f e4 31 ab cd e6 7c 8e 14 ef 05 13 da 95 81 68 b3 f6 d3 af ca 4a 87 e6 e4 c1 3a 14 2d 6e 74 b2 38 0a a5 cf af Data Ascii: )J{S]dFoLc4V1_8RE!u YT-19CQ>3Ok@j3kvsB]>(\tZm3ov-fm222<%`-'0S"dJM~HnXh%#IiSAz!Cpo4DN1\|hJ:-nt8
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 62 1f ae 40 13 f8 83 14 8b 6d 04 24 11 60 06 87 b9 e1 ad 05 6a f4 6a 88 77 db 7b 84 6e 39 6c b5 d6 8c 1c c9 9c 94 d5 38 52 0e a3 2b 21 91 d9 6e 06 32 96 1e be 44 17 c6 ff b0 79 a5 20 2d 8d d1 20 b1 02 e6 71 ce d2 a6 6b b9 41 4a ee 1b ff 11 08 09 bd fe a7 11 67 76 34 f8 85 a8 d3 20 b9 73 57 a2 9b 18 7c 51 95 b6 c4 0f e0 66 83 e2 24 a8 57 9b 57 2f 8a 28 64 59 16 47 0a f1 70 86 ec 2a 77 92 eb ad 7c bf 56 15 2e b5 68 6f cc c3 ae ee e9 fb 94 da 62 7a 1c 76 a0 cc 04 65 d6 4c c4 6e c8 53 f9 7b 6e d7 fc 6b 2f 0b 37 95 5b 8d 83 21 30 d0 f8 4c f8 0b 37 c5 2d ac 1c 3d 28 4b d5 69 6d d4 d3 96 49 81 f6 cb ee 9e 0b 82 ba b4 64 06 9e 34 aa bc 32 f0 86 fc 77 9c 94 41 44 55 ff 84 33 e8 50 bc 37 df 45 b6 55 39 9b df 74 33 7a 96 fc 61 59 75 1c d6 16 85 49 8e 5b 27 41 36 b4 Data Ascii: b@m$`jjw{n9l8R+!n2Dy - qkAJgv4 sW\|Qf$WW/(dYGp*w\|V.hobzveLnS{nk/7[!0L7-=(KimId42wADU3P7EU9t3zaYuI['A6
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 63 46 89 07 64 56 ff d3 17 17 f4 41 53 7e ef e3 7d 02 39 43 ff 5b cf aa 5e b2 60 6b 6b 6c e6 8c eb b5 e2 6e 7c bc 5d c8 a9 e5 b9 41 f6 74 e3 a6 9a 52 1b 94 07 b3 a6 d1 7b a1 7a 37 8f 72 c3 2d 53 37 8a bb 95 9f c7 8f e6 54 66 4b 2b 96 4e 1f 18 ec 0c 86 6b 9c 48 51 b2 42 cd 78 6d 05 84 39 62 48 db 9a 6b 0e 04 b4 55 90 1a af 54 2a 89 64 e0 6f 92 a0 94 11 09 6e fb d3 dd d4 e9 f1 7b ab 54 b5 7d bf 8a 87 84 8e 6f 58 2c b1 ec 5f 1a 8a 6b 79 f7 c6 cd 06 23 38 e8 12 d3 fc 0a b0 e0 28 06 2a f8 87 15 4a 35 c2 f3 8b cd 15 41 f3 16 b9 c0 1d f1 bb 6b ba 79 30 aa 2d 39 9b 6a 66 c1 e5 97 93 89 db 40 75 61 99 a4 7e 9f 7f 99 46 1b de 18 66 78 01 a1 ac 9c d8 ad a5 48 eb aa 8d 38 45 b5 0c ac 70 ca 8d 67 cb e7 35 42 fd fe 89 45 9b f6 3a 71 71 e2 61 8f 9b 56 fc c5 48 d3 75 ef Data Ascii: cFdVAS~}9C[^`kkln\|]AtR{z7r-S7TfK+NkHQBxm9bHkUTdon{T}oX,_ky#8(J5Aky0-9jf@ua~FfxH8Epg5BE:qqaVHu
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 34 58 6b e9 ea 39 23 3b 9d 63 79 22 e4 1d 26 51 b6 2d 0f ae d2 61 e1 7c a1 5b f0 f0 23 88 76 f3 52 b2 d2 a7 80 ef f1 c8 64 38 69 19 85 7f bf 75 46 d0 05 d3 a3 4f 71 20 be c7 99 2a c6 3f 83 e3 46 bc 27 82 68 60 15 7b b0 74 80 48 e5 ec 96 80 a8 15 a1 01 fd bb 40 24 8c 9b 9f e4 dd 38 ec 60 a5 9b 59 06 22 e0 cb 01 64 c6 3d 79 f7 10 63 40 b2 2c 88 ac b7 59 fa 30 92 5a f2 14 56 b8 cb e2 9f 1b 19 ce e4 3f bc 38 84 2e 5f d6 9d 76 7b 60 0a eb c3 b2 4c 50 6a 94 1b b7 64 b3 ae b3 74 df 4f 4c 02 92 fd 6b 88 98 11 ab 93 f0 d5 93 1d fb 9c 88 ee f4 70 b5 53 a0 9f 6d 8d 55 32 f5 32 89 d2 df 5f e9 3b 04 5b 10 92 e8 28 d1 7d 3e c5 f3 4e c0 ce 21 75 0a 1f 36 23 c4 95 03 a9 17 35 b9 b6 c2 69 19 a3 b8 d0 84 48 df 93 f0 f2 12 48 d2 d4 83 a2 7b 04 91 6c 19 41 83 64 fa 46 07 ac Data Ascii: 4Xk9#;cy"&Q-a\|[#vRd8iuFOq *?F'h`{tH@$8`Y"d=yc@,Y0ZV?8._v{`LPjdtOLkpSmU22_;[(}>N!u6#5iHH{lAdF
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: ca 66 44 40 12 42 c3 cb 21 41 75 7b 64 11 60 57 34 10 d2 69 32 94 ac 2d a0 9a ed 56 39 2e 13 fd 91 e0 ec 8c 61 d4 a3 da 2f 5f 65 1f 8b b7 7e 03 1d 83 16 8a 58 a4 b2 e2 7a a0 a2 4c 5c 04 bd f3 8b e8 08 bb fa 30 e2 3c 6b 38 c7 4c a9 b7 5b c0 6b b3 d0 3e 35 c7 1f 2e 3d 29 4e a2 cb f1 f8 e6 63 ab c4 b7 19 a0 77 c5 be 34 40 bb 23 5e 00 3e 7f 53 4e 4d cc a3 be bd fb c4 9c 5a b7 a1 28 56 55 cd 37 0e 8e 8a 6b 29 a0 21 23 7d e8 5c 38 e4 61 20 9e 59 a7 8a 8e a3 da ed ab d7 1d cb 9c 7b 58 bb 09 3c bd e6 26 06 4d 4f ed c1 37 21 8e 47 7b 28 5a 16 71 54 3e bb 85 01 6d 8a 73 ff 10 2c 61 86 9f fd da d7 25 2d 25 70 4f 68 47 ab 33 d2 54 bf 46 55 b0 bd 4d 4c c5 d7 5a 3c 6b e5 14 6b e1 ab 69 94 d8 60 c3 d2 e2 f4 f7 df f1 08 d6 3c b5 3e 8c 08 64 fe 45 44 76 34 4d 7a 48 2c ec Data Ascii: fD@B!Au{d`W4i2-V9.a/_e~XzL\0<k8L[k>5.=)Ncw4@#^>SNMZ(VU7k)!#}\8a Y{X<&MO7!G{(ZqT>ms,a%-%pOhG3TFUMLZ<kki`<>dEDv4MzH,
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: 17 67 fb 72 ca bf 29 eb 21 f0 43 aa 3e 0e a6 f6 2c ba e9 69 e6 a0 cb 97 19 0d c6 38 1b e3 6a c0 ab e2 25 de 37 99 49 ce c1 c0 99 e1 eb 5b 36 69 93 8d 6d 66 2d 68 90 81 50 80 79 db 11 6b 19 a5 0d 9e be 27 e0 4c 0a 4f dc 6e 74 83 f6 2f 7a ed eb f8 c1 06 61 bd 50 02 5f a0 36 9c 81 b3 ef 03 7b 95 40 76 d5 e7 78 88 c0 9d 7d ca 1f 36 4f 67 2d 42 b4 08 33 41 a9 36 77 2e 16 fc c7 12 c8 57 30 11 f8 c8 dd 90 f6 4f f6 ba 93 65 bb 93 21 ec a7 d5 c6 74 b6 26 15 19 0c 0c f4 a3 76 c1 1a be 0e e2 e0 8c c7 e7 68 0c 16 99 19 4b d3 46 d0 34 48 9a 78 ad 3f 87 40 f0 8d 36 4d e3 91 13 6a 74 fe 71 e5 eb 12 ca 6a 73 a3 2f 8f 54 88 ff f8 a6 6e 11 a8 03 0a fc 9d c1 0f 51 cd 72 ca ef 14 12 f9 57 37 42 11 cc 86 72 9d 50 91 56 db a9 71 de b7 1d 8f 3d fa 5f 65 9a 64 61 76 82 55 c5 8b Data Ascii: gr)!C>,i8j%7I[6imf-hPyk'LOnt/zaP_6{@vx}6Og-B3A6w.W0Oe!t&vhKF4Hx?@6Mjtqjs/TnQrW7BrPVq=_edavU
2024-03-27 20:21:13 UTC	1369	IN	Data Raw: e0 11 73 3e 10 25 f3 5c 8b 1c 3d 27 79 ff 02 e8 2f fa 96 04 ee 44 6e 0e 80 3c e4 a0 2a c0 a5 cc f3 79 04 3d 68 97 5b 00 4a 55 f1 00 ca 9a 98 ae b7 9b c8 4d 53 a8 a5 00 5b 9a 3b e2 e3 af de 20 18 1e d0 27 b7 08 86 6d 4f 86 90 b5 58 63 37 0f 50 51 e6 78 93 bb ad ab 79 28 9e 60 fe b5 ae 03 a1 83 5e 24 23 48 91 62 95 6b 52 28 a6 13 66 af d3 f3 31 39 dc 07 99 28 02 cc cb 2f cb 59 b3 9b 5f 4f f1 f3 f7 01 51 8c 81 e9 bb d8 f3 5d d2 a6 24 80 22 5a b5 69 40 20 f8 b9 12 ad f6 70 d7 72 08 ff ae ae cf fa c3 18 da c0 7a 61 95 af ce 1e c0 b3 e2 7f fc a0 be 39 bd 6d d6 79 51 e5 e8 93 dc 6a 45 7a 4e 1d 6d e9 7b ad 14 0c 81 18 23 b9 ad 2b 4d 2b 1c e6 51 cf 28 8b 43 fd ed bc 76 d4 36 5a 44 3a ce de 36 49 33 6a d9 74 bd 3c 65 47 8d 9f c6 1a b5 a1 de 2e 4f 16 db eb e7 b7 19 Data Ascii: s>%\='y/Dn<*y=h[JUMS[; 'mOXc7PQxy(`^$#HbkR(f19(/Y_OQ]$"Zi@ prza9myQjEzNm{#+M+Q(Cv6ZD:6I3jt<eG.O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50425	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570872794,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:13 UTC	923	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 35 34 66 31 61 31 63 33 2d 33 61 64 64 2d 34 34 34 37 2d 61 35 32 63 2d 33 64 36 32 65 36 36 64 62 65 65 65 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 37 36 35 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 37 36 35 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"54f1a1c3-3add-4447-a52c-3d62e66dbeee","E":"2024-03-27T20:21:12.765Z","F":"2024-03-27T20:21:12.765Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:13 UTC	903	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e6bd015782-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e6bd015782 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h7c7Ct32FZTh%2FvskjEJfy7HnIfmS%2BNV3q%2B5W2dgVojiLu7K4su4Ibtw3ClODVBIbBNu5Zc%2BuX73wyF4AJA40pTAQeU7tq47FDTzsN33p2MhpvZHL0PZHII46wFznIt8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:13 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50426	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570872858,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:13 UTC	931	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 38 38 31 35 32 33 65 36 2d 66 31 35 35 2d 34 30 39 36 2d 39 33 61 65 2d 36 64 31 65 63 33 39 35 34 34 63 31 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 38 35 32 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 38 35 32 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"881523e6-f155-4096-93ae-6d1ec39544c1","E":"2024-03-27T20:21:12.852Z","F":"2024-03-27T20:21:12.852Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:13 UTC	909	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e759b805e3-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e759b805e3 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2SZSt4oeVAIaYx%2BWVAausL%2BwpiYeNgbZHLMpWvtzxhZ%2BhvpFEPZS1NMORT40A6nH0DEzLu2dxv2VolxyO7%2Ftk9m1t9daGeo%2BIOonnMfTx1%2BpiBqIJGP%2FiJqVTejSGA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:13 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50427	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:13 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 924 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570872884,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:13 UTC	924	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 33 65 30 32 34 61 63 32 2d 61 62 31 32 2d 34 31 66 31 2d 62 39 31 34 2d 31 63 33 63 61 39 38 30 35 61 64 35 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 38 38 30 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 38 38 30 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"3e024ac2-ab12-41f1-b914-1c3ca9805ad5","E":"2024-03-27T20:21:12.880Z","F":"2024-03-27T20:21:12.880Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:13 UTC	911	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:13 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215e7ba1b5797-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215e7ba1b5797 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=if%2BIslQzdYzxGpdzbdRT1%2BMf76UKI0Lw3B7q10wdNbx9yWTmrOHZPpI2m0fOB4YdmD%2BwgTilwnepk6GtSJP7Bj%2FfHL4Msuh%2B9q%2Bomx9DT7N01y%2BMoXd9EJgU3a3%2Bc34%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:13 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50428	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 926 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570872992,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:14 UTC	926	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 35 31 38 30 61 64 31 61 2d 31 30 62 34 2d 34 38 33 64 2d 62 36 34 37 2d 37 31 30 38 38 64 33 30 37 37 65 36 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 39 38 31 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 32 2e 39 38 31 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"5180ad1a-10b4-483d-b647-71088d3077e6","E":"2024-03-27T20:21:12.981Z","F":"2024-03-27T20:21:12.981Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:14 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:14 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215ef182905fb-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215ef182905fb X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=noSfg5ynY2P5G7ulfTkMm5LP5qcctvpDKjVoMK%2BCl2jcn8s4S16mV8Pfjrp7KieHfc3Eebb2xFBLoJb26dff%2FPX3lgNRHzTBoAHtETJZrnPfV0tjq5SjeeRxbxcO8PE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:14 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50429	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	1230	OUT	GET /pagead/1p-user-list/804757079/?random=368212433&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Introducing%20the%20Visual%20Suite%20%7C%20Canva&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqOqJoKrY3YY-062dw0uHrX4V8zdYxRSBPIA5hMH_OFizAE1Uw&random=4127248248 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50430	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:14 UTC	926	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:14 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215ef1bae2899-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215ef1bae2899 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvlEA6r79vwJYa0VUmxhAIAU264%2BOJ%2BUBwt%2Bxhfd99Bzbr%2BiF8APPhTV4yqiphOu9RHeCNdydf4IUJ3SDYnK2CkRl0i7gjDQE4AH7xLY6VcJpUd%2BcEYyMOpy402lyNA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:14 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50432	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	1303	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:14 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50431	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	1231	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50433	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	1224	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50435	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	2229	OUT	GET /web/688b591acbc2d2de.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:14 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:14 GMT Content-Type: text/javascript Content-Length: 6575 Connection: close CF-Ray: 86b215ef2f248262-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 472689 Cache-Control: public, max-age=31556926 ETag: "7c2661e14845bff4056d373392fe6a49" Expires: Fri, 28 Mar 2025 02:10:00 GMT Last-Modified: Fri, 22 Mar 2024 02:06:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 23 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: /2SpQdv9YU2TIPnDbFS32nj5qdEgfss8gNVmrzy9yN7J7ey/Js6TkSq0hzflgsLkEKD04cx8Yxk= x-amz-replication-status: COMPLETED x-amz-request-id: RDQKYSV5XQSFX9G8 x-amz-server-side-encryption: AES256 x-amz-version-id: kbgDZypXbTOt7asLyH5d2YKonNF5RL9k X-Content-Type-Options: nosniff
2024-03-27 20:21:14 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 39 54 57 45 35 63 65 67 49 79 75 70 48 55 39 52 66 64 25 32 46 52 69 51 66 38 69 44 31 44 4d 73 78 4f 36 56 6c 56 6d 67 36 70 77 4f 54 69 69 6e 52 39 62 6d 4d 58 59 61 38 53 75 75 31 64 79 54 39 4b 36 57 78 50 25 32 46 4f 54 64 6f 61 45 42 69 6f 46 72 62 73 74 6e 68 4a 66 56 51 65 76 49 33 79 45 73 34 47 61 68 58 48 39 51 54 79 56 45 72 6e 70 41 59 42 70 44 78 32 65 73 5a 6b 47 59 38 4b 65 47 65 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z9TWE5cegIyupHU9Rfd%2FRiQf8iD1DMsxO6VlVmg6pwOTiinR9bmMXYa8Suu1dyT9K6WxP%2FOTdoaEBioFrbstnhJfVQevI3yEs4GahXH9QTyVErnpAYBpDx2esZkGY8KeGe4%3D"}],"group":"cf-nel","max_age":604800}
2024-03-27 20:21:14 UTC	1200	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 56 4c 77 4b 68 77 5c 22 3a 5c 22 4d 6f 72 65 5c 22 2c 5c 22 6f 4a 32 69 4f 51 5c 22 3a 5c 22 2f 20 79 65 61 72 5c 22 2c 5c 22 69 54 4f 30 75 67 5c 22 3a 5c 22 3c 73 74 72 6f 6e 67 3e 50 72 6f 3c 2f 73 74 72 6f 6e 67 3e 5c 22 2c 5c 22 78 7a 31 65 38 51 5c 22 3a 5c 22 43 6f 6c 6c 61 62 6f 72 61 74 65 20 77 69 74 68 20 72 65 61 6c 2d 74 69 6d 65 20 63 6f 6d 6d 65 6e 74 73 20 61 6e 64 20 61 73 73 69 67 6e 20 74 61 73 6b 73 5c 22 2c 5c 22 5a 54 31 46 45 67 5c 22 3a 5c 22 54 72 79 20 66 72 65 65 20 66 6f 72 20 7b 30 2c 20 70 6c 75 72 61 6c 2c 20 6f 6e 65 20 7b 23 20 64 61 79 7d 20 6f 74 68 65 72 20 7b 23 20 64 61 79 73 7d Data Ascii: (function() { const messages = JSON.parse("{\"VLwKhw\":\"More\",\"oJ2iOQ\":\"/ year\",\"iTO0ug\":\"<strong>Pro</strong>\",\"xz1e8Q\":\"Collaborate with real-time comments and assign tasks\",\"ZT1FEg\":\"Try free for {0, plural, one {# day} other {# days}
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 73 20 69 6e 20 6f 6e 65 20 63 6c 69 63 6b 5c 22 2c 5c 22 50 68 51 4e 6b 67 5c 22 3a 5c 22 43 75 73 74 6f 6d 5c 22 2c 5c 22 5a 7a 73 62 50 41 5c 22 3a 5c 22 46 6f 72 20 3c 73 74 72 6f 6e 67 3e 7b 30 2c 20 70 6c 75 72 61 6c 2c 20 6f 6e 65 20 7b 23 20 70 65 72 73 6f 6e 7d 20 6f 74 68 65 72 20 7b 23 20 70 65 6f 70 6c 65 7d 7d 3c 2f 73 74 72 6f 6e 67 3e 5c 22 2c 5c 22 6e 68 6e 7a 5a 67 5c 22 3a 5c 22 31 30 30 2c 30 30 30 2b 20 70 72 65 6d 69 75 6d 20 61 6e 64 20 66 72 65 65 20 74 65 6d 70 6c 61 74 65 73 20 77 69 74 68 20 6e 65 77 20 64 65 73 69 67 6e 73 20 64 61 69 6c 79 5c 22 2c 5c 22 7a 32 73 44 5a 67 5c 22 3a 5c 22 53 74 72 65 61 6d 6c 69 6e 65 64 20 61 64 6d 69 6e 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 2c 5c 22 Data Ascii: s in one click\",\"PhQNkg\":\"Custom\",\"ZzsbPA\":\"For <strong>{0, plural, one {# person} other {# people}}</strong>\",\"nhnzZg\":\"100,000+ premium and free templates with new designs daily\",\"z2sDZg\":\"Streamlined admin reporting and permissions\",\"
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 3a 5c 22 2a 7b 30 7d 20 70 65 72 20 7b 31 2c 20 73 65 6c 65 63 74 2c 20 6d 6f 6e 74 68 6c 79 20 7b 6d 6f 6e 74 68 7d 20 79 65 61 72 6c 79 20 7b 79 65 61 72 7d 20 6f 74 68 65 72 20 7b 6d 6f 6e 74 68 7d 7d 20 77 68 65 6e 20 32 6e 64 20 70 65 72 73 6f 6e 20 6a 6f 69 6e 73 20 74 65 61 6d 5c 22 2c 5c 22 55 6f 6e 6b 65 77 5c 22 3a 5c 22 42 72 61 6e 64 20 63 6f 6e 74 72 6f 6c 73 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 74 65 61 6d e2 80 99 73 20 64 65 73 69 67 6e 73 20 73 74 61 79 20 6f 6e 20 62 72 61 6e 64 5c 22 2c 5c 22 42 43 4c 58 34 51 5c 22 3a 5c 22 52 65 73 69 7a 65 20 64 65 73 69 67 6e 73 20 69 6e 66 69 6e 69 74 65 6c 79 20 77 69 74 68 20 52 65 73 69 7a 65 20 26 20 4d 61 67 69 63 20 53 77 69 74 63 68 26 74 72 61 64 65 3b 5c 22 2c 5c 22 58 4e 53 6b Data Ascii: :\"*{0} per {1, select, monthly {month} yearly {year} other {month}} when 2nd person joins team\",\"Uonkew\":\"Brand controls to ensure your teams designs stay on brand\",\"BCLX4Q\":\"Resize designs infinitely with Resize & Magic Switch™\",\"XNSk
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 44 66 51 5c 22 3a 5c 22 43 72 65 61 74 65 20 64 65 64 69 63 61 74 65 64 20 66 6f 6c 64 65 72 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 70 72 6f 6a 65 63 74 73 20 6f 72 20 64 65 70 61 72 74 6d 65 6e 74 73 5c 22 2c 5c 22 74 31 4d 51 2f 77 5c 22 3a 5c 22 35 47 42 20 6f 66 20 63 6c 6f 75 64 20 73 74 6f 72 61 67 65 5c 22 2c 5c 22 74 50 52 62 42 67 5c 22 3a 5c 22 49 6e 76 69 74 65 20 66 61 6d 69 6c 79 2c 20 66 72 69 65 6e 64 73 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 74 6f 20 64 65 73 69 67 6e 20 74 6f 67 65 74 68 65 72 5c 22 2c 5c 22 72 61 36 68 63 77 5c 22 3a 5c 22 46 65 61 74 75 72 65 73 20 79 6f 75 e2 80 99 6c 6c 20 6c 6f 76 65 5c 22 2c 5c 22 7a 4d 74 6b 46 67 5c 22 3a 5c 22 41 49 2d 70 6f 77 65 72 65 64 20 64 65 73 69 67 6e 20 74 6f 6f 6c 73 5e 20 28 4d Data Ascii: DfQ\":\"Create dedicated folders for specific projects or departments\",\"t1MQ/w\":\"5GB of cloud storage\",\"tPRbBg\":\"Invite family, friends, and others to design together\",\"ra6hcw\":\"Features youll love\",\"zMtkFg\":\"AI-powered design tools^ (M
2024-03-27 20:21:14 UTC	1268	IN	Data Raw: 6c 45 75 44 67 5c 22 3a 5c 22 48 6f 77 20 6d 61 6e 79 20 70 65 6f 70 6c 65 3f 5c 22 2c 5c 22 63 42 77 4d 4c 51 5c 22 3a 5c 22 44 65 64 69 63 61 74 65 64 20 63 75 73 74 6f 6d 65 72 20 73 75 70 70 6f 72 74 5c 22 2c 5c 22 64 37 65 38 4c 77 5c 22 3a 5c 22 54 75 72 6e 20 79 6f 75 72 20 74 65 61 6d e2 80 99 73 20 64 65 73 69 67 6e 73 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 64 6f 63 75 6d 65 6e 74 73 20 69 6e 74 6f 20 62 72 61 6e 64 65 64 20 74 65 6d 70 6c 61 74 65 73 5c 22 2c 5c 22 56 6f 54 74 57 67 5c 22 3a 5c 22 4c 4d 53 20 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 2d 20 43 61 6e 76 61 73 2c 20 42 6c 61 63 6b 62 6f 61 72 64 2c 20 53 63 68 6f 6f 6c 6f 67 79 2c 20 61 6e 64 20 6d 6f 72 65 5c 22 2c 5c 22 44 4a 77 56 61 67 5c 22 3a 5c 22 42 69 67 Data Ascii: lEuDg\":\"How many people?\",\"cBwMLQ\":\"Dedicated customer support\",\"d7e8Lw\":\"Turn your teams designs, presentations and documents into branded templates\",\"VoTtWg\":\"LMS integrations - Canvas, Blackboard, Schoology, and more\",\"DJwVag\":\"Big

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50434	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	2221	OUT	GET /web/a9d8b9a64cd39a92.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570872.0.0.1176296780
2024-03-27 20:21:14 UTC	1190	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:14 GMT Content-Type: text/javascript Content-Length: 23680 Connection: close CF-Ray: 86b215ef2fd83b8c-IAD CF-Cache-Status: HIT Accept-Ranges: bytes Age: 63838 Cache-Control: public, max-age=31556926 ETag: "bdc7524a1c454c8874a61254dc978a01" Expires: Fri, 28 Mar 2025 02:10:00 GMT Last-Modified: Wed, 27 Mar 2024 02:26:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 28 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: YuEzdOL2R1W2hYyZhIWSEQhJlimM8N3OYdZX2sYL8o4hetNnrYuuGrCHQgEj4WnCbhGcoH7cH1M= x-amz-replication-status: COMPLETED x-amz-request-id: DTGDSGB67J4SCMKF x-amz-server-side-encryption: AES256 x-amz-version-id: cBEb.bUaKDlBVxyXT0gEbOiutXMmeDwM X-Content-Type-Options: nosniff
2024-03-27 20:21:14 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 66 53 33 74 34 73 45 25 32 46 73 67 35 75 35 65 4b 37 35 25 32 42 49 49 69 32 4f 43 4a 67 76 65 67 59 69 4d 63 4f 49 52 52 61 65 51 45 35 4d 53 54 62 44 52 58 58 43 4f 32 59 25 32 42 51 39 69 32 62 59 4a 4f 25 32 46 51 4d 4f 66 4c 53 49 77 79 6e 54 37 72 7a 45 46 55 49 6e 42 32 55 67 43 78 75 6c 6c 55 64 68 47 69 7a 63 73 79 63 79 70 74 38 41 25 32 42 78 41 43 45 6f 63 75 43 51 51 79 37 5a 4f 61 4f 55 67 25 32 46 73 6e 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfS3t4sE%2Fsg5u5eK75%2BIIi2OCJgvegYiMcOIRRaeQE5MSTbDRXXCO2Y%2BQ9i2bYJO%2FQMOfLSIwynT7rzEFUInB2UgCxullUdhGizcsycypt8A%2BxACEocuCQQy7ZOaOUg%2Fsns%3D"}],"group":"cf-nel","max_age":
2024-03-27 20:21:14 UTC	1192	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 36 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 31 36 38 39 33 31 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6764],{/***/ 168931:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._f
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 4f 4e 31 51 22 29 2c 43 68 3a 5b 49 28 22 4f 46 69 4a 39 77 22 29 2c 49 28 22 42 51 6a 49 6c 67 22 29 2c 49 28 22 7a 7a 55 79 34 41 22 29 2c 49 28 22 78 7a 31 65 38 51 22 29 2c 49 28 22 46 64 75 37 45 77 22 29 2c 49 28 22 2f 55 43 36 44 67 22 29 2c 49 28 22 6e 43 4f 31 39 41 22 29 2c 49 28 22 52 45 39 75 2f 67 22 29 2c 49 28 22 4f 33 44 49 39 41 22 29 2c 49 28 22 79 45 41 67 4c 41 22 29 2c 49 28 22 69 2b 59 32 42 67 22 29 5d 7d 2c 7b 68 65 61 64 69 6e 67 3a 49 28 22 4e 57 69 45 45 77 22 29 2c 43 68 3a 5b 49 28 22 72 63 62 4e 47 51 22 29 2c 49 28 22 4e 51 73 68 30 51 22 29 2c 49 28 22 74 41 65 35 50 51 22 29 2c 48 28 22 4c 6b 2f 68 64 41 22 2c 5b 61 5d 29 5d 7d 5d 7d 3b 0a 53 30 61 3d 66 75 6e 63 74 69 6f 6e 28 7b 73 6b 65 6c 65 74 6f 6e 3a 61 2c 6b 6a 3a Data Ascii: ON1Q"),Ch:[I("OFiJ9w"),I("BQjIlg"),I("zzUy4A"),I("xz1e8Q"),I("Fdu7Ew"),I("/UC6Dg"),I("nCO19A"),I("RE9u/g"),I("O3DI9A"),I("yEAgLA"),I("i+Y2Bg")]},{heading:I("NWiEEw"),Ch:[I("rcbNGQ"),I("NQsh0Q"),I("tAe5PQ"),H("Lk/hdA",[a])]}]};S0a=function({skeleton:a,kj:
2024-03-27 20:21:14 UTC	520	IN	Data Raw: 6e 41 41 42 4c 67 22 29 2c 49 28 22 6e 68 6e 7a 5a 67 22 29 2c 49 28 22 6e 76 4a 50 4f 41 22 29 2c 49 28 22 7a 48 49 67 31 67 22 29 2c 49 28 22 42 43 4c 58 34 51 22 29 2c 49 28 22 2b 31 2b 4d 62 77 22 29 2c 49 28 22 69 2b 59 32 42 67 22 29 5d 7d 3a 7b 68 65 61 64 69 6e 67 3a 49 28 22 4a 4d 50 79 75 51 22 29 2c 43 68 3a 5b 49 28 22 4f 46 69 4a 39 77 22 29 2c 49 28 22 6e 76 4a 50 4f 41 22 29 2c 49 28 22 42 43 4c 58 34 51 22 29 2c 49 28 22 46 64 75 37 45 77 22 29 2c 49 28 22 2f 55 43 36 44 67 22 29 2c 49 28 22 6e 43 4f 31 39 41 22 29 2c 49 28 22 6e 76 4d 45 47 67 22 29 2c 49 28 22 69 2b 59 32 42 67 22 29 2c 49 28 22 66 71 75 73 57 41 22 29 5d 7d 2c 5a 6f 3a 28 29 3d 3e 6e 58 28 72 58 2c 7b 4e 61 3a 72 7d 29 2c 6d 78 3a 6d 58 28 28 29 3d 3e 6e 58 28 41 30 61 Data Ascii: nAABLg"),I("nhnzZg"),I("nvJPOA"),I("zHIg1g"),I("BCLX4Q"),I("+1+Mbw"),I("i+Y2Bg")]}:{heading:I("JMPyuQ"),Ch:[I("OFiJ9w"),I("nvJPOA"),I("BCLX4Q"),I("Fdu7Ew"),I("/UC6Dg"),I("nCO19A"),I("nvMEGg"),I("i+Y2Bg"),I("fqusWA")]},Zo:()=>nX(rX,{Na:r}),mx:mX(()=>nX(A0a
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 49 39 38 32 67 22 29 2c 49 28 22 66 68 7a 33 63 77 22 29 2c 49 28 22 36 62 39 69 6a 77 22 29 2c 49 28 22 39 33 74 58 33 67 22 29 2c 49 28 22 74 50 52 62 42 67 22 29 2c 49 28 22 74 31 4d 51 2f 77 22 29 5d 7d 3a 75 30 61 28 29 2c 6d 78 3a 28 29 3d 3e 6e 58 28 44 30 61 2c 7b 24 50 3a 4b 2c 6c 6c 3a 28 29 3d 3e 7b 65 2e 71 6c 28 75 58 29 7d 7d 29 2c 5a 6f 3a 28 29 3d 3e 6e 58 28 72 58 2c 7b 4e 61 3a 72 7d 29 7d 29 3b 63 6f 6e 73 74 20 6d 61 3d 6c 3f 70 2e 6d 44 28 5f 5f 63 2e 70 6d 29 3a 70 2e 6a 64 28 5f 5f 63 2e 6d 6c 28 7b 41 79 3a 22 70 72 69 63 69 6e 67 5f 65 6d 62 65 64 5f 74 65 61 6d 73 5f 63 61 72 64 22 7d 29 29 2c 65 61 3d 28 7a 61 2c 51 61 2c 46 62 3d 21 31 29 3d 3e 6d 58 28 28 29 3d 3e 6e 58 28 6f 58 2c 7b 4a 73 3a 42 2c 57 6c 3a 28 29 3d 3e 6e 58 Data Ascii: I982g"),I("fhz3cw"),I("6b9ijw"),I("93tX3g"),I("tPRbBg"),I("t1MQ/w")]}:u0a(),mx:()=>nX(D0a,{$P:K,ll:()=>{e.ql(uX)}}),Zo:()=>nX(rX,{Na:r})});const ma=l?p.mD(__c.pm):p.jd(__c.ml({Ay:"pricing_embed_teams_card"})),ea=(za,Qa,Fb=!1)=>mX(()=>nX(oX,{Js:B,Wl:()=>nX
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 0a 57 6c 3a 28 29 3d 3e 6e 58 28 4d 30 61 2c 7b 7d 29 2c 59 6f 3a 4e 30 61 2c 24 64 3a 28 29 3d 3e 6e 58 28 54 68 2c 7b 73 69 7a 65 3a 22 31 32 75 22 7d 29 2c 66 70 3a 5b 7b 68 65 61 64 69 6e 67 3a 49 28 22 72 61 36 68 63 77 22 29 2c 43 68 3a 5b 49 28 22 72 62 71 45 50 67 22 29 2c 49 28 22 48 2f 59 5a 53 41 22 29 2c 49 28 22 7a 32 73 44 5a 67 22 29 2c 49 28 22 56 6f 54 74 57 67 22 29 2c 49 28 22 63 42 77 4d 4c 51 22 29 5d 7d 5d 2c 6d 78 3a 28 29 3d 3e 6e 58 28 4f 30 61 2c 7b 6c 6c 3a 28 29 3d 3e 7b 65 2e 71 6c 28 50 30 61 29 7d 7d 29 7d 29 29 3b 73 77 69 74 63 68 28 66 2e 74 79 70 65 29 7b 63 61 73 65 20 22 44 45 46 41 55 4c 54 22 3a 63 6f 6e 73 74 20 7a 61 3d 6e 65 77 20 5f 5f 63 2e 6d 6d 28 62 2e 57 46 2c 63 2c 50 29 2c 7b 4d 74 3a 51 61 7d 3d 54 28 29 Data Ascii: Wl:()=>nX(M0a,{}),Yo:N0a,$d:()=>nX(Th,{size:"12u"}),fp:[{heading:I("ra6hcw"),Ch:[I("rbqEPg"),I("H/YZSA"),I("z2sDZg"),I("VoTtWg"),I("cBwMLQ")]}],mx:()=>nX(O0a,{ll:()=>{e.ql(P0a)}})}));switch(f.type){case "DEFAULT":const za=new __c.mm(b.WF,c,P),{Mt:Qa}=T()
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 75 2c 62 29 3b 47 3d 5f 5f 63 2e 72 6d 28 7b 69 64 3a 22 63 61 6c 63 75 6c 61 74 65 2d 66 6f 72 2d 79 6f 75 72 2d 74 65 61 6d 22 2c 4d 74 3a 77 61 2c 46 45 3a 55 66 3d 3e 7b 57 2e 42 4b 28 50 2c 55 66 29 3b 76 64 28 64 2c 7b 73 65 63 74 69 6f 6e 3a 22 70 6c 61 6e 73 5f 63 6f 6d 70 61 72 69 73 69 6f 6e 22 2c 47 62 3a 22 6e 75 6d 62 65 72 5f 70 65 6f 70 6c 65 5f 69 6e 70 75 74 22 2c 63 67 3a 55 66 3f 60 24 7b 55 66 7d 60 3a 76 6f 69 64 20 30 7d 29 7d 2c 0a 68 6c 3a 31 35 45 33 2c 77 62 3a 62 2c 49 61 3a 50 2c 4e 61 3a 72 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 60 75 6e 68 61 6e 64 6c 65 64 20 63 61 73 65 3a 20 24 7b 66 2e 74 79 70 65 7d 60 29 3b 7d 63 6f 6e 73 74 20 66 62 3d 5b 49 61 2c 48 61 2c 44 2c 45 5d 2e Data Ascii: u,b);G=__c.rm({id:"calculate-for-your-team",Mt:wa,FE:Uf=>{W.BK(P,Uf);vd(d,{section:"plans_comparision",Gb:"number_people_input",cg:Uf?`${Uf}`:void 0})},hl:15E3,wb:b,Ia:P,Na:r});break;default:throw Error(`unhandled case: ${f.type}`);}const fb=[Ia,Ha,D,E].
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 7d 29 3b 73 77 69 74 63 68 28 73 63 2e 75 72 6c 29 7b 63 61 73 65 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 66 6f 72 2d 74 65 61 6d 73 2f 22 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 42 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 64 75 63 61 74 69 6f 6e 2f 22 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 64 75 63 61 74 69 6f 6e 2f 63 6f 6e 74 61 63 74 2d 73 61 6c 65 73 22 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 45 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 Data Ascii: });switch(sc.url){case "https://www.canva.com/for-teams/":window.location.href=B;break;case "https://www.canva.com/education/":window.location.href=D;break;case "https://www.canva.com/education/contact-sales":window.location.href=E;break;case "https://www
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 28 5f 5f 63 2e 75 6d 28 7b 4a 63 3a 67 2c 49 61 3a 63 7d 29 2c 7b 77 62 3a 65 2c 4e 61 3a 70 2c 49 61 3a 63 7d 29 2c 74 6d 28 5f 5f 63 2e 76 6d 28 7b 79 6b 3a 64 2c 49 61 3a 63 7d 29 2c 7b 77 62 3a 65 2c 4e 61 3a 70 2c 49 61 3a 63 7d 29 2c 74 6d 28 5f 5f 63 2e 77 6d 28 7b 77 62 3a 65 2c 4e 61 3a 70 2c 79 65 3a 71 2c 49 61 3a 63 2c 45 74 61 3a 61 7d 29 2c 7b 77 62 3a 65 2c 4e 61 3a 70 2c 79 65 3a 71 2c 49 61 3a 63 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 7d 7d 29 2c 74 6d 28 6d 58 28 28 7b 51 69 3a 69 63 7d 29 3d 3e 6e 58 28 5f 5f 63 2e 78 6d 2c 7b 70 72 69 63 65 3a 49 28 22 58 6f 33 63 50 67 22 29 2c 0a 63 61 70 74 69 6f 6e 3a 49 28 22 76 43 41 31 2b 77 22 29 2c 51 69 3a 69 63 2c 6f 7a 3a 21 30 2c 53 49 3a 21 30 7d 29 29 2c 7b 77 62 3a 65 2c 4e 61 3a 70 Data Ascii: (__c.um({Jc:g,Ia:c}),{wb:e,Na:p,Ia:c}),tm(__c.vm({yk:d,Ia:c}),{wb:e,Na:p,Ia:c}),tm(__c.wm({wb:e,Na:p,ye:q,Ia:c,Eta:a}),{wb:e,Na:p,ye:q,Ia:c,onClick:()=>{}}),tm(mX(({Qi:ic})=>nX(__c.xm,{price:I("Xo3cPg"),caption:I("vCA1+w"),Qi:ic,oz:!0,SI:!0})),{wb:e,Na:p
2024-03-27 20:21:14 UTC	1369	IN	Data Raw: 64 62 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 28 29 3d 3e 6e 58 28 54 30 61 2c 7b 49 4d 3a 4d 61 2c 63 61 72 64 73 3a 64 62 7d 29 7d 3b 0a 57 30 61 3d 66 75 6e 63 74 69 6f 6e 28 7b 73 6b 65 6c 65 74 6f 6e 3a 61 2c 6b 6a 3a 62 2c 4a 63 3a 63 2c 24 62 3a 64 2c 68 77 3a 65 2c 6c 61 79 6f 75 74 3a 66 2c 66 72 65 71 75 65 6e 63 79 3a 67 2c 4f 68 3a 68 2c 4e 61 3a 6c 2c 79 65 3a 70 2c 41 75 3a 71 2c 52 76 3a 72 7d 29 7b 66 3d 66 7c 7c 6e 65 77 20 5f 5f 63 2e 6f 43 28 7b 75 46 3a 21 31 7d 29 3b 63 6f 6e 73 74 20 75 3d 6e 65 77 20 5f 5f 63 2e 6b 6d 2c 78 3d 6e 65 77 20 5f 5f 63 2e 6c 6d 28 67 29 2c 7a 3d 6e 65 77 20 5f 5f 63 2e 6d 6d 28 62 2e 57 46 2c 63 2c 78 29 2c 79 3d 6e 65 77 20 5f 5f 63 2e 6e 6d 28 62 2e 4e 77 2c 63 2c 78 29 2c 7b 73 74 6f 72 65 3a 42 Data Ascii: db.push(e)}return()=>nX(T0a,{IM:Ma,cards:db})};W0a=function({skeleton:a,kj:b,Jc:c,$b:d,hw:e,layout:f,frequency:g,Oh:h,Na:l,ye:p,Au:q,Rv:r}){f=f\|\|new __c.oC({uF:!1});const u=new __c.km,x=new __c.lm(g),z=new __c.mm(b.WF,c,x),y=new __c.nm(b.Nw,c,x),{store:B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50436	172.253.122.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:14 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:15 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50437	142.251.16.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:14 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:15 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50439	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	2339	OUT	GET /video/1375992/BRCA24001_WWYDT5_LandingPage_Presentations.mp4 HTTP/1.1 Host: static-cse.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.canva.com/ Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570874.0.0.1176296780 Range: bytes=1171408-3996867 If-Range: "24d94274c1c4cb653ed9d888952a6386"
2024-03-27 20:21:15 UTC	1366	IN	HTTP/1.1 206 Partial Content Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: video/mp4 Content-Length: 2825460 Connection: close Content-Range: bytes 1171408-3996867/3996868 CF-Ray: 86b215f12e8b1fdf-IAD CF-Cache-Status: HIT Age: 777120 Cache-Control: public, max-age=2592000 ETag: "24d94274c1c4cb653ed9d888952a6386" Expires: Fri, 26 Apr 2024 20:21:15 GMT Last-Modified: Wed, 28 Feb 2024 06:47:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static-cse x-amz-id-2: 3uCEdueo4RZXePkHS8/rltxEXOc/N4j+1n+ltnRZ/tO25HtmudoGXllkaUY22Nmc7KN6iNkU/wc= x-amz-request-id: E68PR1WNZ7SP2V9V x-amz-server-side-encryption: AES256 x-amz-version-id: oWGnmYjveps65euzJSMUQwkr3LnrBv3h X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wTSoWzVoQcnvQOgCNYpza6uATsJQWeBye0E2Fucf6c%2FZWK7Hvn0vlD2AS6xrrWNv%2B8ztHn%2Fd4gr1eoA%2BTLo37j2S7b9qxBr64ba%2Bq4HNkIhagOpeaA5OdoFC%2B6cGJKLWORTVYG5U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
2024-03-27 20:21:15 UTC	22	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: Server: cloudflare
2024-03-27 20:21:15 UTC	1350	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2e ff a1 0a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a Data Ascii: -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------.ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: e8 42 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 Data Ascii: B
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2e ff a1 0a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a Data Ascii: --------.ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 97 7f d0 85 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5d e3 02 14 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 bc 21 0c 50 00 7e 40 00 3f 21 bf e8 42 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 Data Ascii: ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ]!P~@?!B
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2e ff a1 0a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a Data Ascii: ------------------------------------------------------------------------------------------------------------------------------------.ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 96 97 7f d0 85 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: -------------------------------------------------------------
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5d e3 02 14 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 b4 bc 21 0c 50 00 7e 40 00 3f 21 bf e8 42 96 96 96 Data Ascii: ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ]!P~@?!B
2024-03-27 20:21:15 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50440	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:14 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570874374,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570874.0.0.1176296780
2024-03-27 20:21:14 UTC	922	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 36 33 34 64 66 65 64 2d 64 34 31 64 2d 34 61 63 35 2d 62 65 65 33 2d 33 34 63 35 64 66 35 34 33 33 34 66 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 34 2e 33 35 30 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 34 2e 33 35 30 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"4634dfed-d41d-4ac5-bee3-34c5df54334f","E":"2024-03-27T20:21:14.350Z","F":"2024-03-27T20:21:14.350Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:15 UTC	897	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215f09e4757ae-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215f09e4757ae X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iIckcwNbbWunVZeSmaPWufiDMEUxHA2lKwdGZ3nQDPXpFzeyvFJn1emD76UIKh8j3Rgh6e%2FXCZTmYMjwJR3IJq8ES6kmtW4P1x5DKGeJM8VRksfPnzAVWGycxZp8hz8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:15 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50441	172.253.63.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:15 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:15 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50444	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	2667	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572662060%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570862060%7D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; gtm_custom_user_engagement={"lock":"yes","page":4,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570869647,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570869.0.0.1176296780
2024-03-27 20:21:15 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215f28c816fb5-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215f28c816fb5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nnjwJYhubW1lunPqvYE99tnqBsaeImMZXyB6kiRNr%2FdLd5i5%2FjPVbzOGzAeWjVfqY5rgetmQCysAosqsnrI2WFgFCeb9gD3VV037sS4NXpX6lZuCLdb7JWaiRx76iaw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:15 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50446	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	3366	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 7895 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/_pricing_embed/?locale=en&layoutType=ALL&billingFrequency=MONTHLY&origin=https%3A%2F%2Fwww.canva.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570874374,"utm_s":"editor","utm_m":"link"}; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570874.0.0.1176296780
2024-03-27 20:21:15 UTC	7895	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 35 34 37 39 35 33 30 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 38 33 35 32 36 30 31 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 31 63 36 64 66 69 2e 61 63 37 34 66 31 35 30 31 64 37 38 66 35 63 66 2e 6c 74 72 2e 63 73 73 22 2c 22 73 22 3a 36 32 34 2e 32 2c 22 64 22 3a 32 33 38 2e 38 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 36 32 34 2e 32 2c 22 64 73 22 3a 36 32 34 2e Data Ascii: {"memory":{"totalJSHeapSize":54795309,"usedJSHeapSize":38352601,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.canva.com/web/1c6dfi.ac74f1501d78f5cf.ltr.css","s":624.2,"d":238.8,"i":"link","p":"http/1.1","rs":0,"re":0,"fs":624.2,"ds":624.
2024-03-27 20:21:15 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:15 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215f46d0707cf-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50447	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	3535	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 22404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json sec-ch-ua-platform-version: "10.0.0" baggage: sentry-environment=prod,sentry-release=0d66acdc504f9e2d0904904a4020e4bf0fdbea03,sentry-public_key=d1e5ff4b423a49d1a73e21b46496148c,sentry-trace_id=4c7b5bd68b1d4a2299a67c7b3c41f59f sentry-trace: 4c7b5bd68b1d4a2299a67c7b3c41f59f-b0c361825184d82e sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570874374,"utm_s":"editor","utm_m":"link"}; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570874.0.0.1176296780
2024-03-27 20:21:15 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 35 34 37 39 35 33 30 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 38 33 35 32 36 30 31 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 63 73 65 2e 63 61 6e 76 61 2e 63 6f 6d 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 61 70 70 2e 35 34 31 39 38 65 37 35 2e 63 73 73 22 2c 22 73 22 3a 35 30 36 2e 37 2c 22 64 22 3a 36 35 30 2e 35 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 35 30 36 2e 37 2c 22 64 73 22 3a Data Ascii: {"memory":{"totalJSHeapSize":54795309,"usedJSHeapSize":38352601,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static-cse.canva.com/_next/static/chunks/pages/_app.54198e75.css","s":506.7,"d":650.5,"i":"link","p":"","rs":0,"re":0,"fs":506.7,"ds":
2024-03-27 20:21:15 UTC	6020	OUT	Data Raw: 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 Data Ascii: tar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;p
2024-03-27 20:21:15 UTC	370	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:15 GMT Connection: close access-control-allow-origin: https://www.canva.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 86b215f478ab066c-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50448	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	3443	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570874466&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570874466&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&dr=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&sid=1711570825&sct=1&seg=1&dt=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157101509843&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&tfd=5558&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570874.0.0.1176296780
2024-03-27 20:21:15 UTC	560	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775951; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:15 UTC	637	IN	Data Raw: 32 37 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 31 35 31 38 31 38 33 31 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 276event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:21:15 UTC	574	IN	Data Raw: 32 33 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 31 35 31 38 31 38 33 31 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 237event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:21:15 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:21:15 UTC	566	IN	Data Raw: 32 32 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 22fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:21:15 UTC	765	IN	Data Raw: 32 66 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 36 33 35 31 37 34 34 32 34 26 66 73 74 3d 31 37 31 31 35 37 30 38 37 35 38 32 35 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 72 Data Ascii: 2f6event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=635174424&fst=1711570875825&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&ur
2024-03-27 20:21:16 UTC	286	IN	Data Raw: 31 31 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 73 6f 37 25 32 46 36 4e 71 44 41 30 46 33 71 48 4b 76 68 57 68 67 6e 34 4a 4d 6e 46 33 5a 34 37 59 31 65 78 49 6d 59 7a 48 6d 31 74 39 4e 4f 34 48 58 74 32 33 70 65 36 63 4e 25 32 46 56 5a 6d 59 79 38 67 4f 57 34 4e 50 6d 52 76 39 79 62 53 38 55 68 4e 67 64 71 56 61 55 6e 25 32 46 71 58 71 6c 49 47 6d 41 51 79 48 48 71 30 52 6b 64 53 4c 66 4a 30 72 34 32 30 30 59 6b 39 50 6f 37 6d 6d 4a 32 54 4c 6b 74 77 72 72 71 4f 58 70 4c 7a 4d 42 63 77 67 5a 6b 30 76 65 50 6b 6c 55 6f 54 6b 4b 67 4c 43 45 66 53 70 73 4a 50 63 58 49 48 39 78 61 49 Data Ascii: 117event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=so7%2F6NqDA0F3qHKvhWhgn4JMnF3Z47Y1exImYzHm1t9NO4HXt23pe6cN%2FVZmYy8gOW4NPmRv9ybS8UhNgdqVaUn%2FqXqlIGmAQyHHq0RkdSLfJ0r4200Yk9Po7mmJ2TLktwrrqOXpLzMBcwgZk0vePklUoTkKgLCEfSpsJPcXIH9xaI
2024-03-27 20:21:16 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-03-27 20:21:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50450	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	740	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2057199225 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:15 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:15 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50449	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	623	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=1105928991 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:15 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:15 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50453	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	3402	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780
2024-03-27 20:21:15 UTC	929	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 37 32 36 38 66 61 34 36 2d 33 30 30 34 2d 34 66 61 61 2d 39 38 65 62 2d 64 34 61 33 31 34 33 33 32 36 35 31 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 35 2e 31 37 32 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 35 2e 31 37 32 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"7268fa46-3004-4faa-98eb-d4a314332651","E":"2024-03-27T20:21:15.172Z","F":"2024-03-27T20:21:15.172Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:16 UTC	905	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215f5de693982-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215f5de693982 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wkrv0eW8WyYcKSn7i4RfgOKCwQZrcXTn3Ds40mdNlvl0xfptNFR52RvfUc5b6%2F1Py59J9RSRAM66E0MwXLjNQiSKx%2BdEs%2FmRqOC%2FdyTGEq1%2Bq5M5Q4VAS9geaf8EwQk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:16 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50451	54.88.71.74	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	623	OUT	GET /spp.pl?a=10000&.yp=10137834&gtmcb=2107364930 HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:15 UTC	542	IN	HTTP/1.1 204 No Content Date: Wed, 27 Mar 2024 20:21:15 GMT Server: ATS/9.1.10.106 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.106) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50454	151.101.1.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	887	OUT	GET /rp.gif?ts=1711570875234&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:15 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:15 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50455	3.162.112.2	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	833	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1348209366 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:15 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:15 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 b69ecbb6800ade3c34d3338365df5612.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P2 X-Amz-Cf-Id: 74lXZL1S_LXKUf0udhFxK6d0bfCMgL5CcglwIvoVkYXXg_7HPElKlA==
2024-03-27 20:21:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50456	3.162.112.2	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	832	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=922820477 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=10864c13f8a78c66f5a69b61711570808; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:15 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:15 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=10864c13f8a78c66f5a69b61711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 d45137f973d454db77c647196f56613a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P2 X-Amz-Cf-Id: da24H6EmPreVVjaFln6PIgyNn4hZ7PiNHtiWKw57JWgV6dNbIK00_Q==
2024-03-27 20:21:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50452	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	740	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1954201182 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:15 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:15 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50460	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	943	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&rl=&if=false&ts=1711570875293&cd[product_variant]=phoenix&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875239&coo=false&eid=1711571717886_1711571036556186&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:16 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50459	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	1052	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&rl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&if=true&ts=1711570875301&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875244&coo=false&eid=1711571717886_171157101509862&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:16 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=95, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50461	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	1035	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&rl=&if=false&ts=1711570875293&cd[product_variant]=phoenix&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875239&coo=false&eid=1711571717886_1711571036556186&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:16 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:16 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:16 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:16 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50462	31.13.66.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:15 UTC	1162	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&rl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&if=true&ts=1711570875301&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875244&coo=false&eid=1711571717886_171157101509862&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:16 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:16 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:16 UTC	1493	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di
2024-03-27 20:21:16 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50463	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	3403	OUT	POST /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1532 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Content-Type: application/json;charset=UTF-8 X-Csrf-Token: fofVPBPEXLhiiPGVj-usgEaMBpbnqlxCgsbWjuT3LkblLZSoVCa8irNwa9moK7mFJ_wt2X1kn_x3G7G1qkj2I9dHgzE sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/visual-suite/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:16 UTC	1532	OUT	Data Raw: 7b 22 41 22 3a 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 34 66 30 62 66 66 37 66 2d 38 34 61 31 2d 34 31 66 37 2d 62 39 66 33 2d 65 37 31 34 64 65 64 33 32 38 30 35 22 2c 22 45 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 35 2e 34 35 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 30 33 2d 32 37 54 32 30 3a 32 31 3a 31 35 2e 34 35 35 5a 22 2c 22 48 22 3a 22 65 6e 2d 55 53 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 44 41 43 43 41 22 3a 22 41 22 2c 22 43 52 4f 53 4d 22 3a 22 42 22 2c 22 43 43 4d 4c 50 22 3a 22 42 22 2c 22 42 47 52 47 46 22 3a 22 42 22 7d 2c 22 4d 22 3a 22 41 22 2c 22 4f 22 3a 7b 22 42 22 3a 22 2f 76 69 73 75 61 6c 2d 73 75 69 74 65 2f 22 2c 22 43 22 3a 22 Data Ascii: {"A":{"A?":"D","A":{"A":"4f0bff7f-84a1-41f7-b9f3-e714ded32805","E":"2024-03-27T20:21:15.454Z","F":"2024-03-27T20:21:15.455Z","H":"en-US","I":{"A":"US"},"J":"WEB","K":{"DACCA":"A","CROSM":"B","CCMLP":"B","BGRGF":"B"},"M":"A","O":{"B":"/visual-suite/","C":"
2024-03-27 20:21:16 UTC	899	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:16 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b215f778f3200f-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b215f778f3200f X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIqINvBO00UhqBF0MgpgH1VKfDXKzky76lWb5EmGBBjeZNN4Vsqs8HS5Dv1g7dUT0OGrBY6dqH9zXBZodxgfS1RfHg2gCK66SaXU7cgWtaaJubJw5%2FqlT6BU1k8%2FblY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:16 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-03-27 20:21:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50464	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1355	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:16 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11150844868781485306"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"11150844868781485306","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"11150844868781485306","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"11150844868781485306","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"11150844868781485306","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50465	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1260	OUT	GET /activity;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:16 UTC	1115	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50466	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1347	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:16 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50467	172.253.62.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1252	OUT	GET /activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:16 UTC	1107	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=*;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50468	142.251.111.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1451	OUT	GET /pagead/viewthroughconversion/804757079/?random=635174424&fst=1711570875825&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&ref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&auid=1649447272.1711570827&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&dma=0&npa=0&pscdl=noapi HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:16 UTC	1183	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/804757079/?random=635174424&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&ref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqMwG2SK7oXYR3BwiGVwfdn3zji-e5xUi2IcItwzhxcbDn1fFj&random=2084982915 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50469	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	2474	OUT	GET /_set_cookie?val=so7%2F6NqDA0F3qHKvhWhgn4JMnF3Z47Y1exImYzHm1t9NO4HXt23pe6cN%2FVZmYy8gOW4NPmRv9ybS8UhNgdqVaUn%2FqXqlIGmAQyHHq0RkdSLfJ0r4200Yk9Po7mmJ2TLktwrrqOXpLzMBcwgZk0vePklUoTkKgLCEfSpsJPcXIH9xaI6HkPjChY1lb3P%2FWA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:16 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:16 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:16 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50470	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1341	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50471	172.253.115.155	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	1333	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50473	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:16 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50472	142.251.167.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:16 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 33 39 35 33 39 34 30 38 34 30 36 36 39 38 31 33 33 34 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://canva.com","trigger_debug_key":"3953940840669813343"},"type":"trigger-no-matching-source"}]
2024-03-27 20:21:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 27 Mar 2024 20:21:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50474	172.253.122.105	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1423	OUT	GET /pagead/1p-user-list/804757079/?random=635174424&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&ref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqMwG2SK7oXYR3BwiGVwfdn3zji-e5xUi2IcItwzhxcbDn1fFj&random=2084982915 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50475	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	2980	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	918	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216005f023913-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216005f023913 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4kCfOVksICVgwGKnwUuThZnP6ejo4gRCNVMUWB3RKYkJY4GRnPgxzie%2F5K63mURgc5UM3dZhlBcB4WfQcE0JmJKp1uEBYDfqemm2sc546ez2Yqozhg4BLugYiszcGkY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:17 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50482	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	997	OUT	GET /pagead/1p-user-list/804757079/?random=368212433&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Introducing%20the%20Visual%20Suite%20%7C%20Canva&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqOqJoKrY3YY-062dw0uHrX4V8zdYxRSBPIA5hMH_OFizAE1Uw&random=4127248248 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50478	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b21600f8a0081b-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b21600f8a0081b X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bu3nLY2ZCayU1bXbnFmDIcBZWegq3x8%2BFn1ql7kG4BfNuuRRcLl5iFF8Tk99WbDVaTY2qYS7vxtNUxTt59uHubWB3hu93q87jIhwnxjhvU1WYB65GLLjXL7fZn02AO0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:17 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50477	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	2252	OUT	GET /_set_cookie?val=ay5hKn0vzCleCvjfq16gdPZJbIr68Szwfw%2FpKjVao83f56tLaQ23q1eC822mgio%2BGZn5HI7TmVWzuS%2Bxhdsi4bkl88irg4%2BurvxLNWnB%2F0qCalU6TZctSN8y%2BkR1%2FGuoMDEWrMB3MvwWW1ONNFtRcpDvh7deC6HoNXu1JEj%2F7KOG0SCpe0VKi%2BH4IJrnxA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:17 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50481	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	939	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:17 UTC	2194	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7669178905913048"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7669178905913048","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7669178905913048","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7669178905913048","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7669178905913048","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50480	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1011	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:17 UTC	2219	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16753090181203190409"}],"aggregatable_trigger_data":[{"filters":{"14":["16303776"]},"key_piece":"0xa9eea26b1802876d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x60864a632e1feab","not_filters":{"14":["16303776"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["16303776"]},"key_piece":"0x1e4c5cc59f44b52c","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x64d7b0ccfb240239","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16753090181203190409","filters":{"14":["16303776"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16753090181203190409","filters":{"14":["16303776"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16753090181203190409","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16753090181203190409","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50476	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	2206	OUT	GET /_set_cookie?val=zIe6LFzykvrPGGxNyJvG82Mon1crSAY3SitRU0nZ%2BMXDhiatrQAXmp4ylqCNnXrw7ylUnLauSVdb%2F3MziA2n5tDHEkdSsY1PeBc7wjLcsagvt5MaJn5TyZ4aOPn2cV6P99RDMF8p4Fp9UT4LlxObIjyGo98iGVbSuR9y HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775956; Domain=canva.com; Path=/; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:17 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50479	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	932	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:17 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50490	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	710	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&rl=&if=false&ts=1711570875293&cd[product_variant]=phoenix&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875239&coo=false&eid=1711571717886_1711571036556186&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:17 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50486	151.101.65.140	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	654	OUT	GET /rp.gif?ts=1711570875234&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=827194f4-e392-4c4d-a2e3-6cc517d68f31&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-27 20:21:17 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Wed, 27 Mar 2024 20:21:17 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50483	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1070	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=546943005;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F;u67=guest;u66=false;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50485	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	991	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50484	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	998	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=689407931;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50491	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	819	OUT	GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&rl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&if=true&ts=1711570875301&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875244&coo=false&eid=1711571717886_171157101509862&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:17 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 27 Mar 2024 20:21:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50488	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	747	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&rl=&if=false&ts=1711570875293&cd[product_variant]=phoenix&cd[country]=US&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875239&coo=false&eid=1711571717886_1711571036556186&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:17 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:17 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:17 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50487	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	3185	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570874466&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570874466&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&dr=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&sid=1711570825&sct=1&seg=1&dt=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&en=page_view&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_171157101509843&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.dom&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&tfd=5558&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	468	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPAU=1.2.1649447272.1711570827; Max-Age=7775949; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:17 UTC	637	IN	Data Raw: 32 37 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 37 39 35 35 31 35 30 33 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: 276event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1795515039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520
2024-03-27 20:21:17 UTC	574	IN	Data Raw: 32 33 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 37 39 35 35 31 35 30 33 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 Data Ascii: 237event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar0;cat=flood0;ord=1795515039;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.13
2024-03-27 20:21:17 UTC	629	IN	Data Raw: 32 36 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 Data Ascii: 26eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3
2024-03-27 20:21:17 UTC	566	IN	Data Raw: 32 32 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 72 65 74 61 72 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 71 74 79 3d 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 Data Ascii: 22fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%
2024-03-27 20:21:17 UTC	766	IN	Data Raw: 32 66 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 33 37 38 34 33 35 33 31 37 26 66 73 74 3d 31 37 31 31 35 37 30 38 37 37 37 39 31 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 33 71 30 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 26 75 Data Ascii: 2f7event: messagedata: {"send_pixel":["https://googleads.g.doubleclick.net/pagead/viewthroughconversion/804757079/?random=1378435317&fst=1711570877791&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&u
2024-03-27 20:21:18 UTC	286	IN	Data Raw: 31 31 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 24 7b 74 72 61 6e 73 70 6f 72 74 5f 75 72 6c 7d 2f 5f 73 65 74 5f 63 6f 6f 6b 69 65 3f 76 61 6c 3d 6e 48 45 37 56 56 58 51 35 45 6e 54 6e 5a 31 36 47 54 72 58 6a 35 52 47 7a 4b 57 31 33 63 58 66 76 51 7a 4d 50 57 62 77 32 6d 4a 34 64 6f 67 43 4b 38 73 42 42 73 33 6c 75 42 48 33 65 74 74 62 69 70 39 67 4c 4f 37 54 25 32 42 77 47 4d 68 77 47 4c 46 34 67 71 46 45 31 31 54 71 51 4f 79 66 66 70 78 66 31 46 67 56 4d 4a 42 35 7a 69 74 4b 53 4e 34 39 52 64 70 4d 57 4a 46 63 53 51 6a 54 55 35 47 37 67 33 5a 74 58 51 4e 42 25 32 42 4d 76 6d 7a 65 6a 55 6c 36 54 63 66 54 49 25 32 42 68 71 66 56 62 44 58 57 75 25 32 46 51 74 31 79 49 54 59 56 Data Ascii: 117event: messagedata: {"send_pixel":["${transport_url}/_set_cookie?val=nHE7VVXQ5EnTnZ16GTrXj5RGzKW13cXfvQzMPWbw2mJ4dogCK8sBBs3luBH3ettbip9gLO7T%2BwGMhwGLF4gqFE11TqQOyffpxf1FgVMJB5zitKSN49RdpMWJFcSQjTU5G7g3ZtXQNB%2BMvmzejUl6TcfTI%2BhqfVbDXWu%2FQt1yITYV
2024-03-27 20:21:18 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50489	157.240.229.35	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	856	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&rl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&if=true&ts=1711570875301&sw=1280&sh=1024&v=2.9.151&r=stable&ec=0&o=4125&fbp=fb.1.1711570826308.1623701546&cs_est=true&ler=empty&cdl=API_unavailable&it=1711570875244&coo=false&eid=1711571717886_171157101509862&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-27 20:21:17 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-27 20:21:17 UTC	1726	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google.com 127.0.0.1: 'unsafe-inline' blob: data: 'self' connect.f
2024-03-27 20:21:17 UTC	1526	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50498	18.160.10.96	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	599	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=922820477 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:17 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:17 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A1d522ce503e36f3ccfd6c1711570829; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 fb1dc2e3bf4105b403e3bfa3a5067970.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: BrYMnFLf-H3QWk7I2jfUvJwM1HbHMz9Wvd6bkJlhEHOBPU_uThNt2Q==
2024-03-27 20:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50500	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1100	OUT	GET /ddm/fls/z/src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50495	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=2057199225 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:17 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:17 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50494	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	2242	OUT	GET /_set_cookie?val=so7%2F6NqDA0F3qHKvhWhgn4JMnF3Z47Y1exImYzHm1t9NO4HXt23pe6cN%2FVZmYy8gOW4NPmRv9ybS8UhNgdqVaUn%2FqXqlIGmAQyHHq0RkdSLfJ0r4200Yk9Po7mmJ2TLktwrrqOXpLzMBcwgZk0vePklUoTkKgLCEfSpsJPcXIH9xaI6HkPjChY1lb3P%2FWA%3D%3D HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:17 UTC	259	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: image/gif Transfer-Encoding: chunked Set-Cookie: _fbp=fb.1.1711570826308.1623701546; Max-Age=63072000; Domain=canva.com; Path=/; SameSite=Lax; Secure Via: 1.1 google Connection: close
2024-03-27 20:21:17 UTC	59	IN	Data Raw: 33 30 0d 0a 52 30 6c 47 4f 44 6c 68 41 51 41 42 41 49 41 41 41 50 2f 2f 2f 77 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50492	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1049	OUT	GET /activity;register_conversion=1;src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:17 UTC	2214	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"11150844868781485306"}],"aggregatable_trigger_data":[{"filters":{"14":["9225098"]},"key_piece":"0x71efff220a708045","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x207628475056d402","not_filters":{"14":["9225098"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["9225098"]},"key_piece":"0x2d8d3492a3e874a0","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x24faf7e74a365a22","not_filters":{"14":["9225098"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"11150844868781485306","filters":{"14":["9225098"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"11150844868781485306","filters":{"14":["9225098"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"11150844868781485306","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"11150844868781485306","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50497	18.160.10.96	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	600	OUT	GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=1348209366 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15864c13f8c2bc66f5a6b691711570808; PID=1A1d522ce503e36f3ccfd6c1711570829; XID=15864c13f8c2bc66f5a6b691711570808
2024-03-27 20:21:17 UTC	780	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Wed, 27 Mar 2024 20:21:17 GMT set-cookie: UID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=1A1d522ce503e36f3ccfd6c1711570829; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 set-cookie: XID=15864c13f8c2bc66f5a6b691711570808; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=2592000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 36b04143ac1626bb30bb225fb2cccb1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: 9t3Fveqo-Vsbt4v3QSMkLx3cDl5dFucaFEy_8EvBsnMPuiyA2qccMw==
2024-03-27 20:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50493	172.253.63.148	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1041	OUT	GET /activity;register_conversion=1;src=9812343;type=retar00;cat=flood0;qty=1;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=1649447272.1711570827;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnKWZBQNlhmK4qXHGdPbMMDKNToineTDaBRCshHaJQCwiU67vwgBm5JW8Cr
2024-03-27 20:21:17 UTC	2220	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16727217616112257988"}],"aggregatable_trigger_data":[{"filters":{"14":["11887829"]},"key_piece":"0x562aa8924096f8f9","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa5be66230fbda547","not_filters":{"14":["11887829"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["11887829"]},"key_piece":"0x471dd5ba3e626ba8","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfdb77d1c76f82342","not_filters":{"14":["11887829"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"3953940840669813343","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"16727217616112257988","filters":{"14":["11887829"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"16727217616112257988","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["9812343"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Fri, 26-Apr-2024 20:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50501	172.253.62.99	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1190	OUT	GET /pagead/1p-user-list/804757079/?random=635174424&fst=1711569600000&cv=10&fmt=3&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e43q0v872399471z8812729902z9848341198za200&url=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&ref=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&tiba=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&dma=0&npa=0&is_vtc=1&cid=CAQSKQB7FLtqMwG2SK7oXYR3BwiGVwfdn3zji-e5xUi2IcItwzhxcbDn1fFj&random=2084982915 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50499	172.253.62.154	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	1108	OUT	GET /ddm/fls/z/src=9812343;type=retar0;cat=flood0;ord=1151818312;gtm=45j91e43q0v872399471z8812729902z9848341198za200;dc_pre=1;dma=0;npa=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;auiddc=;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-27 20:21:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 27 Mar 2024 20:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-27 20:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50496	75.2.57.54	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:17 UTC	507	OUT	GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=1954201182 HTTP/1.1 Host: p.tvpixel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e
2024-03-27 20:21:17 UTC	479	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx Set-Cookie: sp=ce3ef476-27bf-477f-921f-6b3443b5287e; Expires=Thu, 27 Mar 2025 20:21:17 GMT; Domain=tvpixel.com; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-03-27 20:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50502	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:18 UTC	2942	OUT	POST /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570869576&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570869576&sst.ude=0&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Introducing%20the%20Visual%20Suite%20%7C%20Canva&_s=2&tfd=11190&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive Content-Length: 3655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:18 UTC	3655	OUT	Data Raw: 65 6e 3d 6c 61 6e 64 69 6e 67 5f 70 61 67 65 5f 69 6e 74 65 72 61 63 74 65 64 26 65 70 2e 67 74 6d 5f 77 65 62 5f 64 65 74 61 69 6c 73 3d 47 54 4d 2d 54 5a 50 54 4b 52 52 25 32 30 25 37 43 25 32 30 32 36 31 26 65 70 2e 65 76 65 6e 74 5f 69 64 3d 31 37 31 31 35 37 31 37 31 37 38 38 36 5f 31 37 31 31 35 37 31 30 33 36 35 35 36 31 30 32 26 65 70 2e 63 75 73 74 6f 6d 5f 64 69 63 62 6f 3d 6e 6f 74 25 32 30 73 65 74 26 65 70 2e 63 75 73 74 6f 6d 5f 63 6f 6e 73 65 6e 74 5f 67 74 6d 5f 6f 75 74 62 72 61 69 6e 3d 79 65 73 26 65 70 2e 63 75 73 74 6f 6d 5f 63 6f 6e 73 65 6e 74 5f 67 74 6d 5f 66 70 63 5f 72 74 69 64 3d 79 65 73 26 65 70 6e 2e 63 75 73 74 6f 6d 5f 64 61 74 61 5f 6e 65 77 53 65 73 73 69 6f 6e 32 3d 30 26 65 70 2e 63 75 73 74 6f 6d 5f 64 65 76 69 63 65 Data Ascii: en=landing_page_interacted&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_1711571036556102&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device
2024-03-27 20:21:18 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:18 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:18 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50503	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:18 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:18 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216052dcc590e-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216052dcc590e X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2BczJFGDJWcTFkU20uag5PMk9qA1P%2FK%2FY4vNeGeUM3CVaay0xDGg7S14EoJfeDFGHfE7eMsLJQbpTGNyj2eFYUMtqfjEOmX3LvDQdb5gB%2FAy1x8fRpajMOoUEUxzRto%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:18 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50504	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:18 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:18 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:18 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216080caf395c-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216080caf395c X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zcm5py69CwtqUn5CRMUAEzrRMPp9ZhfFUAYt35LxV0nMkMPEcymBaPoZ2Xn6NwYt3bIUWx9uDUJHZSUJQ1nH11dzcLVmX9PVLZymawH9Tsh%2BRDYyK8McgBYA7hE%2BcGs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:18 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50505	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:18 UTC	2603	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471z8812729902za200&_p=1711570869576&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570869576&sst.ude=0&dl=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&dr=&sid=1711570825&sct=1&seg=1&dt=Introducing%20the%20Visual%20Suite%20%7C%20Canva&_s=2&tfd=11190&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:18 UTC	227	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:18 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:18 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":400,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50506	104.17.239.159	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:18 UTC	3221	OUT	GET /_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER HTTP/1.1 Host: www.canva.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.canva.com/_worker/service/web/service_worker.js?assets=N&pages=N&media=N&runtime=BROWSER User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:19 UTC	1164	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:19 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216099b9c58a6-IAD CF-Cache-Status: MISS Cache-Control: no-cache, no-store, no-cache Content-Language: en Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Wed, 27 Mar 2024 20:21:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Accept-CH: Sec-CH-UA-Platform-Version Content-Security-Policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com; Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin service-worker-allowed: / X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Request-ID: 86b216099b9c58a6 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2bNvGZ8XTlGP7PmIihAhDKAP2Elw890wsSnOPvQlDG7u3FSDw0M13lyPi49Q0PisIe0WNTnY0MstoP6GEAle%2FgD2us0MH52yupbIKMHRFD9WnxWlxcgA7IMDiBHafM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:19 UTC	205	IN	Data Raw: 33 62 61 0d 0a 73 65 6c 66 5b 27 5f 5f 63 61 6e 76 61 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 27 5d 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 2f 77 65 62 2f 27 3b 0a 73 65 6c 66 5b 27 62 6f 6f 74 73 74 72 61 70 27 5d 20 3d 20 7b 20 70 61 67 65 3a 20 7b 22 41 3f 22 3a 22 42 22 2c 22 41 22 3a 7b 22 41 3f 22 3a 22 43 22 2c 22 62 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 64 66 65 35 65 38 34 64 62 63 32 31 34 34 31 38 38 30 31 30 38 31 61 62 33 37 65 35 38 64 61 35 40 6f 31 33 38 35 35 2e 69 6e 67 65 73 74 2e 73 65 6e 74 72 79 2e 69 6f 5c Data Ascii: 3baself['__canva_public_path__'] = 'https:\/\/static.canva.com\/web/';self['bootstrap'] = { page: {"A?":"B","A":{"A?":"C","b":"https:\u002F\u002Fdfe5e84dbc214418801081ab37e58da5@o13855.ingest.sentry.io\
2024-03-27 20:21:19 UTC	756	IN	Data Raw: 75 30 30 32 46 35 35 34 36 36 38 33 22 2c 22 64 22 3a 6e 75 6c 6c 2c 22 68 22 3a 6e 75 6c 6c 2c 22 63 22 3a 30 2e 32 2c 22 65 22 3a 6e 75 6c 6c 2c 22 66 22 3a 66 61 6c 73 65 2c 22 67 22 3a 22 41 22 2c 22 69 22 3a 5b 5d 2c 22 6a 22 3a 7b 22 41 22 3a 74 72 75 65 7d 2c 22 6b 22 3a 7b 22 41 22 3a 74 72 75 65 2c 22 42 22 3a 31 30 30 2c 22 43 22 3a 33 30 2c 22 44 22 3a 31 30 7d 2c 22 6c 22 3a 5b 5d 7d 2c 22 48 22 3a 22 41 22 2c 22 4b 22 3a 22 4e 22 2c 22 4c 22 3a 22 4e 22 2c 22 47 22 3a 22 4e 22 2c 22 4e 22 3a 6e 75 6c 6c 2c 22 52 22 3a 33 30 30 30 30 2c 22 53 22 3a 30 2e 30 30 31 2c 22 54 22 3a 66 61 6c 73 65 2c 22 55 22 3a 74 72 75 65 2c 22 61 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 75 Data Ascii: u002F5546683","d":null,"h":null,"c":0.2,"e":null,"f":false,"g":"A","i":[],"j":{"A":true},"k":{"A":true,"B":100,"C":30,"D":10},"l":[]},"H":"A","K":"N","L":"N","G":"N","N":null,"R":30000,"S":0.001,"T":false,"U":true,"a":"https:\u002F\u002Fstatic.canva.com\u
2024-03-27 20:21:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50507	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:19 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:19 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2160ac80d289a-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2160ac80d289a X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tL74BboQeJzD62XWFQRMd8EAZCKcKy%2BArWaQKwTrDnHn88k98v0j9ypI%2BMXieCEgI9oa8IFGzdRlilRUnbrpsckd1gzvwPoz0fYZ29pZKdjk9NHQvLPhDsWao5nudrQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:19 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50508	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:19 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:19 UTC	918	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:19 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b2160dad047faa-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b2160dad047faa X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uXkhgnTSwjmLcO1YRCUYuiC2FcMIM3BT2apuJm1MS7Mhlw5D3Ewi97h8AUaxigc5Dk3hrHQvISWk3vt4bU9lxC1rbsbCxbSBId%2F5FhPwEWf4EwjvORMs4UaVbouRXnU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:19 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50509	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:19 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:20 UTC	920	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:20 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216106b7c05f1-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216106b7c05f1 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uSF3bp6dTJz7c31GiDbMLTGqw2tCr6UmpsUPyN2rEPhuB6dbIxEBpIDBRml6sLKe6ExNJ9dRwOJrocfCB6s8ua%2F0XTjox2pwJWFn24rZ3vZPE4%2BQsM6wB8KsXo8ZhPY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:20 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50510	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:20 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:20 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:20 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216135ae907e3-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216135ae907e3 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1846liidVsFIXVd%2BttzOwpqOqmiJs1P3L0z5eKEy47OfFq7ilNtsYhEHqBg6%2BmgUCJDwhKbZAeEUKgC6sLOfCxPsTqszOttq4ROni2BIJBK%2BeJ5klQ5SWAJ2%2F2ylaY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:20 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50511	216.239.34.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:20 UTC	3502	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471za200&_p=1711570874466&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570874466&sst.sp=1&sst.em_event=1&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&dr=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&sid=1711570825&sct=1&seg=1&dt=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_17115710150980&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&tfd=10593&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:20 UTC	465	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:20 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-03-27 20:21:20 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50512	104.16.224.149	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:20 UTC	2975	OUT	GET /_ajax/ae/create HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=321cba26-109a-4360-9fc9-ab57ed299238; CPA=cnvan2828DaLxcWmyiXzLEMy-r3V9RLAbIch7FuR72j5VXskmXspvo_qx_vsggVQJaLFGWc-JFuDNRW-ocWtsqW98q7B7c7TzvB2ZvjzsOLAZMg8fP3xNh74xuVbvcpdXl1XvF5-WaGs07QAKe38RyAJcSkWKl6HJZeSZG2C-dJICo9vsXLVumdQEzGwgk1J2FgqZKeSI46H2X5McNt2wcRBRLSF6sy0EC0BC1s0zxZschYCJmADHIIPjwiqx9Bb9zq4lALAvlBFXJ6hTq6eA31YhAPBvDpE6YtdiirViSOs8Ele5FPYcIxuYncjAAToioqYZqEKLb7vWuf_OSMMFUErYZKxowYY46448f79; CCK=RUMZpush4bm-csHfgwvwNg; __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; ASI=01HT0S3QDM7Z2GZN22BEDWA19C; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; Metadata_visitor_id=lua92ebenql0f0pv5; Metadata_session_id=lua92ebeezevskhtpy; gtm_custom_user_engagement_lock_4=yes; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; gtm_custom_user_engagement={"lock":"yes","page":5,"landingPageURL":"https://www.canva.com/","newSession":"no"}; gtm_fpc_engagement_event={"url":"https://www.canva.com/design/DAGAtXAJufM/4xmaf95qR5m4wJYw4_fQxg/view?utm_content=DAGAtXAJufM&utm_campaign=designshare&utm_medium=link&utm_source=editor","ts":1711570875183,"utm_s":"editor","utm_m":"link"}; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:21 UTC	924	IN	HTTP/1.1 404 Not Found Date: Wed, 27 Mar 2024 20:21:21 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 86b216162eb113b1-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Accept-CH: Sec-CH-UA-Platform-Version Pragma: No-cache Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Request-ID: 86b216162eb113b1 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mR%2B7jmNBqLDNGeiPb7TuTudohFJu6UDoxN7t8ekGBs3j4YTVsq9RQCvJ5RQdUScFKJs%2BuyYNeG4v2K5z9AUPhs0UFb9EEN2VwYnBLPr93ySmJHXS8rkt7k%2Fe%2BlfQlfQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-03-27 20:21:21 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-03-27 20:21:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50513	216.239.36.21	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-27 20:21:21 UTC	3226	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je43p0v872399471za200&_p=1711570874466&gcd=13l3l3l3l1&npa=0&dma=0&cid=1352771599.1711570825&ecid=1176296780&ul=en-us&sr=1280x1024&ur=US-PA&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pscdl=noapi&_eu=AEA&sst.uc=US&sst.gcd=13l3l3l3l1&sst.tft=1711570874466&sst.sp=1&sst.em_event=1&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2F_pricing_embed%2F%3Flocale%3Den%26layoutType%3DALL%26billingFrequency%3DMONTHLY%26origin%3Dhttps%253A%252F%252Fwww.canva.com&dr=https%3A%2F%2Fwww.canva.com%2Fvisual-suite%2F&sid=1711570825&sct=1&seg=1&dt=Canva%20Pricing%3A%20Compare%20Free%2C%20Pro%2C%20Teams%20and%20Enterprise%20plans&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20261&ep.event_id=1711571717886_17115710150980&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&tfd=10593&richsstsse HTTP/1.1 Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=XJfa0rIL5GRzGGiqKMOP.wCfrJv9xpLnTUqG5zwZ4tY-1711570799-1.0.1.1-sDyeqV6ZtwVPrQn_70EhqzINkKwce7alSlkQ_1ugS1Qwapcw0SCnkSOgm25EN9Q8lY.e8WrCh69l3.OLffecrQ; _cfuvid=IWGpk22bHdOdqz4qdYxLcnypPoLfub22hcksEmbqmSA-1711570799280-0.0.1.1-604800000; cf_clearance=DdfeCzQQ_yM2H17cQax8xlAMgUMDV0F1ZjbbRYC5.Ho-1711570803-1.0.1.1-3RiTw1uutvoOBlQPfpWFTTOASHFMC6Vid4.SotVvydAHAxCnXYQvhCNbAJNp3CC4mxK1BxyzPgpEiOg5I0qNVg; __cfruid=bfb179794af89a19383f994c6a9f36c3eed0358b-1711570804; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%2265c44410-79fd-81fa-e742-bbf688d1f22c%22%2C%22c%22%3A1711570804583%2C%22l%22%3A1711570804583%7D; _ga=GA1.1.1352771599.1711570825; FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; _fbp=fb.1.1711570826308.1623701546; FPAU=1.2.1649447272.1711570827; FPLC=DS4hzepYOtmQ4%2BV8YGIjqgWFmA9vhVUpD4bRFjNCRktjporvq5Zc5%2F9UO2e01RSjo%2FUkRBZt%2F%2Bl%2BHFwUCmkSDd6J9t4gpXFxxRnMXOGmaekh%2FOoe2Hhl70Tg8iBcVQ%3D%3D; _hjSessionUser_920442=eyJpZCI6IjNlMTg2ODMxLTY3M2MtNWJmMS1hMzMzLTlmNTUxYzAzZTIxMyIsImNyZWF0ZWQiOjE3MTE1NzA4NzE5OTUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_920442=eyJpZCI6IjJjYjE1NDJkLTNlOTctNDUyNS1iZjM1LTcyMjNmZTU0ZTUxMCIsImMiOjE3MTE1NzA4NzIwMDAsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; ab.storage.sessionId.320f7332-8571-45d7-b342-c54192dae547=%7B%22g%22%3A%22c757dd0e-ebdc-a605-8cdb-0f40e1657d0c%22%2C%22e%22%3A1711572672687%2C%22c%22%3A1711570804579%2C%22l%22%3A1711570872687%7D; _ga_EPWEMH6717=GS1.1.1711570825.1.1.1711570875.0.0.1176296780; _rdt_uuid=1711570825001.827194f4-e392-4c4d-a2e3-6cc517d68f31; _uetsid=746fdec0ec7711ee9333253459edd781; _uetvid=74702530ec7711eeaf27237d3540fd63
2024-03-27 20:21:21 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 27 Mar 2024 20:21:21 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.g9ifLL1HAN5XAm4Ve3josohIKFS1eEfpoKX9MrCAdr0%3D.1711570825; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-03-27 20:21:21 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Target ID:	0
Start time:	21:19:53
Start date:	27/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:19:55
Start date:	27/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:19:57
Start date:	27/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blyocelectric.com/4xmaf95qR5m4wJYw4"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	21:20:03
Start date:	27/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3116 --field-trial-handle=1908,i,1657403977527999505,6194947986847632547,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://blyocelectric.com/4xmaf95qR5m4wJYw4

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Windows Analysis Report
https://blyocelectric.com/4xmaf95qR5m4wJYw4